This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/aoUcVbTC-ndxety0PDa5_9jRZoI.roa File: aoUcVbTC-ndxety0PDa5_9jRZoI.roa (raw, json) Hash identifier: WuiKi5yb0HJgXhblTrrnsqj7q2WXeBD7MAwhsQChRBE= Subject key identifier: 6A:85:1C:55:B4:C2:FA:77:71:7A:DC:B4:3C:36:B9:FF:D8:D1:66:82 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019AC6CDD0602A2B6EA8A3D0B4759B3E99AB Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/aoUcVbTC-ndxety0PDa5_9jRZoI.roa Signing time: Thu 27 Nov 2025 19:32:48 +0000 ROA not before: Thu 27 Nov 2025 19:32:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213541 IP address blocks: 46.148.209.0/24 maxlen: 24 46.148.210.0/24 maxlen: 24 46.148.211.0/24 maxlen: 24 91.204.180.0/24 maxlen: 24 91.204.181.0/24 maxlen: 24 91.218.139.0/24 maxlen: 24 91.218.178.0/24 maxlen: 24 91.218.179.0/24 maxlen: 24 195.234.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:cd:d0:60:2a:2b:6e:a8:a3:d0:b4:75:9b:3e:99:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Nov 27 19:32:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6a851c55b4c2fa77717adcb43c36b9ffd8d16682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:94:ff:55:51:51:20:18:82:9d:6d:ca:68: e4:dc:40:92:26:ef:fc:4b:69:bf:dd:d7:ae:81:90: 64:64:df:d8:e5:7c:bc:59:a0:a9:39:e2:04:6e:07: 2a:14:55:e2:95:bc:07:f0:7c:a6:97:12:0c:68:e4: cc:3f:ca:36:1a:0f:28:05:45:ff:4a:71:27:43:b4: 86:1f:b6:3c:43:1d:72:b7:c5:b7:42:33:54:27:b8: 51:5e:bb:bd:d7:1f:8b:48:46:b0:73:c0:c4:83:34: c9:1e:47:06:bc:af:41:56:70:8a:14:22:c2:d5:d3: 24:74:58:b5:b2:bb:4a:14:a2:21:4e:1c:bc:64:d4: 4d:e0:e0:f6:5c:e2:25:ce:a7:09:91:f5:da:30:bb: ba:dc:a0:1c:2a:4d:6a:89:7b:b0:0b:a1:32:cf:c9: a4:69:70:f3:e2:96:bb:93:98:3c:9e:9d:50:b2:95: 0c:40:01:12:0a:9c:6c:1a:89:d8:c4:01:3e:3c:17: 4e:ef:e4:96:6b:f0:36:88:f2:e8:04:91:79:13:b7: 8e:cb:22:25:ad:e2:ea:cc:00:dd:b3:f7:3c:22:53: c9:6f:c2:80:eb:14:14:3d:45:a6:b9:5c:8b:79:7c: ba:be:e3:d6:72:29:71:d1:3e:58:d2:34:91:da:33: de:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:85:1C:55:B4:C2:FA:77:71:7A:DC:B4:3C:36:B9:FF:D8:D1:66:82 X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/aoUcVbTC-ndxety0PDa5_9jRZoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.209.0-46.148.211.255 91.204.180.0/23 91.218.139.0/24 91.218.178.0/23 195.234.90.0/24 Signature Algorithm: sha256WithRSAEncryption 89:19:7d:b4:fb:0b:40:38:e1:16:9e:91:50:63:bb:e8:c3:d2: 29:01:09:39:70:2f:37:74:ab:2b:8d:7a:a2:81:d9:08:c7:0f: c6:2b:5a:c8:5e:cc:74:e7:c5:25:7c:87:78:dd:2e:3c:7e:5f: 82:fd:33:2b:1b:b3:4f:0d:4f:e9:60:29:fa:c9:b2:63:05:81: c0:bb:a5:ca:aa:4d:7d:94:1d:b3:9c:7f:8e:f4:58:16:6c:47: 8d:0b:6f:78:d6:4e:7d:e8:8f:11:3f:ef:74:2b:91:58:12:ed: f1:d9:01:f8:e0:50:eb:15:25:99:19:f3:72:04:cf:35:c2:69: 50:21:ec:24:90:52:ea:22:9d:57:db:99:09:a3:9f:7a:f8:31: 45:d5:a2:8a:ed:db:80:7b:db:dc:e9:6f:71:d1:c0:18:2d:e2: ec:45:59:bf:e4:35:70:95:70:59:78:82:88:35:37:b4:a4:15: 47:e0:d5:f8:a2:ec:29:0d:28:31:17:e7:b1:e4:0b:fd:e0:9f: 1b:71:1b:a1:0b:b3:be:76:ac:ad:58:3f:dd:74:a8:7b:d1:97: d1:1e:0e:65:77:ee:36:40:db:50:80:9e:22:48:7d:62:6d:28: 58:71:aa:a4:7f:c4:b8:d0:12:9e:86:6a:fa:2c:6f:c3:1b:91: 1a:c8:2d:ec -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZrGzdBgKituqKPQtHWbPpmrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjUxMTI3MTkzMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTg1MWM1NWI0YzJmYTc3NzE3YWRjYjQzYzM2YjlmZmQ4ZDE2NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7mU/1VRUSAYgp1tymjk3ECSJu/8 S2m/3deugZBkZN/Y5Xy8WaCpOeIEbgcqFFXilbwH8HymlxIMaOTMP8o2Gg8oBUX/ SnEnQ7SGH7Y8Qx1yt8W3QjNUJ7hRXru91x+LSEawc8DEgzTJHkcGvK9BVnCKFCLC 1dMkdFi1srtKFKIhThy8ZNRN4OD2XOIlzqcJkfXaMLu63KAcKk1qiXuwC6Eyz8mk aXDz4pa7k5g8np1QspUMQAESCpxsGonYxAE+PBdO7+SWa/A2iPLoBJF5E7eOyyIl reLqzADds/c8IlPJb8KA6xQUPUWmuVyLeXy6vuPWcilx0T5Y0jSR2jPexQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGqFHFW0wvp3cXrctDw2uf/Y0WaCMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvYW9VY1ZiVEMtbmR4ZXR5MFBEYTVfOWpSWm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAAulNED BAIulNADBAFbzLQDBABb2osDBAFb2rIDBADD6lowDQYJKoZIhvcNAQELBQADggEB AIkZfbT7C0A44RaekVBju+jD0ikBCTlwLzd0qyuNeqKB2QjHD8YrWshezHTnxSV8 h3jdLjx+X4L9Mysbs08NT+lgKfrJsmMFgcC7pcqqTX2UHbOcf470WBZsR40Lb3jW Tn3ojxE/73QrkVgS7fHZAfjgUOsVJZkZ83IEzzXCaVAh7CSQUuoinVfbmQmjn3r4 MUXVoort24B729zpb3HRwBgt4uxFWb/kNXCVcFl4gog1N7SkFUfg1fii7CkNKDEX 57HkC/3gnxtxG6ELs752rK1YP910qHvRl9EeDmV37jZA21CAniJIfWJtKFhxqqR/ xLjQEp6Gavosb8MbkRrILew= -----END CERTIFICATE-----Generated at Sun Dec 7 19:08:56 2025 by rpki-client