This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/u73KDW8PuRjOHzU8hQWCibfuL0k.roa File: u73KDW8PuRjOHzU8hQWCibfuL0k.roa (raw, json) Hash identifier: En9Qm8idx2XEIJcVI/CY5UqHLPTe0K6nyndadhEDej8= Subject key identifier: BB:BD:CA:0D:6F:0F:B9:18:CE:1F:35:3C:85:05:82:89:B7:EE:2F:49 Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157 Certificate serial: 019AFE6BCF75CF2C21AAC8642BD34111572E Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/u73KDW8PuRjOHzU8hQWCibfuL0k.roa Signing time: Mon 08 Dec 2025 14:44:29 +0000 ROA not before: Mon 08 Dec 2025 14:44:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48955 IP address blocks: 91.211.87.0/24 maxlen: 24 91.217.226.0/24 maxlen: 24 185.140.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:6b:cf:75:cf:2c:21:aa:c8:64:2b:d3:41:11:57:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157 Validity Not Before: Dec 8 14:44:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bbbdca0d6f0fb918ce1f353c85058289b7ee2f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e6:d3:6e:4b:19:58:cd:27:83:85:27:a8:1a: 5c:29:2f:29:bd:ed:e2:0c:8f:49:1b:53:ef:a7:ba: 32:1e:30:11:cd:7c:f2:3d:f0:56:51:56:12:58:e4: e5:9d:ae:06:22:a4:b4:f7:d2:f0:07:65:f6:24:07: 3e:3a:c1:ff:c5:50:ef:4c:4d:06:c0:a9:78:a5:f2: f1:6d:ca:b5:0f:da:64:91:04:aa:fb:34:b8:1f:f8: de:ad:2f:9e:9b:63:42:b4:e9:b1:13:0d:81:d5:45: fa:56:0b:6c:dc:0e:1a:fa:1e:7a:f9:49:b3:28:85: 89:cc:30:e0:ff:3a:df:ae:c3:8a:8e:3e:85:92:a0: 56:49:39:db:ae:66:09:83:65:6e:dc:63:9f:31:2d: 34:dd:f4:55:28:d7:87:4a:88:0c:28:09:05:e6:6e: 16:d3:a6:02:70:37:18:51:e4:fd:81:91:21:86:59: 3e:76:bb:30:11:3d:ea:f4:1c:8e:63:07:cf:b4:22: cb:3e:da:bf:fc:c5:b4:2b:72:72:89:74:71:13:a5: d9:62:08:f4:c1:ee:62:b1:b3:54:3f:35:1d:39:75: ad:a9:a1:1a:e7:9f:4f:2c:bb:b7:15:d5:1b:d1:bb: 80:20:40:71:1e:c3:b9:97:b5:43:b8:a9:c7:bb:f5: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BD:CA:0D:6F:0F:B9:18:CE:1F:35:3C:85:05:82:89:B7:EE:2F:49 X509v3 Authority Key Identifier: keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/u73KDW8PuRjOHzU8hQWCibfuL0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.87.0/24 91.217.226.0/24 185.140.251.0/24 Signature Algorithm: sha256WithRSAEncryption 62:dd:5e:85:87:52:43:d6:97:2b:03:d5:37:84:34:76:39:2e: b4:18:b5:b7:86:cb:92:fa:97:ee:42:2a:86:46:f2:b0:5a:00: 4c:42:1c:d0:19:fe:d0:31:ed:23:2a:ee:ff:59:59:2f:9d:af: a6:96:31:53:87:40:9f:f6:dc:e1:ee:be:c2:b8:6b:dc:e3:0f: 93:df:42:ee:61:74:c1:43:39:b3:17:7c:7e:7e:e8:50:8f:14: 65:34:05:38:29:fc:f4:e6:e1:7d:9b:c9:83:49:d2:dc:ca:35: 52:4d:be:f2:e0:48:c6:f9:94:08:5c:77:a5:db:66:4c:35:a5: f1:5c:97:ae:ba:50:6a:ff:aa:08:ab:a4:d8:15:83:c5:b4:0c: 2e:e0:cd:8e:7c:8e:4c:2e:5c:76:b0:02:95:1c:31:af:66:05: 7c:17:07:95:68:98:dd:5d:8e:92:2e:77:e8:0a:1e:5e:e4:41: f3:85:13:76:ef:a3:fc:fd:2f:94:ca:1f:01:b0:97:0f:c8:d2: 3d:f2:b9:cb:a0:32:f9:33:a1:53:f4:29:07:b1:b8:83:7e:f7: 2a:fe:7c:d7:f5:88:a7:fb:20:f2:fa:2b:8b:d5:67:91:a6:4f: 24:e3:9a:a7:f2:69:e2:d1:e2:39:25:a4:cb:91:89:59:d2:9a: 43:93:d1:30 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZr+a891zywhqshkK9NBEVcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4 MTUxNTcwHhcNMjUxMjA4MTQ0NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmJkY2EwZDZmMGZiOTE4Y2UxZjM1M2M4NTA1ODI4OWI3ZWUyZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkObTbksZWM0ng4UnqBpcKS8pve3i DI9JG1Pvp7oyHjARzXzyPfBWUVYSWOTlna4GIqS099LwB2X2JAc+OsH/xVDvTE0G wKl4pfLxbcq1D9pkkQSq+zS4H/jerS+em2NCtOmxEw2B1UX6Vgts3A4a+h56+Umz KIWJzDDg/zrfrsOKjj6FkqBWSTnbrmYJg2Vu3GOfMS003fRVKNeHSogMKAkF5m4W 06YCcDcYUeT9gZEhhlk+drswET3q9ByOYwfPtCLLPtq//MW0K3JyiXRxE6XZYgj0 we5isbNUPzUdOXWtqaEa559PLLu3FdUb0buAIEBxHsO5l7VDuKnHu/VDnwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLu9yg1vD7kYzh81PIUFgom37i9JMB8GA1UdIwQY MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt MzM4ODE0NjdhYzVlLzEvdTczS0RXOFB1UmpPSHpVOGhRV0NpYmZ1TDBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9NXAwQA W9niAwQAuYz7MA0GCSqGSIb3DQEBCwUAA4IBAQBi3V6Fh1JD1pcrA9U3hDR2OS60 GLW3hsuS+pfuQiqGRvKwWgBMQhzQGf7QMe0jKu7/WVkvna+mljFTh0Cf9tzh7r7C uGvc4w+T30LuYXTBQzmzF3x+fuhQjxRlNAU4Kfz05uF9m8mDSdLcyjVSTb7y4EjG +ZQIXHel22ZMNaXxXJeuulBq/6oIq6TYFYPFtAwu4M2OfI5MLlx2sAKVHDGvZgV8 FweVaJjdXY6SLnfoCh5e5EHzhRN276P8/S+Uyh8BsJcPyNI98rnLoDL5M6FT9CkH sbiDfvcq/nzX9Yin+yDy+iuL1WeRpk8k45qn8mni0eI5JaTLkYlZ0ppDk9Ew -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:11 2025 by rpki-client