This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UrolILr6B50cSd40vJjwLu0p28s.roa File: UrolILr6B50cSd40vJjwLu0p28s.roa (raw, json) Hash identifier: ukHWgnoPk6Fa77Tz+U5dG1Md1SrKJzszd7m/QY0b5CQ= Subject key identifier: 52:BA:25:20:BA:FA:07:9D:1C:49:DE:34:BC:98:F0:2E:ED:29:DB:CB Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019ABBE22D31886DEFBBAE3EFCC4D885066C Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UrolILr6B50cSd40vJjwLu0p28s.roa Signing time: Tue 25 Nov 2025 16:39:13 +0000 ROA not before: Tue 25 Nov 2025 16:39:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204957 IP address blocks: 45.137.155.0/24 maxlen: 24 194.32.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:e2:2d:31:88:6d:ef:bb:ae:3e:fc:c4:d8:85:06:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Nov 25 16:39:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=52ba2520bafa079d1c49de34bc98f02eed29dbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:51:2a:07:49:20:02:6a:0a:d3:5d:d5:90:48: c9:4d:d9:a3:8e:d5:51:04:e2:1a:98:69:2b:3a:89: fc:2a:f5:e4:cc:98:17:5d:f9:d8:4c:7b:41:e9:1a: 83:2b:13:31:9a:4f:6d:07:2e:fe:ff:f3:9c:ce:ec: b1:51:88:0f:d5:d7:d5:d7:4d:d4:ff:8f:42:c7:9a: f3:e9:fe:d1:56:88:e9:54:ad:33:d1:67:31:15:63: 0d:ba:c7:11:6f:12:6b:c3:54:ec:06:cc:94:0e:36: be:50:4d:4d:ae:b5:49:50:3b:5d:ad:09:18:6e:6d: df:37:da:fa:d0:93:ae:a7:88:62:8e:76:7f:d3:90: be:ec:7f:87:b0:3f:1a:4d:44:61:98:e2:20:77:71: ea:dd:bb:ff:cb:15:9f:60:08:a5:db:ec:84:a4:fa: 16:80:66:7c:45:92:94:e7:34:d1:79:8e:99:e0:06: 6f:29:9f:e2:39:b6:c5:37:f3:cd:71:6c:26:1e:bc: 1e:21:54:f3:0e:60:a9:9e:c5:11:2c:97:a3:3c:dc: 06:8b:c1:d3:ed:e8:ab:8b:16:af:98:08:39:0f:f6: 02:1d:04:08:f4:a4:b4:a5:53:41:21:c6:da:23:26: 67:8e:65:3b:16:3c:d3:e5:de:c9:35:d6:f5:a0:59: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BA:25:20:BA:FA:07:9D:1C:49:DE:34:BC:98:F0:2E:ED:29:DB:CB X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UrolILr6B50cSd40vJjwLu0p28s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.155.0/24 194.32.104.0/24 Signature Algorithm: sha256WithRSAEncryption 59:8a:76:45:76:55:0e:39:1e:e2:01:c2:2f:ff:5d:b0:8c:f6: b1:82:c9:b8:8f:5b:0b:93:17:07:22:a6:d6:1b:b7:6e:33:56: 8e:09:67:d4:a3:aa:e0:2a:aa:97:03:12:ce:1c:9b:ec:38:7e: 8d:50:db:83:82:29:68:89:89:64:b0:c4:4a:1a:90:65:cf:43: e9:8b:82:f5:4c:05:2b:a1:d4:86:90:34:e6:16:82:29:60:77: 90:c8:c9:05:a9:4a:70:ef:2e:c2:e6:ad:03:73:83:92:e1:36: 99:04:3f:0f:9c:a1:f9:b3:a5:c9:95:35:14:5f:5c:c4:1b:12: e6:ac:7e:b7:15:ee:a5:b3:7e:35:0c:ae:e4:06:72:21:51:1b: f9:cf:ed:37:9b:e9:ad:13:cd:90:8f:0a:f0:80:5b:3e:d8:b3: ff:e0:f2:23:28:a8:8f:25:57:a1:65:b5:f2:16:24:44:b5:41: 1a:ff:32:11:01:c9:ee:99:26:c4:dc:58:bd:8c:98:f6:d6:63: 69:f0:d4:ce:6e:f5:bf:ed:0e:03:4b:8f:45:0f:e8:ce:89:73: d7:34:6b:05:e6:e0:1a:83:3b:03:eb:ac:b3:c5:8b:9d:91:21: b1:88:c1:b8:3c:20:7d:92:ec:76:f7:c8:8c:87:67:c7:a1:61: 59:9a:91:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq74i0xiG3vu64+/MTYhQZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjUxMTI1MTYzOTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmJhMjUyMGJhZmEwNzlkMWM0OWRlMzRiYzk4ZjAyZWVkMjlkYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FEqB0kgAmoK013VkEjJTdmjjtVR BOIamGkrOon8KvXkzJgXXfnYTHtB6RqDKxMxmk9tBy7+//OczuyxUYgP1dfV103U /49Cx5rz6f7RVojpVK0z0WcxFWMNuscRbxJrw1TsBsyUDja+UE1NrrVJUDtdrQkY bm3fN9r60JOup4hijnZ/05C+7H+HsD8aTURhmOIgd3Hq3bv/yxWfYAil2+yEpPoW gGZ8RZKU5zTReY6Z4AZvKZ/iObbFN/PNcWwmHrweIVTzDmCpnsURLJejPNwGi8HT 7eirixavmAg5D/YCHQQI9KS0pVNBIcbaIyZnjmU7FjzT5d7JNdb1oFnXLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFK6JSC6+gedHEneNLyY8C7tKdvLMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvVXJvbElMcjZCNTBjU2Q0MHZKandMdTBwMjhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYmbAwQA wiBoMA0GCSqGSIb3DQEBCwUAA4IBAQBZinZFdlUOOR7iAcIv/12wjPaxgsm4j1sL kxcHIqbWG7duM1aOCWfUo6rgKqqXAxLOHJvsOH6NUNuDgiloiYlksMRKGpBlz0Pp i4L1TAUrodSGkDTmFoIpYHeQyMkFqUpw7y7C5q0Dc4OS4TaZBD8PnKH5s6XJlTUU X1zEGxLmrH63Fe6ls341DK7kBnIhURv5z+03m+mtE82QjwrwgFs+2LP/4PIjKKiP JVehZbXyFiREtUEa/zIRAcnumSbE3Fi9jJj21mNp8NTObvW/7Q4DS49FD+jOiXPX NGsF5uAagzsD66yzxYudkSGxiMG4PCB9kux298iMh2fHoWFZmpGc -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:12 2025 by rpki-client