This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/uEJBzVK3M-XYQB_W3073suGkObo.roa File: uEJBzVK3M-XYQB_W3073suGkObo.roa (raw, json) Hash identifier: vdpPJtCVEUnTylhlR6ZitULgZ+bB4+/4WOwiBodz65k= Subject key identifier: B8:42:41:CD:52:B7:33:E5:D8:40:1F:D6:DF:4E:F7:B2:E1:A4:39:BA Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019A95F90A5D6E6A465F6D4094DAC92EB275 Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/uEJBzVK3M-XYQB_W3073suGkObo.roa Signing time: Tue 18 Nov 2025 07:58:37 +0000 ROA not before: Tue 18 Nov 2025 07:58:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51200 IP address blocks: 46.29.232.0/23 maxlen: 24 46.29.232.0/24 maxlen: 24 46.29.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 13:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:f9:0a:5d:6e:6a:46:5f:6d:40:94:da:c9:2e:b2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Nov 18 07:58:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b84241cd52b733e5d8401fd6df4ef7b2e1a439ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:20:5b:f4:a8:e4:b1:6d:cc:4e:a5:39:aa:f3: 8a:c7:92:8a:ba:65:13:c4:ac:55:67:74:79:a4:fa: 8a:5c:6c:ba:2d:c4:4d:67:33:f1:9c:a1:5f:c2:82: 74:3a:a9:32:18:e1:c9:80:1f:96:06:2a:8f:2d:3b: 4b:10:c4:7e:2e:8c:ad:63:4a:21:8c:01:6c:ee:1a: e5:09:dc:cb:6e:8d:e1:08:d3:1a:81:cb:00:51:8a: ee:1f:7e:dc:60:e4:f8:ff:11:61:7e:b4:a0:3f:bb: dc:1f:ba:e8:fb:9e:f5:cf:0c:b9:03:d6:f4:c2:ac: dd:e1:6e:b6:fa:f8:f7:61:a5:19:68:16:c4:2f:5f: da:ec:eb:9d:a8:fb:3b:b7:ae:d9:18:76:be:f6:95: 2c:12:a3:56:ee:20:c4:5e:ad:38:0b:94:49:f0:b7: 10:2a:70:dc:43:65:9b:1a:c3:4a:16:9f:10:d1:2b: 31:84:39:28:d0:ef:b0:52:76:2a:fd:e4:f1:79:17: 0a:8e:55:52:9b:10:a5:b4:2f:d2:e7:aa:24:c9:b2: bb:97:45:e7:ed:6e:b8:a0:91:ab:12:cb:61:d1:a6: bb:0c:86:bf:ff:d4:0b:d2:d4:32:c1:d2:ee:49:7f: 16:53:61:57:37:29:aa:a3:db:3e:e5:e8:e3:73:44: 6b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:42:41:CD:52:B7:33:E5:D8:40:1F:D6:DF:4E:F7:B2:E1:A4:39:BA X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/uEJBzVK3M-XYQB_W3073suGkObo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.232.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:d0:d0:28:4c:5c:c8:93:6f:c4:26:6d:f9:4a:0d:ab:da:ab: 31:6c:51:75:0f:16:60:01:0f:56:6b:a8:9c:f2:8b:c9:87:87: 3b:56:7d:60:ff:d0:46:85:f5:89:1c:0d:25:f3:e3:4a:d0:62: 72:f2:2b:36:95:76:d6:66:18:0a:2a:87:e5:77:20:e8:8f:f4: 3e:e8:a1:f1:28:d6:c4:05:b9:29:ed:d4:2a:d9:e5:b4:ec:1b: cd:bc:46:36:99:88:83:b8:06:ea:0c:a2:6b:d8:61:4e:3b:43: de:c2:7c:ee:b0:6d:43:a5:29:83:8f:18:b1:5a:5b:ea:74:98: e4:b0:2e:6c:67:e3:6d:89:30:6f:e9:d1:06:cc:c6:b0:2c:7b: 2f:25:2e:91:b7:93:cd:43:50:ae:af:c7:2a:53:99:05:06:d3: 7b:0f:97:1e:b8:22:8e:92:6f:3f:8c:a8:bf:4b:1c:45:d7:3b: cc:34:03:6e:ec:43:35:c8:51:5c:37:2d:13:ac:42:4a:60:43: 1b:7b:fd:af:a6:8a:8e:94:57:9d:d8:c7:df:d9:df:10:ee:3e: ed:7a:4e:9a:0c:a9:ee:83:9e:fb:3d:9d:96:2e:74:54:14:cc: bb:ca:b5:f5:b9:7f:7a:d6:b6:78:9f:aa:66:9b:28:3d:a9:6c: ee:f8:a8:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqV+QpdbmpGX21AlNrJLrJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjUxMTE4MDc1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODQyNDFjZDUyYjczM2U1ZDg0MDFmZDZkZjRlZjdiMmUxYTQzOWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iBb9KjksW3MTqU5qvOKx5KKumUT xKxVZ3R5pPqKXGy6LcRNZzPxnKFfwoJ0OqkyGOHJgB+WBiqPLTtLEMR+LoytY0oh jAFs7hrlCdzLbo3hCNMagcsAUYruH37cYOT4/xFhfrSgP7vcH7ro+571zwy5A9b0 wqzd4W62+vj3YaUZaBbEL1/a7OudqPs7t67ZGHa+9pUsEqNW7iDEXq04C5RJ8LcQ KnDcQ2WbGsNKFp8Q0SsxhDko0O+wUnYq/eTxeRcKjlVSmxCltC/S56okybK7l0Xn 7W64oJGrEsth0aa7DIa//9QL0tQywdLuSX8WU2FXNymqo9s+5ejjc0RrZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhCQc1StzPl2EAf1t9O97LhpDm6MB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvdUVKQnpWSzNNLVhZUUJfVzMwNzNzdUdrT2JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLh3oMA0G CSqGSIb3DQEBCwUAA4IBAQA90NAoTFzIk2/EJm35Sg2r2qsxbFF1DxZgAQ9Wa6ic 8ovJh4c7Vn1g/9BGhfWJHA0l8+NK0GJy8is2lXbWZhgKKofldyDoj/Q+6KHxKNbE Bbkp7dQq2eW07BvNvEY2mYiDuAbqDKJr2GFOO0PewnzusG1DpSmDjxixWlvqdJjk sC5sZ+NtiTBv6dEGzMawLHsvJS6Rt5PNQ1Cur8cqU5kFBtN7D5ceuCKOkm8/jKi/ SxxF1zvMNANu7EM1yFFcNy0TrEJKYEMbe/2vpoqOlFed2Mff2d8Q7j7tek6aDKnu g577PZ2WLnRUFMy7yrX1uX961rZ4n6pmmyg9qWzu+Khl -----END CERTIFICATE-----Generated at Fri Dec 5 23:20:00 2025 by rpki-client