This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/U7WmqwgzCWSQVYIP4iyJRPVZecM.roa File: U7WmqwgzCWSQVYIP4iyJRPVZecM.roa (raw, json) Hash identifier: SLg4xo0u6ifhrG98ql5m+cWpgwWKcpHx5npLC6zXj4Y= Subject key identifier: 53:B5:A6:AB:08:33:09:64:90:55:82:0F:E2:2C:89:44:F5:59:79:C3 Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Certificate serial: 019B039B53CD08EF5DE6BD96763172F00A11 Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/U7WmqwgzCWSQVYIP4iyJRPVZecM.roa Signing time: Tue 09 Dec 2025 14:54:29 +0000 ROA not before: Tue 09 Dec 2025 14:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203144 IP address blocks: 80.244.4.0/24 maxlen: 24 194.76.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:9b:53:cd:08:ef:5d:e6:bd:96:76:31:72:f0:0a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Validity Not Before: Dec 9 14:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53b5a6ab083309649055820fe22c8944f55979c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:fb:4d:50:0a:8b:54:69:f8:80:6c:f6:bf: e6:8f:92:1b:9e:64:7d:8b:c2:c5:cb:f8:19:05:0a: 93:9c:ae:ef:70:62:49:b8:ee:4e:17:2d:49:b4:95: b1:42:dc:4e:43:78:4b:22:d4:14:fd:45:7b:89:09: 9f:17:96:57:71:e0:d3:b3:9c:de:6f:b8:03:53:af: 47:bd:ed:69:34:d5:23:89:47:2e:fb:e9:35:fd:41: f5:cb:32:ac:d5:94:44:34:73:8c:13:88:ca:99:50: 73:d6:d9:c9:c8:6c:4f:4f:07:60:04:7f:f1:ec:91: 27:11:14:b3:80:ae:d1:91:66:e2:d6:a8:c3:56:0c: c5:46:45:d4:e3:9f:d0:d7:91:7d:cb:35:ce:76:07: 72:a3:99:7e:28:7b:44:c3:2e:95:31:42:eb:f8:5e: e2:a0:97:36:4b:e8:b9:11:e1:2a:0a:b0:21:cc:21: 08:8c:60:ee:ad:2b:23:e3:86:c3:3f:d3:39:e6:2e: ff:1a:93:46:a6:8b:48:ca:77:f1:68:fc:df:b1:7e: 53:a9:fb:76:44:02:bb:e0:48:1a:56:73:68:8e:85: 58:b3:b7:bf:f5:af:af:31:2d:75:64:0f:db:29:88: 1b:e8:be:15:8f:b8:ee:2f:cc:8e:e8:29:49:81:3a: a0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B5:A6:AB:08:33:09:64:90:55:82:0F:E2:2C:89:44:F5:59:79:C3 X509v3 Authority Key Identifier: keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/U7WmqwgzCWSQVYIP4iyJRPVZecM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.4.0/24 194.76.186.0/24 Signature Algorithm: sha256WithRSAEncryption 66:ed:31:89:85:fc:18:5e:4c:ae:6c:10:59:1e:bc:c4:6a:5e: 59:8a:9a:83:58:e1:31:b7:10:97:1b:d3:94:89:fa:ad:72:f8: 2e:12:d0:41:4f:1c:4f:b4:ba:f5:e4:e9:07:58:2d:7e:02:82: f3:2f:e3:d0:49:85:08:32:6b:b5:96:c0:eb:c6:a4:8e:93:aa: fb:2e:83:95:dd:5f:68:bc:38:1f:7c:41:b0:dc:f6:be:9b:1f: 31:5f:34:9d:23:13:f2:e0:61:d0:0c:80:13:7f:8b:f5:33:85: 14:ae:d6:7c:66:62:b7:90:f9:e2:da:aa:4d:52:67:7d:82:69: 9e:35:a8:b9:2d:91:bf:4d:3f:6f:fe:76:f5:28:da:66:fc:ee: 74:57:75:c1:bc:3c:b0:67:ac:4f:53:45:6a:c0:5d:df:f5:73: 81:ab:89:38:2b:63:0d:f1:0d:e9:e2:a8:81:90:9c:dd:8a:8f: bc:d4:54:92:fa:3b:cc:49:cc:5f:5d:ff:5e:a0:7c:20:69:16: a5:e9:ec:ae:72:c8:5f:a1:22:2a:be:33:d1:fd:02:55:8e:87: 30:f5:9e:c6:0d:4a:56:72:88:cb:60:28:62:67:eb:e2:a9:13: 2f:58:28:c4:40:84:c3:af:c7:3b:47:2e:2d:04:97:44:84:1c: fe:81:9d:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsDm1PNCO9d5r2WdjFy8AoRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjdkYmU2YWM3NTVhOTA2M2MzNjBiMTUyNWU4NDRmZDJh NTdiOTMwHhcNMjUxMjA5MTQ1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2I1YTZhYjA4MzMwOTY0OTA1NTgyMGZlMjJjODk0NGY1NTk3OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplX7TVAKi1Rp+IBs9r/mj5IbnmR9 i8LFy/gZBQqTnK7vcGJJuO5OFy1JtJWxQtxOQ3hLItQU/UV7iQmfF5ZXceDTs5ze b7gDU69Hve1pNNUjiUcu++k1/UH1yzKs1ZRENHOME4jKmVBz1tnJyGxPTwdgBH/x 7JEnERSzgK7RkWbi1qjDVgzFRkXU45/Q15F9yzXOdgdyo5l+KHtEwy6VMULr+F7i oJc2S+i5EeEqCrAhzCEIjGDurSsj44bDP9M55i7/GpNGpotIynfxaPzfsX5Tqft2 RAK74EgaVnNojoVYs7e/9a+vMS11ZA/bKYgb6L4Vj7juL8yO6ClJgTqgPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFO1pqsIMwlkkFWCD+IsiUT1WXnDMB8GA1UdIwQY MBaAFORn2+asdVqQY8NgsVJehE/SpXuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYt ZWNlNTc3ZTMwN2FkLzEvVTdXbXF3Z3pDV1NRVllJUDRpeUpSUFZaZWNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYtZWNlNTc3ZTMwN2Fk LzEvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPQEAwQA wky6MA0GCSqGSIb3DQEBCwUAA4IBAQBm7TGJhfwYXkyubBBZHrzEal5ZipqDWOEx txCXG9OUifqtcvguEtBBTxxPtLr15OkHWC1+AoLzL+PQSYUIMmu1lsDrxqSOk6r7 LoOV3V9ovDgffEGw3Pa+mx8xXzSdIxPy4GHQDIATf4v1M4UUrtZ8ZmK3kPni2qpN Umd9gmmeNai5LZG/TT9v/nb1KNpm/O50V3XBvDywZ6xPU0VqwF3f9XOBq4k4K2MN 8Q3p4qiBkJzdio+81FSS+jvMScxfXf9eoHwgaRal6eyucshfoSIqvjPR/QJVjocw 9Z7GDUpWcojLYChiZ+viqRMvWCjEQITDr8c7Ry4tBJdEhBz+gZ2L -----END CERTIFICATE-----Generated at Mon Dec 15 08:05:46 2025 by rpki-client