This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/uzUDdb_gCr4SQ4b4hhdZisRV9YI.roa File: uzUDdb_gCr4SQ4b4hhdZisRV9YI.roa (raw, json) Hash identifier: 0hxHgjyF/0bOGbaVLPkMhO4k9muLkCTKZm848PYfLVo= Subject key identifier: BB:35:03:75:BF:E0:0A:BE:12:43:86:F8:86:17:59:8A:C4:55:F5:82 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B07EA8952DFB556AB28BD8B3F852C7A67 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/uzUDdb_gCr4SQ4b4hhdZisRV9YI.roa Signing time: Wed 10 Dec 2025 10:59:29 +0000 ROA not before: Wed 10 Dec 2025 10:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60631 IP address blocks: 45.159.149.0/24 maxlen: 24 45.159.150.0/24 maxlen: 24 62.106.95.0/24 maxlen: 24 146.19.212.0/24 maxlen: 24 217.114.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ea:89:52:df:b5:56:ab:28:bd:8b:3f:85:2c:7a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 10 10:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb350375bfe00abe124386f88617598ac455f582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:0e:d2:4a:e1:ca:fd:ef:4f:51:5e:0c:3d: 06:c3:69:da:d2:12:05:29:54:a4:f4:3f:55:9b:68: 04:6c:77:5e:98:d4:34:af:16:16:24:7e:24:db:38: 14:85:71:6a:54:0f:c9:8a:cc:46:64:81:39:1b:15: 3e:0c:77:29:51:5a:97:b4:44:26:01:7c:7f:a0:67: b1:f0:cc:4a:e1:de:75:a5:3c:c6:d9:5c:f7:0a:59: 04:fa:1c:ed:51:60:8a:eb:02:53:ee:dc:86:5c:9e: 54:cc:42:6c:a0:ba:58:89:b0:e3:ae:40:b2:c9:65: bd:45:59:e1:17:52:b0:cb:4d:39:1e:82:29:d3:ef: ba:87:d3:70:96:96:2a:16:90:80:5d:c8:bd:8c:5a: 3f:62:c1:5d:7c:ca:8f:f6:55:f9:5c:b9:fc:e4:3f: 7c:9e:48:37:5c:1b:77:ed:51:7f:4f:a0:67:eb:97: 29:03:71:66:14:da:cd:10:be:d5:32:1e:85:69:e3: 92:d6:2d:94:38:46:88:4d:26:51:6f:76:ca:44:ac: eb:ed:12:dc:17:55:a5:53:11:57:29:e0:a1:be:f0: 71:81:0f:a0:94:20:be:a2:68:5b:27:f2:f1:c6:a7: 31:d4:da:e6:44:bb:17:a7:ae:40:8d:ed:08:a1:7d: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:35:03:75:BF:E0:0A:BE:12:43:86:F8:86:17:59:8A:C4:55:F5:82 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/uzUDdb_gCr4SQ4b4hhdZisRV9YI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.149.0-45.159.150.255 62.106.95.0/24 146.19.212.0/24 217.114.40.0/24 Signature Algorithm: sha256WithRSAEncryption d5:b0:66:28:21:6c:a8:41:6e:5c:8b:44:63:c2:23:33:7f:64: 09:31:14:a7:d4:53:19:7a:30:34:4d:1b:e5:b3:e4:92:ac:2c: d6:a0:50:fd:22:22:4a:d6:d5:a1:d8:17:42:95:ee:75:99:7e: e8:45:7f:4b:b8:04:73:51:5a:42:a4:87:d0:bd:b2:31:c7:ab: 8a:d1:27:69:e8:a5:ee:a8:31:00:59:45:85:79:df:f6:17:93: 7a:62:09:18:1e:e6:9a:f5:af:a7:07:eb:0b:96:34:ca:bf:a5: 5b:30:b0:7a:15:70:d4:1d:8d:c0:5a:71:4c:65:60:64:67:d6: 24:ae:42:23:d2:a2:a3:e7:db:d0:1d:1c:10:c3:92:f0:83:12: 4e:44:45:b4:c1:e7:26:32:83:5a:ec:40:83:58:03:c5:8f:73: dd:1f:e1:78:d6:ac:9f:6e:a7:d9:7a:89:c7:71:e6:3a:fc:fb: b2:b7:7c:84:fb:9a:b2:66:63:65:03:40:25:5c:ef:28:a5:fa: 88:0e:25:8c:a8:ca:3f:4e:b7:03:de:f4:29:c9:7a:d1:53:74: 86:fd:ec:1b:a8:f7:20:2c:0d:93:13:96:9b:36:68:c9:44:b1: 21:49:70:2c:47:9d:36:09:aa:30:a1:f9:12:2b:04:9f:b5:a2: dc:ac:d1:c4 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZsH6olS37VWqyi9iz+FLHpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjEwMTA1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjM1MDM3NWJmZTAwYWJlMTI0Mzg2Zjg4NjE3NTk4YWM0NTVmNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQsO0krhyv3vT1FeDD0Gw2na0hIF KVSk9D9Vm2gEbHdemNQ0rxYWJH4k2zgUhXFqVA/JisxGZIE5GxU+DHcpUVqXtEQm AXx/oGex8MxK4d51pTzG2Vz3ClkE+hztUWCK6wJT7tyGXJ5UzEJsoLpYibDjrkCy yWW9RVnhF1Kwy005HoIp0++6h9NwlpYqFpCAXci9jFo/YsFdfMqP9lX5XLn85D98 nkg3XBt37VF/T6Bn65cpA3FmFNrNEL7VMh6FaeOS1i2UOEaITSZRb3bKRKzr7RLc F1WlUxFXKeChvvBxgQ+glCC+omhbJ/Lxxqcx1NrmRLsXp65Aje0IoX22TwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFLs1A3W/4Aq+EkOG+IYXWYrEVfWCMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvdXpVRGRiX2dDcjRTUTRiNGhoZFppc1JWOVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAtn5UD BAAtn5YDBAA+al8DBACSE9QDBADZcigwDQYJKoZIhvcNAQELBQADggEBANWwZigh bKhBblyLRGPCIzN/ZAkxFKfUUxl6MDRNG+Wz5JKsLNagUP0iIkrW1aHYF0KV7nWZ fuhFf0u4BHNRWkKkh9C9sjHHq4rRJ2nope6oMQBZRYV53/YXk3piCRge5pr1r6cH 6wuWNMq/pVswsHoVcNQdjcBacUxlYGRn1iSuQiPSoqPn29AdHBDDkvCDEk5ERbTB 5yYyg1rsQINYA8WPc90f4XjWrJ9up9l6icdx5jr8+7K3fIT7mrJmY2UDQCVc7yil +ogOJYyoyj9OtwPe9CnJetFTdIb97Buo9yAsDZMTlps2aMlEsSFJcCxHnTYJqjCh +RIrBJ+1otys0cQ= -----END CERTIFICATE-----Generated at Mon Dec 15 06:04:20 2025 by rpki-client