This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/KUygc6-YAYwrtJjX28nNjWAJwts.roa File: KUygc6-YAYwrtJjX28nNjWAJwts.roa (raw, json) Hash identifier: 6lDVjBUU09yi3l/oI4KNxH0aEbAQQwnSgtkt3GI1K4o= Subject key identifier: 29:4C:A0:73:AF:98:01:8C:2B:B4:98:D7:DB:C9:CD:8D:60:09:C2:DB Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B12641D970AF19F660E12B9BEDD9A72A0 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/KUygc6-YAYwrtJjX28nNjWAJwts.roa Signing time: Fri 12 Dec 2025 11:48:29 +0000 ROA not before: Fri 12 Dec 2025 11:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207483 IP address blocks: 91.108.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:64:1d:97:0a:f1:9f:66:0e:12:b9:be:dd:9a:72:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Dec 12 11:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=294ca073af98018c2bb498d7dbc9cd8d6009c2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:97:12:da:36:b9:60:82:bd:5d:52:a3:10: dd:0f:81:45:c0:a8:ac:41:65:3f:8a:55:fc:b7:46: 58:f5:a4:41:c1:5f:9b:f8:7e:98:63:6c:94:6e:92: 02:d3:dd:0d:6b:24:9d:33:15:71:12:89:ac:32:15: d7:30:ee:51:96:af:35:e9:c2:c2:97:1a:d4:d4:d7: 01:d8:e4:08:e7:02:dd:f2:dc:ee:91:11:f1:9b:79: 9a:6c:c1:76:fe:ab:33:94:ce:e8:9b:80:1d:f6:2b: 14:59:26:34:2a:f0:c7:e9:fd:cf:61:91:45:b0:38: 6b:1d:75:95:d9:d9:03:6c:e5:1c:fe:b6:e2:0f:6b: 03:c4:05:d6:89:48:d0:99:4a:73:4a:b7:44:81:cd: 31:2a:c1:3a:b7:ac:4c:78:3a:f6:9d:8c:b6:b0:5e: 89:11:55:f2:ba:c9:0f:de:a7:a1:5c:4c:dc:b9:45: e0:2f:a7:f2:60:f7:49:b2:c2:8b:da:e5:da:e0:4f: 22:f4:6e:28:03:99:03:23:3b:9d:6b:ca:55:70:bf: fe:fa:6f:66:6c:54:e8:8e:7f:5d:30:52:67:35:dc: ab:0a:00:2f:c5:94:a7:b8:8f:20:32:c1:80:9a:cc: 5d:d8:91:ba:2c:5d:4b:94:f6:a8:35:bd:ac:a2:ae: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4C:A0:73:AF:98:01:8C:2B:B4:98:D7:DB:C9:CD:8D:60:09:C2:DB X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/KUygc6-YAYwrtJjX28nNjWAJwts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.237.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:c8:e5:be:b6:74:6a:38:0a:19:27:01:2a:ab:9d:da:49:92: 6a:8d:dc:5b:3e:bc:2c:8e:46:ed:f4:c1:b0:66:ba:ff:c4:f4: 58:cd:32:5d:e7:d3:29:9e:1b:c4:b2:0f:ab:34:13:8a:91:1d: 01:34:fc:d3:7f:b0:4f:64:b3:7a:9a:61:fb:21:09:9b:99:3e: 9f:b5:31:54:44:b3:c4:47:70:27:6b:f9:16:0d:45:38:86:0a: 89:be:75:8d:c8:69:5f:62:e4:d1:a6:d4:be:77:4e:30:e9:d6: 10:94:24:59:61:fd:09:dc:29:f4:38:6f:b7:e6:5c:ed:7c:4d: bc:fc:15:6b:47:3f:8f:17:8b:05:21:25:40:b3:d4:d8:30:79: d4:10:9e:35:b2:87:8b:78:02:8a:56:27:76:df:5c:b1:74:f6: 1a:4d:9a:a2:99:e5:09:ae:7d:21:72:bf:84:fc:93:92:72:ae: f7:49:fd:16:d0:2d:a2:78:7f:82:cc:34:11:3f:2b:75:16:12: 63:98:b8:a1:6a:91:7b:5e:88:d4:0a:40:63:6a:46:50:5e:7e: ca:7e:f5:ba:ee:bd:f5:df:ec:22:ea:16:25:d4:3d:3f:de:1f: c1:e5:c9:e8:a7:a0:9f:9c:e7:49:b5:a7:ca:66:fb:80:a1:83: c1:30:69:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSZB2XCvGfZg4Sub7dmnKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjUxMjEyMTE0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTRjYTA3M2FmOTgwMThjMmJiNDk4ZDdkYmM5Y2Q4ZDYwMDljMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7+XEto2uWCCvV1SoxDdD4FFwKis QWU/ilX8t0ZY9aRBwV+b+H6YY2yUbpIC090NaySdMxVxEomsMhXXMO5Rlq816cLC lxrU1NcB2OQI5wLd8tzukRHxm3mabMF2/qszlM7om4Ad9isUWSY0KvDH6f3PYZFF sDhrHXWV2dkDbOUc/rbiD2sDxAXWiUjQmUpzSrdEgc0xKsE6t6xMeDr2nYy2sF6J EVXyuskP3qehXEzcuUXgL6fyYPdJssKL2uXa4E8i9G4oA5kDIzuda8pVcL/++m9m bFTojn9dMFJnNdyrCgAvxZSnuI8gMsGAmsxd2JG6LF1LlPaoNb2soq66IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClMoHOvmAGMK7SY19vJzY1gCcLbMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvS1V5Z2M2LVlBWXdydEpqWDI4bk5qV0FKd3RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2ztMA0G CSqGSIb3DQEBCwUAA4IBAQAfyOW+tnRqOAoZJwEqq53aSZJqjdxbPrwsjkbt9MGw Zrr/xPRYzTJd59MpnhvEsg+rNBOKkR0BNPzTf7BPZLN6mmH7IQmbmT6ftTFURLPE R3Ana/kWDUU4hgqJvnWNyGlfYuTRptS+d04w6dYQlCRZYf0J3Cn0OG+35lztfE28 /BVrRz+PF4sFISVAs9TYMHnUEJ41soeLeAKKVid231yxdPYaTZqimeUJrn0hcr+E /JOScq73Sf0W0C2ieH+CzDQRPyt1FhJjmLihapF7XojUCkBjakZQXn7KfvW67r31 3+wi6hYl1D0/3h/B5cnop6CfnOdJtafKZvuAoYPBMGmI -----END CERTIFICATE-----Generated at Mon Dec 15 23:43:26 2025 by rpki-client