This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/uXPkwSni1Ie_bjRePZgMcx89NEs.roa File: uXPkwSni1Ie_bjRePZgMcx89NEs.roa (raw, json) Hash identifier: qmhqJfrU+3wdywUUqiHqXJS9YWnmrs1L37BGEb6ro7Q= Subject key identifier: B9:73:E4:C1:29:E2:D4:87:BF:6E:34:5E:3D:98:0C:73:1F:3D:34:4B Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019AC961E95079281E105000B8924E2D8DE3 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/uXPkwSni1Ie_bjRePZgMcx89NEs.roa Signing time: Fri 28 Nov 2025 07:33:48 +0000 ROA not before: Fri 28 Nov 2025 07:33:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41397 IP address blocks: 213.220.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:61:e9:50:79:28:1e:10:50:00:b8:92:4e:2d:8d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Nov 28 07:33:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b973e4c129e2d487bf6e345e3d980c731f3d344b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:12:2d:d8:55:fe:a2:a1:ab:4f:c1:84:e3:81: 10:62:ee:e9:e7:48:5d:f9:fd:aa:8c:36:97:94:dd: cc:74:e0:ba:0c:23:80:16:89:1e:df:1c:7a:18:dc: d6:53:3c:f6:83:58:86:4e:cd:2e:4c:d8:7f:2f:89: 1a:41:d0:e2:b0:a4:ab:23:d5:71:7e:6e:b3:68:fc: 91:b8:79:e3:06:fd:2e:9d:53:4d:33:08:1e:3f:d2: 89:71:50:13:7d:94:55:26:48:a6:16:48:b1:da:72: 20:dd:ef:5a:ca:f7:04:79:a1:df:07:24:16:dc:5e: 90:56:9b:fe:48:a0:55:c6:10:90:0a:f8:10:0d:19: 94:17:d5:98:e1:3a:63:5d:1c:7c:26:cf:63:5f:96: cc:01:72:aa:34:5d:51:d5:23:d7:cb:d8:e8:48:dd: e8:17:74:72:f1:4b:a9:12:bd:f5:a9:65:b0:ea:47: 37:57:b6:bf:50:fb:23:85:c7:0d:2b:d7:aa:7c:7d: 4c:01:e8:82:e5:af:3f:3f:8a:90:18:c8:3f:79:20: ae:96:b9:0e:b2:5c:1b:d3:cb:21:fa:bf:57:f4:4c: 32:32:bd:e7:36:b2:74:5f:88:b7:1e:74:fb:aa:8d: d2:9b:48:df:c6:34:09:c4:5a:6d:20:a6:d9:5e:0b: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:E4:C1:29:E2:D4:87:BF:6E:34:5E:3D:98:0C:73:1F:3D:34:4B X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/uXPkwSni1Ie_bjRePZgMcx89NEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.220.24.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:11:8b:83:82:87:15:69:c8:d2:dc:f0:68:37:2d:9a:c4:b0: b9:d6:62:f3:46:74:62:2a:0d:d8:ca:7f:f0:10:06:4a:8d:e4: f4:2c:e9:b0:dd:c1:db:0c:ff:91:10:6c:d0:62:83:df:52:9a: ac:35:76:a0:2c:d3:8b:e1:d8:63:a8:1c:43:55:f3:e7:83:b4: b3:a6:9c:f8:e2:d3:d9:85:56:41:c6:5a:4b:12:25:9c:26:3b: 01:7b:d4:f5:dd:20:f4:ef:72:8f:82:bc:64:b6:ac:b0:ec:20: 6b:3b:e7:e0:3f:5b:36:35:41:85:77:92:b6:8a:00:b7:4a:bd: f9:f8:b2:7d:f8:7f:a1:23:67:3c:e0:6f:93:1b:c2:58:83:b8: 92:d1:e7:b9:01:ed:94:58:f8:56:24:4a:3d:37:de:fa:db:d7: 5c:c9:c5:95:ca:46:72:20:c8:2d:3d:b4:25:a4:86:b4:2c:82: d1:98:57:8a:38:10:68:1b:c4:c3:3a:8a:29:89:8b:ea:94:35: 67:fe:30:f9:4b:59:b5:85:7c:9d:22:d9:c9:05:9c:46:06:ee: 68:d7:41:9c:3a:0a:89:31:0e:cc:22:d2:8f:62:f2:6a:a6:1d: 98:62:82:38:4d:16:2b:8c:37:3a:89:3c:dd:dd:f6:7c:cf:58: df:36:6c:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJYelQeSgeEFAAuJJOLY3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMTI4MDczMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTczZTRjMTI5ZTJkNDg3YmY2ZTM0NWUzZDk4MGM3MzFmM2QzNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BIt2FX+oqGrT8GE44EQYu7p50hd +f2qjDaXlN3MdOC6DCOAFoke3xx6GNzWUzz2g1iGTs0uTNh/L4kaQdDisKSrI9Vx fm6zaPyRuHnjBv0unVNNMwgeP9KJcVATfZRVJkimFkix2nIg3e9ayvcEeaHfByQW 3F6QVpv+SKBVxhCQCvgQDRmUF9WY4TpjXRx8Js9jX5bMAXKqNF1R1SPXy9joSN3o F3Ry8UupEr31qWWw6kc3V7a/UPsjhccNK9eqfH1MAeiC5a8/P4qQGMg/eSCulrkO slwb08sh+r9X9EwyMr3nNrJ0X4i3HnT7qo3Sm0jfxjQJxFptIKbZXgsEqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLlz5MEp4tSHv240Xj2YDHMfPTRLMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvdVhQa3dTbmkxSWVfYmpSZVBaZ01jeDg5TkVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1dwYMA0G CSqGSIb3DQEBCwUAA4IBAQB/EYuDgocVacjS3PBoNy2axLC51mLzRnRiKg3Yyn/w EAZKjeT0LOmw3cHbDP+REGzQYoPfUpqsNXagLNOL4dhjqBxDVfPng7Szppz44tPZ hVZBxlpLEiWcJjsBe9T13SD073KPgrxktqyw7CBrO+fgP1s2NUGFd5K2igC3Sr35 +LJ9+H+hI2c84G+TG8JYg7iS0ee5Ae2UWPhWJEo9N97629dcycWVykZyIMgtPbQl pIa0LILRmFeKOBBoG8TDOoopiYvqlDVn/jD5S1m1hXydItnJBZxGBu5o10GcOgqJ MQ7MItKPYvJqph2YYoI4TRYrjDc6iTzd3fZ8z1jfNmzB -----END CERTIFICATE-----Generated at Fri Dec 5 17:46:41 2025 by rpki-client