This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/ujshoVbtlbnSXRjfddrO_lj_i6Y.roa File: ujshoVbtlbnSXRjfddrO_lj_i6Y.roa (raw, json) Hash identifier: TIADVGye8UfQII8nMINRYu1sRAiyXpRTwVUYNwZle+M= Subject key identifier: BA:3B:21:A1:56:ED:95:B9:D2:5D:18:DF:75:DA:CE:FE:58:FF:8B:A6 Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee Certificate serial: 019AE540EE4E96BE242C39565D21B729DD7B Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/ujshoVbtlbnSXRjfddrO_lj_i6Y.roa Signing time: Wed 03 Dec 2025 17:27:09 +0000 ROA not before: Wed 03 Dec 2025 17:27:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43197 IP address blocks: 45.81.37.0/24 maxlen: 24 109.68.232.0/21 maxlen: 21 109.68.232.0/24 maxlen: 24 109.68.233.0/24 maxlen: 24 109.68.234.0/24 maxlen: 24 109.68.235.0/24 maxlen: 24 109.68.236.0/24 maxlen: 24 109.68.237.0/24 maxlen: 24 109.68.238.0/24 maxlen: 24 109.68.239.0/24 maxlen: 24 185.105.228.0/22 maxlen: 22 185.105.228.0/24 maxlen: 24 185.105.229.0/24 maxlen: 24 185.105.230.0/24 maxlen: 24 185.105.231.0/24 maxlen: 24 2a0b:6bc0::/32 maxlen: 32 2a0b:6bc0::/48 maxlen: 48 2a0b:6bc0:1::/48 maxlen: 48 2a0b:6bc0:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:40:ee:4e:96:be:24:2c:39:56:5d:21:b7:29:dd:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee Validity Not Before: Dec 3 17:27:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba3b21a156ed95b9d25d18df75dacefe58ff8ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:1d:39:1b:d1:dc:fb:cb:2e:cf:10:1a:61: 39:04:33:a4:9c:7a:03:21:03:83:dc:b2:6d:49:c6: 47:52:bf:ee:f3:18:a3:a5:2c:76:f6:29:4d:17:3c: a8:74:08:e5:f6:be:d1:fb:a2:4b:c9:a2:32:a9:cb: 72:8e:02:03:29:9c:53:f3:61:a6:38:df:a5:af:3c: 94:39:fd:5c:b4:2f:0e:ea:17:9d:25:fa:40:2b:94: ab:73:91:ff:6a:21:54:34:c0:b9:d8:c8:74:51:bc: fb:29:59:92:f6:68:89:30:58:cc:a0:4c:82:97:6d: b4:e0:95:85:e0:42:3e:f6:b0:15:57:92:86:81:93: d9:5a:2e:2e:94:fc:72:88:5d:3d:56:b3:31:38:d0: 69:19:40:9a:e6:6a:4d:e4:0e:2e:14:3a:0f:1e:2b: f5:f3:91:3b:f0:39:98:74:b1:63:2a:a9:3e:1e:70: 06:ed:ab:d0:7c:54:92:2b:3c:87:75:2b:33:4c:96: 8a:89:0c:6e:42:ff:fa:31:36:84:03:dc:ae:b4:34: bc:ba:f5:6b:98:b7:8e:5a:8b:95:61:13:a9:26:e7: 57:c6:03:e9:5a:75:41:30:1b:b1:aa:46:4f:0f:cc: aa:43:09:32:62:69:0d:ec:5f:c1:13:b7:78:b7:bc: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3B:21:A1:56:ED:95:B9:D2:5D:18:DF:75:DA:CE:FE:58:FF:8B:A6 X509v3 Authority Key Identifier: keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/ujshoVbtlbnSXRjfddrO_lj_i6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.37.0/24 109.68.232.0/21 185.105.228.0/22 IPv6: 2a0b:6bc0::/32 Signature Algorithm: sha256WithRSAEncryption b3:6f:56:35:49:7f:40:40:fb:e2:bd:7e:52:1a:e8:13:5f:53: 88:cb:30:e6:36:93:69:73:cc:bd:78:b7:d9:68:6c:51:43:a9: 17:ec:5b:63:84:86:85:ce:23:30:d2:3e:21:f7:76:a1:d2:a0: bd:75:f4:b9:f3:05:45:35:85:5a:8c:0b:dd:d6:09:ab:38:a0: 4d:0a:d6:83:16:ce:82:fc:3e:f0:00:5a:6f:43:45:18:81:e0: 36:c3:d4:c0:04:6f:c5:9b:dd:cc:4f:89:f1:cf:47:c4:66:ce: f3:3a:56:e0:49:9d:a2:f3:b3:6c:c4:c8:7b:fd:26:77:3b:f6: a6:cd:87:aa:8f:9a:df:c3:79:16:97:bd:13:2b:72:c8:37:a1: 5c:68:bd:1c:c7:0c:6c:b5:bb:be:08:c6:2b:70:94:ca:2c:d5: e8:94:3b:98:8e:5e:ba:8f:36:76:2e:41:e8:45:05:f3:1d:16: 04:de:5c:41:78:b5:90:48:95:de:da:b2:43:36:4b:b5:af:94: d9:d2:48:fe:78:8e:77:24:bc:bb:e1:dc:3f:dc:85:41:ca:7e: 34:98:83:13:fa:22:de:77:7a:c0:7d:99:bb:15:f8:9a:31:4a: 5e:bc:c3:bb:35:74:ad:37:f2:58:be:72:f9:c5:31:9b:8a:31: 1c:78:18:ef -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZrlQO5Olr4kLDlWXSG3Kd17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMTg4Y2E2NGM0NjcwYTZlYjU2YjQyYTUwYTEwNTg4YWQ5 NjQ3ZWUwHhcNMjUxMjAzMTcyNzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTNiMjFhMTU2ZWQ5NWI5ZDI1ZDE4ZGY3NWRhY2VmZTU4ZmY4YmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySUdORvR3PvLLs8QGmE5BDOknHoD IQOD3LJtScZHUr/u8xijpSx29ilNFzyodAjl9r7R+6JLyaIyqctyjgIDKZxT82Gm ON+lrzyUOf1ctC8O6hedJfpAK5Src5H/aiFUNMC52Mh0Ubz7KVmS9miJMFjMoEyC l2204JWF4EI+9rAVV5KGgZPZWi4ulPxyiF09VrMxONBpGUCa5mpN5A4uFDoPHiv1 85E78DmYdLFjKqk+HnAG7avQfFSSKzyHdSszTJaKiQxuQv/6MTaEA9yutDS8uvVr mLeOWouVYROpJudXxgPpWnVBMBuxqkZPD8yqQwkyYmkN7F/BE7d4t7yoyQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLo7IaFW7ZW50l0Y33Xazv5Y/4umMB8GA1UdIwQY MBaAFJEYjKZMRnCm61a0KlChBYitlkfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1JpTXBreEdjS2JyVnJRcVVLRUZpSzJXUi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQt MTQ3MTc3YjgzN2RlLzEvdWpzaG9WYnRsYm5TWFJqZmRkck9fbGpfaTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQtMTQ3MTc3YjgzN2Rl LzEva1JpTXBreEdjS2JyVnJRcVVLRUZpSzJXUi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALVElAwQD bUToAwQCuWnkMA0EAgACMAcDBQAqC2vAMA0GCSqGSIb3DQEBCwUAA4IBAQCzb1Y1 SX9AQPvivX5SGugTX1OIyzDmNpNpc8y9eLfZaGxRQ6kX7FtjhIaFziMw0j4h93ah 0qC9dfS58wVFNYVajAvd1gmrOKBNCtaDFs6C/D7wAFpvQ0UYgeA2w9TABG/Fm93M T4nxz0fEZs7zOlbgSZ2i87NsxMh7/SZ3O/amzYeqj5rfw3kWl70TK3LIN6FcaL0c xwxstbu+CMYrcJTKLNXolDuYjl66jzZ2LkHoRQXzHRYE3lxBeLWQSJXe2rJDNku1 r5TZ0kj+eI53JLy74dw/3IVByn40mIMT+iLed3rAfZm7FfiaMUpevMO7NXStN/JY vnL5xTGbijEceBjv -----END CERTIFICATE-----Generated at Fri Dec 12 14:39:50 2025 by rpki-client