This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/UJPW0acNcxjVpnidxLVQuiuOXGQ.roa File: UJPW0acNcxjVpnidxLVQuiuOXGQ.roa (raw, json) Hash identifier: a2O5xdupJ9/xqQl/Fb0t3DFJlemLpiFP2p64rJERpP8= Subject key identifier: 50:93:D6:D1:A7:0D:73:18:D5:A6:78:9D:C4:B5:50:BA:2B:8E:5C:64 Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Certificate serial: 019B0DA9A9832B9A3882F5C1271FFCF33CA5 Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/UJPW0acNcxjVpnidxLVQuiuOXGQ.roa Signing time: Thu 11 Dec 2025 13:46:21 +0000 ROA not before: Thu 11 Dec 2025 13:46:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60175 IP address blocks: 89.63.0.0/18 maxlen: 18 89.63.0.0/20 maxlen: 20 89.63.16.0/20 maxlen: 20 89.63.20.0/24 maxlen: 24 89.63.32.0/19 maxlen: 19 89.63.32.0/20 maxlen: 20 89.63.32.0/24 maxlen: 24 89.63.240.0/20 maxlen: 20 185.35.12.0/22 maxlen: 24 185.35.12.0/24 maxlen: 24 185.35.14.0/23 maxlen: 23 195.4.128.0/19 maxlen: 19 195.4.145.0/24 maxlen: 24 195.4.160.0/20 maxlen: 20 195.4.184.0/21 maxlen: 21 195.4.192.0/20 maxlen: 20 195.4.199.0/24 maxlen: 24 195.4.208.0/21 maxlen: 21 2a00:dca0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:a9:a9:83:2b:9a:38:82:f5:c1:27:1f:fc:f3:3c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Validity Not Before: Dec 11 13:46:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5093d6d1a70d7318d5a6789dc4b550ba2b8e5c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1e:78:d9:45:7e:8b:97:9f:2c:ca:1f:67:74: f5:12:66:34:e8:32:49:a5:db:d5:97:86:5f:1a:34: 73:4b:d8:dd:d9:be:e4:91:2f:06:38:c4:b6:85:d1: 43:94:a7:f0:f8:cb:fc:49:5f:21:26:ea:f9:34:f5: f1:b1:8f:a9:47:99:ea:d0:82:7f:d0:77:93:b0:e1: c6:98:f2:f1:b9:a4:ef:78:9b:b3:91:ef:8d:f8:8a: f0:78:69:0c:04:81:04:0c:d4:85:94:41:52:f2:80: b0:dd:06:b3:3a:46:a0:14:b3:6b:7b:36:d3:fd:ae: 00:98:51:a0:b3:ec:74:1b:55:e0:d7:d5:36:f1:7f: f9:4f:46:d4:5a:c8:e4:a4:c3:f7:73:98:86:3f:4e: 79:79:fd:b4:da:59:04:b6:e6:7e:14:5b:1c:7e:73: 0d:66:5a:71:b9:f1:69:ec:51:ea:13:53:c9:c5:aa: ba:d9:e1:72:2c:ce:a0:06:de:5b:39:f5:2e:af:4d: 6e:3a:b6:cf:94:49:60:15:1d:44:6f:c4:90:b8:9a: f0:4e:4a:70:c6:fc:25:49:ad:56:7e:6b:ae:dd:e1: 2f:9f:7c:45:8f:97:43:88:79:ad:4e:8f:c9:98:6d: 51:53:52:dc:8c:8b:dd:1c:27:01:ea:50:af:7a:d7: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:93:D6:D1:A7:0D:73:18:D5:A6:78:9D:C4:B5:50:BA:2B:8E:5C:64 X509v3 Authority Key Identifier: keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/UJPW0acNcxjVpnidxLVQuiuOXGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.63.0.0/18 89.63.240.0/20 185.35.12.0/22 195.4.128.0-195.4.175.255 195.4.184.0-195.4.215.255 IPv6: 2a00:dca0::/29 Signature Algorithm: sha256WithRSAEncryption d1:5b:36:04:c6:92:60:4c:62:a9:e6:f1:e0:d7:af:43:8a:ec: b4:46:16:cf:cf:ac:af:fd:4f:1f:30:c6:d3:a1:2e:d9:a2:2b: 41:7a:4f:1f:8f:d6:a5:0c:97:f6:06:e4:63:56:be:13:52:0f: b1:a0:26:2d:94:1d:27:ae:ce:2c:a5:ce:03:53:65:ae:6b:28: 33:f1:5c:07:47:75:a1:99:2c:dd:e0:01:c0:22:a7:27:69:7c: cd:af:a8:fa:14:fc:b4:a3:fb:44:23:1f:38:dc:75:59:f3:85: 47:57:21:53:ce:b7:a9:a0:8f:18:a8:d7:14:ff:57:24:50:3a: 32:d3:77:01:97:35:07:bc:b7:83:43:c7:f6:8f:81:ca:94:4c: 0f:a8:f3:99:bc:67:de:01:bf:34:7c:49:93:40:25:ab:76:0e: 7e:e5:d5:8e:e7:fc:dd:3a:b3:be:e9:e3:34:14:4d:46:9e:86: 97:bc:bc:2b:ee:cd:72:24:d0:d6:e9:f8:e8:ac:33:75:87:8a: 96:82:10:5c:5a:db:3a:17:f2:b2:9e:28:88:cd:76:e3:67:67: dd:da:4e:b4:15:5d:95:9f:e7:8f:9d:73:d9:12:3c:e6:db:df: 36:69:98:0c:a3:57:11:e0:15:ff:1c:3f:ac:31:42:1c:a9:9b: af:2b:13:c5 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZsNqamDK5o4gvXBJx/88zylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmVlMmIzOTcxMjM3N2I0YmZlYzllNjZhYzdlNmU5MDhl ZmNlZWMwHhcNMjUxMjExMTM0NjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDkzZDZkMWE3MGQ3MzE4ZDVhNjc4OWRjNGI1NTBiYTJiOGU1YzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih542UV+i5efLMofZ3T1EmY06DJJ pdvVl4ZfGjRzS9jd2b7kkS8GOMS2hdFDlKfw+Mv8SV8hJur5NPXxsY+pR5nq0IJ/ 0HeTsOHGmPLxuaTveJuzke+N+IrweGkMBIEEDNSFlEFS8oCw3QazOkagFLNrezbT /a4AmFGgs+x0G1Xg19U28X/5T0bUWsjkpMP3c5iGP055ef202lkEtuZ+FFscfnMN ZlpxufFp7FHqE1PJxaq62eFyLM6gBt5bOfUur01uOrbPlElgFR1Eb8SQuJrwTkpw xvwlSa1Wfmuu3eEvn3xFj5dDiHmtTo/JmG1RU1LcjIvdHCcB6lCvetczEQIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFFCT1tGnDXMY1aZ4ncS1ULorjlxkMB8GA1UdIwQY MBaAFLMu4rOXEjd7S/7J5mrH5ukI787sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMt ZjAxNmNhNWRhMjE5LzEvVUpQVzBhY05jeGpWcG5pZHhMVlF1aXVPWEdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMtZjAxNmNhNWRhMjE5 LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQGWT8AAwQE WT/wAwQCuSMMMAwDBAfDBIADBATDBKAwDAMEA8MEuAMEA8ME0DANBAIAAjAHAwUD KgDcoDANBgkqhkiG9w0BAQsFAAOCAQEA0Vs2BMaSYExiqebx4NevQ4rstEYWz8+s r/1PHzDG06Eu2aIrQXpPH4/WpQyX9gbkY1a+E1IPsaAmLZQdJ67OLKXOA1Nlrmso M/FcB0d1oZks3eABwCKnJ2l8za+o+hT8tKP7RCMfONx1WfOFR1chU863qaCPGKjX FP9XJFA6MtN3AZc1B7y3g0PH9o+BypRMD6jzmbxn3gG/NHxJk0Alq3YOfuXVjuf8 3TqzvunjNBRNRp6Gl7y8K+7NciTQ1un46KwzdYeKloIQXFrbOhfysp4oiM1242dn 3dpOtBVdlZ/nj51z2RI85tvfNmmYDKNXEeAV/xw/rDFCHKmbrysTxQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:58:57 2025 by rpki-client