This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/uznfP4LeTg8IXEvfphe5kyMLZpI.roa File: uznfP4LeTg8IXEvfphe5kyMLZpI.roa (raw, json) Hash identifier: g3X9/REzY0LgUWr0WUpFnhLkhuTurIuuqm4rYiqx+NQ= Subject key identifier: BB:39:DF:3F:82:DE:4E:0F:08:5C:4B:DF:A6:17:B9:93:23:0B:66:92 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B2C9F82D34F71F7F3529399E21B22C81A Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/uznfP4LeTg8IXEvfphe5kyMLZpI.roa Signing time: Wed 17 Dec 2025 14:03:29 +0000 ROA not before: Wed 17 Dec 2025 14:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25211 IP address blocks: 85.239.144.0/24 maxlen: 24 85.239.146.0/24 maxlen: 24 85.239.147.0/24 maxlen: 24 85.239.149.0/24 maxlen: 24 85.239.151.0/24 maxlen: 24 185.95.156.0/24 maxlen: 24 185.95.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9f:82:d3:4f:71:f7:f3:52:93:99:e2:1b:22:c8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 17 14:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb39df3f82de4e0f085c4bdfa617b993230b6692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:d0:0a:13:d6:b7:83:26:ce:87:4a:c3:fe: fa:65:6b:f7:e4:29:34:ea:a3:a0:a0:12:f6:8b:ca: 58:ec:af:8d:0e:e9:f6:05:6c:06:1e:0e:9a:5c:84: 6b:de:b1:3c:52:48:eb:ce:84:95:9f:88:1a:a8:9f: 86:e5:59:da:4d:34:28:18:b9:3b:ea:2f:f4:ff:f4: d8:be:1e:2e:f7:1b:3f:ae:a2:26:23:77:ff:7c:bd: 81:6c:47:08:96:cf:b1:f2:3e:1f:78:69:47:d8:18: cd:35:a5:41:ca:9e:0e:50:48:f1:15:4c:db:9c:ce: 49:04:3a:97:7a:17:af:7b:05:64:f6:db:85:42:63: 16:0c:ca:84:93:6c:23:c1:88:9d:b9:7e:da:92:c7: 37:fe:66:e1:ca:3d:c4:9d:07:fc:91:80:a9:a0:94: cc:35:1f:a8:88:9a:19:f2:3c:9c:54:c7:f6:6f:f0: 0b:8b:c2:ff:7a:b6:cc:ef:28:cc:f0:fa:c9:11:42: f0:bc:50:d8:ad:18:f7:e1:f5:00:43:d6:4c:95:e3: 85:fb:11:dd:cc:99:d7:9b:18:41:ff:53:3f:08:2b: c0:95:e8:ad:3b:74:c2:1f:17:9e:3a:93:e3:0d:f9: 3e:bb:07:3b:c4:78:cf:52:d0:29:36:54:88:4e:c4: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:39:DF:3F:82:DE:4E:0F:08:5C:4B:DF:A6:17:B9:93:23:0B:66:92 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/uznfP4LeTg8IXEvfphe5kyMLZpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.144.0/24 85.239.146.0/23 85.239.149.0/24 85.239.151.0/24 185.95.156.0/24 185.95.159.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:4d:df:62:f2:24:9d:d8:3e:c1:02:c3:d7:b3:13:f5:32:78: f7:c2:c4:d9:6c:ad:a7:5c:09:2d:e6:af:47:24:76:b8:20:7e: e7:34:cb:9f:33:33:b8:a5:e8:45:a5:9d:fd:8b:6e:2f:1a:92: 60:24:9b:11:ad:00:80:68:83:e7:28:c6:ae:84:43:0d:5d:35: f9:6e:ce:44:60:aa:c4:6c:23:d9:cb:34:f6:bb:1d:f0:1b:c5: 11:bd:80:7d:b4:86:df:bb:d9:9b:25:8a:89:b0:df:25:68:65: 10:19:39:62:ba:33:68:3a:28:b8:bd:32:b7:97:9e:9a:f2:3e: f7:74:4f:4b:b1:ca:6d:99:61:2b:f0:31:3e:04:cc:73:fe:b8: 77:d9:4c:fe:34:de:ac:42:60:d4:7b:52:39:82:b0:e7:18:77: 23:65:34:2a:9e:3f:aa:f6:f2:54:b1:d0:74:f7:42:f1:af:30: 15:ff:13:a7:e3:49:e0:bb:aa:87:09:d5:14:8b:c6:ec:36:d1: 09:51:fb:4d:3e:44:97:d6:74:b5:a9:95:57:2a:f4:9a:5b:f5: 7b:ff:f7:09:60:d3:f0:c3:0b:d3:31:92:40:ad:fa:75:34:5f: 11:7c:d9:d6:3d:d2:bd:75:48:e1:e3:10:25:9e:0d:d7:d4:4f: fd:55:ee:f7 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZssn4LTT3H381KTmeIbIsgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjE3MTQwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjM5ZGYzZjgyZGU0ZTBmMDg1YzRiZGZhNjE3Yjk5MzIzMGI2NjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxHQChPWt4MmzodKw/76ZWv35Ck0 6qOgoBL2i8pY7K+NDun2BWwGHg6aXIRr3rE8UkjrzoSVn4gaqJ+G5VnaTTQoGLk7 6i/0//TYvh4u9xs/rqImI3f/fL2BbEcIls+x8j4feGlH2BjNNaVByp4OUEjxFUzb nM5JBDqXehevewVk9tuFQmMWDMqEk2wjwYiduX7aksc3/mbhyj3EnQf8kYCpoJTM NR+oiJoZ8jycVMf2b/ALi8L/erbM7yjM8PrJEULwvFDYrRj34fUAQ9ZMleOF+xHd zJnXmxhB/1M/CCvAleitO3TCHxeeOpPjDfk+uwc7xHjPUtApNlSITsSaowIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLs53z+C3k4PCFxL36YXuZMjC2aSMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvdXpuZlA0TGVUZzhJWEV2ZnBoZTVreU1MWnBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVe+QAwQB Ve+SAwQAVe+VAwQAVe+XAwQAuV+cAwQAuV+fMA0GCSqGSIb3DQEBCwUAA4IBAQCM Td9i8iSd2D7BAsPXsxP1Mnj3wsTZbK2nXAkt5q9HJHa4IH7nNMufMzO4pehFpZ39 i24vGpJgJJsRrQCAaIPnKMauhEMNXTX5bs5EYKrEbCPZyzT2ux3wG8URvYB9tIbf u9mbJYqJsN8laGUQGTliujNoOii4vTK3l56a8j73dE9LscptmWEr8DE+BMxz/rh3 2Uz+NN6sQmDUe1I5grDnGHcjZTQqnj+q9vJUsdB090LxrzAV/xOn40ngu6qHCdUU i8bsNtEJUftNPkSX1nS1qZVXKvSaW/V7//cJYNPwwwvTMZJArfp1NF8RfNnWPdK9 dUjh4xAlng3X1E/9Ve73 -----END CERTIFICATE-----Generated at Thu Dec 18 21:45:12 2025 by rpki-client