This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uxyAPudsCC8yka645KLGzEd_8Hs.roa File: uxyAPudsCC8yka645KLGzEd_8Hs.roa (raw, json) Hash identifier: NCjSbg4QHBuaMFurUCPrw+7s0ZHvLOJnWkPs2BZW4po= Subject key identifier: BB:1C:80:3E:E7:6C:08:2F:32:91:AE:B8:E4:A2:C6:CC:47:7F:F0:7B Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B1B3FE3987AF8A533D8C4D36C9E44100A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uxyAPudsCC8yka645KLGzEd_8Hs.roa Signing time: Sun 14 Dec 2025 05:05:30 +0000 ROA not before: Sun 14 Dec 2025 05:05:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32132 IP address blocks: 5.175.203.0/24 maxlen: 24 5.175.204.0/24 maxlen: 24 5.231.59.0/24 maxlen: 24 5.231.94.0/24 maxlen: 24 89.106.76.0/24 maxlen: 24 89.106.80.0/24 maxlen: 24 89.106.92.0/24 maxlen: 24 89.106.93.0/24 maxlen: 24 94.103.170.0/24 maxlen: 24 94.103.171.0/24 maxlen: 24 94.103.174.0/24 maxlen: 24 94.249.158.0/24 maxlen: 24 94.249.168.0/24 maxlen: 24 94.249.169.0/24 maxlen: 24 94.249.170.0/24 maxlen: 24 94.249.172.0/24 maxlen: 24 94.249.177.0/24 maxlen: 24 94.249.214.0/24 maxlen: 24 94.249.233.0/24 maxlen: 24 94.249.238.0/24 maxlen: 24 94.249.245.0/24 maxlen: 24 178.18.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3f:e3:98:7a:f8:a5:33:d8:c4:d3:6c:9e:44:10:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 14 05:05:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb1c803ee76c082f3291aeb8e4a2c6cc477ff07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:94:c6:e4:46:09:49:4c:94:62:25:86:0e: 1d:0e:46:5e:24:1b:28:7d:ec:01:8c:d3:3c:76:d4: 32:a1:7f:0c:50:a2:93:e2:65:cd:22:0b:be:8c:c8: 6f:1e:1e:07:51:46:8b:c4:89:ab:19:a8:6c:5b:d9: f7:ee:3c:e3:54:a2:16:67:11:ec:13:eb:8b:3b:d7: 6d:58:9a:61:88:33:67:e4:28:af:dc:75:f6:53:e2: 4a:ea:eb:5c:a7:ab:a8:36:c2:22:76:ab:0e:9c:8a: f0:c7:c3:91:39:08:53:e6:a9:4b:11:7a:82:52:d2: 01:70:b0:15:53:8c:d7:85:65:ec:59:56:d9:00:b1: 5c:a6:92:03:e7:60:2b:6f:4e:a3:6b:b1:3c:84:4f: 75:fa:ef:39:64:c5:28:4b:7e:5c:4f:7d:2b:81:10: 6d:39:ff:d2:80:f0:81:a9:be:aa:db:67:96:d2:b7: 61:83:67:00:a5:ac:52:5b:c0:a7:28:4d:92:0e:ad: 66:3e:ab:a7:8f:89:5d:2e:c9:73:b4:9c:0f:16:16: 89:2b:76:78:87:c6:f2:a9:de:c6:24:9c:e6:a8:81: c6:bf:c1:c7:6a:df:fe:ae:fb:27:43:f6:41:75:a9: d6:fe:e6:29:bd:79:e1:7f:9c:07:cb:36:0a:63:12: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1C:80:3E:E7:6C:08:2F:32:91:AE:B8:E4:A2:C6:CC:47:7F:F0:7B X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uxyAPudsCC8yka645KLGzEd_8Hs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.203.0-5.175.204.255 5.231.59.0/24 5.231.94.0/24 89.106.76.0/24 89.106.80.0/24 89.106.92.0/23 94.103.170.0/23 94.103.174.0/24 94.249.158.0/24 94.249.168.0-94.249.170.255 94.249.172.0/24 94.249.177.0/24 94.249.214.0/24 94.249.233.0/24 94.249.238.0/24 94.249.245.0/24 178.18.144.0/24 Signature Algorithm: sha256WithRSAEncryption 01:6a:c4:d0:aa:c8:5b:5b:83:c1:5e:05:dd:4a:5c:a9:cc:77: 60:87:88:6a:20:77:04:11:c8:32:ba:70:41:b4:4a:83:e5:39: 81:0e:c6:30:88:c7:64:d4:8f:40:ea:74:34:c1:24:29:34:99: 7d:92:2f:d6:e7:17:b8:8d:19:51:48:41:68:a4:c8:b2:3e:8c: 67:7b:7b:80:51:6e:ff:89:81:1a:da:10:d7:3e:a3:88:6b:7c: c2:09:88:85:be:14:42:5f:90:1b:96:09:39:c8:70:9e:50:5c: 0a:44:91:3a:ac:22:0b:5f:57:79:85:7a:7c:7e:e9:fc:46:ec: 9e:9b:60:ad:e6:6d:4c:24:a1:fe:e5:9e:1a:15:50:65:1a:f0: 6a:d0:93:91:be:ff:b0:19:81:b6:6d:58:9a:27:ed:29:47:10: 6d:26:38:ac:fb:27:71:d0:a5:74:2f:84:88:e3:66:8a:bb:36: ba:19:cf:ad:4a:9e:a4:ea:77:0d:44:b6:79:d2:a3:c9:91:2b: fa:6a:68:4b:1d:60:63:a4:92:24:13:28:13:6e:64:f5:b7:66: e1:53:35:53:4a:23:fa:05:24:39:53:7e:90:ab:59:5e:fd:1d: 20:bc:98:0f:85:af:01:51:8f:60:91:f8:ab:6b:be:13:21:44: 1c:16:a3:79 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZsbP+OYevilM9jE02yeRBAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE0MDUwNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjFjODAzZWU3NmMwODJmMzI5MWFlYjhlNGEyYzZjYzQ3N2ZmMDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroSUxuRGCUlMlGIlhg4dDkZeJBso fewBjNM8dtQyoX8MUKKT4mXNIgu+jMhvHh4HUUaLxImrGahsW9n37jzjVKIWZxHs E+uLO9dtWJphiDNn5Civ3HX2U+JK6utcp6uoNsIidqsOnIrwx8OROQhT5qlLEXqC UtIBcLAVU4zXhWXsWVbZALFcppID52Arb06ja7E8hE91+u85ZMUoS35cT30rgRBt Of/SgPCBqb6q22eW0rdhg2cApaxSW8CnKE2SDq1mPqunj4ldLslztJwPFhaJK3Z4 h8byqd7GJJzmqIHGv8HHat/+rvsnQ/ZBdanW/uYpvXnhf5wHyzYKYxJu0wIDAQAB o4ICezCCAncwHQYDVR0OBBYEFLscgD7nbAgvMpGuuOSixsxHf/B7MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvdXh5QVB1ZHNDQzh5a2E2NDVLTEd6RWRfOEhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYwDAMEAAWv ywMEAAWvzAMEAAXnOwMEAAXnXgMEAFlqTAMEAFlqUAMEAVlqXAMEAV5nqgMEAF5n rgMEAF75njAMAwQDXvmoAwQAXvmqAwQAXvmsAwQAXvmxAwQAXvnWAwQAXvnpAwQA XvnuAwQAXvn1AwQAshKQMA0GCSqGSIb3DQEBCwUAA4IBAQABasTQqshbW4PBXgXd SlypzHdgh4hqIHcEEcgyunBBtEqD5TmBDsYwiMdk1I9A6nQ0wSQpNJl9ki/W5xe4 jRlRSEFopMiyPoxne3uAUW7/iYEa2hDXPqOIa3zCCYiFvhRCX5Ablgk5yHCeUFwK RJE6rCILX1d5hXp8fun8Ruyem2Ct5m1MJKH+5Z4aFVBlGvBq0JORvv+wGYG2bVia J+0pRxBtJjis+ydx0KV0L4SI42aKuza6Gc+tSp6k6ncNRLZ50qPJkSv6amhLHWBj pJIkEygTbmT1t2bhUzVTSiP6BSQ5U36Qq1le/R0gvJgPha8BUY9gkfira74TIUQc FqN5 -----END CERTIFICATE-----Generated at Fri Dec 19 17:53:27 2025 by rpki-client