This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/uPwV1m04Cl05MAGLs8mqEkawCY8.roa File: uPwV1m04Cl05MAGLs8mqEkawCY8.roa (raw, json) Hash identifier: j7gJ5GP+ZMHhzP22b7gn8c/ARySRDGbn2G48M52EIsM= Subject key identifier: B8:FC:15:D6:6D:38:0A:5D:39:30:01:8B:B3:C9:AA:12:46:B0:09:8F Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019B32F6BD6A1460555E6C69EB273ACA706A Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/uPwV1m04Cl05MAGLs8mqEkawCY8.roa Signing time: Thu 18 Dec 2025 19:36:29 +0000 ROA not before: Thu 18 Dec 2025 19:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396356 IP address blocks: 185.113.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:f6:bd:6a:14:60:55:5e:6c:69:eb:27:3a:ca:70:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Dec 18 19:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b8fc15d66d380a5d3930018bb3c9aa1246b0098f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:dc:0a:fc:38:e2:87:3f:70:8a:21:73:77: 57:54:cd:f7:48:7c:9b:51:4d:b1:78:a8:54:44:75: cc:97:24:e6:3e:f6:a6:65:6f:5c:71:bd:5f:34:c3: d3:62:40:c7:17:5a:17:8b:9e:41:5e:85:a2:6f:7f: 14:3a:73:7f:5d:f8:37:40:1d:ef:1d:34:87:ee:9f: 7e:70:14:47:f0:c9:98:a0:0e:df:84:85:10:15:68: 67:1b:a6:99:b5:52:d1:68:14:0d:a6:db:f0:f0:4f: 52:87:39:ff:1a:75:8f:c8:5c:15:b2:10:56:c7:56: 00:f2:7c:90:91:d1:ef:b3:08:7b:ba:7b:95:40:d3: c7:a6:de:7f:dd:8a:8a:c3:45:79:dc:5f:7c:e4:83: b4:8c:c4:00:d0:ad:be:70:78:59:e0:82:fa:60:88: 99:0a:25:7b:17:c5:d4:cc:80:70:f5:b5:3e:56:2a: 16:ed:01:86:99:8b:da:f6:45:97:02:89:4d:7a:31: f1:58:7e:5d:db:e0:f5:3f:09:6f:4b:4e:b7:ad:0b: cb:80:7c:2e:87:b9:e1:f0:9e:6e:a6:45:3b:2b:37: 19:b9:ab:5c:40:92:4e:0f:92:5f:40:73:68:62:b6: 51:56:28:1e:a9:09:cb:0b:15:9e:75:e3:bf:0b:d4: e1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FC:15:D6:6D:38:0A:5D:39:30:01:8B:B3:C9:AA:12:46:B0:09:8F X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/uPwV1m04Cl05MAGLs8mqEkawCY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.221.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:fe:29:0b:ea:36:8e:f7:b5:a3:14:5c:e9:e0:83:d7:a7:29: 02:58:2a:14:73:70:b0:89:a8:06:93:7d:50:b1:7b:5a:d1:6f: c2:5b:81:90:3b:a3:27:d5:44:1d:c0:55:b3:69:f8:43:a3:90: 33:c5:28:84:4a:f7:0c:a4:bb:25:2c:a9:35:4e:d0:d0:9c:ae: ae:8c:82:97:8d:1c:24:80:cc:50:a7:53:11:ff:55:77:aa:2e: ad:60:1e:89:f1:7b:40:e9:38:70:d5:0d:55:c9:e5:47:ff:d1: d6:54:ed:0a:f4:56:e3:4d:ad:9f:2e:c2:73:d9:8d:35:10:12: 4d:f3:0d:41:b0:5f:b7:b3:20:23:78:63:dc:dc:1e:92:f1:89: 25:7b:07:6b:35:c2:d1:19:e1:79:02:1a:47:68:20:26:96:3c: 92:d5:17:c1:00:bb:c7:8e:25:ab:82:f9:79:87:2a:80:13:42: ce:f1:cb:28:70:b7:7e:d2:70:a3:1f:ff:99:b6:bd:0f:44:5a: 40:93:ab:ec:31:aa:2d:f2:c9:85:52:cf:7f:12:bc:99:86:48: 6b:32:3a:d5:4e:26:c8:e6:75:c0:e2:70:d2:51:b7:3b:bb:cc: 33:5c:10:d9:e9:70:db:47:89:e1:47:05:84:07:01:7e:15:5e: 63:be:a8:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsy9r1qFGBVXmxp6yc6ynBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjUxMjE4MTkzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGZjMTVkNjZkMzgwYTVkMzkzMDAxOGJiM2M5YWExMjQ2YjAwOThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ3cCvw44oc/cIohc3dXVM33SHyb UU2xeKhURHXMlyTmPvamZW9ccb1fNMPTYkDHF1oXi55BXoWib38UOnN/Xfg3QB3v HTSH7p9+cBRH8MmYoA7fhIUQFWhnG6aZtVLRaBQNptvw8E9Shzn/GnWPyFwVshBW x1YA8nyQkdHvswh7unuVQNPHpt5/3YqKw0V53F985IO0jMQA0K2+cHhZ4IL6YIiZ CiV7F8XUzIBw9bU+VioW7QGGmYva9kWXAolNejHxWH5d2+D1PwlvS063rQvLgHwu h7nh8J5upkU7KzcZuatcQJJOD5JfQHNoYrZRVigeqQnLCxWedeO/C9ThUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLj8FdZtOApdOTABi7PJqhJGsAmPMB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvdVB3VjFtMDRDbDA1TUFHTHM4bXFFa2F3Q1k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXHdMA0G CSqGSIb3DQEBCwUAA4IBAQB9/ikL6jaO97WjFFzp4IPXpykCWCoUc3CwiagGk31Q sXta0W/CW4GQO6Mn1UQdwFWzafhDo5AzxSiESvcMpLslLKk1TtDQnK6ujIKXjRwk gMxQp1MR/1V3qi6tYB6J8XtA6Thw1Q1VyeVH/9HWVO0K9FbjTa2fLsJz2Y01EBJN 8w1BsF+3syAjeGPc3B6S8YklewdrNcLRGeF5AhpHaCAmljyS1RfBALvHjiWrgvl5 hyqAE0LO8csocLd+0nCjH/+Ztr0PRFpAk6vsMaot8smFUs9/EryZhkhrMjrVTibI 5nXA4nDSUbc7u8wzXBDZ6XDbR4nhRwWEBwF+FV5jvqhT -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:02 2025 by rpki-client