This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/ugvVJv1QPdlsdCOHyojPtazbLYI.roa File: ugvVJv1QPdlsdCOHyojPtazbLYI.roa (raw, json) Hash identifier: pXfm5LL3VQOgBalVDK4dGytbPCPO103M4zKNQiaOMks= Subject key identifier: BA:0B:D5:26:FD:50:3D:D9:6C:74:23:87:CA:88:CF:B5:AC:DB:2D:82 Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Certificate serial: 019AE9C1E56565F5A52129EFD0FFB8C38602 Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/ugvVJv1QPdlsdCOHyojPtazbLYI.roa Signing time: Thu 04 Dec 2025 14:26:29 +0000 ROA not before: Thu 04 Dec 2025 14:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61317 IP address blocks: 45.158.39.0/24 maxlen: 24 217.79.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:c1:e5:65:65:f5:a5:21:29:ef:d0:ff:b8:c3:86:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Validity Not Before: Dec 4 14:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba0bd526fd503dd96c742387ca88cfb5acdb2d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:19:c7:46:15:f8:7d:c0:48:72:1e:d8:92: d9:e2:76:ce:86:e0:c9:7a:92:b2:e4:96:bf:0c:e5: d8:f0:eb:ca:4c:11:36:a7:21:d6:70:55:d5:eb:53: 7e:29:ea:6f:ec:a3:56:04:2c:36:da:dc:16:0f:49: e3:e3:56:86:ea:76:53:32:9d:a7:9f:b2:9f:eb:ff: d5:02:3d:47:b4:88:f1:1c:a8:20:4c:75:9a:ef:9e: 68:05:a9:ec:3d:a3:c0:79:53:d5:c8:2e:38:52:06: 95:b6:d2:be:e6:c2:6a:ab:43:7e:9f:60:5a:e3:5b: 66:54:88:13:97:42:d4:d4:b7:96:1a:a1:96:74:e4: be:7f:9e:cc:03:13:b0:33:07:79:d2:8c:f0:52:db: 82:a9:b4:b6:85:dc:17:42:88:c5:52:3d:ee:3d:44: e5:02:1d:5e:89:bd:d8:db:ec:86:c2:8e:93:b8:c0: 1b:c3:6e:c1:eb:49:57:ce:a8:6a:9c:be:56:db:64: 9d:a6:08:d3:7e:ee:72:a7:a1:b8:95:09:ac:ec:7e: a1:98:09:f0:1b:a5:28:6b:bf:29:94:8d:c1:b2:00: 68:0c:1d:b8:ff:24:74:d1:7f:49:41:d0:da:4e:1d: b9:64:53:69:b6:3c:0b:06:d1:ed:0f:3c:6c:a1:c5: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0B:D5:26:FD:50:3D:D9:6C:74:23:87:CA:88:CF:B5:AC:DB:2D:82 X509v3 Authority Key Identifier: keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/ugvVJv1QPdlsdCOHyojPtazbLYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.39.0/24 217.79.255.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:63:73:13:21:6c:17:ea:5c:db:1a:4b:5a:2e:26:21:63:43: d8:54:c0:fc:5e:6a:8e:bc:79:b6:e2:b3:a6:82:e3:95:c0:57: 30:84:ac:6e:2c:d7:4e:97:30:66:0a:56:2b:66:82:61:82:5d: bb:f9:ee:4c:e7:26:bc:ad:f5:41:6e:b6:8b:09:c5:47:3b:6e: 6f:8e:f9:23:77:65:ad:de:40:1f:0a:58:d6:37:2f:be:33:20: aa:ff:18:71:6f:5b:e7:e5:87:35:9f:5f:f0:e8:09:a8:69:bd: c0:eb:81:01:af:2f:43:77:e7:29:4c:21:ac:c3:62:82:57:be: 6f:d4:35:0e:4e:aa:79:64:2d:47:ca:1e:fe:04:b2:6f:73:ae: 27:56:e3:fa:96:42:27:a3:3a:7c:d2:d0:97:dd:8d:da:57:32: 62:a1:95:ad:b8:72:e5:79:16:46:25:07:8d:36:05:5b:cf:35: e1:ff:85:22:88:91:ef:5f:24:60:4d:62:49:c9:66:80:52:7c: 8d:a2:39:3f:35:58:b5:d0:3a:9f:9b:48:e5:93:1b:86:8c:37: bb:31:c9:46:72:5c:82:d9:03:7d:30:2b:d4:8a:c6:ce:a8:92: 6b:0e:9a:ef:37:c9:9f:d0:3f:c8:03:d1:67:06:4c:c5:1e:3f: e6:03:18:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrpweVlZfWlISnv0P+4w4YCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4 YzY4YzYwHhcNMjUxMjA0MTQyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTBiZDUyNmZkNTAzZGQ5NmM3NDIzODdjYTg4Y2ZiNWFjZGIyZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vEZx0YV+H3ASHIe2JLZ4nbOhuDJ epKy5Ja/DOXY8OvKTBE2pyHWcFXV61N+Kepv7KNWBCw22twWD0nj41aG6nZTMp2n n7Kf6//VAj1HtIjxHKggTHWa755oBansPaPAeVPVyC44UgaVttK+5sJqq0N+n2Ba 41tmVIgTl0LU1LeWGqGWdOS+f57MAxOwMwd50ozwUtuCqbS2hdwXQojFUj3uPUTl Ah1eib3Y2+yGwo6TuMAbw27B60lXzqhqnL5W22SdpgjTfu5yp6G4lQms7H6hmAnw G6Uoa78plI3BsgBoDB24/yR00X9JQdDaTh25ZFNptjwLBtHtDzxsocUMUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLoL1Sb9UD3ZbHQjh8qIz7Ws2y2CMB8GA1UdIwQY MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt MDE1NzdhOTI3ZmE5LzEvdWd2Vkp2MVFQZGxzZENPSHlvalB0YXpiTFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5 LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ4nAwQA 2U//MA0GCSqGSIb3DQEBCwUAA4IBAQB/Y3MTIWwX6lzbGktaLiYhY0PYVMD8XmqO vHm24rOmguOVwFcwhKxuLNdOlzBmClYrZoJhgl27+e5M5ya8rfVBbraLCcVHO25v jvkjd2Wt3kAfCljWNy++MyCq/xhxb1vn5Yc1n1/w6Amoab3A64EBry9Dd+cpTCGs w2KCV75v1DUOTqp5ZC1Hyh7+BLJvc64nVuP6lkInozp80tCX3Y3aVzJioZWtuHLl eRZGJQeNNgVbzzXh/4UiiJHvXyRgTWJJyWaAUnyNojk/NVi10Dqfm0jlkxuGjDe7 MclGclyC2QN9MCvUisbOqJJrDprvN8mf0D/IA9FnBkzFHj/mAxh6 -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:42 2025 by rpki-client