This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/k__UhnPKWcjHuJiJic_hiOzOOL4.roa File: k__UhnPKWcjHuJiJic_hiOzOOL4.roa (raw, json) Hash identifier: lnfFRBzAMUiKh2QArhufVYpsAWn1dH06S8OGOg5j/0Y= Subject key identifier: 93:FF:D4:86:73:CA:59:C8:C7:B8:98:89:89:CF:E1:88:EC:CE:38:BE Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435 Certificate serial: 019B166DBEC405489D1C21008E1F36CB614E Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/k__UhnPKWcjHuJiJic_hiOzOOL4.roa Signing time: Sat 13 Dec 2025 06:37:29 +0000 ROA not before: Sat 13 Dec 2025 06:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205619 IP address blocks: 185.211.192.0/22 maxlen: 24 2a0b:69c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:6d:be:c4:05:48:9d:1c:21:00:8e:1f:36:cb:61:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435 Validity Not Before: Dec 13 06:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=93ffd48673ca59c8c7b8988989cfe188ecce38be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1e:8e:c3:10:3d:4a:0a:f8:ec:a3:7e:78:f7: 9b:91:7d:15:f7:e3:a0:a5:91:87:ab:33:91:f8:ac: 58:a7:b3:a2:92:57:d0:ee:0d:7f:89:d8:8b:e8:42: 81:8b:f2:13:07:d6:9a:16:f8:13:4a:c9:ca:17:7a: 6f:7c:d0:9d:6e:c6:a3:40:17:0c:d6:10:d7:bc:10: 23:10:ba:f0:5b:b3:54:51:ed:ff:7b:15:b8:5f:6a: 9e:84:05:f2:de:f0:33:dd:67:ac:6c:46:66:e2:93: 58:2b:4a:8e:11:74:b9:62:b2:45:67:6b:a8:0f:d8: a6:b7:17:cb:e4:9f:c6:18:34:d0:c8:f7:a7:40:51: 52:a4:bd:4b:47:05:ab:7a:46:7e:8b:ee:1d:00:c3: 32:0e:fd:9d:39:8b:d7:d3:6c:c0:4c:ae:79:dd:5f: b9:88:10:78:0a:8f:f0:95:2d:11:73:f7:5a:05:16: 51:b1:4a:23:c2:3c:1c:2b:82:b8:21:84:10:f5:74: 50:e7:3f:e9:90:96:56:a0:15:e0:b7:b9:c1:ee:41: 5a:49:18:73:1a:d5:16:30:05:05:91:a7:c6:10:6b: fe:91:c4:33:69:a9:d4:1c:18:f3:8e:f0:98:74:3a: 93:64:15:c7:93:40:ce:81:04:ba:ea:f4:74:1d:81: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FF:D4:86:73:CA:59:C8:C7:B8:98:89:89:CF:E1:88:EC:CE:38:BE X509v3 Authority Key Identifier: keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/k__UhnPKWcjHuJiJic_hiOzOOL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.192.0/22 IPv6: 2a0b:69c0::/29 Signature Algorithm: sha256WithRSAEncryption 7a:b6:b0:91:70:78:a2:53:81:3b:29:c5:7f:c2:14:00:00:76: 0d:c5:db:5f:ef:48:95:43:ed:d9:d9:3e:a4:67:14:7a:44:1d: 83:ae:71:67:32:89:a9:b2:4b:1e:89:be:83:a0:1d:b8:4c:61: f0:a9:bd:60:51:fa:3a:d8:1d:21:f8:20:e0:2e:8e:75:dd:9d: 53:16:a9:c4:9d:3b:6c:4c:eb:98:42:77:2c:59:19:fc:02:13: 7b:40:51:9a:07:f0:1f:46:97:e7:c4:1c:0b:60:f6:b5:6e:36: 6e:d3:af:95:8c:5e:89:5f:2a:46:2b:ad:a0:d2:68:bb:4a:9b: 6a:8c:a7:30:8a:93:d9:3d:dd:f8:21:11:6f:91:7b:7e:0a:5c: ba:74:ca:8f:24:1d:fc:8d:96:b2:19:0b:1b:16:32:fd:bf:75: 6b:80:d8:55:bf:f9:15:6b:cf:6c:81:cc:9b:21:ec:12:4b:ac: ef:2d:cd:ec:50:98:f2:89:6a:49:c4:a7:6c:1d:15:22:81:2d: 9e:70:0d:3f:93:68:04:4f:10:46:d3:9d:07:49:ce:1d:09:0d: b0:47:66:35:23:3b:9c:f2:55:f0:f2:73:b5:8f:a0:c9:2c:e5: ff:d9:50:de:b7:df:4b:78:c6:51:b8:dd:79:ad:55:35:61:01: 07:64:2e:fe -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsWbb7EBUidHCEAjh82y2FOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3 YjE0MzUwHhcNMjUxMjEzMDYzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2ZmZDQ4NjczY2E1OWM4YzdiODk4ODk4OWNmZTE4OGVjY2UzOGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B6OwxA9Sgr47KN+ePebkX0V9+Og pZGHqzOR+KxYp7OiklfQ7g1/idiL6EKBi/ITB9aaFvgTSsnKF3pvfNCdbsajQBcM 1hDXvBAjELrwW7NUUe3/exW4X2qehAXy3vAz3WesbEZm4pNYK0qOEXS5YrJFZ2uo D9imtxfL5J/GGDTQyPenQFFSpL1LRwWrekZ+i+4dAMMyDv2dOYvX02zATK553V+5 iBB4Co/wlS0Rc/daBRZRsUojwjwcK4K4IYQQ9XRQ5z/pkJZWoBXgt7nB7kFaSRhz GtUWMAUFkafGEGv+kcQzaanUHBjzjvCYdDqTZBXHk0DOgQS66vR0HYGsVwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJP/1IZzylnIx7iYiYnP4Yjszji+MB8GA1UdIwQY MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt YTQ3Njk1MTQxYTliLzEva19fVWhuUEtXY2pIdUppSmljX2hpT3pPT0w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudPAMA0E AgACMAcDBQMqC2nAMA0GCSqGSIb3DQEBCwUAA4IBAQB6trCRcHiiU4E7KcV/whQA AHYNxdtf70iVQ+3Z2T6kZxR6RB2DrnFnMompskseib6DoB24TGHwqb1gUfo62B0h +CDgLo513Z1TFqnEnTtsTOuYQncsWRn8AhN7QFGaB/AfRpfnxBwLYPa1bjZu06+V jF6JXypGK62g0mi7SptqjKcwipPZPd34IRFvkXt+Cly6dMqPJB38jZayGQsbFjL9 v3VrgNhVv/kVa89sgcybIewSS6zvLc3sUJjyiWpJxKdsHRUigS2ecA0/k2gETxBG 050HSc4dCQ2wR2Y1Izuc8lXw8nO1j6DJLOX/2VDet99LeMZRuN15rVU1YQEHZC7+ -----END CERTIFICATE-----Generated at Tue Dec 16 14:06:32 2025 by rpki-client