This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rUHFKc-UpQvF8QAKmy9icJ5uskc.roa File: rUHFKc-UpQvF8QAKmy9icJ5uskc.roa (raw, json) Hash identifier: BAMbBszT0ZtdFrZy1dVbYcIxkMhLVaboYy5wjVswY0Q= Subject key identifier: AD:41:C5:29:CF:94:A5:0B:C5:F1:00:0A:9B:2F:62:70:9E:6E:B2:47 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B2BBB8C8F0839CE333C5276FF8C5537BB Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rUHFKc-UpQvF8QAKmy9icJ5uskc.roa Signing time: Wed 17 Dec 2025 09:54:30 +0000 ROA not before: Wed 17 Dec 2025 09:54:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42216 IP address blocks: 31.210.47.0/24 maxlen: 24 77.92.142.0/24 maxlen: 24 77.92.143.0/24 maxlen: 24 77.92.152.0/24 maxlen: 24 78.135.67.0/24 maxlen: 24 78.135.74.0/24 maxlen: 24 78.135.86.0/24 maxlen: 24 78.135.89.0/24 maxlen: 24 78.135.98.0/24 maxlen: 24 185.17.136.0/24 maxlen: 24 188.132.214.0/24 maxlen: 24 188.132.215.0/24 maxlen: 24 188.132.218.0/24 maxlen: 24 188.132.228.0/24 maxlen: 24 2a10:9440::/48 maxlen: 48 2a10:9440:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:bb:8c:8f:08:39:ce:33:3c:52:76:ff:8c:55:37:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 17 09:54:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ad41c529cf94a50bc5f1000a9b2f62709e6eb247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:04:4a:2a:a6:74:97:7e:bb:c7:0f:fb:3a: fe:20:52:85:00:da:dc:76:f8:2c:0a:2c:39:32:89: 7b:4f:ef:b1:7c:27:52:a0:2d:3c:b9:3c:45:7b:d6: 48:89:84:48:65:ed:85:a4:4f:64:08:01:6e:f9:08: 0c:b8:24:fd:93:64:9e:f9:85:9b:31:07:8b:f5:6b: f8:71:ff:b8:fd:c1:28:6c:c9:9a:aa:18:d3:66:30: 16:4d:16:e7:42:68:48:83:ba:da:50:63:64:e0:95: 6b:d0:f8:dc:00:0d:e4:b2:8f:c1:72:f5:bf:10:95: b8:2d:e6:57:45:03:43:91:99:8e:ff:c5:b5:92:be: 40:60:e9:70:ee:f0:4d:b2:96:ae:dc:b2:07:fd:f2: 84:2c:b9:de:0e:23:b8:3e:a0:d6:89:80:48:d9:9c: 28:04:38:11:b0:27:c3:a4:56:e5:d3:d9:4a:fd:9b: 9a:2c:31:53:db:68:ff:7d:a2:62:15:24:f3:79:69: 19:a2:c3:83:2e:4a:a5:93:67:08:35:27:19:a4:20: ac:79:ab:a0:91:c4:b8:f1:86:82:6b:27:fb:fa:43: fb:dd:de:4d:2a:64:1e:3a:61:e7:0e:9c:e2:1b:05: df:48:89:b9:89:12:96:cd:6e:ad:33:d3:6a:6a:9d: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:41:C5:29:CF:94:A5:0B:C5:F1:00:0A:9B:2F:62:70:9E:6E:B2:47 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rUHFKc-UpQvF8QAKmy9icJ5uskc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.47.0/24 77.92.142.0/23 77.92.152.0/24 78.135.67.0/24 78.135.74.0/24 78.135.86.0/24 78.135.89.0/24 78.135.98.0/24 185.17.136.0/24 188.132.214.0/23 188.132.218.0/24 188.132.228.0/24 IPv6: 2a10:9440::/47 Signature Algorithm: sha256WithRSAEncryption 38:86:8d:99:d4:8c:3a:e8:a2:60:60:34:dd:6f:52:f3:c7:ea: 79:06:ef:dc:5a:60:bd:dc:cd:6f:e1:ef:48:81:24:02:3c:d5: 68:65:e1:8a:d3:17:af:f2:ef:57:8a:ed:59:cc:bb:53:1b:90: 6e:37:6d:1e:bd:c6:28:0d:14:12:cf:8e:87:8e:97:98:3c:70: db:cb:84:ef:b5:c9:5e:86:e8:c8:60:92:6d:13:c4:f7:15:5c: 12:36:76:ea:1f:01:84:08:38:34:c2:fe:3b:bd:bb:09:ee:1c: ea:7f:53:5c:14:df:db:24:c8:36:60:67:43:f7:24:a1:55:d0: ae:27:1c:f9:b3:10:09:9a:2a:ad:59:3b:66:db:5d:5b:31:ef: 40:a8:d3:58:a4:bc:82:ef:c5:39:c1:b0:8c:99:e9:db:60:36: 7b:a1:f4:00:e0:56:81:01:18:bf:6f:2f:23:fb:8b:8e:53:81: 2c:c7:94:d4:87:44:f2:3e:75:34:b0:0e:82:9c:56:28:64:97: 46:36:71:77:57:9a:0e:a3:7f:58:32:c2:57:50:79:68:56:ae: f1:fc:c1:e9:80:16:3f:3f:72:51:de:a7:e5:0c:3a:9c:f4:f1: 1b:5a:a7:13:1d:b7:08:57:ca:45:1c:b7:5a:dc:ac:9f:a0:94: cb:c9:c0:2f -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZsru4yPCDnOMzxSdv+MVTe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjE3MDk1NDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDQxYzUyOWNmOTRhNTBiYzVmMTAwMGE5YjJmNjI3MDllNmViMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcQESiqmdJd+u8cP+zr+IFKFANrc dvgsCiw5Mol7T++xfCdSoC08uTxFe9ZIiYRIZe2FpE9kCAFu+QgMuCT9k2Se+YWb MQeL9Wv4cf+4/cEobMmaqhjTZjAWTRbnQmhIg7raUGNk4JVr0PjcAA3kso/BcvW/ EJW4LeZXRQNDkZmO/8W1kr5AYOlw7vBNspau3LIH/fKELLneDiO4PqDWiYBI2Zwo BDgRsCfDpFbl09lK/ZuaLDFT22j/faJiFSTzeWkZosODLkqlk2cINScZpCCseaug kcS48YaCayf7+kP73d5NKmQeOmHnDpziGwXfSIm5iRKWzW6tM9Nqap0/ZQIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFK1BxSnPlKULxfEACpsvYnCebrJHMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvclVIRktjLVVwUXZGOFFBS215OWljSjV1c2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBOBAIAATBIAwQAH9IvAwQB TVyOAwQATVyYAwQATodDAwQATodKAwQATodWAwQATodZAwQATodiAwQAuRGIAwQB vITWAwQAvITaAwQAvITkMA8EAgACMAkDBwEqEJRAAAAwDQYJKoZIhvcNAQELBQAD ggEBADiGjZnUjDroomBgNN1vUvPH6nkG79xaYL3czW/h70iBJAI81Whl4YrTF6/y 71eK7VnMu1MbkG43bR69xigNFBLPjoeOl5g8cNvLhO+1yV6G6Mhgkm0TxPcVXBI2 duofAYQIODTC/ju9uwnuHOp/U1wU39skyDZgZ0P3JKFV0K4nHPmzEAmaKq1ZO2bb XVsx70Co01ikvILvxTnBsIyZ6dtgNnuh9ADgVoEBGL9vLyP7i45TgSzHlNSHRPI+ dTSwDoKcVihkl0Y2cXdXmg6jf1gywldQeWhWrvH8wemAFj8/clHep+UMOpz08Rta pxMdtwhXykUct1rcrJ+glMvJwC8= -----END CERTIFICATE-----Generated at Sat Dec 20 02:00:21 2025 by rpki-client