This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uoBIjg2H0yQlxZj6WIyzRMb5PXQ.roa File: uoBIjg2H0yQlxZj6WIyzRMb5PXQ.roa (raw, json) Hash identifier: U3GeKoViIOx2bvD/AmRKvI38kDCgigrBrf54FJJcEn4= Subject key identifier: BA:80:48:8E:0D:87:D3:24:25:C5:98:FA:58:8C:B3:44:C6:F9:3D:74 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B425B2C95E8CBE60A3138872A20B256E6 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uoBIjg2H0yQlxZj6WIyzRMb5PXQ.roa Signing time: Sun 21 Dec 2025 19:20:30 +0000 ROA not before: Sun 21 Dec 2025 19:20:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51396 IP address blocks: 31.40.201.0/24 maxlen: 24 77.83.207.0/24 maxlen: 24 85.208.84.0/24 maxlen: 24 88.214.50.0/24 maxlen: 24 195.216.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:5b:2c:95:e8:cb:e6:0a:31:38:87:2a:20:b2:56:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Dec 21 19:20:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba80488e0d87d32425c598fa588cb344c6f93d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:2c:08:39:aa:a5:88:6d:16:fa:1b:ed:81: 04:a0:c3:1b:45:b0:33:f1:cf:85:34:88:7d:ef:02: 7b:23:8f:36:bb:72:cc:6d:4b:8a:55:c2:42:b5:4d: c4:76:e9:32:97:db:a7:f1:47:a3:fc:93:56:40:77: 3a:50:d0:4b:fc:59:bc:dd:32:31:a0:03:7d:a7:ff: e0:87:09:f5:3c:1f:8d:7b:03:1d:60:50:82:1b:b1: 52:8a:90:97:77:d2:e8:fc:63:05:ce:5a:62:86:cd: 83:ea:4c:2d:8a:17:bf:98:38:78:c8:6c:0d:7e:e4: 53:47:83:05:2a:2f:2a:2f:ba:cb:d4:4b:8d:b2:e2: d5:bd:bd:2a:0f:38:63:d1:38:df:a0:8c:90:74:bc: 81:11:d2:29:66:97:bc:df:24:61:ee:b9:b6:0b:b8: 8a:34:7e:0f:00:13:91:fb:59:30:aa:f4:b6:86:9d: c8:97:f1:b3:d6:02:4e:e4:7c:ed:c2:2f:e0:79:36: 6e:c0:ef:54:52:c1:cf:ad:bb:b3:2f:9f:fb:b9:74: 63:68:3e:b7:1f:ff:2d:d5:0c:f2:04:e0:82:38:4c: 70:9e:0c:c2:67:1f:b4:3a:22:b9:13:45:25:5b:31: ab:9e:be:61:a4:71:af:9e:ee:d3:df:3d:0e:ed:17: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:80:48:8E:0D:87:D3:24:25:C5:98:FA:58:8C:B3:44:C6:F9:3D:74 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uoBIjg2H0yQlxZj6WIyzRMb5PXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.201.0/24 77.83.207.0/24 85.208.84.0/24 88.214.50.0/24 195.216.154.0/24 Signature Algorithm: sha256WithRSAEncryption 27:c4:4d:74:80:eb:74:23:21:b1:1e:33:00:e9:a4:11:ea:89: ac:22:5e:d0:2e:be:7d:ce:5f:59:34:41:d5:d8:77:92:26:5f: 29:7e:41:f2:b6:5d:7e:27:88:74:5b:d7:5c:b1:65:e9:9c:b0: a7:31:9d:e1:af:13:40:b8:09:08:f3:b3:d5:39:9d:4d:1a:bd: 93:f0:ae:8a:fa:a8:f7:51:61:12:df:a3:23:a1:52:78:b5:c2: 32:07:d3:f7:d1:4c:c0:dd:72:21:d3:9b:5b:6e:08:57:5b:42: 97:15:4c:7c:19:18:02:4c:55:ef:dc:2b:3f:b1:7b:fa:83:cb: d4:17:bb:2c:c2:73:8d:8d:d2:9d:d4:7a:41:e2:1c:4a:d9:f4: 8f:21:d4:47:9b:bb:d8:45:92:84:15:f0:4c:2d:ed:fa:70:34: 1b:0a:22:07:70:78:e6:ef:76:59:c4:a9:ad:11:8a:dc:b0:89: 41:df:e8:28:ff:04:cd:4f:03:2e:5e:8e:3f:15:49:98:08:7a: b9:69:0f:78:55:40:64:6e:e8:ed:02:b6:a8:1d:42:fd:4e:20: b2:f2:48:27:9b:a2:17:b8:a3:d9:01:c2:8b:7f:4b:96:74:63: 34:65:a6:cf:3e:4b:e4:78:0d:e5:45:cc:a3:60:59:a9:e3:6f: 17:60:16:7c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZtCWyyV6MvmCjE4hyogslbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMjIxMTkyMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTgwNDg4ZTBkODdkMzI0MjVjNTk4ZmE1ODhjYjM0NGM2ZjkzZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvQsCDmqpYhtFvob7YEEoMMbRbAz 8c+FNIh97wJ7I482u3LMbUuKVcJCtU3Edukyl9un8Uej/JNWQHc6UNBL/Fm83TIx oAN9p//ghwn1PB+NewMdYFCCG7FSipCXd9Lo/GMFzlpihs2D6kwtihe/mDh4yGwN fuRTR4MFKi8qL7rL1EuNsuLVvb0qDzhj0TjfoIyQdLyBEdIpZpe83yRh7rm2C7iK NH4PABOR+1kwqvS2hp3Il/Gz1gJO5Hztwi/geTZuwO9UUsHPrbuzL5/7uXRjaD63 H/8t1QzyBOCCOExwngzCZx+0OiK5E0UlWzGrnr5hpHGvnu7T3z0O7RfUvwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLqASI4Nh9MkJcWY+liMs0TG+T10MB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvdW9CSWpnMkgweVFseFpqNldJeXpSTWI1UFhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHyjJAwQA TVPPAwQAVdBUAwQAWNYyAwQAw9iaMA0GCSqGSIb3DQEBCwUAA4IBAQAnxE10gOt0 IyGxHjMA6aQR6omsIl7QLr59zl9ZNEHV2HeSJl8pfkHytl1+J4h0W9dcsWXpnLCn MZ3hrxNAuAkI87PVOZ1NGr2T8K6K+qj3UWES36MjoVJ4tcIyB9P30UzA3XIh05tb bghXW0KXFUx8GRgCTFXv3Cs/sXv6g8vUF7sswnONjdKd1HpB4hxK2fSPIdRHm7vY RZKEFfBMLe36cDQbCiIHcHjm73ZZxKmtEYrcsIlB3+go/wTNTwMuXo4/FUmYCHq5 aQ94VUBkbujtAraoHUL9TiCy8kgnm6IXuKPZAcKLf0uWdGM0ZabPPkvkeA3lRcyj YFmp428XYBZ8 -----END CERTIFICATE-----Generated at Sun Dec 21 22:44:34 2025 by rpki-client