This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/UVDGn4DOJgAtHZHqSxCQ5OS9ZOo.roa File: UVDGn4DOJgAtHZHqSxCQ5OS9ZOo.roa (raw, json) Hash identifier: /quTAAUgkfsrgHteruYbWmJi+dc19qcDoRKCgA5rNPI= Subject key identifier: 51:50:C6:9F:80:CE:26:00:2D:1D:91:EA:4B:10:90:E4:E4:BD:64:EA Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B2190B33CA276365B841BC0CDEC6DCA01 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/UVDGn4DOJgAtHZHqSxCQ5OS9ZOo.roa Signing time: Mon 15 Dec 2025 10:31:29 +0000 ROA not before: Mon 15 Dec 2025 10:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204610 IP address blocks: 138.249.14.0/24 maxlen: 24 138.249.15.0/24 maxlen: 24 138.249.22.0/24 maxlen: 24 138.249.23.0/24 maxlen: 24 138.249.104.0/24 maxlen: 24 138.249.105.0/24 maxlen: 24 138.249.106.0/24 maxlen: 24 138.249.107.0/24 maxlen: 24 138.249.108.0/24 maxlen: 24 138.249.109.0/24 maxlen: 24 138.249.110.0/24 maxlen: 24 138.249.111.0/24 maxlen: 24 138.249.113.0/24 maxlen: 24 170.168.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:90:b3:3c:a2:76:36:5b:84:1b:c0:cd:ec:6d:ca:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 15 10:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5150c69f80ce26002d1d91ea4b1090e4e4bd64ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:e3:58:fd:17:e0:b9:2f:e4:11:f8:57:8a: 57:d4:60:10:e9:c8:d5:39:00:8f:ae:6e:31:4d:e5: d0:5a:bb:93:de:e2:0d:5d:bc:cc:bc:4a:1f:c5:a2: 76:1a:46:bd:9e:e9:ed:47:22:d5:b7:a8:93:c6:94: 6d:41:e1:16:56:cf:39:06:d7:2b:fe:bc:e9:04:67: da:03:0c:ee:d1:20:ee:83:4f:19:a2:7d:84:1b:f5: 21:00:85:e9:84:ee:73:32:94:b6:5b:21:cb:91:62: cf:63:e9:d7:09:37:88:90:f0:74:be:54:a2:6f:d8: 7a:ff:d4:0f:ee:f2:bd:17:f9:d4:ef:de:ce:d4:3d: 29:8e:4b:03:69:e1:46:8d:8c:ba:52:6e:87:d3:eb: b4:98:0e:5e:91:dd:76:f7:1c:d7:ae:12:4d:ab:d9: 7f:c5:3d:6a:a3:19:1c:67:8b:8d:6a:c7:99:11:e2: 24:39:38:63:c9:11:fb:9d:d8:ae:e1:4b:50:98:c8: 0e:63:5c:60:29:12:a9:e3:2f:c5:4d:51:b6:d8:c5: 6a:d1:fd:ee:ee:95:88:69:98:aa:5b:29:85:0a:4f: 55:cd:20:18:45:06:19:b9:59:d3:54:f7:96:f9:fa: 1d:4b:0f:9d:64:f4:a6:82:ee:55:27:7a:9e:40:e6: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:50:C6:9F:80:CE:26:00:2D:1D:91:EA:4B:10:90:E4:E4:BD:64:EA X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/UVDGn4DOJgAtHZHqSxCQ5OS9ZOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.14.0/23 138.249.22.0/23 138.249.104.0/21 138.249.113.0/24 170.168.88.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:03:eb:35:55:45:b5:7e:2d:91:5d:08:0f:a6:7d:e5:89:b2: 76:42:b5:bb:31:92:aa:da:07:6c:5a:73:2d:d0:12:e7:82:de: b4:39:73:35:2d:be:5a:07:69:77:ec:36:64:12:9d:6e:48:fb: e3:68:f1:0c:58:c1:73:16:66:09:9f:76:9c:fb:2c:45:cc:66: 63:dc:4a:e2:14:b5:5b:73:0e:a9:18:e5:9e:cc:40:44:8c:af: dc:4d:26:df:97:30:da:b2:b9:d3:ee:17:15:37:82:ed:64:06: 11:a0:57:15:be:d3:c6:9d:cb:05:fe:e0:69:90:a5:10:1b:26: 54:fb:84:5a:b7:90:88:91:4a:c4:9d:04:1d:a6:c4:99:ec:ad: 38:b4:9d:d4:06:a3:2b:31:82:0b:10:46:e3:6e:25:85:fa:b0: 77:d8:64:15:17:e0:66:7e:2d:30:96:3d:b6:b0:40:90:2f:d7: 8e:4f:cd:24:8f:39:47:af:48:aa:d2:55:28:94:d0:d5:1f:f0: 3c:30:5d:1f:ae:ff:9a:cd:77:db:6a:48:e0:e0:07:b4:ff:4d: 08:f9:e2:05:b8:31:a6:fc:c9:9d:f9:ee:8d:f9:a1:bf:0f:9c: 7f:ab:90:61:81:72:a7:b1:b5:39:45:6e:c3:f9:a4:f3:42:7e: 5d:aa:3c:cf -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZshkLM8onY2W4QbwM3sbcoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjE1MTAzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTUwYzY5ZjgwY2UyNjAwMmQxZDkxZWE0YjEwOTBlNGU0YmQ2NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimXjWP0X4Lkv5BH4V4pX1GAQ6cjV OQCPrm4xTeXQWruT3uINXbzMvEofxaJ2Gka9nuntRyLVt6iTxpRtQeEWVs85Btcr /rzpBGfaAwzu0SDug08Zon2EG/UhAIXphO5zMpS2WyHLkWLPY+nXCTeIkPB0vlSi b9h6/9QP7vK9F/nU797O1D0pjksDaeFGjYy6Um6H0+u0mA5ekd129xzXrhJNq9l/ xT1qoxkcZ4uNaseZEeIkOThjyRH7ndiu4UtQmMgOY1xgKRKp4y/FTVG22MVq0f3u 7pWIaZiqWymFCk9VzSAYRQYZuVnTVPeW+fodSw+dZPSmgu5VJ3qeQOYy/wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFFQxp+AziYALR2R6ksQkOTkvWTqMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvVVZER240RE9KZ0F0SFpIcVN4Q1E1T1M5Wk9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBivkOAwQB ivkWAwQDivloAwQAivlxAwQAqqhYMA0GCSqGSIb3DQEBCwUAA4IBAQBqA+s1VUW1 fi2RXQgPpn3libJ2QrW7MZKq2gdsWnMt0BLngt60OXM1Lb5aB2l37DZkEp1uSPvj aPEMWMFzFmYJn3ac+yxFzGZj3EriFLVbcw6pGOWezEBEjK/cTSbflzDasrnT7hcV N4LtZAYRoFcVvtPGncsF/uBpkKUQGyZU+4Rat5CIkUrEnQQdpsSZ7K04tJ3UBqMr MYILEEbjbiWF+rB32GQVF+Bmfi0wlj22sECQL9eOT80kjzlHr0iq0lUolNDVH/A8 MF0frv+azXfbakjg4Ae0/00I+eIFuDGm/Mmd+e6N+aG/D5x/q5BhgXKnsbU5RW7D +aTzQn5dqjzP -----END CERTIFICATE-----Generated at Thu Dec 18 20:16:05 2025 by rpki-client