This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UmEemQl8rAjTM6T7Y05VjxnS-OQ.roa File: UmEemQl8rAjTM6T7Y05VjxnS-OQ.roa (raw, json) Hash identifier: isFG1tth0W+ccE2OO+PPUeDXRaf/f48mrAZW45p56pU= Subject key identifier: 52:61:1E:99:09:7C:AC:08:D3:33:A4:FB:63:4E:55:8F:19:D2:F8:E4 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B046CFC351C4AC06F1CA2319952437204 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UmEemQl8rAjTM6T7Y05VjxnS-OQ.roa Signing time: Tue 09 Dec 2025 18:43:29 +0000 ROA not before: Tue 09 Dec 2025 18:43:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 77.81.88.0/24 maxlen: 24 77.81.100.0/24 maxlen: 24 86.105.4.0/24 maxlen: 24 86.107.51.0/24 maxlen: 24 89.35.73.0/24 maxlen: 24 89.37.194.0/24 maxlen: 24 89.43.62.0/24 maxlen: 24 89.45.162.0/24 maxlen: 24 91.132.51.0/24 maxlen: 24 93.90.75.0/24 maxlen: 24 93.115.105.0/24 maxlen: 24 188.241.137.0/24 maxlen: 24 194.135.18.0/24 maxlen: 24 212.192.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:6c:fc:35:1c:4a:c0:6f:1c:a2:31:99:52:43:72:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 9 18:43:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=52611e99097cac08d333a4fb634e558f19d2f8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ab:8f:d4:c5:ed:a4:09:2a:c3:5c:f3:b5:57: 37:5d:ab:dd:c2:97:d1:92:30:22:6e:27:18:dc:7f: 8f:7d:32:2a:3f:c0:74:2f:b5:52:30:e2:05:5f:92: 2f:a2:19:b8:59:cf:3a:c8:0d:b2:ff:fd:18:ec:0e: 5e:af:8c:5b:90:b7:94:f3:b6:95:3b:30:e6:d2:6f: 18:84:02:e1:0b:24:69:7d:df:a3:a9:89:fa:4c:51: ce:93:54:3c:52:9b:9b:4e:13:ad:83:6d:bb:02:f7: 53:7b:50:b8:3f:25:c8:cb:25:e4:c3:6e:9d:c2:4f: 17:12:36:67:8e:f7:dd:5a:d5:43:77:e7:e5:b6:2d: 8d:cf:44:e9:8e:fc:a7:c5:cf:0e:81:79:44:4e:a7: f0:ce:19:a4:8a:c0:6d:ee:c6:db:6c:ca:fd:34:3c: 40:5c:78:ff:3f:ca:6a:06:88:87:62:6a:83:ef:59: 11:29:e4:4a:d3:43:60:b9:d6:8e:4e:48:cc:3b:45: 60:b6:c1:29:b0:3a:81:23:4d:ef:22:c9:c9:e7:81: ee:a2:fd:72:ba:09:f1:27:d1:b6:91:2e:5e:30:cf: d5:c9:24:c3:aa:b5:71:86:ce:c7:3c:8f:3b:c1:fc: 87:f1:9a:c7:4e:ac:d2:21:57:fe:61:8b:09:21:d3: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:61:1E:99:09:7C:AC:08:D3:33:A4:FB:63:4E:55:8F:19:D2:F8:E4 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UmEemQl8rAjTM6T7Y05VjxnS-OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.88.0/24 77.81.100.0/24 86.105.4.0/24 86.107.51.0/24 89.35.73.0/24 89.37.194.0/24 89.43.62.0/24 89.45.162.0/24 91.132.51.0/24 93.90.75.0/24 93.115.105.0/24 188.241.137.0/24 194.135.18.0/24 212.192.5.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:08:41:63:62:f9:29:f0:ab:74:de:a8:5d:9b:2b:2e:2c:c9: 7c:bc:24:71:12:48:d5:b6:9a:77:00:4f:66:34:fe:3f:a4:a8: 11:3b:7f:8e:12:10:f8:ee:cf:5e:c4:56:88:76:21:d2:7d:fd: 6d:99:e8:e5:e8:77:bf:46:0a:42:02:f7:fd:6f:2a:79:85:e1: e8:e4:6f:62:f8:f3:6b:3a:2e:d0:9a:0c:61:3b:10:c8:9e:fb: 70:0d:0a:1e:00:66:aa:cb:ee:1a:cc:87:5e:9a:21:e3:7e:37: e5:a0:4b:84:22:5b:53:2a:e2:34:eb:50:3c:1b:e4:ac:02:44: dd:2d:de:a4:04:f3:9a:1a:7f:67:3b:34:e6:b5:f9:d3:f2:cc: 3a:72:3f:43:ab:af:5b:85:70:3d:46:34:a6:f0:f9:78:e5:a0: e7:f9:ac:f5:3d:bb:9d:42:b2:4d:59:db:1a:f9:ec:5b:40:9b: 9b:98:be:4f:3e:e7:a4:24:c7:68:e3:01:c8:2d:02:15:de:23: 18:20:d8:67:74:e3:45:89:76:a4:b5:c3:9a:49:43:ab:c8:23: 37:cf:d6:7e:76:8d:18:6e:f0:5f:b1:3e:bf:8a:f5:b6:ca:2a: 91:51:a5:fa:0e:9a:8f:36:3b:a4:4a:bd:b7:56:0b:9c:74:9c: c4:17:c1:07 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZsEbPw1HErAbxyiMZlSQ3IEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjA5MTg0MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjYxMWU5OTA5N2NhYzA4ZDMzM2E0ZmI2MzRlNTU4ZjE5ZDJmOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKuP1MXtpAkqw1zztVc3XavdwpfR kjAibicY3H+PfTIqP8B0L7VSMOIFX5Ivohm4Wc86yA2y//0Y7A5er4xbkLeU87aV OzDm0m8YhALhCyRpfd+jqYn6TFHOk1Q8UpubThOtg227AvdTe1C4PyXIyyXkw26d wk8XEjZnjvfdWtVDd+flti2Nz0Tpjvynxc8OgXlETqfwzhmkisBt7sbbbMr9NDxA XHj/P8pqBoiHYmqD71kRKeRK00NgudaOTkjMO0VgtsEpsDqBI03vIsnJ54Huov1y ugnxJ9G2kS5eMM/VySTDqrVxhs7HPI87wfyH8ZrHTqzSIVf+YYsJIdOYBQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFFJhHpkJfKwI0zOk+2NOVY8Z0vjkMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvVW1FZW1RbDhyQWpUTTZUN1kwNVZqeG5TLU9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQATVFYAwQA TVFkAwQAVmkEAwQAVmszAwQAWSNJAwQAWSXCAwQAWSs+AwQAWS2iAwQAW4QzAwQA XVpLAwQAXXNpAwQAvPGJAwQAwocSAwQA1MAFMA0GCSqGSIb3DQEBCwUAA4IBAQAa CEFjYvkp8Kt03qhdmysuLMl8vCRxEkjVtpp3AE9mNP4/pKgRO3+OEhD47s9exFaI diHSff1tmejl6He/RgpCAvf9byp5heHo5G9i+PNrOi7QmgxhOxDInvtwDQoeAGaq y+4azIdemiHjfjfloEuEIltTKuI061A8G+SsAkTdLd6kBPOaGn9nOzTmtfnT8sw6 cj9Dq69bhXA9RjSm8Pl45aDn+az1PbudQrJNWdsa+exbQJubmL5PPuekJMdo4wHI LQIV3iMYINhndONFiXaktcOaSUOryCM3z9Z+do0YbvBfsT6/ivW2yiqRUaX6DpqP NjukSr23VgucdJzEF8EH -----END CERTIFICATE-----Generated at Fri Dec 19 10:17:19 2025 by rpki-client