This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UCCwmYb33XkrhnITyWudLTGr0b8.roa File: UCCwmYb33XkrhnITyWudLTGr0b8.roa (raw, json) Hash identifier: kXME2WaYiTwMQPsld8FYa8tqja50uICTw+o7b0dBkPk= Subject key identifier: 50:20:B0:99:86:F7:DD:79:2B:86:72:13:C9:6B:9D:2D:31:AB:D1:BF Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B3618BF026A212739D30CE3D70D347318 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UCCwmYb33XkrhnITyWudLTGr0b8.roa Signing time: Fri 19 Dec 2025 10:12:29 +0000 ROA not before: Fri 19 Dec 2025 10:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152179 IP address blocks: 212.134.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:18:bf:02:6a:21:27:39:d3:0c:e3:d7:0d:34:73:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 19 10:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5020b09986f7dd792b867213c96b9d2d31abd1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:66:3b:8b:c8:5d:18:e7:b3:46:26:25:b7:da: 97:59:99:cb:53:90:8d:30:8a:43:87:b2:5f:2e:6b: dd:70:2d:4a:d6:9f:9e:d5:ec:df:73:8a:07:68:1d: 19:8e:49:b8:f2:0e:a3:cd:51:ca:0b:49:8e:60:1b: 79:ee:22:77:1e:ca:3c:63:15:83:ef:5d:0c:2f:61: 95:07:1a:82:d3:70:07:1d:30:53:89:8b:84:87:ba: ca:15:3a:10:69:db:e0:2c:ee:1e:db:25:75:3a:a0: 5b:4c:8b:59:37:3f:f8:d9:67:8b:44:dc:ee:b4:98: d1:42:8f:10:7c:7d:b1:21:dc:a3:cb:c0:61:66:6a: 9b:8f:89:83:c0:cc:33:30:60:98:1e:da:ba:50:bd: d7:9b:72:83:92:d0:e0:21:77:44:73:54:d7:bf:f9: 05:50:d9:43:71:e2:fa:e5:c1:cf:22:0d:96:33:40: 25:d3:26:3c:a2:28:a1:f5:1b:b4:22:98:c5:db:c1: 97:5b:1f:ad:f9:40:a2:b0:f4:b5:1f:be:c4:b9:4d: 7a:db:b3:8f:cd:57:15:3d:07:3f:f0:4a:6b:5b:76: 16:c9:c2:98:a1:6b:71:4d:cd:75:8d:0d:9b:0f:91: 70:96:c4:7c:41:52:d8:ee:6a:14:3f:bc:85:4e:59: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:20:B0:99:86:F7:DD:79:2B:86:72:13:C9:6B:9D:2D:31:AB:D1:BF X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UCCwmYb33XkrhnITyWudLTGr0b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.148.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:b0:c3:36:84:12:25:be:47:31:7b:6e:57:01:cd:63:de:6e: 5a:52:3c:7b:9b:3e:83:b6:d4:02:1f:cb:51:8c:3d:f6:a4:4d: 33:8e:b8:f4:fc:0a:79:99:47:14:76:45:e2:c1:e7:22:7b:de: 42:61:ef:5a:a3:aa:57:ef:35:f2:70:4d:83:a5:7a:ea:28:ef: 47:b6:87:01:b2:f0:b0:b7:4b:c2:cd:fb:05:b0:43:0e:ec:37: 87:69:f3:5f:43:5c:80:5e:de:3c:10:54:12:e8:41:4d:52:fc: ee:94:f6:5b:0b:6a:19:02:64:52:c3:22:28:0f:35:2a:9c:de: eb:fa:6f:88:7a:d9:9b:38:8f:d4:f4:d5:40:d4:23:a7:a9:b5: 04:9a:b8:8a:a5:98:95:1d:65:c4:df:be:ea:53:24:5e:53:ee: c4:0e:8e:14:a6:09:f9:8f:bf:a3:44:a4:48:02:70:53:42:a3: c7:f0:9f:23:81:4e:76:a2:b0:5e:e9:99:f8:ec:80:d0:c8:f1: a0:3e:7e:a4:23:f3:e5:7f:3c:70:6c:bf:7a:f2:80:3e:66:65: 21:51:86:f4:16:44:bd:c8:7f:0e:98:88:09:89:12:72:74:a9: 9a:57:f3:5d:e9:7b:3c:e6:91:d3:1f:c9:09:c1:8e:eb:0c:df: ff:9b:da:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs2GL8CaiEnOdMM49cNNHMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjE5MTAxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDIwYjA5OTg2ZjdkZDc5MmI4NjcyMTNjOTZiOWQyZDMxYWJkMWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWY7i8hdGOezRiYlt9qXWZnLU5CN MIpDh7JfLmvdcC1K1p+e1ezfc4oHaB0Zjkm48g6jzVHKC0mOYBt57iJ3Hso8YxWD 710ML2GVBxqC03AHHTBTiYuEh7rKFToQadvgLO4e2yV1OqBbTItZNz/42WeLRNzu tJjRQo8QfH2xIdyjy8BhZmqbj4mDwMwzMGCYHtq6UL3Xm3KDktDgIXdEc1TXv/kF UNlDceL65cHPIg2WM0Al0yY8oiih9Ru0IpjF28GXWx+t+UCisPS1H77EuU1627OP zVcVPQc/8EprW3YWycKYoWtxTc11jQ2bD5FwlsR8QVLY7moUP7yFTlkb3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAgsJmG9915K4ZyE8lrnS0xq9G/MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvVUNDd21ZYjMzWGtyaG5JVHlXdWRMVEdyMGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1IaUMA0G CSqGSIb3DQEBCwUAA4IBAQBMsMM2hBIlvkcxe25XAc1j3m5aUjx7mz6DttQCH8tR jD32pE0zjrj0/Ap5mUcUdkXiwecie95CYe9ao6pX7zXycE2DpXrqKO9HtocBsvCw t0vCzfsFsEMO7DeHafNfQ1yAXt48EFQS6EFNUvzulPZbC2oZAmRSwyIoDzUqnN7r +m+IetmbOI/U9NVA1COnqbUEmriKpZiVHWXE377qUyReU+7EDo4Upgn5j7+jRKRI AnBTQqPH8J8jgU52orBe6Zn47IDQyPGgPn6kI/PlfzxwbL968oA+ZmUhUYb0FkS9 yH8OmIgJiRJydKmaV/Nd6Xs85pHTH8kJwY7rDN//m9o1 -----END CERTIFICATE-----Generated at Fri Dec 19 22:49:27 2025 by rpki-client