This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/uXrBd9STFbzQ7RbY_QhW1DASaQM.roa File: uXrBd9STFbzQ7RbY_QhW1DASaQM.roa (raw, json) Hash identifier: JPg9whwqcXD7TUzimVhwfL+E/nwy9N2IPDLnzW5mDFI= Subject key identifier: B9:7A:C1:77:D4:93:15:BC:D0:ED:16:D8:FD:08:56:D4:30:12:69:03 Certificate issuer: /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Certificate serial: 019B31536CA48C14FBFA4744070C90AC7340 Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/uXrBd9STFbzQ7RbY_QhW1DASaQM.roa Signing time: Thu 18 Dec 2025 11:58:29 +0000 ROA not before: Thu 18 Dec 2025 11:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203619 IP address blocks: 89.124.253.0/24 maxlen: 24 2a03:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:53:6c:a4:8c:14:fb:fa:47:44:07:0c:90:ac:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Validity Not Before: Dec 18 11:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b97ac177d49315bcd0ed16d8fd0856d430126903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:4a:3e:5b:48:e7:45:bf:f4:77:9c:a6:0a: 74:8b:cf:05:bf:57:9c:1a:99:77:e4:f0:48:a8:ea: ab:37:9f:1e:d1:3b:99:10:21:d4:62:3e:85:20:f8: 60:67:75:c2:42:81:d1:bb:ac:7f:fc:58:f9:23:4a: 13:98:e5:28:d9:a2:20:9a:aa:1a:53:86:38:cc:88: e4:58:55:e0:97:e3:0b:2d:c6:31:75:fd:64:4d:5d: d4:e6:bb:38:63:bf:91:19:97:27:47:e4:87:7e:48: 2d:b2:24:37:6b:32:7b:13:49:65:c9:4f:39:9b:84: cb:20:7e:32:7b:7e:da:1f:13:fd:44:ba:be:fc:b2: 86:7d:c2:e0:06:d2:77:61:2e:44:c0:d1:78:d7:fa: 87:ab:7d:da:9b:b2:37:c5:45:dc:0b:0d:da:39:d4: b3:22:82:e2:f9:ed:54:7c:65:fb:47:f2:e1:3f:ff: 73:6b:ef:49:63:0f:1b:80:1a:b1:aa:e2:12:33:f7: a4:d7:81:52:62:b7:44:57:e9:69:ea:8e:1f:c6:38: 92:b1:f1:48:04:7b:04:37:ec:fa:f8:58:bb:11:98: ae:d6:d2:87:26:60:c7:f1:3e:1b:69:74:89:9c:4f: 8c:7a:b1:d0:89:1f:77:2e:8c:2c:91:62:d0:3f:e6: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7A:C1:77:D4:93:15:BC:D0:ED:16:D8:FD:08:56:D4:30:12:69:03 X509v3 Authority Key Identifier: keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/uXrBd9STFbzQ7RbY_QhW1DASaQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.124.253.0/24 IPv6: 2a03:c040::/48 Signature Algorithm: sha256WithRSAEncryption 53:e7:e9:6d:5b:2c:82:70:15:9c:80:12:f8:4e:71:56:a7:7f: 81:36:9a:75:14:37:d3:ca:29:8e:ff:42:94:57:7b:7b:87:94: 21:1e:11:b0:da:5e:9b:e3:d3:2c:74:10:c9:17:9c:73:72:2b: f9:75:08:ee:b9:41:b7:22:a4:41:d4:3f:3b:34:ae:15:c4:bb: a8:7a:6d:29:07:2b:19:4a:76:c7:60:b6:f1:ac:24:1d:fb:00: 0c:58:02:ca:c5:cb:11:6b:7b:29:04:27:3e:b3:c9:4e:74:39: ac:5d:f9:28:f6:98:e0:2b:7a:6c:85:ed:f0:05:08:43:4a:f9: 27:d1:d5:00:30:b8:fe:c6:1e:b2:a4:78:16:d9:1f:2c:41:cf: d2:b8:3c:e5:7c:0a:6a:ae:5d:70:46:e1:aa:16:fc:1a:e5:b9: 36:64:3a:18:f9:2e:80:6f:b9:98:4c:c3:e1:11:d4:e5:9d:61: 24:68:3c:03:48:0d:b6:c8:25:3f:94:0c:3f:50:b3:e1:fb:4e: 47:27:db:ce:49:07:c2:8b:4c:e2:c4:85:85:41:ea:13:cb:57: 3d:45:80:d7:9e:85:67:6b:0b:1a:08:aa:23:bf:01:74:e6:e0: 93:22:8a:89:79:27:2c:2f:c7:b5:ad:ad:f9:b7:20:71:33:8c: 69:00:d2:49 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZsxU2ykjBT7+kdEBwyQrHNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWM0NWZmYTRhMzEyNDYwYzAwZmZlZGUzMmQ0ZGM0MWZk MmY3Y2YwHhcNMjUxMjE4MTE1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTdhYzE3N2Q0OTMxNWJjZDBlZDE2ZDhmZDA4NTZkNDMwMTI2OTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopRKPltI50W/9Hecpgp0i88Fv1ec Gpl35PBIqOqrN58e0TuZECHUYj6FIPhgZ3XCQoHRu6x//Fj5I0oTmOUo2aIgmqoa U4Y4zIjkWFXgl+MLLcYxdf1kTV3U5rs4Y7+RGZcnR+SHfkgtsiQ3azJ7E0llyU85 m4TLIH4ye37aHxP9RLq+/LKGfcLgBtJ3YS5EwNF41/qHq33am7I3xUXcCw3aOdSz IoLi+e1UfGX7R/LhP/9za+9JYw8bgBqxquISM/ek14FSYrdEV+lp6o4fxjiSsfFI BHsEN+z6+Fi7EZiu1tKHJmDH8T4baXSJnE+MerHQiR93LowskWLQP+bUSQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLl6wXfUkxW80O0W2P0IVtQwEmkDMB8GA1UdIwQY MBaAFMJcRf+koxJGDAD/7eMtTcQf0vfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAt NzAxOWJkYmIxMTc3LzEvdVhyQmQ5U1RGYnpRN1JiWV9RaFcxREFTYVFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAtNzAxOWJkYmIxMTc3 LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWXz9MA8E AgACMAkDBwAqA8BAAAAwDQYJKoZIhvcNAQELBQADggEBAFPn6W1bLIJwFZyAEvhO cVanf4E2mnUUN9PKKY7/QpRXe3uHlCEeEbDaXpvj0yx0EMkXnHNyK/l1CO65Qbci pEHUPzs0rhXEu6h6bSkHKxlKdsdgtvGsJB37AAxYAsrFyxFreykEJz6zyU50Oaxd +Sj2mOAremyF7fAFCENK+SfR1QAwuP7GHrKkeBbZHyxBz9K4POV8CmquXXBG4aoW /BrluTZkOhj5LoBvuZhMw+ER1OWdYSRoPANIDbbIJT+UDD9Qs+H7Tkcn285JB8KL TOLEhYVB6hPLVz1FgNeehWdrCxoIqiO/AXTm4JMiiol5Jywvx7Wtrfm3IHEzjGkA 0kk= -----END CERTIFICATE-----Generated at Mon Dec 22 17:05:21 2025 by rpki-client