This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/_UFDQsYuJSEcCDvjcWsodPkMbY4.roa File: _UFDQsYuJSEcCDvjcWsodPkMbY4.roa (raw, json) Hash identifier: Fu58cSOnhbOzYxt0wFUKQfE4oaQE1cv4fSwJOo45QWQ= Subject key identifier: FD:41:43:42:C6:2E:25:21:1C:08:3B:E3:71:6B:28:74:F9:0C:6D:8E Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B2E7B95D1647633066E626E893ECE5CB8 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/_UFDQsYuJSEcCDvjcWsodPkMbY4.roa Signing time: Wed 17 Dec 2025 22:43:29 +0000 ROA not before: Wed 17 Dec 2025 22:43:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36352 IP address blocks: 45.95.186.0/24 maxlen: 24 2a0e:3840:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:7b:95:d1:64:76:33:06:6e:62:6e:89:3e:ce:5c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Dec 17 22:43:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd414342c62e25211c083be3716b2874f90c6d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:19:cd:c1:f4:5f:3a:aa:e7:54:93:9e:ae: 50:34:44:83:7e:cd:c3:89:b2:bc:c3:62:d3:20:46: 6b:17:84:a5:9b:7d:17:fa:2d:4c:31:1b:1b:7f:5a: 5c:0b:f6:55:cd:6d:5c:25:3f:7a:89:11:54:9d:48: 1f:aa:2c:66:9c:ca:2b:21:5d:9e:5a:cf:5f:7b:3d: f7:a1:b4:a9:e4:88:ba:a2:1f:a2:73:20:fb:6b:e3: ea:1b:58:e3:af:f2:38:52:d7:46:cb:b9:cc:87:74: 7c:a9:9a:21:cd:a3:5a:f5:e2:0c:71:89:2d:73:31: be:fb:2e:6f:51:c7:ca:b2:80:aa:d6:ea:ad:de:22: 1b:e0:a8:15:05:14:6e:69:8c:77:d4:26:ce:c2:ab: 53:20:57:94:9c:55:12:7e:04:38:46:95:23:e1:5f: 6e:dd:d9:e6:c8:e4:2b:bf:52:d1:5f:c1:6c:81:4d: fc:77:cf:77:5a:fa:8c:08:5f:ec:6d:3e:7d:6c:23: 78:5f:b0:38:08:c9:db:21:ed:12:f1:93:82:38:36: eb:98:b5:63:d7:2e:8d:b3:3d:44:fb:9c:b8:7f:dd: f3:88:df:73:bd:21:2a:0d:15:22:aa:b9:fc:15:18: 66:3e:f3:6d:36:0b:53:6e:ae:42:9d:57:2a:92:20: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:41:43:42:C6:2E:25:21:1C:08:3B:E3:71:6B:28:74:F9:0C:6D:8E X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/_UFDQsYuJSEcCDvjcWsodPkMbY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.186.0/24 IPv6: 2a0e:3840:3::/48 Signature Algorithm: sha256WithRSAEncryption 7c:9a:d0:b8:23:14:61:9f:1c:0d:d2:a2:f5:ab:61:da:8a:0d: a2:42:c7:5a:53:54:7b:20:aa:d5:d7:1a:b1:2f:b1:13:a8:d9: 63:16:f6:f0:2d:5f:1a:3f:7d:fc:9e:c0:ec:25:41:1c:63:2f: 38:d2:8b:cc:67:a4:b1:9d:2e:e4:57:99:ae:d3:d3:af:53:a8: c1:88:7e:5e:16:3a:3e:0d:3d:aa:40:a2:a0:a6:1b:a7:cf:51: de:a5:bb:ae:09:c5:27:90:09:f4:90:c1:79:02:0a:83:41:b7: a7:31:b3:01:a0:2d:bb:8a:20:fe:aa:2c:8f:fc:df:db:ed:30: 4d:ed:78:b5:93:31:d4:49:17:2f:c5:61:cd:62:48:46:be:60: e6:2c:fa:bd:0f:fc:9e:e1:24:58:d4:f2:5d:c2:f0:64:b6:a7: 80:c8:4a:08:3f:35:c0:14:33:7e:0c:9c:a2:b0:b8:49:07:85: 9a:5b:f1:3b:ed:80:d3:df:24:c1:5e:27:e1:13:89:09:ce:e7: 36:6d:12:ca:38:b9:b5:ad:fd:84:5d:f3:02:35:2e:36:c8:59: 21:ec:f6:e9:3b:54:17:31:fa:d6:33:5b:37:46:58:0a:e2:ab: 53:fe:31:77:f7:e3:b5:0e:b6:7e:d5:4f:0b:ef:bb:92:0d:33: c4:2e:ac:05 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZsue5XRZHYzBm5ibok+zly4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjUxMjE3MjI0MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQxNDM0MmM2MmUyNTIxMWMwODNiZTM3MTZiMjg3NGY5MGM2ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA0ZzcH0Xzqq51STnq5QNESDfs3D ibK8w2LTIEZrF4Slm30X+i1MMRsbf1pcC/ZVzW1cJT96iRFUnUgfqixmnMorIV2e Ws9fez33obSp5Ii6oh+icyD7a+PqG1jjr/I4UtdGy7nMh3R8qZohzaNa9eIMcYkt czG++y5vUcfKsoCq1uqt3iIb4KgVBRRuaYx31CbOwqtTIFeUnFUSfgQ4RpUj4V9u 3dnmyOQrv1LRX8FsgU38d893WvqMCF/sbT59bCN4X7A4CMnbIe0S8ZOCODbrmLVj 1y6Nsz1E+5y4f93ziN9zvSEqDRUiqrn8FRhmPvNtNgtTbq5CnVcqkiCJgQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFP1BQ0LGLiUhHAg743FrKHT5DG2OMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xL19VRkRRc1l1SlNFY0NEdmpjV3NvZFBrTWJZNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAAtX7ow DwQCAAIwCQMHACoOOEAAAzANBgkqhkiG9w0BAQsFAAOCAQEAfJrQuCMUYZ8cDdKi 9ath2ooNokLHWlNUeyCq1dcasS+xE6jZYxb28C1fGj99/J7A7CVBHGMvONKLzGek sZ0u5FeZrtPTr1OowYh+XhY6Pg09qkCioKYbp89R3qW7rgnFJ5AJ9JDBeQIKg0G3 pzGzAaAtu4og/qosj/zf2+0wTe14tZMx1EkXL8VhzWJIRr5g5iz6vQ/8nuEkWNTy XcLwZLangMhKCD81wBQzfgycorC4SQeFmlvxO+2A098kwV4n4ROJCc7nNm0Syji5 ta39hF3zAjUuNshZIez26TtUFzH61jNbN0ZYCuKrU/4xd/fjtQ62ftVPC++7kg0z xC6sBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:56:29 2025 by rpki-client