This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/jUId-yPrpp1bq5KB-9rQvm7Mrdo.roa File: jUId-yPrpp1bq5KB-9rQvm7Mrdo.roa (raw, json) Hash identifier: uUGAF2zzX/6dYByi4Ip13xTq3kOULW2ZHotDQVbCuwk= Subject key identifier: 8D:42:1D:FB:23:EB:A6:9D:5B:AB:92:81:FB:DA:D0:BE:6E:CC:AD:DA Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713 Certificate serial: 019AFE4E83C1AD7AE9F05E74BF1C575D62D5 Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/jUId-yPrpp1bq5KB-9rQvm7Mrdo.roa Signing time: Mon 08 Dec 2025 14:12:29 +0000 ROA not before: Mon 08 Dec 2025 14:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8075 IP address blocks: 193.143.90.0/24 maxlen: 24 193.143.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:4e:83:c1:ad:7a:e9:f0:5e:74:bf:1c:57:5d:62:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713 Validity Not Before: Dec 8 14:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d421dfb23eba69d5bab9281fbdad0be6eccadda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:f4:fd:80:5e:09:b9:1e:8c:86:ed:a3:90: 4e:57:0b:9a:73:91:08:ce:73:04:db:10:f8:0b:d1: 58:21:56:94:17:32:81:e2:25:79:4c:dc:62:fa:bf: 98:03:5d:ef:47:97:cd:54:de:a8:02:6d:8d:cb:87: 4a:84:20:85:67:32:57:58:1f:47:83:03:f8:8a:88: cb:65:06:35:d1:f9:c8:aa:b8:b5:b0:da:ec:95:7c: c4:de:9a:4e:ee:d1:85:95:90:9c:44:01:9b:5d:b1: ea:d8:90:ff:19:00:a0:43:f2:57:b8:60:52:41:85: c4:d5:b1:0a:87:d3:ef:46:95:d7:2f:2f:08:5c:c7: 0d:6f:cb:b7:1d:9b:86:a9:df:31:1f:66:fe:f2:51: a3:bf:83:ce:d2:9d:09:3e:b0:2d:52:2a:5b:aa:00: a4:48:c5:d6:90:87:d2:2f:6e:55:51:4f:6c:34:be: ac:83:08:e4:86:73:40:fd:80:90:ef:a9:c3:21:0c: 62:f4:94:d7:29:06:72:7f:05:b2:0a:d3:fd:f6:31: 5e:95:1e:fc:8f:15:e4:e6:55:e9:66:35:c3:25:b2: c2:4a:40:22:97:df:66:c1:53:c5:38:d5:02:0a:7d: 65:1c:c6:9a:22:d3:f7:3b:2b:a3:79:7d:57:30:ed: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:42:1D:FB:23:EB:A6:9D:5B:AB:92:81:FB:DA:D0:BE:6E:CC:AD:DA X509v3 Authority Key Identifier: keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/jUId-yPrpp1bq5KB-9rQvm7Mrdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.90.0/24 193.143.98.0/24 Signature Algorithm: sha256WithRSAEncryption b7:0f:ae:96:71:ac:bb:22:3e:2e:dd:11:d5:f4:85:42:8f:8b: 6f:25:96:25:55:2b:42:4a:e3:d4:8e:d1:32:89:b4:90:3c:6b: 79:4c:8c:13:ea:ee:f8:25:b7:e9:80:81:0d:26:08:88:3f:4e: 44:a0:1a:74:82:3d:bb:2d:2b:5c:f2:c1:1e:d7:ca:b5:ec:30: ed:6c:92:c6:c3:f7:54:88:4b:f0:e0:eb:db:a6:08:2c:c0:b0: 1a:d7:59:6c:82:c7:3c:86:47:a2:8a:7b:74:40:1d:82:0c:fc: 51:01:1b:47:d1:9f:ed:e4:87:e4:c6:38:7c:c8:53:8f:e0:bc: 6f:dc:2f:56:b5:64:d6:89:5a:9b:dd:ee:01:2f:65:ff:3a:17: 93:cf:a4:2c:f7:d4:f7:c9:67:91:e9:6c:da:ea:73:23:28:d4: 0d:07:a0:45:87:7b:61:b0:a1:7d:97:9a:79:d0:7c:af:23:4a: ae:cc:50:8d:3b:1c:3b:73:17:88:bd:ad:f9:dc:ea:66:5d:3d: aa:d2:cf:4d:0d:cb:25:42:af:de:bc:54:4f:05:0f:68:68:44: e8:62:a9:04:74:0f:c7:10:d4:97:62:01:e6:13:98:d0:34:2c: e9:d1:3f:5d:30:2e:f2:db:8c:a7:2b:94:d8:e7:9b:a8:91:69: ce:44:1c:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZr+ToPBrXrp8F50vxxXXWLVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTZkZmE5MWFmOTFlY2M2Mzg0MTI4YjE4YzUwM2EzMmMy ODM3MTMwHhcNMjUxMjA4MTQxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDQyMWRmYjIzZWJhNjlkNWJhYjkyODFmYmRhZDBiZTZlY2NhZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQr0/YBeCbkejIbto5BOVwuac5EI znME2xD4C9FYIVaUFzKB4iV5TNxi+r+YA13vR5fNVN6oAm2Ny4dKhCCFZzJXWB9H gwP4iojLZQY10fnIqri1sNrslXzE3ppO7tGFlZCcRAGbXbHq2JD/GQCgQ/JXuGBS QYXE1bEKh9PvRpXXLy8IXMcNb8u3HZuGqd8xH2b+8lGjv4PO0p0JPrAtUipbqgCk SMXWkIfSL25VUU9sNL6sgwjkhnNA/YCQ76nDIQxi9JTXKQZyfwWyCtP99jFelR78 jxXk5lXpZjXDJbLCSkAil99mwVPFONUCCn1lHMaaItP3OyujeX1XMO3b0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI1CHfsj66adW6uSgfva0L5uzK3aMB8GA1UdIwQY MBaAFGmW36ka+R7MY4QSixjFA6MsKDcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzIt OGFkM2MwZDExNTY1LzEvalVJZC15UHJwcDFicTVLQi05clF2bTdNcmRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzItOGFkM2MwZDExNTY1 LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwY9aAwQA wY9iMA0GCSqGSIb3DQEBCwUAA4IBAQC3D66Wcay7Ij4u3RHV9IVCj4tvJZYlVStC SuPUjtEyibSQPGt5TIwT6u74JbfpgIENJgiIP05EoBp0gj27LStc8sEe18q17DDt bJLGw/dUiEvw4OvbpggswLAa11lsgsc8hkeiint0QB2CDPxRARtH0Z/t5Ifkxjh8 yFOP4Lxv3C9WtWTWiVqb3e4BL2X/OheTz6Qs99T3yWeR6Wza6nMjKNQNB6BFh3th sKF9l5p50HyvI0quzFCNOxw7cxeIva353OpmXT2q0s9NDcslQq/evFRPBQ9oaETo YqkEdA/HENSXYgHmE5jQNCzp0T9dMC7y24ynK5TY55uokWnORByM -----END CERTIFICATE-----Generated at Sat Dec 20 10:30:33 2025 by rpki-client