This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/2uBWQEQ5bCZzxWiTRxSToVgE9dQ.roa File: 2uBWQEQ5bCZzxWiTRxSToVgE9dQ.roa (raw, json) Hash identifier: MsldwzQz27lchmlMAHvSH+WOXjpCThCf8Kkip/88G38= Subject key identifier: DA:E0:56:40:44:39:6C:26:73:C5:68:93:47:14:93:A1:58:04:F5:D4 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B2D101F262C804C8E2B6212F0483C14B1 Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/2uBWQEQ5bCZzxWiTRxSToVgE9dQ.roa Signing time: Wed 17 Dec 2025 16:06:29 +0000 ROA not before: Wed 17 Dec 2025 16:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60721 IP address blocks: 195.211.117.0/24 maxlen: 24 195.211.118.0/24 maxlen: 24 195.211.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:10:1f:26:2c:80:4c:8e:2b:62:12:f0:48:3c:14:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Dec 17 16:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dae0564044396c2673c56893471493a15804f5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:39:bb:6a:07:f1:76:27:d6:6c:18:f4:70: 77:55:79:24:fd:f8:1f:51:04:34:78:a9:d9:01:82: d8:14:dc:f0:87:15:d4:25:56:fd:79:76:1a:77:6b: a4:c4:c2:97:15:ca:4c:88:d3:62:1e:40:42:5d:ec: d7:c3:8e:9e:0c:5b:a8:d3:42:3d:3e:a6:52:0a:1a: ce:6d:0a:d2:e4:76:50:22:a0:1d:ab:07:1e:98:40: 21:68:53:ba:92:93:83:89:ce:95:f8:d8:4b:d6:99: 5f:fb:13:b8:61:ce:1f:a3:ba:72:aa:2c:6a:ac:20: ed:8f:15:da:62:76:f5:41:0a:c2:6e:c8:1d:7a:36: 08:0d:d0:e6:4c:8c:39:86:38:77:db:03:59:3f:f2: 91:18:e4:64:7e:b9:10:82:0d:16:f3:f1:e4:3b:5d: 63:28:96:9c:b2:00:12:ff:08:9d:c1:00:ff:ae:4f: 38:00:18:be:93:a1:78:f6:fd:98:b0:ed:28:f1:d6: c2:65:44:21:ec:3f:4c:09:73:bb:43:c2:fe:0a:17: d6:e4:bd:2e:fa:f4:27:ea:ed:b2:31:63:05:00:e0: 54:fd:47:20:3b:55:45:f0:9a:4b:73:15:b4:42:8f: e4:59:cb:a5:bf:2b:cd:2b:d5:fb:66:69:c6:ad:2b: 5e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E0:56:40:44:39:6C:26:73:C5:68:93:47:14:93:A1:58:04:F5:D4 X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/2uBWQEQ5bCZzxWiTRxSToVgE9dQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.117.0-195.211.119.255 Signature Algorithm: sha256WithRSAEncryption 1a:91:84:17:7a:6d:48:95:5c:81:1a:e8:a9:05:da:a2:50:14: 73:fa:71:28:ba:92:81:ca:0c:da:d8:b9:21:c9:92:fd:77:42: 26:a5:ac:56:82:1d:2b:51:39:60:ca:c4:1f:b2:08:2e:e4:dc: 80:70:bd:c2:b0:7d:32:d9:3a:29:47:f1:46:b8:f1:a0:2c:9f: 04:ed:78:ea:de:d5:ca:bf:b4:30:c2:9e:63:8f:5c:82:a5:2d: fb:29:62:fa:5f:df:cc:84:5a:38:82:22:77:86:37:9c:3c:34: e7:2d:c5:95:6b:cb:2d:ef:9b:21:eb:f6:c4:30:71:e9:46:14: ec:86:ad:77:aa:63:d4:e5:5e:c3:90:0c:2e:b7:55:6a:8f:29: 91:6e:dc:f7:cc:52:cb:5b:ae:00:66:77:b6:a4:22:c0:de:f4: ac:72:be:ae:19:94:b0:6a:06:0f:2f:9b:c1:f6:84:de:f2:03: 44:7f:1f:52:cf:20:94:f8:d4:3a:66:be:0f:c8:66:87:8b:05: 16:8e:5a:52:0a:25:2b:bc:3e:ed:0c:2c:bb:dd:6e:d7:e3:44: 3d:d0:27:00:7d:27:98:71:af:5f:bf:c1:02:33:b3:71:8f:52: 2f:a7:ac:c4:a5:bc:72:28:79:00:61:cf:0d:1d:57:09:7a:82: 31:5b:5f:aa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZstEB8mLIBMjitiEvBIPBSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjUxMjE3MTYwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWUwNTY0MDQ0Mzk2YzI2NzNjNTY4OTM0NzE0OTNhMTU4MDRmNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+o5u2oH8XYn1mwY9HB3VXkk/fgf UQQ0eKnZAYLYFNzwhxXUJVb9eXYad2ukxMKXFcpMiNNiHkBCXezXw46eDFuo00I9 PqZSChrObQrS5HZQIqAdqwcemEAhaFO6kpODic6V+NhL1plf+xO4Yc4fo7pyqixq rCDtjxXaYnb1QQrCbsgdejYIDdDmTIw5hjh32wNZP/KRGORkfrkQgg0W8/HkO11j KJacsgAS/widwQD/rk84ABi+k6F49v2YsO0o8dbCZUQh7D9MCXO7Q8L+ChfW5L0u +vQn6u2yMWMFAOBU/UcgO1VF8JpLcxW0Qo/kWculvyvNK9X7ZmnGrSteBQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNrgVkBEOWwmc8Vok0cUk6FYBPXUMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvMnVCV1FFUTViQ1p6eFdpVFJ4U1RvVmdFOWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADD03UD BAPD03AwDQYJKoZIhvcNAQELBQADggEBABqRhBd6bUiVXIEa6KkF2qJQFHP6cSi6 koHKDNrYuSHJkv13QialrFaCHStROWDKxB+yCC7k3IBwvcKwfTLZOilH8Ua48aAs nwTteOre1cq/tDDCnmOPXIKlLfspYvpf38yEWjiCIneGN5w8NOctxZVryy3vmyHr 9sQwcelGFOyGrXeqY9TlXsOQDC63VWqPKZFu3PfMUstbrgBmd7akIsDe9Kxyvq4Z lLBqBg8vm8H2hN7yA0R/H1LPIJT41Dpmvg/IZoeLBRaOWlIKJSu8Pu0MLLvdbtfj RD3QJwB9J5hxr1+/wQIzs3GPUi+nrMSlvHIoeQBhzw0dVwl6gjFbX6o= -----END CERTIFICATE-----Generated at Sat Dec 20 11:11:02 2025 by rpki-client