This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/_uDFPWLhrv5u3Xk-4kqIlFYREDE.roa File: _uDFPWLhrv5u3Xk-4kqIlFYREDE.roa (raw, json) Hash identifier: 9Mmw31ED2MDyHvlXnlSZHoSwRiyKNLbz2bvW/sip0UM= Subject key identifier: FE:E0:C5:3D:62:E1:AE:FE:6E:DD:79:3E:E2:4A:88:94:56:11:10:31 Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Certificate serial: 019AA5271E9167A09926C7DCC2059CEBC989 Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/_uDFPWLhrv5u3Xk-4kqIlFYREDE.roa Signing time: Fri 21 Nov 2025 06:43:15 +0000 ROA not before: Fri 21 Nov 2025 06:43:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35242 IP address blocks: 193.29.130.0/23 maxlen: 23 193.29.132.0/22 maxlen: 22 193.29.132.0/24 maxlen: 24 194.45.208.0/21 maxlen: 21 194.113.148.0/23 maxlen: 23 195.80.239.0/24 maxlen: 24 2a00:7cc0::/32 maxlen: 32 2a00:7cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:27:1e:91:67:a0:99:26:c7:dc:c2:05:9c:eb:c9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Validity Not Before: Nov 21 06:43:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fee0c53d62e1aefe6edd793ee24a889456111031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:fd:9c:e7:59:80:b0:c4:5a:48:27:b1:77: 70:4a:93:fe:0c:7d:74:cb:98:89:57:1b:a2:3a:88: 79:7f:92:df:11:25:e8:81:03:93:1c:9e:29:7f:a9: d6:27:5c:fa:92:3d:f1:cd:d4:7d:e0:d0:c4:cd:70: 65:27:e3:63:77:0b:c3:18:29:7b:00:01:54:52:7e: 95:47:de:24:e7:65:a4:f8:9d:bc:1c:fc:c1:66:e6: dc:4f:a0:62:02:0b:f8:54:b7:a7:cf:2b:d2:ee:3b: 8b:26:52:56:82:52:19:a2:7b:85:02:52:18:dd:7f: 85:5e:10:1c:2e:d6:57:84:52:4a:5e:f1:e0:ad:64: 6e:fb:90:70:88:e8:97:69:d6:2c:8f:ed:17:e9:d8: 25:3e:15:da:bb:61:40:87:5d:e6:4e:98:e7:c2:a0: 0f:f1:de:2c:da:dc:09:5e:0a:c3:e5:88:a5:47:e6: 70:c1:64:a6:f9:a2:5f:fb:10:e0:d4:c9:ba:ed:0d: 94:ed:8a:68:4c:9b:c1:10:fd:41:bb:e4:db:b7:a3: c2:2d:6c:81:0e:b4:48:7d:46:6b:fa:fc:30:2e:48: 0b:bc:7e:ce:ed:14:de:d0:de:1c:c7:36:4a:80:16: d5:14:d8:82:4d:6f:70:8a:5b:8f:84:4d:57:4c:a3: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E0:C5:3D:62:E1:AE:FE:6E:DD:79:3E:E2:4A:88:94:56:11:10:31 X509v3 Authority Key Identifier: keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/_uDFPWLhrv5u3Xk-4kqIlFYREDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.130.0-193.29.135.255 194.45.208.0/21 194.113.148.0/23 195.80.239.0/24 IPv6: 2a00:7cc0::/32 Signature Algorithm: sha256WithRSAEncryption a5:4f:b5:c1:e1:31:83:2d:c7:da:6e:b5:7b:51:d8:48:ce:c0: f4:3e:94:ae:a1:3b:af:cc:23:a0:87:a6:e3:a6:4d:4b:5e:60: e4:fa:66:03:35:97:57:53:14:f7:f4:ae:f9:63:94:75:46:1f: 83:fd:c0:46:18:35:9b:93:fb:df:2a:2b:c6:08:c4:a5:b6:a7: 81:e5:70:c8:ad:02:b4:0f:2f:9f:b8:f0:e6:ec:15:9c:84:43: 67:e0:ac:e6:c3:0b:df:df:d3:9c:70:eb:9c:7d:29:b1:32:43: 2c:ef:19:c6:a3:c8:4f:40:e0:3b:e6:4a:3e:ef:ce:06:4b:58: 5e:0a:ba:21:81:6e:6e:8e:0f:76:a4:65:4d:fe:6b:7a:98:03: 49:e0:f3:c8:f8:6e:7c:19:04:f4:9a:d9:dc:e8:93:c7:14:d0: f0:8a:c5:8b:48:f0:9a:56:f1:66:4b:84:c5:96:63:14:4e:62: 2d:1d:19:e9:6c:65:49:d6:fa:ae:1b:cd:6e:be:60:ba:32:2e: 4d:69:a0:cf:bc:a2:a5:ca:01:1d:f9:5e:a2:38:42:02:97:e2: 89:3e:ab:d0:ca:1e:10:2d:0f:6e:e7:89:ae:36:bb:52:6a:89: db:88:03:be:1d:5d:13:42:bf:f8:b1:95:23:34:40:d2:6e:e8: 54:77:85:7d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZqlJx6RZ6CZJsfcwgWc68mJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2MxYWFhZGI4MzIwZGQ4NDMyMzU0NThjZjJjNWNiZjQ3 MDRhZDYwHhcNMjUxMTIxMDY0MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWUwYzUzZDYyZTFhZWZlNmVkZDc5M2VlMjRhODg5NDU2MTExMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvD9nOdZgLDEWkgnsXdwSpP+DH10 y5iJVxuiOoh5f5LfESXogQOTHJ4pf6nWJ1z6kj3xzdR94NDEzXBlJ+NjdwvDGCl7 AAFUUn6VR94k52Wk+J28HPzBZubcT6BiAgv4VLenzyvS7juLJlJWglIZonuFAlIY 3X+FXhAcLtZXhFJKXvHgrWRu+5BwiOiXadYsj+0X6dglPhXau2FAh13mTpjnwqAP 8d4s2twJXgrD5YilR+ZwwWSm+aJf+xDg1Mm67Q2U7YpoTJvBEP1Bu+Tbt6PCLWyB DrRIfUZr+vwwLkgLvH7O7RTe0N4cxzZKgBbVFNiCTW9wiluPhE1XTKMe5QIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFP7gxT1i4a7+bt15PuJKiJRWERAxMB8GA1UdIwQY MBaAFPV8GqrbgyDdhDI1RYzyxcv0cErWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAt YTE4NTZkZDdiNWQ4LzEvX3VERlBXTGhydjV1M1hrLTRrcUlsRllSRURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAtYTE4NTZkZDdiNWQ4 LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAHBHYID BAPBHYADBAPCLdADBAHCcZQDBADDUO8wDQQCAAIwBwMFACoAfMAwDQYJKoZIhvcN AQELBQADggEBAKVPtcHhMYMtx9putXtR2EjOwPQ+lK6hO6/MI6CHpuOmTUteYOT6 ZgM1l1dTFPf0rvljlHVGH4P9wEYYNZuT+98qK8YIxKW2p4HlcMitArQPL5+48Obs FZyEQ2fgrObDC9/f05xw65x9KbEyQyzvGcajyE9A4DvmSj7vzgZLWF4KuiGBbm6O D3akZU3+a3qYA0ng88j4bnwZBPSa2dzok8cU0PCKxYtI8JpW8WZLhMWWYxROYi0d GelsZUnW+q4bzW6+YLoyLk1poM+8oqXKAR35XqI4QgKX4ok+q9DKHhAtD27nia42 u1JqiduIA74dXRNCv/ixlSM0QNJu6FR3hX0= -----END CERTIFICATE-----Generated at Wed Dec 17 13:09:23 2025 by rpki-client