This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/B8UFPGQw9x1qghEKWHyh34dW9Oc.roa
File: B8UFPGQw9x1qghEKWHyh34dW9Oc.roa (raw, json)
Hash identifier: ywFYtvx0NroO2K3FRCIUWY9DywW+W/YxpiNCO/8quMc=
Subject key identifier: 07:C5:05:3C:64:30:F7:1D:6A:82:11:0A:58:7C:A1:DF:87:56:F4:E7
Certificate issuer: /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial: 019AB6781A38845E5291DB55128C0FF09052
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/B8UFPGQw9x1qghEKWHyh34dW9Oc.roa
Signing time: Mon 24 Nov 2025 15:25:15 +0000
ROA not before: Mon 24 Nov 2025 15:25:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202053
IP address blocks: 194.107.180.0/24 maxlen: 24
2a0d:7980:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:b6:78:1a:38:84:5e:52:91:db:55:12:8c:0f:f0:90:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
Validity
Not Before: Nov 24 15:25:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07c5053c6430f71d6a82110a587ca1df8756f4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:7a:a1:21:16:7e:92:01:58:d3:83:60:1e:
88:0c:e3:83:ee:1b:15:3b:e1:ee:89:a1:a8:27:ce:
4e:4d:53:49:e4:22:28:dd:2d:55:a2:be:83:b6:cc:
7b:64:8e:6b:dd:f4:13:70:75:19:dd:c7:0b:24:f8:
64:62:6d:6e:9e:ad:9a:61:23:c4:99:b2:d5:d7:cb:
fd:4e:66:da:8a:d2:0d:b5:e2:db:22:c1:c3:f1:61:
37:c9:d9:23:16:07:a3:ee:8d:80:50:a5:7b:eb:d1:
e7:ec:ee:c2:3e:70:52:8f:d3:3d:16:c4:7f:62:ac:
d8:81:04:80:1e:5d:9a:93:c1:38:86:52:08:d0:ad:
e1:2b:3c:f9:21:b2:ee:92:b9:37:36:75:b5:85:75:
ad:3e:39:82:a8:12:cf:bf:d5:ed:0b:a8:e7:42:46:
eb:f5:da:56:f9:12:8c:09:cc:02:00:56:1f:6b:65:
e9:dc:6f:02:5f:47:a3:58:b0:44:33:5c:9e:5c:74:
48:10:00:41:ff:c8:c9:e8:35:ce:6b:25:5d:46:d0:
05:52:b0:2b:23:26:10:31:d5:54:f0:fb:8e:1d:50:
f9:f6:30:88:a5:ad:e5:eb:b6:d3:f9:f0:5f:1a:fa:
16:06:3d:5c:5d:7f:8c:5f:8f:aa:e6:5a:51:18:ca:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C5:05:3C:64:30:F7:1D:6A:82:11:0A:58:7C:A1:DF:87:56:F4:E7
X509v3 Authority Key Identifier:
keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/B8UFPGQw9x1qghEKWHyh34dW9Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.180.0/24
IPv6:
2a0d:7980:2::/48
Signature Algorithm: sha256WithRSAEncryption
cc:ef:50:22:f9:79:43:e7:54:18:b1:43:26:74:c9:81:3d:79:
c5:31:cd:25:2b:90:66:3e:e6:3f:15:85:2a:78:19:d8:91:b9:
1b:71:2d:19:c5:83:32:6a:d2:71:92:5d:9a:15:41:1c:8b:59:
1a:e5:3e:88:d8:a1:c6:0f:ed:7a:a1:e7:b6:3a:87:64:fa:c1:
73:74:67:1b:4c:38:d5:93:6e:5b:ee:6a:ce:df:81:7e:2c:34:
39:e5:a8:f8:d5:88:bf:8d:91:aa:02:a9:88:6b:e1:84:58:bc:
27:d0:47:fc:46:7b:e6:0f:bb:32:b5:86:e5:20:c4:6d:08:29:
cd:22:a8:30:47:ca:13:98:00:24:33:15:89:b6:62:31:2b:63:
a9:d1:29:25:a5:45:9a:73:bc:0b:6d:0c:31:18:c7:81:1e:d9:
05:8a:37:bc:1e:d1:6b:b5:61:ac:b9:77:f3:83:4f:c8:fa:7f:
c0:b5:40:70:16:f2:80:70:51:d3:8f:68:15:c5:dc:e0:93:50:
34:94:69:a9:67:28:c1:b1:90:41:19:d4:3a:b7:56:54:27:96:
4c:ea:c7:e6:f0:fb:32:e1:cd:9d:9b:c6:a6:39:fc:c9:38:8a:
59:31:ba:f2:38:62:66:f7:34:8e:4b:d1:30:75:12:f0:31:cc:
e1:7c:39:25
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZq2eBo4hF5SkdtVEowP8JBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGNhYmY2ZjUyM2YyNmUyNjdkYjAzYjUyNDM0Nzg0MWFh
YWE0NjUwHhcNMjUxMTI0MTUyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2M1MDUzYzY0MzBmNzFkNmE4MjExMGE1ODdjYTFkZjg3NTZmNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/h6oSEWfpIBWNODYB6IDOOD7hsV
O+HuiaGoJ85OTVNJ5CIo3S1Vor6Dtsx7ZI5r3fQTcHUZ3ccLJPhkYm1unq2aYSPE
mbLV18v9TmbaitINteLbIsHD8WE3ydkjFgej7o2AUKV769Hn7O7CPnBSj9M9FsR/
YqzYgQSAHl2ak8E4hlII0K3hKzz5IbLukrk3NnW1hXWtPjmCqBLPv9XtC6jnQkbr
9dpW+RKMCcwCAFYfa2Xp3G8CX0ejWLBEM1yeXHRIEABB/8jJ6DXOayVdRtAFUrAr
IyYQMdVU8PuOHVD59jCIpa3l67bT+fBfGvoWBj1cXX+MX4+q5lpRGMp8JQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAfFBTxkMPcdaoIRClh8od+HVvTnMB8GA1UdIwQY
MBaAFFiMq/b1I/JuJn2wO1JDR4QaqqRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQt
NmFkMzI1MmExNDI3LzEvQjhVRlBHUXc5eDFxZ2hFS1dIeWgzNGRXOU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQtNmFkMzI1MmExNDI3
LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwmu0MA8E
AgACMAkDBwAqDXmAAAIwDQYJKoZIhvcNAQELBQADggEBAMzvUCL5eUPnVBixQyZ0
yYE9ecUxzSUrkGY+5j8VhSp4GdiRuRtxLRnFgzJq0nGSXZoVQRyLWRrlPojYocYP
7Xqh57Y6h2T6wXN0ZxtMONWTblvuas7fgX4sNDnlqPjViL+NkaoCqYhr4YRYvCfQ
R/xGe+YPuzK1huUgxG0IKc0iqDBHyhOYACQzFYm2YjErY6nRKSWlRZpzvAttDDEY
x4Ee2QWKN7we0Wu1Yay5d/ODT8j6f8C1QHAW8oBwUdOPaBXF3OCTUDSUaalnKMGx
kEEZ1Dq3VlQnlkzqx+bw+zLhzZ2bxqY5/Mk4ilkxuvI4Ymb3NI5L0TB1EvAxzOF8
OSU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:17:54 2025 by rpki-client