This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UtjZEuMLGC4o-ChVqf0puF9lr7g.roa File: UtjZEuMLGC4o-ChVqf0puF9lr7g.roa (raw, json) Hash identifier: e+43Ko15TkQTR13JwL/iiLdxG8uv4ZK9qgZ5IDHBl3s= Subject key identifier: 52:D8:D9:12:E3:0B:18:2E:28:F8:28:55:A9:FD:29:B8:5F:65:AF:B8 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019ABA8BCDF81A6341CF0991B7A16C597070 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UtjZEuMLGC4o-ChVqf0puF9lr7g.roa Signing time: Tue 25 Nov 2025 10:25:15 +0000 ROA not before: Tue 25 Nov 2025 10:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216246 IP address blocks: 193.233.21.0/24 maxlen: 24 193.233.132.0/24 maxlen: 24 193.233.230.0/24 maxlen: 24 193.233.231.0/24 maxlen: 24 193.233.248.0/24 maxlen: 24 193.233.249.0/24 maxlen: 24 193.233.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:8b:cd:f8:1a:63:41:cf:09:91:b7:a1:6c:59:70:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Nov 25 10:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=52d8d912e30b182e28f82855a9fd29b85f65afb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:67:69:55:d6:d0:6e:57:9a:3d:13:9a:b2: a7:27:88:93:1f:4f:9c:24:80:8d:de:3e:fa:e3:b5: 2f:8d:c8:7d:83:1f:5f:c4:7b:db:61:fe:06:47:d9: 85:e6:e8:91:7f:12:ce:51:e7:84:e2:93:eb:95:7a: e4:ea:7b:ee:89:8b:dd:21:88:86:c7:e3:d1:b7:3e: c0:a2:54:01:e6:60:42:da:a6:38:2e:fc:bf:66:c7: b4:a7:d9:59:34:e1:7a:c2:16:5c:83:de:5f:85:85: a4:42:0e:14:70:84:fd:c0:41:27:b1:79:c7:13:ee: a7:63:9f:bf:fb:c1:0d:cb:b7:66:d7:4c:d6:c6:32: f2:1d:38:0e:50:17:10:85:7f:67:4d:b8:b0:0b:bf: 2a:2a:6b:28:40:f5:3e:4b:56:b1:49:c1:92:0c:4c: e4:53:77:a9:cd:f7:3d:f0:80:2d:c3:46:b5:ea:e0: 68:b8:dc:f2:ea:19:38:96:7d:7f:da:ce:af:d4:57: e4:74:d5:6f:90:12:46:97:b6:ba:5f:94:af:6a:59: b9:45:b5:c9:3e:d2:1b:81:56:99:68:23:98:f2:17: e5:bc:62:b2:fb:a2:14:16:9b:33:d9:e1:d1:6d:92: 8e:0e:53:97:ea:ca:49:b0:c4:34:bf:a3:ee:47:45: 30:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:D9:12:E3:0B:18:2E:28:F8:28:55:A9:FD:29:B8:5F:65:AF:B8 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UtjZEuMLGC4o-ChVqf0puF9lr7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.21.0/24 193.233.132.0/24 193.233.230.0/23 193.233.248.0-193.233.250.255 Signature Algorithm: sha256WithRSAEncryption 07:aa:66:ba:79:9c:ac:25:dd:15:36:f0:fd:23:da:5b:0d:bc: f5:60:cc:94:a2:84:2e:b0:08:72:55:61:8f:c0:c6:ff:dc:42: a8:24:ac:57:8e:d4:69:55:3d:01:af:0d:1c:b4:28:d0:b5:fc: af:84:3f:ee:6e:8e:81:c0:78:a7:51:85:81:85:af:4b:ed:59: ef:17:91:2b:e0:88:a1:23:94:8e:f4:32:6a:33:64:7c:3b:e9: a8:1c:a9:4b:73:02:a6:1c:00:b3:cc:19:b1:b9:92:fc:4f:55: a7:91:33:da:38:ae:ff:00:ee:1e:b8:a1:09:d8:83:a6:5a:0e: 4d:83:27:56:ec:14:cd:08:68:5d:3b:af:4c:ae:fe:bc:9e:2f: 63:36:50:67:99:99:85:50:55:97:a3:ce:48:22:1d:ec:d4:11: ba:7e:03:92:13:62:01:0d:c9:b0:c0:0f:51:fa:6e:b5:7f:23: e7:6f:d9:8f:1f:4f:8a:4a:61:ee:47:4d:7e:13:e4:5a:1e:a2: f6:e4:8b:da:8c:60:ef:2c:8d:71:04:4e:ab:d1:08:5e:d2:8b: 86:33:99:15:fe:50:4c:d3:67:7a:9f:6e:71:91:60:27:05:f3: e1:da:67:fe:90:31:52:26:4b:50:90:fe:a3:7a:18:63:d9:6d: 39:e7:b8:77 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZq6i834GmNBzwmRt6FsWXBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjUxMTI1MTAyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmQ4ZDkxMmUzMGIxODJlMjhmODI4NTVhOWZkMjliODVmNjVhZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLVnaVXW0G5Xmj0TmrKnJ4iTH0+c JICN3j7647Uvjch9gx9fxHvbYf4GR9mF5uiRfxLOUeeE4pPrlXrk6nvuiYvdIYiG x+PRtz7AolQB5mBC2qY4Lvy/Zse0p9lZNOF6whZcg95fhYWkQg4UcIT9wEEnsXnH E+6nY5+/+8ENy7dm10zWxjLyHTgOUBcQhX9nTbiwC78qKmsoQPU+S1axScGSDEzk U3epzfc98IAtw0a16uBouNzy6hk4ln1/2s6v1FfkdNVvkBJGl7a6X5Svalm5RbXJ PtIbgVaZaCOY8hflvGKy+6IUFpsz2eHRbZKODlOX6spJsMQ0v6PuR0UwAQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFFLY2RLjCxguKPgoVan9KbhfZa+4MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvVXRqWkV1TUxHQzRvLUNoVnFmMHB1RjlscjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAwekVAwQA wemEAwQBwenmMAwDBAPB6fgDBADB6fowDQYJKoZIhvcNAQELBQADggEBAAeqZrp5 nKwl3RU28P0j2lsNvPVgzJSihC6wCHJVYY/Axv/cQqgkrFeO1GlVPQGvDRy0KNC1 /K+EP+5ujoHAeKdRhYGFr0vtWe8XkSvgiKEjlI70MmozZHw76agcqUtzAqYcALPM GbG5kvxPVaeRM9o4rv8A7h64oQnYg6ZaDk2DJ1bsFM0IaF07r0yu/ryeL2M2UGeZ mYVQVZejzkgiHezUEbp+A5ITYgENybDAD1H6brV/I+dv2Y8fT4pKYe5HTX4T5Foe ovbki9qMYO8sjXEETqvRCF7Si4YzmRX+UEzTZ3qfbnGRYCcF8+HaZ/6QMVImS1CQ /qN6GGPZbTnnuHc= -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:20 2025 by rpki-client