This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/uLBMYegUP8tr8kerX1auVghRTuo.roa File: uLBMYegUP8tr8kerX1auVghRTuo.roa (raw, json) Hash identifier: ObMmlvRRjGND9SS2xSn/Yi9qsVHAdvZK1zpCASvTGOw= Subject key identifier: B8:B0:4C:61:E8:14:3F:CB:6B:F2:47:AB:5F:56:AE:56:08:51:4E:EA Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019AE07FE03773F67571B944E607A7D29EB4 Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/uLBMYegUP8tr8kerX1auVghRTuo.roa Signing time: Tue 02 Dec 2025 19:17:48 +0000 ROA not before: Tue 02 Dec 2025 19:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216018 IP address blocks: 185.23.72.0/24 maxlen: 24 185.23.73.0/24 maxlen: 24 185.23.74.0/24 maxlen: 24 185.23.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:7f:e0:37:73:f6:75:71:b9:44:e6:07:a7:d2:9e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Dec 2 19:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b8b04c61e8143fcb6bf247ab5f56ae5608514eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:a4:4b:29:d9:1b:28:f7:bd:62:35:1d:9c: 11:50:b4:e8:38:1e:89:8e:29:67:1d:12:23:eb:55: ea:14:cc:46:16:c2:03:5b:af:07:fc:23:ee:71:e2: b4:73:a1:26:91:32:67:2a:c3:31:24:20:77:be:f9: 94:f8:aa:2a:97:f2:30:fd:3e:06:c9:54:b1:bd:64: df:75:00:fc:34:b9:ee:17:e0:c8:c2:6c:e0:9e:21: 7f:b4:78:52:6c:55:62:be:22:72:c6:ec:41:58:41: fc:de:7a:dd:d2:ab:c8:1c:84:f7:1f:88:f4:8c:34: c5:ba:54:25:bd:d8:a2:bb:8f:33:c5:8d:96:b0:32: a3:ea:9a:f8:82:ac:f0:a5:fc:05:24:6f:87:b9:3e: bf:01:d6:bd:72:87:f2:e6:07:0a:33:10:58:b1:33: 22:29:59:f9:23:9c:08:a6:76:1c:60:1d:8e:e3:a3: 2d:36:75:3e:53:fd:7f:a0:f9:9a:ae:ab:a5:48:1d: 09:bb:6b:78:34:fd:44:72:0d:fb:3a:c2:49:cb:fa: 74:42:92:32:33:83:ac:d8:f6:70:e2:17:b7:d9:c0: fe:56:f4:b5:5a:d6:be:5c:3c:54:5f:a6:3e:7d:a3: 87:54:3c:56:75:aa:8b:1c:2b:95:aa:16:3e:91:6c: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B0:4C:61:E8:14:3F:CB:6B:F2:47:AB:5F:56:AE:56:08:51:4E:EA X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/uLBMYegUP8tr8kerX1auVghRTuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.72.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:53:5d:fb:d0:7b:b5:e4:49:4d:bd:3d:ff:1d:0d:c9:2a:de: 33:9f:71:3a:37:59:0e:79:53:95:a4:a3:13:1b:f9:9c:8d:fa: f2:0a:32:57:df:ac:6c:f6:c8:83:fc:23:74:9c:8e:79:b0:7b: dd:ec:4f:e9:86:4c:0c:cc:c8:bb:e2:19:64:49:8e:87:6e:f9: 37:bd:be:e6:3c:39:83:99:f7:c7:21:82:e4:8d:40:66:56:11: 4b:25:80:76:98:93:4d:cb:83:72:07:00:db:ce:80:65:c5:8e: 78:12:89:57:ad:b4:1d:0f:eb:49:bd:0c:8f:42:e6:34:68:92: 4a:ae:93:d1:58:30:72:6c:e4:0f:78:e6:5a:a1:df:93:ec:44: 1d:35:3c:4f:75:b8:fc:ea:c3:03:54:70:13:f2:5b:c8:ea:f0: 59:3f:38:6b:3a:a3:ea:54:56:e5:fb:34:34:98:16:80:6b:2e: 58:34:d7:d2:69:13:f7:e8:16:ba:4c:ec:f3:f4:3c:95:a9:d4: bd:27:52:f8:11:29:39:a1:9c:9d:41:d4:1e:82:3c:4b:a5:a9: 4d:80:1e:cc:e4:0c:ff:a0:03:ab:d1:67:b5:a2:69:56:5b:c9: 62:70:71:86:38:00:ff:4d:76:7d:47:de:3b:f7:21:0b:a4:a7: d2:fc:b0:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgf+A3c/Z1cblE5gen0p60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjUxMjAyMTkxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGIwNGM2MWU4MTQzZmNiNmJmMjQ3YWI1ZjU2YWU1NjA4NTE0ZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt06kSynZGyj3vWI1HZwRULToOB6J jilnHRIj61XqFMxGFsIDW68H/CPuceK0c6EmkTJnKsMxJCB3vvmU+Koql/Iw/T4G yVSxvWTfdQD8NLnuF+DIwmzgniF/tHhSbFViviJyxuxBWEH83nrd0qvIHIT3H4j0 jDTFulQlvdiiu48zxY2WsDKj6pr4gqzwpfwFJG+HuT6/Ada9cofy5gcKMxBYsTMi KVn5I5wIpnYcYB2O46MtNnU+U/1/oPmarqulSB0Ju2t4NP1Ecg37OsJJy/p0QpIy M4Os2PZw4he32cD+VvS1Wta+XDxUX6Y+faOHVDxWdaqLHCuVqhY+kWyUUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLiwTGHoFD/La/JHq19WrlYIUU7qMB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvdUxCTVllZ1VQOHRyOGtlclgxYXVWZ2hSVHVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRdIMA0G CSqGSIb3DQEBCwUAA4IBAQB+U1370Hu15ElNvT3/HQ3JKt4zn3E6N1kOeVOVpKMT G/mcjfryCjJX36xs9siD/CN0nI55sHvd7E/phkwMzMi74hlkSY6Hbvk3vb7mPDmD mffHIYLkjUBmVhFLJYB2mJNNy4NyBwDbzoBlxY54EolXrbQdD+tJvQyPQuY0aJJK rpPRWDBybOQPeOZaod+T7EQdNTxPdbj86sMDVHAT8lvI6vBZPzhrOqPqVFbl+zQ0 mBaAay5YNNfSaRP36Ba6TOzz9DyVqdS9J1L4ESk5oZydQdQegjxLpalNgB7M5Az/ oAOr0We1omlWW8licHGGOAD/TXZ9R9479yELpKfS/LD7 -----END CERTIFICATE-----Generated at Sat Dec 6 23:28:57 2025 by rpki-client