This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UV6qvkU7uEdukz6I3mbVkpLmqK0.roa
File: UV6qvkU7uEdukz6I3mbVkpLmqK0.roa (raw, json)
Hash identifier: 0A+8ttGoev/2nYj8rEiQJKPOhjsFNaPs3a8ni/KoTvs=
Subject key identifier: 51:5E:AA:BE:45:3B:B8:47:6E:93:3E:88:DE:66:D5:92:92:E6:A8:AD
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019A6DAFA08C4DB798DA305812569229B0CB
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UV6qvkU7uEdukz6I3mbVkpLmqK0.roa
Signing time: Mon 10 Nov 2025 12:13:37 +0000
ROA not before: Mon 10 Nov 2025 12:13:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207483
IP address blocks: 185.254.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:af:a0:8c:4d:b7:98:da:30:58:12:56:92:29:b0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 10 12:13:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=515eaabe453bb8476e933e88de66d59292e6a8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:0a:b1:ca:06:6b:20:6d:b4:c3:a8:39:4f:
70:7b:20:00:eb:cf:e4:3b:d2:7e:04:f0:77:dc:78:
59:4a:b0:fe:4d:61:c3:e9:5f:69:fe:b7:dc:21:a8:
a9:75:1f:b3:e7:09:9d:d8:ae:31:48:c0:68:8e:4a:
7f:d9:55:66:92:80:ac:79:69:99:ea:ea:8d:a5:77:
4e:58:ac:3d:2c:cf:a7:d6:74:d4:e8:9e:b8:14:0f:
77:5c:6f:2f:47:34:e7:f4:6f:08:e5:64:6d:b5:bf:
7d:ac:b2:3d:b7:67:19:eb:d5:54:2a:4c:c0:c9:7c:
84:7f:d0:44:20:9d:43:59:d1:ac:12:2e:f1:6c:dc:
58:27:ff:7f:a2:b0:5d:c1:b2:4d:c7:6f:f1:c3:0a:
ed:ae:ba:3b:2e:dd:09:19:f0:e3:62:2a:5a:49:cf:
2c:37:4f:ad:25:52:99:4f:98:fe:35:29:a4:86:3d:
9f:43:8c:b7:02:ab:38:7e:93:56:fc:27:1b:85:19:
c3:90:e8:7c:8e:f5:b0:57:4e:88:fb:2f:25:68:aa:
a3:11:65:eb:43:ff:f1:46:6a:90:9f:f5:98:25:e9:
a6:fe:1f:f1:bb:f5:f3:f7:a2:c6:04:0e:b3:2b:00:
45:92:07:ea:15:73:0a:97:46:0f:27:67:e4:7a:cf:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5E:AA:BE:45:3B:B8:47:6E:93:3E:88:DE:66:D5:92:92:E6:A8:AD
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UV6qvkU7uEdukz6I3mbVkpLmqK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f5:b2:ed:1e:04:52:d6:60:29:4a:77:bb:26:37:83:96:76:
8c:7e:38:56:e1:82:58:15:02:aa:01:94:4d:38:04:60:0b:4e:
9a:b8:82:8c:a8:66:bc:f7:68:de:fd:54:74:15:09:d2:91:ca:
76:1c:cc:25:ec:07:fc:bc:e4:2b:69:62:f5:a0:68:08:1e:32:
00:5a:d1:db:bd:69:58:d1:d3:a9:f8:2a:7c:e8:02:aa:1f:9e:
8e:ff:76:81:a8:9c:10:4c:f5:3b:36:34:f8:6e:38:66:92:e6:
7d:8d:ee:18:ae:c7:88:d5:81:11:bf:d9:2e:a1:68:2e:de:1b:
ff:63:07:d4:6e:ab:41:a5:76:c8:08:22:41:32:ad:2c:46:be:
74:5f:eb:f0:0e:d1:a2:1f:7f:fe:0f:3d:ec:4f:a4:76:40:9c:
6b:59:72:ad:31:e5:56:52:70:b7:78:89:8f:46:59:b4:43:07:
15:82:9c:c8:a3:13:d5:6b:09:47:d4:0c:4f:51:ea:9b:e6:3b:
94:7e:94:0c:04:77:3d:45:b8:ce:dd:c3:46:a6:cc:e2:62:e2:
b0:09:18:ad:92:66:2a:8c:57:29:ee:1a:0d:c1:4f:89:a1:f3:
e0:17:74:64:9d:35:d3:be:5d:a6:c7:dc:21:35:f1:da:1f:ac:
b6:af:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:49 2025 by rpki-client