This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Uoh7q46QgteuZ-_CWmrQOAvagIc.roa File: Uoh7q46QgteuZ-_CWmrQOAvagIc.roa (raw, json) Hash identifier: 09hA1wfD4nbyKYFaaPvtx3M4ecjVVtCj4n0c07oZEzE= Subject key identifier: 52:88:7B:AB:8E:90:82:D7:AE:67:EF:C2:5A:6A:D0:38:0B:DA:80:87 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019A9FEBB3D93CFB5BBF3FAB3C90E87C8A18 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Uoh7q46QgteuZ-_CWmrQOAvagIc.roa Signing time: Thu 20 Nov 2025 06:20:15 +0000 ROA not before: Thu 20 Nov 2025 06:20:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207451 IP address blocks: 188.130.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9f:eb:b3:d9:3c:fb:5b:bf:3f:ab:3c:90:e8:7c:8a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Nov 20 06:20:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=52887bab8e9082d7ae67efc25a6ad0380bda8087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:ab:5d:a9:9e:a8:25:b7:8a:6b:96:0e:af: 1a:ba:78:9c:1c:2b:ef:4c:d6:90:a4:e2:c2:d0:3b: 7a:55:60:bf:90:48:ed:ac:f6:f7:15:31:ad:be:34: 9a:94:51:ab:7a:d5:d0:09:aa:b9:4b:e7:ca:56:01: 5c:9f:eb:b3:e5:65:d5:74:70:7e:56:3a:1a:d3:da: db:ec:26:f1:8d:29:24:df:f7:d2:da:36:3b:3f:60: 4a:d7:21:5c:28:55:94:c7:10:d7:bb:0e:23:63:8f: 98:6b:d4:f0:2b:2d:ab:36:e7:e3:69:4a:ef:89:c3: 2e:f0:e0:0a:98:34:07:81:62:d0:e9:e5:77:7f:f5: 65:29:17:76:28:46:15:8d:f9:cb:24:03:f7:02:95: fa:10:cd:95:eb:11:ce:53:87:3f:74:8b:96:1b:f0: 89:bd:2d:3d:94:2a:ad:4b:19:c8:c6:2f:b7:87:ef: 3f:49:62:f6:53:12:b8:e6:44:21:51:78:21:68:da: 0a:4e:8e:0a:23:18:10:d1:13:43:71:0f:b1:7e:52: b8:85:2e:27:5b:d5:3d:04:c0:cd:c6:a0:a1:74:e3: 68:66:43:06:24:89:b2:3e:ea:cf:fb:a0:18:92:14: 2a:10:11:81:62:e0:41:1c:a3:8d:f8:bd:24:cb:b0: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:88:7B:AB:8E:90:82:D7:AE:67:EF:C2:5A:6A:D0:38:0B:DA:80:87 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Uoh7q46QgteuZ-_CWmrQOAvagIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.232.0/24 Signature Algorithm: sha256WithRSAEncryption b7:0a:54:9f:1e:6e:d8:20:1b:8f:c8:a8:21:90:c2:70:6f:23: a6:d3:5c:41:93:21:bd:2e:ea:2f:d8:2e:82:89:47:ad:5b:53: 84:ab:7d:e8:a9:65:1a:6d:b2:a7:8e:43:40:0e:cc:81:db:42: 92:51:94:6a:fa:84:dd:a8:73:5d:4c:29:98:63:f1:e0:52:88: 12:95:6c:31:7b:67:e1:7a:66:98:0b:a0:2c:51:89:40:dc:a7: ed:2c:71:d4:a0:ab:00:36:06:ea:af:c3:42:58:1f:9d:32:99: 46:77:2f:10:ce:56:f3:74:bd:03:00:fd:d1:40:65:61:d9:61: 68:d9:95:51:7b:21:10:9f:d0:8b:67:0c:af:93:07:75:81:42: f6:49:2a:af:37:28:78:aa:2c:fe:37:8a:96:05:25:8d:5f:a4: 77:b4:76:fc:41:a4:46:af:15:08:30:aa:5d:59:2d:bd:b1:87: 77:e1:01:17:18:50:33:f2:27:fc:28:a1:6f:bd:48:52:34:8d: 76:9c:86:7f:dc:56:06:66:d0:dd:1f:2e:00:17:a7:f9:07:3d: 1b:5e:34:8f:4c:63:30:7e:d5:6a:8e:3f:c7:46:3f:3a:81:87: 66:8b:f6:e9:24:60:6a:64:b9:42:90:c8:a0:1d:9e:6e:fd:58: a1:07:5b:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqf67PZPPtbvz+rPJDofIoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjUxMTIwMDYyMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mjg4N2JhYjhlOTA4MmQ3YWU2N2VmYzI1YTZhZDAzODBiZGE4MDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPCrXameqCW3imuWDq8aunicHCvv TNaQpOLC0Dt6VWC/kEjtrPb3FTGtvjSalFGretXQCaq5S+fKVgFcn+uz5WXVdHB+ Vjoa09rb7CbxjSkk3/fS2jY7P2BK1yFcKFWUxxDXuw4jY4+Ya9TwKy2rNufjaUrv icMu8OAKmDQHgWLQ6eV3f/VlKRd2KEYVjfnLJAP3ApX6EM2V6xHOU4c/dIuWG/CJ vS09lCqtSxnIxi+3h+8/SWL2UxK45kQhUXghaNoKTo4KIxgQ0RNDcQ+xflK4hS4n W9U9BMDNxqChdONoZkMGJImyPurP+6AYkhQqEBGBYuBBHKON+L0ky7BSVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFKIe6uOkILXrmfvwlpq0DgL2oCHMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvVW9oN3E0NlFndGV1Wi1fQ1dtclFPQXZhZ0ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvILoMA0G CSqGSIb3DQEBCwUAA4IBAQC3ClSfHm7YIBuPyKghkMJwbyOm01xBkyG9Luov2C6C iUetW1OEq33oqWUabbKnjkNADsyB20KSUZRq+oTdqHNdTCmYY/HgUogSlWwxe2fh emaYC6AsUYlA3KftLHHUoKsANgbqr8NCWB+dMplGdy8QzlbzdL0DAP3RQGVh2WFo 2ZVReyEQn9CLZwyvkwd1gUL2SSqvNyh4qiz+N4qWBSWNX6R3tHb8QaRGrxUIMKpd WS29sYd34QEXGFAz8if8KKFvvUhSNI12nIZ/3FYGZtDdHy4AF6f5Bz0bXjSPTGMw ftVqjj/HRj86gYdmi/bpJGBqZLlCkMigHZ5u/VihB1t7 -----END CERTIFICATE-----Generated at Sun Dec 7 07:33:41 2025 by rpki-client