This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/uQw3fwlIm3nHK6hBCGFZ41iJh-A.roa
File: uQw3fwlIm3nHK6hBCGFZ41iJh-A.roa (raw, json)
Hash identifier: amni1qn11Roj9snqRyHbB8jz052oRW+qTOsvWy6QGjo=
Subject key identifier: B9:0C:37:7F:09:48:9B:79:C7:2B:A8:41:08:61:59:E3:58:89:87:E0
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019AF2EA8F2753555D2D86DE4EDA3ADAB84E
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/uQw3fwlIm3nHK6hBCGFZ41iJh-A.roa
Signing time: Sat 06 Dec 2025 09:07:29 +0000
ROA not before: Sat 06 Dec 2025 09:07:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212077
IP address blocks: 185.187.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ea:8f:27:53:55:5d:2d:86:de:4e:da:3a:da:b8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Dec 6 09:07:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b90c377f09489b79c72ba841086159e3588987e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:d8:f7:5f:0e:10:c5:36:10:16:97:63:31:
bb:db:11:5a:8c:20:a1:22:f7:84:1e:ad:2b:4e:a6:
6c:1d:a9:b6:f7:f0:66:c1:f5:97:8e:36:41:4f:a3:
1a:22:cb:f4:50:68:ad:25:0f:41:8a:80:d6:c2:99:
cf:82:d4:68:fd:06:bc:a6:30:e0:29:03:50:4b:99:
e4:e6:69:fe:9a:91:91:4f:93:92:92:6c:84:59:46:
e9:82:4e:dc:d2:ab:66:6a:41:59:94:e7:9c:5a:64:
04:c8:4d:fe:57:98:d6:11:a8:1d:33:d2:21:2e:31:
3c:c1:1a:6d:34:df:ac:a6:9c:22:87:00:66:8b:4e:
42:ce:82:65:58:62:27:1b:d6:ef:8c:29:fa:91:24:
db:0f:3e:5f:98:d0:74:69:9d:b2:ac:a3:1b:57:ad:
78:1c:81:0c:cc:ca:d4:1c:1e:30:cc:da:78:b1:3f:
d0:e8:55:d3:39:ec:87:a3:e4:28:86:2c:ad:33:48:
41:10:77:f7:fb:e4:40:44:dc:4d:e9:a6:0b:96:5c:
29:a0:dd:25:e7:27:d7:da:5c:39:05:c2:53:39:d8:
1f:aa:2d:9d:06:d6:d6:ba:92:a2:7e:65:48:56:58:
f5:91:48:c8:b2:03:06:15:ff:fd:37:a7:35:57:e0:
48:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:37:7F:09:48:9B:79:C7:2B:A8:41:08:61:59:E3:58:89:87:E0
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/uQw3fwlIm3nHK6hBCGFZ41iJh-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.51.0/24
Signature Algorithm: sha256WithRSAEncryption
81:08:38:f4:2f:e5:2f:b0:3b:d7:af:f4:bd:58:8a:fe:d8:36:
30:cc:ff:5a:b8:7c:40:30:39:97:15:89:9d:8c:38:85:08:78:
fe:79:34:54:28:83:a2:18:ce:dc:75:45:de:f8:3f:90:32:c0:
8d:e3:0c:fd:87:01:7b:f9:c7:7d:91:65:1a:11:8a:85:f3:06:
12:02:9e:fa:c5:a4:91:30:09:e4:b3:a3:6d:e1:cc:77:91:79:
ed:3e:f4:03:31:a4:e6:77:43:4c:4b:48:a2:06:a3:61:59:9e:
25:a3:6e:58:f4:ed:ee:78:93:1d:9d:38:08:7b:d0:c2:a1:67:
16:da:1c:fa:1f:ca:3b:cd:af:b1:08:b1:c1:28:58:d4:ef:c9:
ce:1b:46:1f:c8:fe:fd:8f:96:36:01:8c:48:00:ab:49:06:1e:
f5:4b:80:47:7c:d5:e1:84:5d:b1:37:f0:51:ff:55:3d:44:c5:
b7:b3:d0:68:d5:40:6a:24:85:66:b5:4a:e7:9e:4d:6c:c0:97:
11:de:5c:9d:94:31:a4:56:77:42:0a:92:04:c0:ee:4a:24:d2:
e6:f8:66:a4:74:b1:c2:0e:be:39:66:43:4e:a9:d1:73:a2:a9:
ef:9c:9d:cb:69:59:ff:38:c8:72:0c:4c:7b:61:16:da:5a:f2:
ca:8d:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:46 2025 by rpki-client