This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UotvNldjLEXLVRela20yQLw0OlY.roa File: UotvNldjLEXLVRela20yQLw0OlY.roa (raw, json) Hash identifier: gJ5kNSIsgFl8dGRcVzFz04Fi6N5wEH+OfKdmkf+9ICU= Subject key identifier: 52:8B:6F:36:57:63:2C:45:CB:55:17:A5:6B:6D:32:40:BC:34:3A:56 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B0E2CB791487AD5FC12C63EF4699458F4 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UotvNldjLEXLVRela20yQLw0OlY.roa Signing time: Thu 11 Dec 2025 16:09:30 +0000 ROA not before: Thu 11 Dec 2025 16:09:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210829 IP address blocks: 37.230.140.0/24 maxlen: 24 37.230.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:2c:b7:91:48:7a:d5:fc:12:c6:3e:f4:69:94:58:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Dec 11 16:09:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=528b6f3657632c45cb5517a56b6d3240bc343a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:d9:20:25:13:d4:da:e1:29:d2:23:79:99: 57:ec:05:09:3b:b5:87:a9:8f:00:e6:b5:e5:f4:9f: 11:90:c4:55:30:92:d2:1f:66:4e:61:d9:33:35:9c: 42:f3:09:43:a0:08:18:7d:1f:f6:0e:98:15:1d:15: d1:14:56:22:68:5a:ae:2e:0e:58:a8:95:58:e6:f4: 81:c8:ee:a8:99:4c:9d:ac:e8:fe:d0:44:50:18:b9: e4:d0:51:d7:01:45:2f:15:c3:36:f3:ac:b1:3e:1b: 8b:46:47:0e:89:7e:af:8c:b0:0d:c7:d6:1c:ad:2e: 5d:f9:6f:2f:34:ec:57:cd:66:a5:2b:60:73:bf:c4: 0b:6d:bb:08:50:8e:63:e0:39:97:6a:b2:cc:08:26: 3a:7f:14:d9:04:5b:60:66:86:49:c2:0f:ad:53:9b: ca:dc:6e:43:05:7b:0e:6d:d2:b5:7e:08:54:2d:a9: b9:09:5b:ef:da:97:29:49:d9:c7:88:7b:99:d3:14: d5:15:71:80:28:c8:7f:85:66:4d:53:55:99:62:1c: 93:a1:59:5b:3e:d4:7f:a2:ee:0c:bd:a5:4f:e1:43: 32:41:32:29:83:44:c1:2a:98:11:67:9c:2b:61:7f: c2:38:09:22:55:72:72:0d:13:6c:31:2f:0f:e5:93: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:6F:36:57:63:2C:45:CB:55:17:A5:6B:6D:32:40:BC:34:3A:56 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UotvNldjLEXLVRela20yQLw0OlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.140.0/24 37.230.229.0/24 Signature Algorithm: sha256WithRSAEncryption 07:70:9c:f8:d6:71:04:03:b1:a7:6c:ef:90:5a:b3:22:4e:73: 05:6d:8b:94:b6:05:9d:e4:15:18:ea:7d:84:db:57:ea:5d:ff: 7e:08:b6:b7:da:46:6c:9f:dc:88:d2:12:fe:84:dc:bb:2b:6e: dc:1c:3d:16:e4:6d:8e:8b:12:77:64:af:b9:f3:b0:43:25:4d: eb:44:e6:a8:99:d3:d6:d1:de:94:49:f4:c8:f2:47:34:03:ad: 60:50:d4:59:2c:15:ca:54:bf:a1:3f:c8:b7:50:51:c4:a5:94: 0c:8d:94:cc:50:1b:2b:dc:3f:87:2d:8b:c6:ba:a6:36:5a:ec: d7:97:b0:73:60:6a:cd:bb:22:84:ad:a4:85:82:75:47:7c:4a: a5:23:b0:48:d5:02:b4:6c:42:ad:68:7a:61:fd:37:50:9d:8a: cc:31:cf:c6:d8:62:3a:da:83:8a:85:53:a4:8d:1b:38:5a:2d: 9e:c2:fc:69:d7:34:ae:7a:75:e3:f5:22:14:93:4c:40:52:9f: 94:c1:b6:da:c4:06:07:1c:28:55:b5:42:5a:98:9a:1f:d8:ae: ca:bd:f7:11:27:82:40:83:59:57:c4:7d:33:a1:c6:c7:7f:fd: 4f:69:f6:1b:9f:b3:da:83:68:9a:df:45:a8:94:b4:c7:8e:74: 55:0c:4a:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsOLLeRSHrV/BLGPvRplFj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjUxMjExMTYwOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjhiNmYzNjU3NjMyYzQ1Y2I1NTE3YTU2YjZkMzI0MGJjMzQzYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2evZICUT1NrhKdIjeZlX7AUJO7WH qY8A5rXl9J8RkMRVMJLSH2ZOYdkzNZxC8wlDoAgYfR/2DpgVHRXRFFYiaFquLg5Y qJVY5vSByO6omUydrOj+0ERQGLnk0FHXAUUvFcM286yxPhuLRkcOiX6vjLANx9Yc rS5d+W8vNOxXzWalK2Bzv8QLbbsIUI5j4DmXarLMCCY6fxTZBFtgZoZJwg+tU5vK 3G5DBXsObdK1fghULam5CVvv2pcpSdnHiHuZ0xTVFXGAKMh/hWZNU1WZYhyToVlb PtR/ou4MvaVP4UMyQTIpg0TBKpgRZ5wrYX/COAkiVXJyDRNsMS8P5ZMbBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFKLbzZXYyxFy1UXpWttMkC8NDpWMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvVW90dk5sZGpMRVhMVlJlbGEyMHlRTHcwT2xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJeaMAwQA JeblMA0GCSqGSIb3DQEBCwUAA4IBAQAHcJz41nEEA7GnbO+QWrMiTnMFbYuUtgWd 5BUY6n2E21fqXf9+CLa32kZsn9yI0hL+hNy7K27cHD0W5G2OixJ3ZK+587BDJU3r ROaomdPW0d6USfTI8kc0A61gUNRZLBXKVL+hP8i3UFHEpZQMjZTMUBsr3D+HLYvG uqY2WuzXl7BzYGrNuyKEraSFgnVHfEqlI7BI1QK0bEKtaHph/TdQnYrMMc/G2GI6 2oOKhVOkjRs4Wi2ewvxp1zSuenXj9SIUk0xAUp+UwbbaxAYHHChVtUJamJof2K7K vfcRJ4JAg1lXxH0zocbHf/1PafYbn7Pag2ia30WolLTHjnRVDEq2 -----END CERTIFICATE-----Generated at Thu Dec 18 14:47:55 2025 by rpki-client