This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Uu1n9jlgVriCCqMLcOs4a27RAjY.roa
File: Uu1n9jlgVriCCqMLcOs4a27RAjY.roa (raw, json)
Hash identifier: OyL9OwoK9SD+GdwBLzW3qErJl3Q3V9ybBXXJVmuAKuA=
Subject key identifier: 52:ED:67:F6:39:60:56:B8:82:0A:A3:0B:70:EB:38:6B:6E:D1:02:36
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 019AF2A7B9A5DAA5302F4F87F5FCF875BC4C
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Uu1n9jlgVriCCqMLcOs4a27RAjY.roa
Signing time: Sat 06 Dec 2025 07:54:29 +0000
ROA not before: Sat 06 Dec 2025 07:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 185.233.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 07:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:a7:b9:a5:da:a5:30:2f:4f:87:f5:fc:f8:75:bc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Dec 6 07:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52ed67f6396056b8820aa30b70eb386b6ed10236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0d:66:72:49:64:ee:37:d4:88:21:02:ee:61:
a4:4c:a3:31:c1:7a:d3:f2:ad:8d:3c:c3:16:08:f3:
ce:4f:43:9a:ef:74:85:8d:42:9a:6b:59:af:a3:a8:
dd:56:62:6a:e2:d5:5e:54:d8:13:fc:30:67:92:da:
00:8c:0d:19:77:c5:01:c3:1f:f1:9a:a8:08:42:cf:
8a:c5:17:59:fc:74:34:71:53:9a:f4:46:f9:46:b5:
90:0a:9a:f0:2c:2a:5d:26:44:cd:8f:fb:1d:f9:df:
15:9a:77:24:f7:a8:45:e3:3e:86:46:db:44:32:26:
db:65:2f:8d:cd:db:ca:29:b1:d7:cc:3a:c9:3f:c7:
f7:b3:12:1b:78:dd:ff:62:88:2e:69:0e:63:c1:77:
cc:bb:b0:e7:10:a0:8d:81:b2:cd:cf:66:a9:99:f4:
e4:d9:19:b0:00:91:78:3d:62:25:34:9f:2e:bf:f4:
21:a4:1a:8c:69:82:0c:57:43:a2:ef:ee:86:14:c4:
cb:d3:67:cc:dc:29:04:61:54:fc:cc:32:bd:8d:76:
4c:4f:75:ec:a2:e5:44:e1:8f:0b:9f:ab:a1:2c:09:
cf:e0:2f:8d:b8:2d:2c:dd:eb:6b:d5:09:73:87:23:
6d:75:a5:0c:d2:ed:31:d2:7e:62:60:b4:71:3e:10:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:ED:67:F6:39:60:56:B8:82:0A:A3:0B:70:EB:38:6B:6E:D1:02:36
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Uu1n9jlgVriCCqMLcOs4a27RAjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:59:b9:bb:d8:eb:20:db:b6:1a:cd:e4:1a:31:fc:cd:3c:76:
d4:aa:99:5a:6b:1e:ef:ab:1a:0b:20:ee:46:a3:74:a2:bf:33:
a3:80:00:e4:fa:99:2d:65:9f:c5:0d:0f:47:8d:99:34:cd:68:
4a:63:7f:49:20:08:3f:16:4d:c9:13:ea:7a:45:b7:55:03:d8:
8f:86:54:91:ba:32:00:5a:a1:de:1b:ce:8e:59:58:c0:81:6f:
39:46:d1:ee:6b:7c:3b:ad:02:39:4a:84:8a:16:dd:3b:5b:ba:
03:d8:94:22:6f:e8:17:81:f6:44:19:24:57:88:a4:8f:28:bd:
b0:55:79:6f:1d:a4:eb:81:e7:07:df:e4:f9:80:16:64:99:15:
57:eb:d7:6a:60:78:f0:12:2f:75:e5:b1:c3:2d:d1:be:1b:9e:
78:52:d2:e9:37:49:1e:b6:81:3c:80:3e:74:d3:11:ec:0b:89:
66:97:92:4a:7e:66:17:8d:ea:c1:97:56:11:b0:b2:92:c2:44:
86:f2:57:a8:3c:f2:f7:0c:b5:8b:17:6e:2d:d5:3a:03:3b:50:
12:70:bc:4d:47:ed:11:2c:aa:c4:20:dc:81:6b:3f:3f:d2:bd:
5d:90:37:d2:da:c4:c1:4a:bd:3e:e1:10:e0:d2:43:f5:e3:09:
42:28:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:38:55 2025 by rpki-client