This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/U7to6ihX7AcR5IYsyb2kFh6TBb4.roa File: U7to6ihX7AcR5IYsyb2kFh6TBb4.roa (raw, json) Hash identifier: Ktpqo/0ALaoGRiU884TbH1PoOCvck/jb/sJLZtk+PjY= Subject key identifier: 53:BB:68:EA:28:57:EC:07:11:E4:86:2C:C9:BD:A4:16:1E:93:05:BE Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019AE8AFD75FE1A041347201DBA02984CBB4 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/U7to6ihX7AcR5IYsyb2kFh6TBb4.roa Signing time: Thu 04 Dec 2025 09:27:09 +0000 ROA not before: Thu 04 Dec 2025 09:27:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3218 IP address blocks: 193.232.2.0/24 maxlen: 24 193.232.3.0/24 maxlen: 24 193.232.4.0/24 maxlen: 24 193.232.6.0/24 maxlen: 24 193.232.9.0/24 maxlen: 24 193.232.10.0/24 maxlen: 24 193.232.12.0/24 maxlen: 24 193.232.19.0/24 maxlen: 24 193.232.28.0/24 maxlen: 24 193.232.31.0/24 maxlen: 24 193.232.192.0/22 maxlen: 24 193.232.196.0/23 maxlen: 24 193.232.207.0/24 maxlen: 24 193.232.212.0/24 maxlen: 24 193.232.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:af:d7:5f:e1:a0:41:34:72:01:db:a0:29:84:cb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Dec 4 09:27:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53bb68ea2857ec0711e4862cc9bda4161e9305be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:32:b7:cf:6b:20:83:28:35:ee:30:a8:13: 32:0f:54:e0:4a:3e:8e:a3:2a:fd:a1:8b:a1:28:30: 76:97:33:3d:86:54:75:35:7e:ff:16:74:75:eb:e7: b5:7b:b2:bb:00:df:e4:c6:d9:41:48:09:66:4d:a0: a0:4b:37:2d:1f:a8:de:e3:4c:ba:18:99:a2:d8:49: 28:15:74:f9:c8:6d:88:83:b1:1d:18:9a:3e:61:9c: 8d:f2:23:58:0b:5c:a5:87:8e:73:aa:a8:2b:47:62: 62:95:93:fb:17:fb:9e:b7:4f:83:d8:a7:95:87:02: f8:c1:34:6e:34:c8:03:f2:68:5f:d7:3f:d5:46:0c: 4f:f5:da:59:8b:15:09:83:a4:da:70:7b:37:d9:f8: 17:00:b9:c5:8d:d8:c0:68:7e:f0:e6:85:50:02:9c: 1e:f8:43:ce:2d:58:73:14:36:b9:88:bf:25:82:1d: d7:a7:87:76:d6:72:de:a3:3f:33:1b:1e:ff:d2:cf: 40:40:94:cc:65:35:b6:eb:7c:d1:5a:cc:82:16:66: 6f:7c:e1:3d:2f:1a:1c:5c:00:b3:c3:47:92:f4:bf: 9e:7e:30:ef:50:3c:6f:d8:f9:3b:5e:da:94:f0:e6: 7e:4f:78:80:a5:af:80:26:5c:4f:a7:25:a5:d1:03: c8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BB:68:EA:28:57:EC:07:11:E4:86:2C:C9:BD:A4:16:1E:93:05:BE X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/U7to6ihX7AcR5IYsyb2kFh6TBb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.2.0-193.232.4.255 193.232.6.0/24 193.232.9.0-193.232.10.255 193.232.12.0/24 193.232.19.0/24 193.232.28.0/24 193.232.31.0/24 193.232.192.0-193.232.197.255 193.232.207.0/24 193.232.212.0/24 193.232.218.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:1c:d6:7c:4c:d5:85:e3:33:a3:90:de:cc:af:95:54:c0:04: d5:d2:9b:17:0b:63:94:25:b7:7a:5c:87:2e:e8:e5:1a:c0:7d: d1:dc:5a:3c:ec:1c:77:ad:63:26:be:90:49:5f:1d:b4:d2:bf: a2:88:0f:70:54:e6:fd:d1:e1:44:36:7a:67:d7:8b:f8:78:78: e5:43:87:da:c9:a4:b3:56:de:f4:95:23:57:50:0b:63:fc:65: 7b:d5:fa:c1:3e:21:a0:f3:39:db:96:36:db:47:50:b4:b1:ab: fd:83:c6:6f:b9:78:b5:0b:05:6e:11:42:1c:be:8c:a9:0b:4d: c8:45:44:e9:cc:a1:83:1d:cf:51:41:e4:18:90:82:c0:0f:4c: 3a:e3:9d:8b:88:db:9b:05:a4:f7:52:0f:52:01:87:1f:c8:4e: 73:46:d7:f0:15:96:42:61:a5:a8:1e:b9:dc:6e:16:db:27:42: 47:af:87:59:42:3a:38:f2:55:2d:f2:3d:7c:6c:37:a2:83:7d: 22:a6:63:21:7d:6c:1b:cc:2e:28:61:a8:65:5b:6a:ff:b1:c3: 26:04:89:b7:e4:37:08:a4:ec:64:2d:e0:7b:28:fd:a5:58:db: 22:66:34:02:66:69:00:9c:a5:0a:60:91:d2:55:e6:b4:d1:2b: e3:c8:15:4e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZror9df4aBBNHIB26AphMu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjUxMjA0MDkyNzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2JiNjhlYTI4NTdlYzA3MTFlNDg2MmNjOWJkYTQxNjFlOTMwNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjEyt89rIIMoNe4wqBMyD1TgSj6O oyr9oYuhKDB2lzM9hlR1NX7/FnR16+e1e7K7AN/kxtlBSAlmTaCgSzctH6je40y6 GJmi2EkoFXT5yG2Ig7EdGJo+YZyN8iNYC1ylh45zqqgrR2JilZP7F/uet0+D2KeV hwL4wTRuNMgD8mhf1z/VRgxP9dpZixUJg6TacHs32fgXALnFjdjAaH7w5oVQApwe +EPOLVhzFDa5iL8lgh3Xp4d21nLeoz8zGx7/0s9AQJTMZTW263zRWsyCFmZvfOE9 LxocXACzw0eS9L+efjDvUDxv2Pk7XtqU8OZ+T3iApa+AJlxPpyWl0QPIqwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFFO7aOooV+wHEeSGLMm9pBYekwW+MB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvVTd0bzZpaFg3QWNSNUlZc3liMmtGaDZUQmI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaMAwDBAHB6AID BADB6AQDBADB6AYwDAMEAMHoCQMEAMHoCgMEAMHoDAMEAMHoEwMEAMHoHAMEAMHo HzAMAwQGwejAAwQBwejEAwQAwejPAwQAwejUAwQBwejaMA0GCSqGSIb3DQEBCwUA A4IBAQA/HNZ8TNWF4zOjkN7Mr5VUwATV0psXC2OUJbd6XIcu6OUawH3R3Fo87Bx3 rWMmvpBJXx200r+iiA9wVOb90eFENnpn14v4eHjlQ4fayaSzVt70lSNXUAtj/GV7 1frBPiGg8znbljbbR1C0sav9g8ZvuXi1CwVuEUIcvoypC03IRUTpzKGDHc9RQeQY kILAD0w6452LiNubBaT3Ug9SAYcfyE5zRtfwFZZCYaWoHrncbhbbJ0JHr4dZQjo4 8lUt8j18bDeig30ipmMhfWwbzC4oYahlW2r/scMmBIm35DcIpOxkLeB7KP2lWNsi ZjQCZmkAnKUKYJHSVea00SvjyBVO -----END CERTIFICATE-----Generated at Sat Dec 6 16:17:06 2025 by rpki-client