This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/gu88WpvtkXuc7R66ZpDpE_3pKFA.roa File: gu88WpvtkXuc7R66ZpDpE_3pKFA.roa (raw, json) Hash identifier: ehlUCMIeJxZkhfnlJeweCnR9EA26oToRAoh5TK8ORKs= Subject key identifier: 82:EF:3C:5A:9B:ED:91:7B:9C:ED:1E:BA:66:90:E9:13:FD:E9:28:50 Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de Certificate serial: 019A67D4E798448199552ABD52C216B895EB Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/gu88WpvtkXuc7R66ZpDpE_3pKFA.roa Signing time: Sun 09 Nov 2025 08:56:37 +0000 ROA not before: Sun 09 Nov 2025 08:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49556 IP address blocks: 185.133.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:67:d4:e7:98:44:81:99:55:2a:bd:52:c2:16:b8:95:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de Validity Not Before: Nov 9 08:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82ef3c5a9bed917b9ced1eba6690e913fde92850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:3a:20:40:e2:b9:b4:45:b5:58:b5:b0:09: f6:8c:5a:76:ee:a3:13:99:3d:db:e8:5a:22:d7:42: d5:e2:ab:f0:8b:17:99:3c:a9:01:07:4e:f9:f9:a1: ce:6f:26:be:57:8e:7f:70:97:b9:54:a2:b0:a5:a4: c9:d3:9f:1c:42:aa:45:03:4f:01:3c:8d:87:54:1d: 2d:f0:44:de:d6:0f:0e:fe:1d:1e:08:37:4c:d3:33: 3c:9e:75:fe:15:36:9f:93:94:a2:b8:4a:fd:c0:3b: d2:96:84:f4:de:19:b4:87:31:f3:39:ff:95:b9:58: 00:48:f8:5d:17:a4:ed:ae:27:8b:1a:4c:e9:b7:fe: 72:b6:b6:1b:e1:d7:42:62:f2:e0:b6:c6:e8:e1:6b: 54:5c:da:00:d0:33:be:b9:a3:98:15:98:ac:f0:48: c0:56:06:d5:83:33:ff:ee:14:f7:a5:b1:a9:b8:ac: 87:94:44:40:6d:d4:06:90:3f:50:8c:4a:4f:a0:ed: a9:d7:47:b4:42:af:77:18:8a:f6:87:48:10:f9:bc: f0:0f:1e:fd:16:9c:d6:e3:ca:14:70:39:6a:fa:a0: e5:08:04:87:34:ba:fd:c4:9a:1c:b6:c7:26:2d:b8: 6f:c5:01:7e:27:db:15:16:1e:92:eb:55:40:d0:0c: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EF:3C:5A:9B:ED:91:7B:9C:ED:1E:BA:66:90:E9:13:FD:E9:28:50 X509v3 Authority Key Identifier: keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/gu88WpvtkXuc7R66ZpDpE_3pKFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.125.0/24 Signature Algorithm: sha256WithRSAEncryption cf:c1:80:5c:4c:5c:ba:59:6d:fc:c9:8e:0f:26:92:62:a5:91: ed:ad:c1:81:d9:2b:72:38:a5:14:a6:bb:91:c6:61:04:16:7d: 1c:11:83:03:2e:49:67:31:3b:e3:27:13:8d:2f:02:ad:5b:e7: 91:81:7d:fb:b3:9e:72:f9:ae:78:d0:e7:63:a9:91:32:c9:f2: f1:d4:b2:3d:21:7c:9e:e1:a0:55:b9:c9:eb:f9:ec:d4:84:bc: 34:02:3a:7b:5a:66:e4:6f:b7:2e:bb:00:06:47:e6:61:6e:b4: 44:94:67:65:f9:1b:2c:65:1e:bc:fb:c3:19:61:ad:52:00:cf: a6:38:37:97:7c:49:38:fe:5d:0a:25:82:91:9c:4c:cf:30:42: 24:e2:00:d5:6f:ba:e3:a1:59:2f:9c:20:d6:ed:e6:b1:85:fa: ee:d0:a9:a8:5e:3c:f5:17:81:18:3f:38:bd:79:27:64:d8:c3: 40:f0:91:78:b9:07:e4:c2:eb:b5:e5:67:d4:92:55:d4:63:b4: 40:c8:aa:71:56:59:1a:b3:95:f0:bc:85:7b:41:1d:8b:8c:e9: 7e:23:e2:36:79:d2:d9:28:be:f4:0b:8f:b0:2f:63:2f:8b:5d: 28:6f:48:25:db:7c:b8:12:24:72:4b:b5:67:c2:24:13:cc:77: 4f:d0:43:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpn1OeYRIGZVSq9UsIWuJXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiM2EwNWRiYjljNzdmYTE2ZWQxMDQ2OTc0N2E1YzZlNmVh Yjg4ZGUwHhcNMjUxMTA5MDg1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmVmM2M1YTliZWQ5MTdiOWNlZDFlYmE2NjkwZTkxM2ZkZTkyODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAung6IEDiubRFtVi1sAn2jFp27qMT mT3b6Foi10LV4qvwixeZPKkBB075+aHObya+V45/cJe5VKKwpaTJ058cQqpFA08B PI2HVB0t8ETe1g8O/h0eCDdM0zM8nnX+FTafk5SiuEr9wDvSloT03hm0hzHzOf+V uVgASPhdF6TtrieLGkzpt/5ytrYb4ddCYvLgtsbo4WtUXNoA0DO+uaOYFZis8EjA VgbVgzP/7hT3pbGpuKyHlERAbdQGkD9QjEpPoO2p10e0Qq93GIr2h0gQ+bzwDx79 FpzW48oUcDlq+qDlCASHNLr9xJoctscmLbhvxQF+J9sVFh6S61VA0AwovQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFILvPFqb7ZF7nO0eumaQ6RP96ShQMB8GA1UdIwQY MBaAFDs6Bdu5x3+hbtEEaXR6XG5uq4jeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgt YTAxYzM3Yjg4NzI4LzEvZ3U4OFdwdnRrWHVjN1I2NlpwRHBFXzNwS0ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgtYTAxYzM3Yjg4NzI4 LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYV9MA0G CSqGSIb3DQEBCwUAA4IBAQDPwYBcTFy6WW38yY4PJpJipZHtrcGB2StyOKUUpruR xmEEFn0cEYMDLklnMTvjJxONLwKtW+eRgX37s55y+a540OdjqZEyyfLx1LI9IXye 4aBVucnr+ezUhLw0Ajp7Wmbkb7cuuwAGR+ZhbrRElGdl+RssZR68+8MZYa1SAM+m ODeXfEk4/l0KJYKRnEzPMEIk4gDVb7rjoVkvnCDW7eaxhfru0KmoXjz1F4EYPzi9 eSdk2MNA8JF4uQfkwuu15WfUklXUY7RAyKpxVlkas5XwvIV7QR2LjOl+I+I2edLZ KL70C4+wL2Mvi10ob0gl23y4EiRyS7VnwiQTzHdP0ENW -----END CERTIFICATE-----Generated at Sun Dec 7 09:12:09 2025 by rpki-client