This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/e0bJRqMtYuh9ohw7_55dd6lUhaI.roa File: e0bJRqMtYuh9ohw7_55dd6lUhaI.roa (raw, json) Hash identifier: fUH0stkssrWBdiZb/F3KzscDpiWHvrKAjv681mirVo0= Subject key identifier: 7B:46:C9:46:A3:2D:62:E8:7D:A2:1C:3B:FF:9E:5D:77:A9:54:85:A2 Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019AC1F7E59388EC7FBAC3E1856506021F97 Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/e0bJRqMtYuh9ohw7_55dd6lUhaI.roa Signing time: Wed 26 Nov 2025 21:00:40 +0000 ROA not before: Wed 26 Nov 2025 21:00:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207080 IP address blocks: 185.194.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:f7:e5:93:88:ec:7f:ba:c3:e1:85:65:06:02:1f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Nov 26 21:00:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7b46c946a32d62e87da21c3bff9e5d77a95485a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:2e:02:e2:58:54:49:84:dc:00:1c:22:06: fe:61:99:72:b0:87:3a:3f:93:42:93:52:88:d5:68: 5c:ed:e7:fc:2f:f7:60:43:6a:3c:2d:18:c9:1d:65: d0:72:d0:a8:e8:86:2f:47:9a:d9:47:7d:4e:20:1c: 57:a3:95:83:73:22:b9:f7:b8:96:0e:2e:e2:52:54: a8:3c:86:c3:7b:4d:c0:ab:a9:f3:c6:f4:37:c5:f0: 26:0f:79:29:61:18:ac:ac:83:11:fe:9c:24:a7:e5: 54:53:9e:d5:e9:cd:e9:c2:0a:e9:f0:33:65:3e:22: 70:d6:b4:ee:42:76:53:68:dc:9d:fb:10:ef:8c:8b: c8:11:b5:6a:d2:8a:7d:f7:49:f8:96:e0:0a:73:0a: a0:45:24:85:2b:1e:d0:0d:52:f1:3f:1c:37:a7:47: b6:99:4b:a8:c2:09:0a:9f:0f:01:30:a5:90:13:fe: 9c:ae:42:8a:cd:8e:2c:1a:16:dd:14:d6:af:fd:e3: 9d:fa:66:b1:66:1e:19:39:fd:35:76:9b:78:6d:04: 99:9d:f6:85:19:eb:5e:3e:64:13:80:7a:2b:a5:11: 2a:22:4c:ab:40:05:13:a3:c8:54:98:ac:86:0c:6c: f2:b9:ac:7d:5d:a7:4c:b5:50:da:06:81:27:30:f0: 20:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:46:C9:46:A3:2D:62:E8:7D:A2:1C:3B:FF:9E:5D:77:A9:54:85:A2 X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/e0bJRqMtYuh9ohw7_55dd6lUhaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.113.0/24 Signature Algorithm: sha256WithRSAEncryption 24:46:64:e3:33:20:e7:13:ed:63:68:d8:0a:5d:13:e0:fb:e7: 06:66:a8:d9:18:2e:a1:26:eb:f2:f2:52:0a:95:9a:b0:1e:b4: 21:9e:15:3c:73:f4:fd:46:7f:4a:8f:ff:ce:33:d6:e9:18:8e: 0f:90:7e:51:b8:03:a1:b3:f3:ff:92:65:d3:9f:3a:90:70:ea: cd:80:e1:43:bb:e0:a2:d2:f3:67:5d:3c:1b:c0:55:23:13:bf: d6:cf:43:c9:c2:0e:a1:9a:b7:aa:70:c6:8b:45:fc:26:23:16: 83:a3:dd:3c:37:a2:95:7f:18:c9:5a:0e:10:af:c9:8f:b8:07: d7:18:38:41:0e:42:43:94:ef:4b:f8:f1:e0:29:ad:43:34:15: df:45:5f:83:5c:31:1e:80:8c:f3:c6:b9:10:93:8a:c5:3b:b2: 1b:1c:ef:1c:3a:03:b7:27:99:ac:6d:76:e1:62:d0:08:17:0e: 20:66:47:64:38:f1:b9:65:5e:1e:b8:4c:cb:8b:68:fe:a1:e9: 08:7a:a6:b8:cd:f2:da:bf:34:2c:43:fb:e0:5c:00:1b:60:7f: 4a:fc:66:66:57:53:de:fa:12:8b:99:c0:73:25:b9:97:bd:ea: d0:16:26:6d:d7:73:f9:dd:fe:bf:e5:2c:10:71:79:14:e6:6e: fa:08:a1:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrB9+WTiOx/usPhhWUGAh+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjUxMTI2MjEwMDQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjQ2Yzk0NmEzMmQ2MmU4N2RhMjFjM2JmZjllNWQ3N2E5NTQ4NWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sIuAuJYVEmE3AAcIgb+YZlysIc6 P5NCk1KI1Whc7ef8L/dgQ2o8LRjJHWXQctCo6IYvR5rZR31OIBxXo5WDcyK597iW Di7iUlSoPIbDe03Aq6nzxvQ3xfAmD3kpYRisrIMR/pwkp+VUU57V6c3pwgrp8DNl PiJw1rTuQnZTaNyd+xDvjIvIEbVq0op990n4luAKcwqgRSSFKx7QDVLxPxw3p0e2 mUuowgkKnw8BMKWQE/6crkKKzY4sGhbdFNav/eOd+maxZh4ZOf01dpt4bQSZnfaF GetePmQTgHorpREqIkyrQAUTo8hUmKyGDGzyuax9XadMtVDaBoEnMPAgxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHtGyUajLWLofaIcO/+eXXepVIWiMB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvZTBiSlJxTXRZdWg5b2h3N181NWRkNmxVaGFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucJxMA0G CSqGSIb3DQEBCwUAA4IBAQAkRmTjMyDnE+1jaNgKXRPg++cGZqjZGC6hJuvy8lIK lZqwHrQhnhU8c/T9Rn9Kj//OM9bpGI4PkH5RuAOhs/P/kmXTnzqQcOrNgOFDu+Ci 0vNnXTwbwFUjE7/Wz0PJwg6hmreqcMaLRfwmIxaDo908N6KVfxjJWg4Qr8mPuAfX GDhBDkJDlO9L+PHgKa1DNBXfRV+DXDEegIzzxrkQk4rFO7IbHO8cOgO3J5msbXbh YtAIFw4gZkdkOPG5ZV4euEzLi2j+oekIeqa4zfLavzQsQ/vgXAAbYH9K/GZmV1Pe +hKLmcBzJbmXverQFiZt13P53f6/5SwQcXkU5m76CKEa -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:57 2025 by rpki-client