This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/u0rrjscEg5ouwkZEoUUv9ywqEJM.roa File: u0rrjscEg5ouwkZEoUUv9ywqEJM.roa (raw, json) Hash identifier: KAhmaRaJ9yCDkMpLHGC+00wVlDYCLhy/BJgRV7XQ8BQ= Subject key identifier: BB:4A:EB:8E:C7:04:83:9A:2E:C2:46:44:A1:45:2F:F7:2C:2A:10:93 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019A96A9A86A60E4583314D508EC37079A36 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/u0rrjscEg5ouwkZEoUUv9ywqEJM.roa Signing time: Tue 18 Nov 2025 11:11:32 +0000 ROA not before: Tue 18 Nov 2025 11:11:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 193.168.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:a9:a8:6a:60:e4:58:33:14:d5:08:ec:37:07:9a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Nov 18 11:11:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb4aeb8ec704839a2ec24644a1452ff72c2a1093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:52:7e:61:a4:f5:7f:b6:98:33:4d:56:a3: d2:d9:15:07:31:8b:8a:0a:d5:f2:80:01:71:bc:d7: 5b:a9:a0:a6:68:aa:92:15:1f:20:2b:87:7e:ca:d3: 75:fa:54:5e:a5:f9:b0:27:97:e1:d0:9b:ee:fb:e3: 5e:7d:23:23:86:42:bf:20:2b:e8:50:11:fe:8d:fc: 93:ea:13:30:ab:91:2c:a4:cf:98:fe:84:0d:55:8b: 2f:13:2d:b4:50:e5:3d:aa:d8:e5:2d:2a:63:7c:ab: 94:15:71:f0:82:7b:8e:26:e5:12:cb:ba:35:71:f6: fe:34:2d:47:7c:3c:1e:28:06:ba:e8:a6:45:fc:5a: b7:40:f6:c1:7c:10:b5:29:7c:1a:24:22:f2:58:f6: 62:79:05:e8:b0:6e:51:58:00:9b:76:b0:ae:da:a6: a3:6c:fa:9d:10:cc:33:30:9a:1d:17:66:9b:b0:0c: b1:d4:bd:bd:a4:55:08:f3:f8:b5:12:72:bf:f1:76: 7e:5a:98:b9:b4:72:f8:ae:ab:ae:4f:13:df:f4:e9: 4d:52:28:7a:2a:7c:13:20:38:18:d0:fa:36:52:2c: fb:76:c8:23:de:b3:92:e4:83:e0:85:56:b9:81:4c: 3d:4a:74:1a:be:94:1d:0f:5e:8b:91:d7:56:e2:87: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4A:EB:8E:C7:04:83:9A:2E:C2:46:44:A1:45:2F:F7:2C:2A:10:93 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/u0rrjscEg5ouwkZEoUUv9ywqEJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.203.0/24 Signature Algorithm: sha256WithRSAEncryption 18:36:36:61:7f:b0:84:72:f3:f5:74:98:4c:85:c4:4c:8f:1d: 23:2f:ed:61:81:01:cd:b1:58:d1:45:e4:1d:6b:15:80:78:ff: 71:e6:bd:5a:77:04:c3:b1:41:8d:25:d9:37:f3:51:b8:91:3e: 23:4c:41:ce:b8:b9:94:f4:fe:78:74:6c:9a:18:a1:d5:6c:dd: 11:b3:a9:66:21:1f:2a:f0:f3:0e:1c:a0:d3:0a:da:97:b2:0e: 09:cc:ea:03:56:01:47:e0:1e:d4:e4:63:42:1e:2d:79:5e:a6: 87:ab:0c:1f:d9:d7:0e:20:2e:f0:0c:d9:7b:08:ac:52:b3:d5: cf:67:29:7e:a3:50:ec:2c:c1:63:5a:46:d4:ee:cb:63:5d:97: 81:ef:6e:15:7f:73:a8:7a:b1:d1:20:ff:c6:f2:18:a5:57:01: 9a:05:ee:4a:15:fe:84:a7:c9:df:5f:19:b6:93:05:61:ba:e3: 58:4d:a1:d3:11:19:4d:81:3f:c5:7c:c4:86:2f:3b:76:eb:20: 3f:ea:75:18:89:54:12:48:10:8f:3d:76:a9:0b:0a:6a:c9:11: 9d:26:ba:06:a0:27:ae:06:af:1b:b1:12:d9:c8:cd:ba:79:f6: 4e:c9:90:0a:1d:7d:d7:bd:43:3f:ce:eb:ca:3f:7a:37:2b:05: 1e:76:6d:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqWqahqYORYMxTVCOw3B5o2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUxMTE4MTExMTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjRhZWI4ZWM3MDQ4MzlhMmVjMjQ2NDRhMTQ1MmZmNzJjMmExMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKhSfmGk9X+2mDNNVqPS2RUHMYuK CtXygAFxvNdbqaCmaKqSFR8gK4d+ytN1+lRepfmwJ5fh0Jvu++NefSMjhkK/ICvo UBH+jfyT6hMwq5EspM+Y/oQNVYsvEy20UOU9qtjlLSpjfKuUFXHwgnuOJuUSy7o1 cfb+NC1HfDweKAa66KZF/Fq3QPbBfBC1KXwaJCLyWPZieQXosG5RWACbdrCu2qaj bPqdEMwzMJodF2absAyx1L29pFUI8/i1EnK/8XZ+Wpi5tHL4rquuTxPf9OlNUih6 KnwTIDgY0Po2Uiz7dsgj3rOS5IPghVa5gUw9SnQavpQdD16LkddW4oeexwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLtK647HBIOaLsJGRKFFL/csKhCTMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvdTBycmpzY0VnNW91d2taRW9VVXY5eXdxRUpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwajLMA0G CSqGSIb3DQEBCwUAA4IBAQAYNjZhf7CEcvP1dJhMhcRMjx0jL+1hgQHNsVjRReQd axWAeP9x5r1adwTDsUGNJdk381G4kT4jTEHOuLmU9P54dGyaGKHVbN0Rs6lmIR8q 8PMOHKDTCtqXsg4JzOoDVgFH4B7U5GNCHi15XqaHqwwf2dcOIC7wDNl7CKxSs9XP Zyl+o1DsLMFjWkbU7stjXZeB724Vf3OoerHRIP/G8hilVwGaBe5KFf6Ep8nfXxm2 kwVhuuNYTaHTERlNgT/FfMSGLzt26yA/6nUYiVQSSBCPPXapCwpqyRGdJroGoCeu Bq8bsRLZyM26efZOyZAKHX3XvUM/zuvKP3o3KwUedm3Q -----END CERTIFICATE-----Generated at Fri Dec 5 04:57:21 2025 by rpki-client