This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/U7hgYMfehbWDoskorwK1Ow9bMvI.roa File: U7hgYMfehbWDoskorwK1Ow9bMvI.roa (raw, json) Hash identifier: 8E8zsqbpz0gZ6wjeWuKen0sdqBr+XGpzB4PXpTI9sbk= Subject key identifier: 53:B8:60:60:C7:DE:85:B5:83:A2:C9:28:AF:02:B5:3B:0F:5B:32:F2 Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019A9CBC4DB7819280C4632DFA044CCEAEC8 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/U7hgYMfehbWDoskorwK1Ow9bMvI.roa Signing time: Wed 19 Nov 2025 15:29:37 +0000 ROA not before: Wed 19 Nov 2025 15:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5065 IP address blocks: 85.8.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:bc:4d:b7:81:92:80:c4:63:2d:fa:04:4c:ce:ae:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Nov 19 15:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53b86060c7de85b583a2c928af02b53b0f5b32f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a0:18:bc:45:0a:c4:fc:47:37:f7:95:6a:e4: a4:7e:0e:f8:43:ef:b5:37:19:f8:cf:7b:76:e0:14: b4:1f:42:88:a6:13:d8:20:82:e3:48:f3:68:56:e9: ee:97:7b:b1:f7:46:8c:83:5f:0d:5f:c9:36:10:b4: c7:ad:c8:ab:c2:17:67:ce:6b:e8:6a:32:2a:41:97: 56:e7:66:cf:88:10:e6:f7:cd:14:86:8f:83:d7:60: 8f:56:11:87:a2:84:8f:92:4f:f2:25:fa:d1:c2:85: 3e:fe:61:45:ec:e2:55:e3:b3:72:69:7f:36:23:ac: 64:99:6a:63:25:8c:32:62:d0:79:3f:79:d3:8e:4f: 34:82:0d:c9:e5:47:9a:46:65:1b:e5:65:3b:ee:7e: c3:16:6e:74:b7:d5:d4:32:e9:5a:87:b0:e7:f1:50: cc:98:93:70:31:4f:c7:20:d9:1f:5a:2f:9b:68:36: e8:dd:f1:d6:67:b1:19:77:5e:f6:3c:9e:bb:40:3a: 08:ea:66:f3:cb:e2:66:94:2b:22:83:fd:d4:27:73: 61:88:7b:4c:c6:91:bb:9a:8d:a0:88:76:d7:4d:9d: ac:e1:19:f2:b5:df:b3:10:13:7c:14:ad:2b:f8:23: 30:54:d9:5c:02:ed:6e:68:a9:fc:b8:fb:07:72:ca: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B8:60:60:C7:DE:85:B5:83:A2:C9:28:AF:02:B5:3B:0F:5B:32:F2 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/U7hgYMfehbWDoskorwK1Ow9bMvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.182.0/23 Signature Algorithm: sha256WithRSAEncryption 16:c1:07:ba:47:67:9c:f3:6f:43:0e:27:5e:4a:9f:82:3c:96: a5:e9:3d:e8:98:b4:59:06:fc:6a:a6:e9:b7:5d:f5:8a:bb:1f: cc:93:68:88:d4:8f:dc:a9:ff:e7:89:66:82:e6:4e:8a:06:9f: 1c:da:55:92:d6:fe:1e:4a:ba:0b:67:4e:00:cc:6e:98:6a:e5: 11:e8:9d:c6:00:a4:65:bf:c8:f5:a8:44:4d:87:42:ca:07:db: db:22:42:ce:86:86:99:6c:1c:da:8e:2c:5c:46:6a:43:96:26: 8e:56:88:a2:f6:d9:e0:a3:b1:c0:dc:c4:88:8f:56:2d:aa:5f: dd:c0:ff:36:a1:27:e4:52:4f:3d:4f:b6:44:93:5f:20:d2:46: 12:1e:06:86:54:e4:46:a8:0f:fc:95:9d:38:7c:76:b2:47:3f: 00:cd:4a:97:7a:d1:7a:6a:61:e8:68:ca:f0:a1:e1:3f:5b:dc: 88:cd:60:52:8d:51:c0:af:1a:44:70:15:87:31:db:76:0b:6e: 09:36:e0:90:c5:c4:74:84:65:e7:9f:aa:af:b7:2e:19:e7:b8: bb:ff:07:8f:3e:97:ca:6a:b4:92:44:50:3f:ae:14:2f:bf:a2: 5b:f4:e2:ac:a8:27:62:85:90:18:2b:61:a7:99:9c:c4:47:60: ba:42:3e:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqcvE23gZKAxGMt+gRMzq7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUxMTE5MTUyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2I4NjA2MGM3ZGU4NWI1ODNhMmM5MjhhZjAyYjUzYjBmNWIzMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aAYvEUKxPxHN/eVauSkfg74Q++1 Nxn4z3t24BS0H0KIphPYIILjSPNoVunul3ux90aMg18NX8k2ELTHrcirwhdnzmvo ajIqQZdW52bPiBDm980Uho+D12CPVhGHooSPkk/yJfrRwoU+/mFF7OJV47NyaX82 I6xkmWpjJYwyYtB5P3nTjk80gg3J5UeaRmUb5WU77n7DFm50t9XUMulah7Dn8VDM mJNwMU/HINkfWi+baDbo3fHWZ7EZd172PJ67QDoI6mbzy+JmlCsig/3UJ3NhiHtM xpG7mo2giHbXTZ2s4Rnytd+zEBN8FK0r+CMwVNlcAu1uaKn8uPsHcsos5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFO4YGDH3oW1g6LJKK8CtTsPWzLyMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvVTdoZ1lNZmVoYldEb3Nrb3J3SzFPdzliTXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVQi2MA0G CSqGSIb3DQEBCwUAA4IBAQAWwQe6R2ec829DDideSp+CPJal6T3omLRZBvxqpum3 XfWKux/Mk2iI1I/cqf/niWaC5k6KBp8c2lWS1v4eSroLZ04AzG6YauUR6J3GAKRl v8j1qERNh0LKB9vbIkLOhoaZbBzajixcRmpDliaOVoii9tngo7HA3MSIj1Ytql/d wP82oSfkUk89T7ZEk18g0kYSHgaGVORGqA/8lZ04fHayRz8AzUqXetF6amHoaMrw oeE/W9yIzWBSjVHArxpEcBWHMdt2C24JNuCQxcR0hGXnn6qvty4Z57i7/wePPpfK arSSRFA/rhQvv6Jb9OKsqCdihZAYK2GnmZzER2C6Qj7C -----END CERTIFICATE-----Generated at Fri Dec 5 04:25:57 2025 by rpki-client