This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/uwT_a45pbwAklpIFHopzV0taehU.roa File: uwT_a45pbwAklpIFHopzV0taehU.roa (raw, json) Hash identifier: NTcCYW+9Xx1Q9IkEuPMdFETC7QdoIMG4kleJfUGWaeA= Subject key identifier: BB:04:FF:6B:8E:69:6F:00:24:96:92:05:1E:8A:73:57:4B:5A:7A:15 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019AE8468CA30EAEA922D6259E5194BE0F02 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/uwT_a45pbwAklpIFHopzV0taehU.roa Signing time: Thu 04 Dec 2025 07:32:08 +0000 ROA not before: Thu 04 Dec 2025 07:32:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 185.220.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:46:8c:a3:0e:ae:a9:22:d6:25:9e:51:94:be:0f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Dec 4 07:32:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb04ff6b8e696f00249692051e8a73574b5a7a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:af:81:01:3d:b1:d4:c5:a4:ac:b9:ed:7a: db:99:a3:44:2f:c2:1b:c3:cd:e7:58:ec:b9:08:c7: 5c:61:1d:eb:89:ec:15:e6:c1:36:36:99:27:37:b1: fb:27:94:d8:fc:2b:93:42:16:8d:8d:2a:70:70:4b: a1:73:ea:05:c5:eb:dd:11:ba:cd:eb:a2:bd:81:5a: 6f:fd:1c:ab:c6:54:eb:0f:06:24:6d:56:44:00:9a: f7:e3:5c:04:92:94:33:d0:5d:8f:b7:67:55:e8:48: fc:27:3f:10:b4:d9:80:46:2d:3b:9e:c2:63:26:2f: d0:51:d2:ce:08:54:06:f1:0c:02:99:8d:36:cf:85: 4b:72:b7:66:ff:2c:84:f3:b2:c8:04:74:66:71:ee: de:0a:6f:b7:d6:5e:eb:8c:f4:a2:e8:69:71:a9:61: b5:d5:9c:cb:92:1a:d8:2d:bf:bb:95:bc:64:eb:08: 57:a8:12:7b:3b:30:c9:55:e7:35:e9:74:38:ea:14: 6f:56:75:2b:e6:dd:46:30:85:74:ce:fd:6c:00:03: c2:45:6c:f0:f2:54:36:4b:46:f6:b6:39:5f:12:ea: 86:3b:d1:24:63:44:0d:a5:35:d2:6d:a8:92:22:a6: fd:30:03:c5:e0:a3:2f:87:9d:1c:c8:d2:4c:c5:8c: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:04:FF:6B:8E:69:6F:00:24:96:92:05:1E:8A:73:57:4B:5A:7A:15 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/uwT_a45pbwAklpIFHopzV0taehU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.196.0/24 Signature Algorithm: sha256WithRSAEncryption 55:fd:8f:e6:0a:95:8b:5d:ad:11:bd:f3:df:5b:2c:84:d0:ab: b3:be:ff:46:3b:a3:23:7c:e9:b0:8f:bc:74:08:b9:21:cd:b4: 6a:22:74:fe:2a:d8:60:97:b5:41:0b:cb:6e:1a:27:6d:2a:53: a6:49:52:41:48:6b:8b:a6:c5:84:f5:e3:d8:1b:31:b3:8c:f1: 2a:75:a9:1f:8e:35:1b:3a:43:29:00:f7:3c:ea:55:38:98:c5: a4:e2:1b:25:42:4b:ac:64:a3:a2:2b:a9:e0:82:1f:8e:6a:90: 10:12:c7:32:b0:40:e3:b4:75:2a:7a:cb:c4:79:e6:29:a2:2f: f6:98:66:c3:e6:c3:ce:72:ac:a8:11:4f:2c:31:16:26:85:d1: d8:f1:7a:5f:4e:1a:ab:62:83:07:2b:29:9b:f9:f4:0c:3d:c0: ee:67:73:c3:ed:85:0e:70:c5:ae:0a:fc:df:c1:4c:7a:46:8a: d6:d2:5c:22:7b:e3:f7:67:ea:3a:37:ad:e5:96:5f:83:44:a2: 1b:bc:66:67:17:a1:59:6b:1e:0e:5f:31:46:98:b0:b7:ec:b9: 12:f1:15:23:0b:4f:53:39:de:5a:96:7d:a6:69:88:ee:2d:58: a6:35:be:59:98:a2:20:d6:e2:01:99:0f:9a:de:fa:d4:26:05: 56:6d:99:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZroRoyjDq6pItYlnlGUvg8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUxMjA0MDczMjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjA0ZmY2YjhlNjk2ZjAwMjQ5NjkyMDUxZThhNzM1NzRiNWE3YTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6CvgQE9sdTFpKy57XrbmaNEL8Ib w83nWOy5CMdcYR3riewV5sE2NpknN7H7J5TY/CuTQhaNjSpwcEuhc+oFxevdEbrN 66K9gVpv/RyrxlTrDwYkbVZEAJr341wEkpQz0F2Pt2dV6Ej8Jz8QtNmARi07nsJj Ji/QUdLOCFQG8QwCmY02z4VLcrdm/yyE87LIBHRmce7eCm+31l7rjPSi6GlxqWG1 1ZzLkhrYLb+7lbxk6whXqBJ7OzDJVec16XQ46hRvVnUr5t1GMIV0zv1sAAPCRWzw 8lQ2S0b2tjlfEuqGO9EkY0QNpTXSbaiSIqb9MAPF4KMvh50cyNJMxYxXPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLsE/2uOaW8AJJaSBR6Kc1dLWnoVMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvdXdUX2E0NXBid0FrbHBJRkhvcHpWMHRhZWhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudzEMA0G CSqGSIb3DQEBCwUAA4IBAQBV/Y/mCpWLXa0RvfPfWyyE0Kuzvv9GO6MjfOmwj7x0 CLkhzbRqInT+Kthgl7VBC8tuGidtKlOmSVJBSGuLpsWE9ePYGzGzjPEqdakfjjUb OkMpAPc86lU4mMWk4hslQkusZKOiK6nggh+OapAQEscysEDjtHUqesvEeeYpoi/2 mGbD5sPOcqyoEU8sMRYmhdHY8XpfThqrYoMHKymb+fQMPcDuZ3PD7YUOcMWuCvzf wUx6RorW0lwie+P3Z+o6N63lll+DRKIbvGZnF6FZax4OXzFGmLC37LkS8RUjC09T Od5aln2maYjuLVimNb5ZmKIg1uIBmQ+a3vrUJgVWbZnC -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:04 2025 by rpki-client