This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/gUAwKh56PtdFp0xjmMt1EyoLXWQ.roa File: gUAwKh56PtdFp0xjmMt1EyoLXWQ.roa (raw, json) Hash identifier: jwdBhAyrBgcfOiOzXaBVln3sHQbu9o15his/Zcp0ORU= Subject key identifier: 81:40:30:2A:1E:7A:3E:D7:45:A7:4C:63:98:CB:75:13:2A:0B:5D:64 Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1 Certificate serial: 019A87EDC3995816F1CA02F2BE0B444187F5 Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/gUAwKh56PtdFp0xjmMt1EyoLXWQ.roa Signing time: Sat 15 Nov 2025 14:31:37 +0000 ROA not before: Sat 15 Nov 2025 14:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 185.46.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:87:ed:c3:99:58:16:f1:ca:02:f2:be:0b:44:41:87:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1 Validity Not Before: Nov 15 14:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8140302a1e7a3ed745a74c6398cb75132a0b5d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:71:d4:ee:cc:4c:40:4a:0c:10:25:17:4c: 1b:7b:45:cc:ec:68:d2:82:53:0b:b3:5b:e9:3d:bb: 8a:f3:38:f6:69:66:a7:f8:f5:df:2c:6c:12:95:bb: 18:0b:15:b1:63:73:6c:e5:ae:f1:72:35:0c:33:f4: 7c:3f:e5:67:20:a7:6d:1d:91:00:8e:17:e6:73:19: a4:92:40:69:3d:28:f5:36:bf:a5:dd:24:40:0c:8b: 63:46:73:83:e7:6c:ba:b8:e0:71:fe:d1:7e:d1:94: a9:73:da:c6:58:36:36:95:6f:19:a1:e9:5b:db:62: 3a:9f:ed:a4:a2:61:6c:6d:25:56:56:6d:c6:ac:8c: 79:f8:32:97:70:fb:63:b0:52:b8:eb:b8:ae:ad:b3: f9:9b:98:b4:b1:63:9b:e3:78:06:30:14:ef:5f:e3: 7f:3c:01:0d:05:17:29:b2:75:1e:51:19:c1:38:13: f2:5e:61:b1:d7:a4:8a:20:98:09:07:e4:00:ed:98: f9:22:c1:e2:25:c0:84:a3:b0:b3:f2:8f:36:75:4f: d0:fb:83:e6:36:36:6e:de:7d:d3:28:b5:b1:82:37: a6:bf:5b:bc:6b:a7:f9:17:cc:18:7c:e5:a2:24:0e: 9d:88:02:98:9e:33:eb:fc:db:14:bf:6c:4c:91:f3: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:40:30:2A:1E:7A:3E:D7:45:A7:4C:63:98:CB:75:13:2A:0B:5D:64 X509v3 Authority Key Identifier: keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/gUAwKh56PtdFp0xjmMt1EyoLXWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.114.0/24 Signature Algorithm: sha256WithRSAEncryption 58:2d:42:e7:d5:56:f2:7e:c0:39:33:10:52:e6:9f:82:88:38: a7:76:56:c2:93:b0:b1:a8:90:da:c8:a5:30:03:a3:fa:df:97: f2:79:58:62:68:7e:eb:27:28:5a:20:13:4c:70:5b:ce:eb:28: c9:c8:8a:9e:f6:31:e9:77:7d:f1:37:dc:29:f7:42:4f:1b:ce: e8:56:f5:df:90:69:70:fa:1d:0d:a4:5f:bf:7d:65:8c:05:80: 39:6e:de:5c:12:45:3a:c9:ee:c4:9d:58:ed:3a:83:01:f4:bf: 36:4a:3a:97:b3:2c:c2:5e:f7:ce:e7:91:b9:40:54:27:90:c2: e9:d9:3a:0f:6d:79:a4:f5:dc:01:53:05:55:56:4d:0e:55:af: b1:52:08:82:ff:be:da:a1:1d:74:1c:c8:09:92:25:dd:50:06: 80:54:13:1a:27:b5:f1:5e:67:0a:72:cf:8c:03:4f:24:c3:35: ef:6d:23:36:3b:c1:6a:17:df:84:e6:b6:d7:70:d1:c1:c3:8e: ee:38:d8:2c:b4:a7:13:b5:5f:dc:6c:8a:7f:1e:96:b6:2a:20: fb:d7:14:60:60:d2:2e:63:c9:2c:d6:e6:ed:1d:cb:8a:06:a7: 3c:2d:8f:8b:eb:82:dd:16:33:08:43:45:39:56:0a:38:97:55: c0:a1:ac:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqH7cOZWBbxygLyvgtEQYf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl ZTRiYzEwHhcNMjUxMTE1MTQzMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTQwMzAyYTFlN2EzZWQ3NDVhNzRjNjM5OGNiNzUxMzJhMGI1ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruBx1O7MTEBKDBAlF0wbe0XM7GjS glMLs1vpPbuK8zj2aWan+PXfLGwSlbsYCxWxY3Ns5a7xcjUMM/R8P+VnIKdtHZEA jhfmcxmkkkBpPSj1Nr+l3SRADItjRnOD52y6uOBx/tF+0ZSpc9rGWDY2lW8Zoelb 22I6n+2komFsbSVWVm3GrIx5+DKXcPtjsFK467iurbP5m5i0sWOb43gGMBTvX+N/ PAENBRcpsnUeURnBOBPyXmGx16SKIJgJB+QA7Zj5IsHiJcCEo7Cz8o82dU/Q+4Pm NjZu3n3TKLWxgjemv1u8a6f5F8wYfOWiJA6diAKYnjPr/NsUv2xMkfN5wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFAMCoeej7XRadMY5jLdRMqC11kMB8GA1UdIwQY MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt ZDdiOGViNDYwOGUyLzEvZ1VBd0toNTZQdGRGcDB4am1NdDFFeW9MWFdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS5yMA0G CSqGSIb3DQEBCwUAA4IBAQBYLULn1VbyfsA5MxBS5p+CiDindlbCk7CxqJDayKUw A6P635fyeVhiaH7rJyhaIBNMcFvO6yjJyIqe9jHpd33xN9wp90JPG87oVvXfkGlw +h0NpF+/fWWMBYA5bt5cEkU6ye7EnVjtOoMB9L82SjqXsyzCXvfO55G5QFQnkMLp 2ToPbXmk9dwBUwVVVk0OVa+xUgiC/77aoR10HMgJkiXdUAaAVBMaJ7XxXmcKcs+M A08kwzXvbSM2O8FqF9+E5rbXcNHBw47uONgstKcTtV/cbIp/Hpa2KiD71xRgYNIu Y8ks1ubtHcuKBqc8LY+L64LdFjMIQ0U5Vgo4l1XAoaxy -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:44 2025 by rpki-client