This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/u5NAvhOqFEXIWxS21krd9C29jFA.roa File: u5NAvhOqFEXIWxS21krd9C29jFA.roa (raw, json) Hash identifier: 0NOoZJ4uBy+pPcI7MReizVuYKMLpIJCh+Oz/yYQjJf4= Subject key identifier: BB:93:40:BE:13:AA:14:45:C8:5B:14:B6:D6:4A:DD:F4:2D:BD:8C:50 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019AC49A467B4181A81DFDCA37AB460CB074 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/u5NAvhOqFEXIWxS21krd9C29jFA.roa Signing time: Thu 27 Nov 2025 09:17:16 +0000 ROA not before: Thu 27 Nov 2025 09:17:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202147 IP address blocks: 185.229.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:9a:46:7b:41:81:a8:1d:fd:ca:37:ab:46:0c:b0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Nov 27 09:17:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb9340be13aa1445c85b14b6d64addf42dbd8c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:43:4b:0a:78:bb:9e:8c:f0:30:56:3e:77: c7:5c:02:f5:18:e3:13:00:a2:16:63:e3:d3:5f:28: ae:8e:6d:34:e6:44:7a:05:0a:58:0a:44:98:7e:1e: 15:3b:93:8a:c9:74:b5:63:eb:e2:87:30:7c:39:e5: 6a:08:d5:1f:18:99:4a:2a:97:7a:fb:bb:9e:d4:5c: 40:19:e4:ea:77:39:28:53:42:b0:be:0b:f1:c6:17: 1e:9b:74:c7:8a:70:7c:84:b6:f4:b3:e3:14:d2:75: ab:26:5c:86:ba:02:a0:1a:45:2d:b1:28:88:ad:16: 7c:04:7f:d4:7e:28:d2:2f:dd:05:42:a0:1c:eb:08: 20:f2:99:0e:24:63:50:73:fe:56:1c:2c:c4:cd:8f: b4:c0:ec:a6:83:33:69:e0:32:55:60:c1:78:2c:79: 83:7b:71:04:9e:77:67:3b:71:b5:7c:70:7a:88:1c: 54:3c:ef:46:a5:52:ae:03:82:df:4f:33:cf:71:87: 0b:af:7c:40:37:8e:cd:4f:e2:9c:61:4b:87:f0:43: fc:82:f1:c4:0d:8f:a7:b9:65:29:2a:ca:da:5f:79: bd:4a:a5:ca:dc:5a:d1:c1:4c:b3:41:38:bf:58:91: 79:63:3f:02:45:32:c0:67:ee:90:30:5e:dd:d2:15: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:93:40:BE:13:AA:14:45:C8:5B:14:B6:D6:4A:DD:F4:2D:BD:8C:50 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/u5NAvhOqFEXIWxS21krd9C29jFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.216.0/22 Signature Algorithm: sha256WithRSAEncryption b3:03:1c:9f:1c:cf:d7:ae:53:6f:8d:39:e9:cd:8f:e1:9b:0c: b5:34:d0:90:5f:62:90:ff:b5:cd:b5:a6:b0:bb:c3:8f:af:ca: d6:5e:3c:fd:64:06:c3:76:cc:24:27:81:3b:ea:04:7e:a2:8e: 2f:c6:a7:75:e3:e8:dc:2f:bb:94:ad:d4:5b:17:1f:e1:fe:56: 22:8c:f8:60:44:ba:28:ea:e6:38:3b:f9:00:16:aa:c6:a9:19: b0:0a:06:78:10:46:e9:38:37:f8:f4:e8:57:1d:69:af:a2:ba: c0:6e:41:8e:88:f5:11:61:37:1d:9b:29:b9:45:df:27:0e:d5: bd:87:52:0f:fa:62:9c:9c:d4:49:a3:b2:80:ff:5a:23:77:29: 9f:4b:95:dc:97:05:a6:ab:e1:b8:97:6c:b9:ec:c5:dd:8e:f4: 0e:a9:11:94:d8:4c:28:d3:2a:91:93:ed:e4:9d:ca:4c:e0:35: 95:ef:18:1e:53:7d:5c:e1:39:da:71:48:bf:7a:25:c7:22:f4: 87:4d:c7:e3:78:b6:3d:02:15:23:e6:0a:a1:f0:a6:9f:6c:44: 7e:89:cb:a2:61:be:89:c6:3c:4a:96:05:e1:d5:3d:2c:8c:29: df:92:95:3a:d5:d6:c4:a6:0e:25:76:84:ad:36:ab:73:1e:17: ca:c7:91:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrEmkZ7QYGoHf3KN6tGDLB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMTI3MDkxNzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjkzNDBiZTEzYWExNDQ1Yzg1YjE0YjZkNjRhZGRmNDJkYmQ4YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApctDSwp4u56M8DBWPnfHXAL1GOMT AKIWY+PTXyiujm005kR6BQpYCkSYfh4VO5OKyXS1Y+vihzB8OeVqCNUfGJlKKpd6 +7ue1FxAGeTqdzkoU0Kwvgvxxhcem3THinB8hLb0s+MU0nWrJlyGugKgGkUtsSiI rRZ8BH/UfijSL90FQqAc6wgg8pkOJGNQc/5WHCzEzY+0wOymgzNp4DJVYMF4LHmD e3EEnndnO3G1fHB6iBxUPO9GpVKuA4LfTzPPcYcLr3xAN47NT+KcYUuH8EP8gvHE DY+nuWUpKsraX3m9SqXK3FrRwUyzQTi/WJF5Yz8CRTLAZ+6QMF7d0hVK+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuTQL4TqhRFyFsUttZK3fQtvYxQMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvdTVOQXZoT3FGRVhJV3hTMjFrcmQ5QzI5akZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueXYMA0G CSqGSIb3DQEBCwUAA4IBAQCzAxyfHM/XrlNvjTnpzY/hmwy1NNCQX2KQ/7XNtaaw u8OPr8rWXjz9ZAbDdswkJ4E76gR+oo4vxqd14+jcL7uUrdRbFx/h/lYijPhgRLoo 6uY4O/kAFqrGqRmwCgZ4EEbpODf49OhXHWmvorrAbkGOiPURYTcdmym5Rd8nDtW9 h1IP+mKcnNRJo7KA/1ojdymfS5XclwWmq+G4l2y57MXdjvQOqRGU2Ewo0yqRk+3k ncpM4DWV7xgeU31c4TnacUi/eiXHIvSHTcfjeLY9AhUj5gqh8KafbER+icuiYb6J xjxKlgXh1T0sjCnfkpU61dbEpg4ldoStNqtzHhfKx5Ec -----END CERTIFICATE-----Generated at Mon Dec 8 01:40:38 2025 by rpki-client