This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/Bb4Upmts5_u6jsKp_pTK9JEbd5w.roa File: Bb4Upmts5_u6jsKp_pTK9JEbd5w.roa (raw, json) Hash identifier: /xAZrEK6lSJ0oZp7dB09JdfrnnnAZq0xrYuyvDE06Ps= Subject key identifier: 05:BE:14:A6:6B:6C:E7:FB:BA:8E:C2:A9:FE:94:CA:F4:91:1B:77:9C Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Certificate serial: 019A96005D55848B7B23025FC502D03D4757 Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/Bb4Upmts5_u6jsKp_pTK9JEbd5w.roa Signing time: Tue 18 Nov 2025 08:06:37 +0000 ROA not before: Tue 18 Nov 2025 08:06:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 193.73.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:00:5d:55:84:8b:7b:23:02:5f:c5:02:d0:3d:47:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Validity Not Before: Nov 18 08:06:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=05be14a66b6ce7fbba8ec2a9fe94caf4911b779c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:ef:d2:2d:37:90:c2:4e:dc:63:df:a4:b2: 88:c0:f1:e0:e5:4d:85:9d:1e:12:e7:75:c2:37:c2: 61:ea:80:24:b7:d0:6f:3d:a9:c9:d4:12:84:12:de: 0e:f2:d3:59:c2:8b:f8:c6:96:d5:12:7a:90:f7:5c: 89:9b:5d:17:5f:3f:1e:d0:49:41:eb:99:c8:91:f0: 39:a9:0d:9c:e7:dd:32:db:ab:4a:63:26:00:34:73: 47:db:8d:61:16:10:bc:0b:75:67:b0:e5:0f:17:f2: ce:a9:1e:85:5b:86:b4:96:41:91:9d:20:04:ba:70: 2a:d3:aa:4f:11:04:c0:d3:b3:74:29:2c:a7:88:98: b3:e4:21:31:6b:5a:ac:5b:41:ee:97:18:86:00:59: 89:84:88:3f:72:46:97:31:d1:3a:2d:8e:40:7e:1a: f1:a7:e3:82:ba:ee:e6:c6:b5:58:f6:69:b2:c7:87: 71:5f:7c:09:fd:b3:40:08:bd:81:b8:46:e2:9b:98: e5:87:75:df:c9:f6:db:cc:21:ea:86:79:75:43:65: e8:fa:a3:21:d8:9c:87:49:42:65:53:bb:d2:30:e7: 41:d0:67:19:29:90:ec:20:e5:41:65:c7:84:68:bf: 17:94:75:5d:82:fd:d5:f4:9e:57:4c:1e:f6:3e:95: 21:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BE:14:A6:6B:6C:E7:FB:BA:8E:C2:A9:FE:94:CA:F4:91:1B:77:9C X509v3 Authority Key Identifier: keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/Bb4Upmts5_u6jsKp_pTK9JEbd5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.73.238.0/24 Signature Algorithm: sha256WithRSAEncryption 33:1f:f9:d1:d6:b9:ad:93:ce:2a:63:4d:33:c6:1f:50:99:65: aa:01:36:7b:2b:46:ad:9d:ff:c2:b2:e4:0e:e4:b4:71:ae:0b: 97:fe:9a:ac:1c:b3:a1:8d:cd:80:b9:fb:0b:5a:e3:8b:66:0b: e2:3b:79:de:3c:48:7c:dc:7f:c2:c6:ff:b9:8a:74:24:db:61: f5:93:53:2a:9d:48:b5:cb:d1:c3:ab:51:c2:5e:a3:5d:24:a6: 5a:63:c5:1a:98:59:ea:0d:95:98:cd:f4:2f:c6:b8:b5:48:90: ef:32:61:f6:8c:b7:71:4f:e8:4a:4a:06:87:fc:c1:b9:a0:68: 0f:e0:43:a4:32:51:cf:a2:82:58:99:28:0d:d6:e3:0a:62:89: 2d:b5:08:03:d6:17:64:92:64:99:ba:a3:1d:52:37:b3:e5:93: 7e:a2:2b:a9:ec:5a:88:9c:1c:59:ea:31:29:aa:33:9b:e6:7e: 39:00:c4:0d:7c:4b:ce:3b:da:0a:ad:b3:e7:37:7d:1c:df:cf: 2e:c2:0d:9d:78:f1:76:ee:3c:a0:10:f4:a1:93:e5:50:f8:5c: 47:fd:f3:b6:7c:93:00:04:6a:d7:aa:96:e0:0b:61:85:02:6e: c5:ae:8a:9d:1c:93:59:10:cc:9d:12:3a:58:28:85:02:59:cb: 44:f6:a8:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqWAF1VhIt7IwJfxQLQPUdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmM2UwYjI3YjhlNGQ3OThmOTJiOWRlMTU3ZjFkYTVhNDNj ZDQ5ZTUwHhcNMjUxMTE4MDgwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWJlMTRhNjZiNmNlN2ZiYmE4ZWMyYTlmZTk0Y2FmNDkxMWI3NzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUzv0i03kMJO3GPfpLKIwPHg5U2F nR4S53XCN8Jh6oAkt9BvPanJ1BKEEt4O8tNZwov4xpbVEnqQ91yJm10XXz8e0ElB 65nIkfA5qQ2c590y26tKYyYANHNH241hFhC8C3VnsOUPF/LOqR6FW4a0lkGRnSAE unAq06pPEQTA07N0KSyniJiz5CExa1qsW0HulxiGAFmJhIg/ckaXMdE6LY5Afhrx p+OCuu7mxrVY9mmyx4dxX3wJ/bNACL2BuEbim5jlh3XfyfbbzCHqhnl1Q2Xo+qMh 2JyHSUJlU7vSMOdB0GcZKZDsIOVBZceEaL8XlHVdgv3V9J5XTB72PpUh1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAW+FKZrbOf7uo7Cqf6UyvSRG3ecMB8GA1UdIwQY MBaAFH8+Cye45NeY+Sud4Vfx2lpDzUnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUt YTQyZWM4Nzc2ZmJiLzEvQmI0VXBtdHM1X3U2anNLcF9wVEs5SkViZDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUtYTQyZWM4Nzc2ZmJi LzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUnuMA0G CSqGSIb3DQEBCwUAA4IBAQAzH/nR1rmtk84qY00zxh9QmWWqATZ7K0atnf/CsuQO 5LRxrguX/pqsHLOhjc2AufsLWuOLZgviO3nePEh83H/Cxv+5inQk22H1k1MqnUi1 y9HDq1HCXqNdJKZaY8UamFnqDZWYzfQvxri1SJDvMmH2jLdxT+hKSgaH/MG5oGgP 4EOkMlHPooJYmSgN1uMKYokttQgD1hdkkmSZuqMdUjez5ZN+oiup7FqInBxZ6jEp qjOb5n45AMQNfEvOO9oKrbPnN30c388uwg2dePF27jygEPShk+VQ+FxH/fO2fJMA BGrXqpbgC2GFAm7FroqdHJNZEMydEjpYKIUCWctE9qhP -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:53 2025 by rpki-client