This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/uK4jYuIjXRxmokmRlrSKaQwPABQ.roa File: uK4jYuIjXRxmokmRlrSKaQwPABQ.roa (raw, json) Hash identifier: DVqai1d09pTUvwTnoOvvA1GPX4PUfKbgl10Z2BpQ3EA= Subject key identifier: B8:AE:23:62:E2:23:5D:1C:66:A2:49:91:96:B4:8A:69:0C:0F:00:14 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019AE36A0842D3AE524E28EDEE28E8494971 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/uK4jYuIjXRxmokmRlrSKaQwPABQ.roa Signing time: Wed 03 Dec 2025 08:52:48 +0000 ROA not before: Wed 03 Dec 2025 08:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51852 IP address blocks: 185.114.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:6a:08:42:d3:ae:52:4e:28:ed:ee:28:e8:49:49:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Dec 3 08:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b8ae2362e2235d1c66a2499196b48a690c0f0014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:fe:5c:11:b7:b1:50:1a:90:1d:a4:8e:61: 8f:ed:d7:28:ea:bc:1d:b5:3b:fe:88:62:0f:c6:09: f6:3b:0e:ff:8e:5d:25:6b:2b:79:9e:6f:2b:0a:ee: 04:de:5d:fb:b5:f8:2d:32:0d:65:0a:68:83:c1:9e: f7:13:ea:74:86:b1:58:8d:b1:87:e2:e9:f9:38:83: 5d:64:ed:c4:70:be:1e:d1:74:32:69:58:68:05:c3: 4a:89:88:5b:a8:27:41:55:3b:91:76:11:53:29:6e: 18:5a:55:86:f6:90:af:60:e2:ab:f7:00:af:08:cb: 76:40:62:15:2a:a6:e2:08:06:3f:24:42:93:e9:ac: 9f:20:0b:26:76:72:50:1e:bc:9f:70:d0:94:1b:d2: bb:d7:5c:75:39:ea:06:ba:7c:91:6a:fb:9b:40:c5: 80:59:02:4f:c6:66:28:47:d0:d5:a9:aa:fb:d6:d7: 4b:37:46:05:0a:ba:6d:33:5d:84:5e:08:5d:42:28: 9c:9e:71:a7:93:fe:6e:b8:44:06:d0:75:94:2b:1a: 91:26:0b:7c:c5:50:cb:e8:14:8a:59:88:de:04:c3: 4d:4d:a0:a2:96:23:07:ba:8c:43:ea:b9:6d:52:06: 7d:9d:2d:c0:02:a7:3a:33:8c:fa:c4:e1:0f:f0:47: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AE:23:62:E2:23:5D:1C:66:A2:49:91:96:B4:8A:69:0C:0F:00:14 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/uK4jYuIjXRxmokmRlrSKaQwPABQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.117.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:0f:38:9c:e5:c5:18:f9:12:3b:84:e7:1f:72:30:b2:90:30: e9:81:1a:57:bc:51:9e:44:62:fa:6a:59:62:5e:8b:aa:bf:a5: f3:b3:52:dd:8e:21:36:be:15:9e:d0:89:5c:f8:cf:ed:ec:4d: 8c:a9:31:14:af:97:a8:45:7b:a1:ac:b3:01:c2:5a:2e:68:9c: b0:a0:15:c2:b6:78:f4:36:4c:4d:a6:01:86:35:e2:ba:75:b6: a9:22:56:62:dc:7b:ff:98:26:6c:6e:f7:de:e4:3c:d2:a2:5a: 33:f5:69:fc:6e:c8:10:6e:02:9f:66:25:11:7b:94:d5:6d:28: b8:2c:50:be:68:59:72:88:38:54:65:ac:e1:33:6e:ca:ac:6a: 97:c7:17:e9:63:86:85:a5:52:57:7a:9f:f0:cf:16:00:21:10: 65:e3:09:af:25:de:2a:e9:8e:e1:5e:de:50:1c:d0:79:12:fa: 24:f9:c9:11:df:0a:54:da:13:8b:69:91:63:ed:96:e8:91:6b: c1:b3:2a:46:a2:43:8e:bd:28:5c:c6:8c:ee:11:25:17:e0:01: 7a:53:79:2f:a1:ec:1e:f1:47:5c:17:33:71:f8:f1:e8:a2:39: 1b:a6:f5:f2:f6:60:5a:be:c7:2c:9a:c1:e1:3e:9d:24:b4:78: 1f:a5:38:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrjaghC065STijt7ijoSUlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUxMjAzMDg1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGFlMjM2MmUyMjM1ZDFjNjZhMjQ5OTE5NmI0OGE2OTBjMGYwMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGb+XBG3sVAakB2kjmGP7dco6rwd tTv+iGIPxgn2Ow7/jl0layt5nm8rCu4E3l37tfgtMg1lCmiDwZ73E+p0hrFYjbGH 4un5OINdZO3EcL4e0XQyaVhoBcNKiYhbqCdBVTuRdhFTKW4YWlWG9pCvYOKr9wCv CMt2QGIVKqbiCAY/JEKT6ayfIAsmdnJQHryfcNCUG9K711x1OeoGunyRavubQMWA WQJPxmYoR9DVqar71tdLN0YFCrptM12EXghdQiicnnGnk/5uuEQG0HWUKxqRJgt8 xVDL6BSKWYjeBMNNTaCiliMHuoxD6rltUgZ9nS3AAqc6M4z6xOEP8EdlVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLiuI2LiI10cZqJJkZa0imkMDwAUMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvdUs0all1SWpYUnhtb2ttUmxyU0thUXdQQUJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXJ1MA0G CSqGSIb3DQEBCwUAA4IBAQAsDzic5cUY+RI7hOcfcjCykDDpgRpXvFGeRGL6alli Xouqv6Xzs1LdjiE2vhWe0Ilc+M/t7E2MqTEUr5eoRXuhrLMBwlouaJywoBXCtnj0 NkxNpgGGNeK6dbapIlZi3Hv/mCZsbvfe5DzSoloz9Wn8bsgQbgKfZiURe5TVbSi4 LFC+aFlyiDhUZazhM27KrGqXxxfpY4aFpVJXep/wzxYAIRBl4wmvJd4q6Y7hXt5Q HNB5Evok+ckR3wpU2hOLaZFj7ZbokWvBsypGokOOvShcxozuESUX4AF6U3kvoewe 8UdcFzNx+PHoojkbpvXy9mBavscsmsHhPp0ktHgfpTg9 -----END CERTIFICATE-----Generated at Sun Dec 14 05:27:30 2025 by rpki-client