This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UoGs33ehV6v5YodhN8tTxiWVNtU.roa
File: UoGs33ehV6v5YodhN8tTxiWVNtU.roa (raw, json)
Hash identifier: E9HM/q71F+Mpfbq04NVikW5FRuRd7qmapJHOZOvHtgo=
Subject key identifier: 52:81:AC:DF:77:A1:57:AB:F9:62:87:61:37:CB:53:C6:25:95:36:D5
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019AA9FDD374797B402C80F45CD9AEEB1D93
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UoGs33ehV6v5YodhN8tTxiWVNtU.roa
Signing time: Sat 22 Nov 2025 05:16:15 +0000
ROA not before: Sat 22 Nov 2025 05:16:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213727
IP address blocks: 178.239.144.0/24 maxlen: 24
178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
185.26.34.0/24 maxlen: 24
185.26.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:a9:fd:d3:74:79:7b:40:2c:80:f4:5c:d9:ae:eb:1d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 22 05:16:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5281acdf77a157abf962876137cb53c6259536d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:8a:4b:91:a6:34:82:f8:40:b9:5b:af:40:
a8:9d:be:01:6b:b2:c8:99:27:37:9d:b9:4a:22:63:
11:93:9f:ce:8b:b2:63:84:59:6a:8a:a6:cb:b6:bf:
9f:81:e2:66:3e:e5:80:f4:47:0f:fc:7d:45:f7:8f:
21:11:7c:f9:3d:e9:8e:78:75:71:eb:8e:01:0f:57:
cb:ef:32:85:f7:37:62:5c:98:b0:ca:ed:c0:08:e6:
ff:f5:38:aa:64:b4:a5:f5:b9:35:04:7e:69:e6:2a:
54:6b:a1:f0:65:cd:3f:4a:87:00:32:75:82:88:b8:
c3:1a:0a:0e:c2:c3:81:08:93:5d:bd:dc:5e:a0:f0:
27:5e:bb:d6:07:a4:06:60:90:68:01:e0:98:d9:a1:
90:d4:93:61:f5:5d:87:e9:2a:0d:07:7c:7d:f1:9a:
06:30:d1:47:d8:73:45:70:40:9a:b0:64:d1:bf:8f:
02:08:79:b5:5c:0b:d5:ea:27:52:eb:f5:34:e0:c7:
1b:cc:8c:5f:e0:87:cb:25:c3:6a:23:b3:00:e3:36:
f8:f0:e3:93:5c:13:6b:72:8c:e7:5e:20:ea:b9:b4:
fe:e7:e8:85:3f:c9:6c:26:6d:70:85:bf:14:df:64:
93:2b:e5:b1:0d:da:b1:be:5d:3d:2a:b8:d0:38:93:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:81:AC:DF:77:A1:57:AB:F9:62:87:61:37:CB:53:C6:25:95:36:D5
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UoGs33ehV6v5YodhN8tTxiWVNtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
178.239.156.0/24
178.239.159.0/24
185.26.33.0-185.26.35.255
Signature Algorithm: sha256WithRSAEncryption
35:60:2d:b6:68:b4:68:dc:dc:99:53:a9:2d:18:00:8f:09:85:
9e:82:c6:ac:49:44:65:c4:ca:a9:cb:50:b5:94:0c:fe:23:60:
40:bd:ba:a4:46:28:65:88:d8:a6:f7:93:0e:55:77:5e:09:39:
b6:c2:fb:9f:32:4d:dd:a7:ab:8a:c9:8a:b0:d6:22:80:18:23:
58:ab:f6:44:ba:7f:08:7d:34:c4:8d:22:16:d5:92:88:cc:14:
af:70:57:5a:a5:45:08:bb:2f:22:e3:75:01:b8:4b:47:80:f2:
b1:4e:49:fe:8b:43:5d:92:65:87:d6:76:40:40:12:1e:9a:7f:
60:7d:7b:45:77:e4:7f:ee:f0:d4:d9:eb:b0:c8:73:bd:f0:0c:
08:09:80:b2:d9:d6:f7:20:d3:ab:f7:1f:bb:bc:48:07:9a:c3:
c2:31:8d:ff:59:ee:a7:8d:72:59:39:c6:bf:9b:58:08:8e:cc:
4e:8f:99:39:a7:7c:f2:02:fc:97:4c:66:c4:bf:06:e5:fa:29:
c0:3a:b2:96:6d:ef:3e:08:93:2d:43:b4:86:ae:b8:07:3b:86:
c7:1e:e1:f5:aa:8d:5b:7d:74:75:f4:56:2a:cc:28:ce:46:a9:
fd:8a:bf:5a:ee:15:eb:42:73:42:a0:5d:fc:e9:24:fc:c0:53:
e0:e6:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 12:24:16 2025 by rpki-client