This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/U-gTB136QQdQ6GNss6ZeRtIvG2w.roa File: U-gTB136QQdQ6GNss6ZeRtIvG2w.roa (raw, json) Hash identifier: 9Vc5S53HpbiVtc7GbEZ9M6eKX4INi6kd2mbzaga/l+g= Subject key identifier: 53:E8:13:07:5D:FA:41:07:50:E8:63:6C:B3:A6:5E:46:D2:2F:1B:6C Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019ACBE008AB3C9965E86801BABE0672B245 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/U-gTB136QQdQ6GNss6ZeRtIvG2w.roa Signing time: Fri 28 Nov 2025 19:10:48 +0000 ROA not before: Fri 28 Nov 2025 19:10:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 195.96.129.0/24 maxlen: 24 217.28.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:e0:08:ab:3c:99:65:e8:68:01:ba:be:06:72:b2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Nov 28 19:10:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53e813075dfa410750e8636cb3a65e46d22f1b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:70:b4:5b:4f:ee:0d:d5:f7:46:8d:c3:cd:de: e4:69:2b:f8:04:81:d6:76:c6:f2:6f:25:28:aa:c9: 31:9a:0d:c9:d8:a0:18:ca:f5:18:20:ff:96:5c:23: c1:ce:ee:fd:c6:ae:db:13:46:07:18:51:e2:a5:60: 87:f3:cc:70:7c:04:2f:8a:3e:26:f5:31:19:b5:15: 13:3d:94:fe:ab:4d:0f:b8:b9:98:65:33:a9:ae:9f: d7:90:4c:e5:81:0b:30:3e:d9:c9:3b:f2:b3:dc:79: 1e:0f:f9:db:49:cd:fa:d2:6c:58:b0:4a:fe:28:e1: dd:9d:44:1b:f4:b1:0d:ff:44:9a:77:ff:3b:4f:df: f8:91:90:1a:f0:92:11:00:07:2c:9e:3b:d3:3e:e6: 2a:dc:88:df:79:28:4b:83:6b:75:25:41:5d:30:a6: 4e:27:df:f3:11:42:24:44:1d:99:cd:92:6e:e2:65: 74:9a:d7:8d:ac:ee:28:88:50:dc:ff:21:4d:08:48: 05:80:d7:ab:e5:d9:d9:2f:0d:a1:83:44:52:f8:36: ed:2f:ad:21:77:c7:43:82:0c:2c:ff:b9:64:dc:12: ce:30:b9:02:18:f0:74:cf:8a:83:aa:fb:03:1b:00: a3:0f:0e:e9:c7:62:c9:ae:2a:df:f1:85:65:e5:f5: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E8:13:07:5D:FA:41:07:50:E8:63:6C:B3:A6:5E:46:D2:2F:1B:6C X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/U-gTB136QQdQ6GNss6ZeRtIvG2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.96.129.0/24 217.28.129.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:f8:f1:f0:92:cc:f5:60:40:5e:b8:58:11:2c:06:34:f1:6f: d2:87:bc:32:2d:b7:ef:f0:f7:84:9e:64:d2:8a:8d:40:42:6c: 6e:f8:6b:d0:38:b6:11:4e:7f:dc:ca:23:9f:4d:96:11:2e:5b: 58:f9:97:fe:b4:92:39:6f:e2:7f:0f:dd:38:29:48:bd:d3:8e: 95:e4:d9:97:b7:aa:e6:28:15:97:29:09:89:1f:da:fa:ae:91: a5:d1:49:25:82:9c:6a:c1:40:e7:f7:0e:bb:b5:3a:1f:08:38: e6:01:4e:2e:57:f6:2b:47:62:fa:f9:22:05:a7:fe:75:7a:b6: fd:fb:ae:e0:c7:be:77:24:23:3a:4b:17:b0:12:e6:a7:1c:28: 7a:a8:e0:f2:91:4b:d9:07:11:f6:21:42:2a:ea:f3:ab:61:60: dd:b8:40:b3:29:7e:1d:5b:25:f5:ce:0d:18:76:96:70:46:b5: fa:5b:97:a6:c4:23:f3:3b:e3:b5:54:74:10:65:33:42:ad:f5: 35:4d:29:5b:9c:61:6a:69:f4:f4:b1:aa:bc:66:31:08:64:b9: d1:e4:ea:ae:2a:10:0d:f4:06:46:bc:3e:10:f4:f4:72:dc:8a: 54:9e:f1:80:9e:39:35:07:fe:0f:af:6b:ca:fa:99:bf:fd:d8: ba:1d:95:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrL4AirPJll6GgBur4GcrJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjUxMTI4MTkxMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2U4MTMwNzVkZmE0MTA3NTBlODYzNmNiM2E2NWU0NmQyMmYxYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HC0W0/uDdX3Ro3Dzd7kaSv4BIHW dsbybyUoqskxmg3J2KAYyvUYIP+WXCPBzu79xq7bE0YHGFHipWCH88xwfAQvij4m 9TEZtRUTPZT+q00PuLmYZTOprp/XkEzlgQswPtnJO/Kz3HkeD/nbSc360mxYsEr+ KOHdnUQb9LEN/0Sad/87T9/4kZAa8JIRAAcsnjvTPuYq3IjfeShLg2t1JUFdMKZO J9/zEUIkRB2ZzZJu4mV0mteNrO4oiFDc/yFNCEgFgNer5dnZLw2hg0RS+DbtL60h d8dDggws/7lk3BLOMLkCGPB0z4qDqvsDGwCjDw7px2LJrirf8YVl5fUaBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFPoEwdd+kEHUOhjbLOmXkbSLxtsMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvVS1nVEIxMzZRUWRRNkdOc3M2WmVSdEl2RzJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw2CBAwQA 2RyBMA0GCSqGSIb3DQEBCwUAA4IBAQAM+PHwksz1YEBeuFgRLAY08W/Sh7wyLbfv 8PeEnmTSio1AQmxu+GvQOLYRTn/cyiOfTZYRLltY+Zf+tJI5b+J/D904KUi9046V 5NmXt6rmKBWXKQmJH9r6rpGl0UklgpxqwUDn9w67tTofCDjmAU4uV/YrR2L6+SIF p/51erb9+67gx753JCM6SxewEuanHCh6qODykUvZBxH2IUIq6vOrYWDduECzKX4d WyX1zg0YdpZwRrX6W5emxCPzO+O1VHQQZTNCrfU1TSlbnGFqafT0saq8ZjEIZLnR 5OquKhAN9AZGvD4Q9PRy3IpUnvGAnjk1B/4Pr2vK+pm//di6HZUM -----END CERTIFICATE-----Generated at Fri Dec 5 17:40:52 2025 by rpki-client