This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/uwev7I_QSnb8uPd2lQmP_EPvQyk.roa File: uwev7I_QSnb8uPd2lQmP_EPvQyk.roa (raw, json) Hash identifier: pPQnoLSpGD9bPFvss8vOJAXXOfihWCOJuYjZwGXWddQ= Subject key identifier: BB:07:AF:EC:8F:D0:4A:76:FC:B8:F7:76:95:09:8F:FC:43:EF:43:29 Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3 Certificate serial: 019AC9CFC61DD4A1C2CCA1EB862A0572CBD8 Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/uwev7I_QSnb8uPd2lQmP_EPvQyk.roa Signing time: Fri 28 Nov 2025 09:33:48 +0000 ROA not before: Fri 28 Nov 2025 09:33:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207964 IP address blocks: 5.23.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:cf:c6:1d:d4:a1:c2:cc:a1:eb:86:2a:05:72:cb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3 Validity Not Before: Nov 28 09:33:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb07afec8fd04a76fcb8f77695098ffc43ef4329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:94:90:c7:92:a6:89:82:fd:05:71:eb:8d: 2e:b5:40:c6:95:ce:d4:38:bd:c7:44:d5:89:db:2a: a7:37:20:87:5b:6a:34:58:f3:a4:fe:35:b6:18:6a: 71:c3:aa:92:ac:92:b0:fb:db:f9:89:e2:5e:0b:4f: a5:90:50:8c:c4:27:3b:85:ae:07:c3:11:8d:41:80: 5d:21:26:ff:f7:7a:50:d8:c2:38:c6:56:3f:84:14: 6e:44:59:c7:37:b8:90:2f:73:4e:c6:6b:1c:a1:39: 53:08:4d:93:1a:97:1e:88:9e:61:25:bd:86:20:52: 59:3e:be:de:ee:3d:0e:9c:23:da:44:09:9a:24:35: 62:f3:0f:fd:6c:98:b7:55:a9:67:30:ef:90:2e:cd: cd:88:42:67:cf:fe:02:af:38:aa:89:67:6e:c4:c6: 82:22:ab:90:13:d6:86:59:c4:47:15:f0:78:4b:f1: 76:1e:c2:a8:63:54:da:91:24:29:23:25:4e:7f:61: 67:c6:4b:8e:96:ee:31:2f:18:c7:7d:03:1f:0c:a7: c8:f0:90:09:c5:e9:08:c6:60:a3:e7:d8:36:ac:f8: 81:05:22:f3:e0:19:f2:f3:3e:9b:c7:fd:3f:41:c6: 97:95:32:8a:db:37:f2:3e:c5:1c:b7:9a:5f:1f:25: 02:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:AF:EC:8F:D0:4A:76:FC:B8:F7:76:95:09:8F:FC:43:EF:43:29 X509v3 Authority Key Identifier: keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/uwev7I_QSnb8uPd2lQmP_EPvQyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.32.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:63:e5:fc:41:f4:2b:40:ae:3b:a2:8a:72:3f:83:b1:a0:92: f8:f9:7c:78:b1:b4:b2:ab:1f:cd:af:ba:93:bc:4b:1c:fe:ef: 9c:3e:a4:c3:f9:51:73:2e:2c:d1:e1:b2:8b:af:f1:8a:56:71: 82:f2:d2:f0:01:1e:cb:39:5a:e4:b8:20:5c:24:ae:fa:b5:eb: 6a:c7:2d:af:0b:87:c2:e4:14:f6:b7:47:41:65:0c:be:cc:6a: 09:13:e7:c0:24:a9:3e:ec:91:b3:01:b4:64:b3:8a:de:25:02: bb:f7:db:e6:67:14:52:73:c3:8e:61:c3:ca:a1:4c:22:f6:97: 92:90:4b:85:37:b0:f2:49:8d:7c:6c:99:3d:20:53:d7:6f:ad: 8d:b4:3e:d2:a1:bb:28:39:9b:44:06:90:10:92:e0:50:a4:da: 65:47:d8:fd:bf:bf:77:d8:38:95:fd:ff:1b:94:1a:a7:49:d6: 19:9c:9c:12:3c:0f:79:61:e3:9c:09:8e:33:a1:0b:49:c2:c0: d2:c3:6e:69:0b:a6:bc:74:df:b3:8e:13:64:33:af:45:0c:2e: 8b:2b:7c:db:b1:6b:05:ea:6b:f4:cf:9f:a9:82:cc:a1:af:a7: 42:56:73:bc:bc:2b:62:3b:aa:c6:34:d8:1e:72:00:d2:67:22: a5:33:45:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJz8Yd1KHCzKHrhioFcsvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4 MjFiZjMwHhcNMjUxMTI4MDkzMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjA3YWZlYzhmZDA0YTc2ZmNiOGY3NzY5NTA5OGZmYzQzZWY0MzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAGUkMeSpomC/QVx640utUDGlc7U OL3HRNWJ2yqnNyCHW2o0WPOk/jW2GGpxw6qSrJKw+9v5ieJeC0+lkFCMxCc7ha4H wxGNQYBdISb/93pQ2MI4xlY/hBRuRFnHN7iQL3NOxmscoTlTCE2TGpceiJ5hJb2G IFJZPr7e7j0OnCPaRAmaJDVi8w/9bJi3ValnMO+QLs3NiEJnz/4CrziqiWduxMaC IquQE9aGWcRHFfB4S/F2HsKoY1TakSQpIyVOf2FnxkuOlu4xLxjHfQMfDKfI8JAJ xekIxmCj59g2rPiBBSLz4Bny8z6bx/0/QcaXlTKK2zfyPsUct5pfHyUCpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLsHr+yP0Ep2/Lj3dpUJj/xD70MpMB8GA1UdIwQY MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt MDI5NjRjNTBkMjEyLzEvdXdldjdJX1FTbmI4dVBkMmxRbVBfRVB2UXlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBRcgMA0G CSqGSIb3DQEBCwUAA4IBAQCfY+X8QfQrQK47oopyP4OxoJL4+Xx4sbSyqx/Nr7qT vEsc/u+cPqTD+VFzLizR4bKLr/GKVnGC8tLwAR7LOVrkuCBcJK76tetqxy2vC4fC 5BT2t0dBZQy+zGoJE+fAJKk+7JGzAbRks4reJQK799vmZxRSc8OOYcPKoUwi9peS kEuFN7DySY18bJk9IFPXb62NtD7SobsoOZtEBpAQkuBQpNplR9j9v7932DiV/f8b lBqnSdYZnJwSPA95YeOcCY4zoQtJwsDSw25pC6a8dN+zjhNkM69FDC6LK3zbsWsF 6mv0z5+pgsyhr6dCVnO8vCtiO6rGNNgecgDSZyKlM0W0 -----END CERTIFICATE-----Generated at Thu Dec 4 12:04:13 2025 by rpki-client