This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uqfoqdlzGoN9et6fzb7necnZYIw.roa
File: uqfoqdlzGoN9et6fzb7necnZYIw.roa (raw, json)
Hash identifier: SgUL7vkTjwn861S4CAyK+tSlBEkUYJUvaZzrQyQfimE=
Subject key identifier: BA:A7:E8:A9:D9:73:1A:83:7D:7A:DE:9F:CD:BE:E7:79:C9:D9:60:8C
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019B130BABB088231DB47FC79CEC6F504E1E
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uqfoqdlzGoN9et6fzb7necnZYIw.roa
Signing time: Fri 12 Dec 2025 14:51:30 +0000
ROA not before: Fri 12 Dec 2025 14:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211177
IP address blocks: 185.228.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:13:0b:ab:b0:88:23:1d:b4:7f:c7:9c:ec:6f:50:4e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 12 14:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baa7e8a9d9731a837d7ade9fcdbee779c9d9608c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:18:aa:48:8e:b0:c8:48:ba:66:79:f4:6b:e7:
cd:95:7c:7b:87:38:61:f2:92:d8:8f:b7:8e:44:76:
9b:a2:23:05:b1:18:91:a7:45:3e:8c:99:6f:50:d4:
44:fb:cd:25:e9:16:40:70:53:4a:c7:e9:7a:ce:3f:
2c:e6:a9:8a:3a:4f:ad:bb:e8:6a:6e:38:46:6d:94:
41:d7:0f:69:85:a8:67:ed:54:cf:c7:61:fd:f7:8d:
57:98:30:9d:76:83:c4:2a:a7:0e:5f:cf:cd:ba:3b:
e1:7f:24:de:73:a0:84:07:7b:b1:7d:91:7b:34:dc:
62:a5:e5:c7:c9:77:5e:aa:64:b0:8d:df:f2:8b:02:
2c:dd:09:d9:a1:23:70:9d:f4:07:ee:01:c2:6b:b0:
ae:a6:9b:f9:98:fb:4e:e7:39:cf:2c:ff:f0:6d:ec:
d1:f6:0d:5c:57:68:dd:22:79:df:f2:4b:16:45:2e:
7a:a5:07:19:ac:73:e4:09:52:20:8e:2b:fc:47:c8:
73:8c:c5:20:d8:5c:67:5c:4f:1d:a2:f6:cc:54:ef:
6a:53:f8:20:dc:9f:08:da:62:1b:b5:0a:ee:bd:39:
31:42:43:c9:a6:15:76:ed:50:c3:40:36:32:a1:8a:
ef:3f:e2:cc:b9:e9:32:b9:5a:c4:3b:aa:7c:cf:fd:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:E8:A9:D9:73:1A:83:7D:7A:DE:9F:CD:BE:E7:79:C9:D9:60:8C
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uqfoqdlzGoN9et6fzb7necnZYIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.80.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a2:7e:6b:da:eb:e8:d6:8e:43:ce:12:e5:14:7f:e1:f0:62:
24:bf:72:22:bc:43:f9:47:df:57:25:43:65:68:c2:6d:4c:2f:
8e:b6:7f:f0:d3:cc:aa:99:0a:fb:49:46:a3:1d:93:e7:0d:bf:
11:4c:6e:c6:1f:4a:1e:2d:c1:ee:0c:48:09:eb:d1:27:bb:f3:
61:42:d2:90:c5:b2:d4:aa:09:b9:37:db:48:a4:54:f6:49:fb:
88:8e:22:b1:44:7f:2e:a7:2c:02:d6:3d:cc:39:44:e7:71:5e:
02:43:89:bb:8a:46:53:3c:3b:96:72:eb:2f:15:cf:70:82:5e:
dc:fd:09:54:43:d2:bb:1b:8f:4c:95:32:48:60:b2:aa:a8:ec:
02:f9:22:71:86:93:f1:72:05:02:96:75:ff:6c:db:49:ce:36:
a9:a1:85:4c:8e:db:81:4e:ba:2b:8a:96:1a:03:0f:bd:fb:09:
d8:ff:51:66:c4:ad:93:9e:bf:06:c6:3d:7d:fd:aa:59:a9:cd:
45:ee:68:c0:df:d5:dd:1a:41:62:a7:fc:61:e3:35:fc:df:57:
08:aa:7e:14:64:64:a2:52:1e:d0:ad:d6:ae:3c:09:5e:af:28:
60:34:ee:bf:63:f6:d4:f3:07:63:eb:3c:88:21:75:35:d4:6b:
1d:a2:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:35:27 2025 by rpki-client