This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/u-RaSUquUQ6dBqxpJQVWYTuFbEU.roa File: u-RaSUquUQ6dBqxpJQVWYTuFbEU.roa (raw, json) Hash identifier: vQbhJtKQku94Qo33Cw76DsBzUYXs4nnWL7nTa8ZiQpc= Subject key identifier: BB:E4:5A:49:4A:AE:51:0E:9D:06:AC:69:25:05:56:61:3B:85:6C:45 Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Certificate serial: 019B32FFA859FE458C055B9686B2A75C523D Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/u-RaSUquUQ6dBqxpJQVWYTuFbEU.roa Signing time: Thu 18 Dec 2025 19:46:14 +0000 ROA not before: Thu 18 Dec 2025 19:46:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42037 IP address blocks: 185.155.180.0/22 maxlen: 24 2a00:8c40::/32 maxlen: 48 2a00:8c40:238::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:ff:a8:59:fe:45:8c:05:5b:96:86:b2:a7:5c:52:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Validity Not Before: Dec 18 19:46:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bbe45a494aae510e9d06ac69250556613b856c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fb:01:fd:dc:a2:1f:32:16:09:42:95:cb:52: 28:77:d6:96:d9:35:85:44:3d:da:9f:21:97:cd:86: 65:d0:42:04:99:d2:a8:c6:75:af:25:27:c6:5f:66: 9a:ee:46:1a:e3:df:62:57:e7:a6:91:8b:97:c5:4d: ad:69:cb:e0:7e:51:53:07:02:cf:3c:12:ed:63:17: c7:cd:a9:52:c1:2e:4c:02:34:71:4d:a3:40:09:72: 2b:c7:4a:28:76:29:e0:5a:49:20:91:76:c2:94:d7: bd:57:84:c0:f1:1e:a9:20:c0:57:20:02:4b:62:79: bc:9e:5b:ee:ec:77:fd:b6:0f:06:70:8a:75:d3:d9: a6:ba:d7:bb:1a:a3:ec:9a:d7:8c:37:45:3f:e7:96: ac:6b:5a:1a:af:ef:85:c1:5b:01:c5:a7:49:e2:d4: 58:50:24:c5:0f:42:97:77:20:0c:a2:53:88:83:4b: ae:70:01:b6:9a:4e:0b:f7:a3:be:50:f4:2a:e7:f8: b4:00:8f:c0:58:e5:5c:44:49:12:2d:59:aa:34:07: a5:ae:ed:19:2c:6c:df:47:be:17:32:c6:2f:58:ba: 90:06:f3:22:6c:fc:ef:a0:81:82:19:2a:06:a3:ad: a4:00:50:96:7f:7b:04:66:7c:d7:72:44:6f:02:da: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:5A:49:4A:AE:51:0E:9D:06:AC:69:25:05:56:61:3B:85:6C:45 X509v3 Authority Key Identifier: keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/u-RaSUquUQ6dBqxpJQVWYTuFbEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.180.0/22 IPv6: 2a00:8c40::/32 Signature Algorithm: sha256WithRSAEncryption 24:9b:dd:db:85:1b:0d:75:16:8f:1b:81:b5:ca:27:b9:0f:01: a3:22:5f:f9:98:7e:87:84:aa:f3:cc:f2:78:81:fd:29:cf:03: 70:aa:10:a6:b8:9d:03:c3:8f:84:07:c2:0e:dd:ba:30:b1:75: b0:99:bf:49:49:e2:9e:ad:0f:1d:fa:44:a8:88:5b:f3:7e:88: 2c:e5:8d:8d:80:05:19:86:7b:bb:3d:35:9e:6d:0a:13:30:7b: e8:4b:02:b3:a4:fc:8b:eb:ed:43:d0:34:ba:c0:c1:05:48:be: f4:db:8c:43:cc:99:ec:52:65:c0:91:90:04:e9:0f:cd:ee:12: ef:ba:ac:54:c1:98:82:ff:58:73:57:c2:dc:24:d6:1e:0d:0f: 4d:31:e7:d2:70:8b:9b:97:ea:33:9f:1e:40:81:9b:ec:26:22: ae:5a:d2:47:ac:e5:09:9f:12:e9:86:cc:f9:dc:72:71:3b:a9: e5:36:69:e2:8c:ba:c2:9f:99:82:3b:8b:1e:fb:0d:da:32:89: 79:ec:87:11:87:7b:ad:bc:dc:e3:b5:c2:1a:65:06:c0:89:c2: 90:b9:31:4e:2e:ef:94:de:e6:0d:ee:2c:4e:88:6b:fe:05:37: 08:b3:54:a7:5e:7b:7d:74:d5:0c:13:7e:83:99:88:85:bb:7e: 6a:77:d1:72 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsy/6hZ/kWMBVuWhrKnXFI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWYwMTg4MWI3M2M4ZTliNWQ5MjIzOTIyOWE2ZTUxMmVj YTRlN2MwHhcNMjUxMjE4MTk0NjE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmU0NWE0OTRhYWU1MTBlOWQwNmFjNjkyNTA1NTY2MTNiODU2YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/sB/dyiHzIWCUKVy1Iod9aW2TWF RD3anyGXzYZl0EIEmdKoxnWvJSfGX2aa7kYa499iV+emkYuXxU2tacvgflFTBwLP PBLtYxfHzalSwS5MAjRxTaNACXIrx0oodingWkkgkXbClNe9V4TA8R6pIMBXIAJL Ynm8nlvu7Hf9tg8GcIp109mmute7GqPsmteMN0U/55asa1oar++FwVsBxadJ4tRY UCTFD0KXdyAMolOIg0uucAG2mk4L96O+UPQq5/i0AI/AWOVcREkSLVmqNAelru0Z LGzfR74XMsYvWLqQBvMibPzvoIGCGSoGo62kAFCWf3sEZnzXckRvAtr3owIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLvkWklKrlEOnQasaSUFVmE7hWxFMB8GA1UdIwQY MBaAFO8fAYgbc8jptdkiOSKablEuyk58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYt NTUxMzFjYzFlZmVhLzEvdS1SYVNVcXVVUTZkQnF4cEpRVldZVHVGYkVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYtNTUxMzFjYzFlZmVh LzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZu0MA0E AgACMAcDBQAqAIxAMA0GCSqGSIb3DQEBCwUAA4IBAQAkm93bhRsNdRaPG4G1yie5 DwGjIl/5mH6HhKrzzPJ4gf0pzwNwqhCmuJ0Dw4+EB8IO3bowsXWwmb9JSeKerQ8d +kSoiFvzfogs5Y2NgAUZhnu7PTWebQoTMHvoSwKzpPyL6+1D0DS6wMEFSL7024xD zJnsUmXAkZAE6Q/N7hLvuqxUwZiC/1hzV8LcJNYeDQ9NMefScIubl+oznx5AgZvs JiKuWtJHrOUJnxLphsz53HJxO6nlNmnijLrCn5mCO4se+w3aMol57IcRh3utvNzj tcIaZQbAicKQuTFOLu+U3uYN7ixOiGv+BTcIs1SnXnt9dNUME36DmYiFu35qd9Fy -----END CERTIFICATE-----Generated at Sat Dec 27 08:59:38 2025 by rpki-client