This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/UtmhEOLu5jyXyfL-TtwHoqXAAqY.roa File: UtmhEOLu5jyXyfL-TtwHoqXAAqY.roa (raw, json) Hash identifier: YHko28qzK0fZNdpEAvngg8c4tJnZb9FKoBOSEJpAqxI= Subject key identifier: 52:D9:A1:10:E2:EE:E6:3C:97:C9:F2:FE:4E:DC:07:A2:A5:C0:02:A6 Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B2242EAEC1EFE17C94DE8C01825AFC5B8 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/UtmhEOLu5jyXyfL-TtwHoqXAAqY.roa Signing time: Mon 15 Dec 2025 13:46:09 +0000 ROA not before: Mon 15 Dec 2025 13:46:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197540 IP address blocks: 185.158.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:42:ea:ec:1e:fe:17:c9:4d:e8:c0:18:25:af:c5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Dec 15 13:46:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=52d9a110e2eee63c97c9f2fe4edc07a2a5c002a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:27:5c:04:5a:f7:ca:69:58:9b:7c:e3:58:49: 78:22:b7:51:55:6f:08:9f:4c:95:7e:2f:79:9b:e0: 3e:67:1f:92:21:46:cf:14:95:fd:6e:b3:d5:72:b7: 2e:b2:95:74:b8:13:3d:22:53:12:ed:3a:2f:a9:e5: a5:06:1f:2b:fd:a7:ef:c2:b3:4c:12:79:ad:f8:7b: 24:6e:5e:63:02:04:6c:fb:f8:5b:a6:cb:26:06:bd: c6:03:90:bf:74:5e:a9:c4:b8:51:f6:34:df:20:b6: 0f:44:1c:f3:9a:9f:9b:aa:9d:7a:c7:13:2d:ab:91: f0:18:49:af:bd:91:74:ae:8e:cb:a5:09:98:80:d0: dc:7e:d6:a0:1e:d6:dc:90:cd:d5:75:91:83:b3:63: 74:ab:6f:54:cc:48:68:94:6a:ec:5e:ac:11:c5:67: 10:33:3e:f5:a6:14:e4:4c:f1:6d:be:69:19:c4:48: a1:f3:2a:7d:4e:c9:0a:2b:82:af:3f:71:27:3e:8d: 03:76:3d:27:8c:5a:10:0a:fd:4d:16:54:32:aa:ab: ca:bb:5b:3a:34:dd:a8:ff:f2:ac:b9:ed:40:8b:23: ad:77:a9:e8:42:66:c4:15:d2:cd:76:86:0c:1a:97: 62:70:dd:7c:39:4b:dd:9b:e4:b9:d5:88:32:19:4f: b8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D9:A1:10:E2:EE:E6:3C:97:C9:F2:FE:4E:DC:07:A2:A5:C0:02:A6 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/UtmhEOLu5jyXyfL-TtwHoqXAAqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.212.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:bc:7b:a5:6e:f0:c0:d3:e4:c1:33:1e:6a:7e:01:5e:0f:38: 5a:65:3d:26:6e:66:f4:10:8f:88:f5:ea:30:86:75:20:4c:6b: 77:f4:58:b1:3c:68:14:62:52:be:1c:fc:cd:08:c8:34:06:c6: e4:89:f4:c4:55:ba:c2:08:ca:d0:87:1f:a4:4d:b0:dd:50:42: 0e:73:97:d8:c6:89:ca:74:f5:97:e6:d1:93:46:9b:27:b7:7e: 39:78:6e:3f:69:72:a1:66:21:cc:0f:fd:ab:8f:11:72:9e:3b: ae:3e:47:4f:26:60:2c:32:3d:19:a4:03:2c:13:c9:e8:a8:2f: 55:2a:34:62:62:0c:74:c9:fb:0f:c3:2c:2b:9b:59:3a:35:02: b3:81:6c:cb:dd:0e:b4:a2:31:37:e3:3d:6d:b5:69:02:8a:54: fe:9d:d5:6b:ba:e8:ef:95:80:68:b9:54:71:4b:72:31:f1:c5: 40:18:9d:b7:f6:51:7c:4d:30:c3:4d:fa:99:d2:32:82:01:1d: e1:82:58:6a:e2:31:43:41:dd:3c:b8:b7:87:14:33:69:44:2d: dc:66:b0:8d:18:24:ec:1b:75:eb:3b:03:f2:85:47:4a:34:b6: c6:47:61:21:33:ec:e7:0f:a0:08:df:e5:dd:3b:84:a5:8d:8f: 07:26:ce:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsiQursHv4XyU3owBglr8W4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUxMjE1MTM0NjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmQ5YTExMGUyZWVlNjNjOTdjOWYyZmU0ZWRjMDdhMmE1YzAwMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CdcBFr3ymlYm3zjWEl4IrdRVW8I n0yVfi95m+A+Zx+SIUbPFJX9brPVcrcuspV0uBM9IlMS7TovqeWlBh8r/afvwrNM Enmt+Hskbl5jAgRs+/hbpssmBr3GA5C/dF6pxLhR9jTfILYPRBzzmp+bqp16xxMt q5HwGEmvvZF0ro7LpQmYgNDcftagHtbckM3VdZGDs2N0q29UzEholGrsXqwRxWcQ Mz71phTkTPFtvmkZxEih8yp9TskKK4KvP3EnPo0Ddj0njFoQCv1NFlQyqqvKu1s6 NN2o//Ksue1AiyOtd6noQmbEFdLNdoYMGpdicN18OUvdm+S51YgyGU+4NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFLZoRDi7uY8l8ny/k7cB6KlwAKmMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvVXRtaEVPTHU1anlYeWZMLVR0d0hvcVhBQXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ7UMA0G CSqGSIb3DQEBCwUAA4IBAQAsvHulbvDA0+TBMx5qfgFeDzhaZT0mbmb0EI+I9eow hnUgTGt39FixPGgUYlK+HPzNCMg0BsbkifTEVbrCCMrQhx+kTbDdUEIOc5fYxonK dPWX5tGTRpsnt345eG4/aXKhZiHMD/2rjxFynjuuPkdPJmAsMj0ZpAMsE8noqC9V KjRiYgx0yfsPwywrm1k6NQKzgWzL3Q60ojE34z1ttWkCilT+ndVruujvlYBouVRx S3Ix8cVAGJ239lF8TTDDTfqZ0jKCAR3hglhq4jFDQd08uLeHFDNpRC3cZrCNGCTs G3XrOwPyhUdKNLbGR2EhM+znD6AI3+XdO4SljY8HJs50 -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:40 2025 by rpki-client