This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1c0wvxM4tt5ck3QlU1Msd_9DSZ4.roa File: 1c0wvxM4tt5ck3QlU1Msd_9DSZ4.roa (raw, json) Hash identifier: J4dbUBM0EtqjGfhFuHzdqt8q7RXejP3SX9GDo5xnMPk= Subject key identifier: D5:CD:30:BF:13:38:B6:DE:5C:93:74:25:53:53:2C:77:FF:43:49:9E Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B255A3E9299ED87B8AC632331EBB84726 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1c0wvxM4tt5ck3QlU1Msd_9DSZ4.roa Signing time: Tue 16 Dec 2025 04:10:29 +0000 ROA not before: Tue 16 Dec 2025 04:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50053 IP address blocks: 194.87.37.0/24 maxlen: 24 195.133.17.0/24 maxlen: 24 195.133.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:5a:3e:92:99:ed:87:b8:ac:63:23:31:eb:b8:47:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Dec 16 04:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d5cd30bf1338b6de5c93742553532c77ff43499e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:31:f8:4d:e3:6f:43:bf:43:de:35:71:a0: 34:27:41:b9:c8:58:1e:e5:6f:ad:40:9a:3e:73:97: 9a:6a:7c:ab:8c:c2:78:d0:b1:23:b3:bd:f5:46:8b: b3:b8:2a:bb:34:50:47:92:ce:ef:da:c5:1c:4e:50: 0e:e4:1f:fe:d2:ec:82:86:df:e7:6b:8c:a9:a3:13: b2:ed:0a:03:6e:8e:cf:b0:c1:5b:c7:99:bd:3c:d5: 98:0f:e3:b2:9c:77:1b:28:43:bf:9a:68:62:c1:18: 14:b4:93:14:6e:43:0e:56:3f:a1:22:05:08:11:ab: 1f:00:fc:1f:fc:38:e1:94:fe:88:a9:35:ff:84:f6: 04:02:06:0c:26:36:50:b9:f8:60:96:30:ff:18:6a: 07:29:35:ce:59:96:4d:2a:21:49:28:7b:c8:da:5c: f4:01:48:99:94:87:45:ad:5a:05:74:b4:65:c6:fa: fe:1b:c9:3c:68:71:9d:bf:be:49:44:96:3d:dd:61: 26:45:f1:58:75:40:67:83:e0:bf:27:60:49:97:88: 27:87:2c:10:0d:f6:d2:8f:69:0b:e0:05:ea:94:f0: eb:f6:11:1b:8c:fe:62:e9:97:c4:83:49:3a:14:f8: 4f:1d:26:c6:3c:4f:c7:ad:23:9f:3f:23:29:f5:49: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CD:30:BF:13:38:B6:DE:5C:93:74:25:53:53:2C:77:FF:43:49:9E X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1c0wvxM4tt5ck3QlU1Msd_9DSZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.37.0/24 195.133.17.0/24 195.133.39.0/24 Signature Algorithm: sha256WithRSAEncryption 47:1e:05:67:03:7f:f1:7f:c8:f7:d8:3f:a1:a5:78:56:80:22: 37:b7:cb:35:17:84:47:b7:53:33:66:69:9b:9a:a5:fd:cf:27: 71:6d:54:d4:fe:e4:c0:0b:7b:2c:d7:58:50:ae:f8:fa:18:a8: 61:4f:ef:7a:cd:70:67:2a:ec:b1:2f:fd:61:4a:dc:87:be:5d: 19:73:8a:bb:30:1f:29:61:2e:af:47:10:e8:dc:e9:1d:f5:84: 3d:ee:1a:9d:82:e2:f3:a3:43:ad:38:46:3e:32:eb:aa:1f:1c: 49:07:ce:c5:cc:1a:2f:e0:07:df:99:1d:06:ff:5c:f3:e6:72: fc:35:c3:37:58:9d:df:f7:e2:e9:4c:f1:62:ba:25:f0:e3:b5: 57:9c:74:3e:c8:fc:16:47:d9:c1:db:77:ec:9b:a2:7b:36:de: 5d:bd:90:ac:af:7b:2a:86:b7:ba:65:79:12:7c:8d:bc:fd:a4: ee:b9:f8:1d:8b:e8:86:5b:57:0d:e3:69:1d:28:4a:cb:ae:e4: bd:c0:37:12:49:41:01:79:16:55:9d:53:35:97:8e:17:c8:fb: 6f:10:ca:3c:74:f5:3e:13:f4:54:fd:35:2b:3b:02:3e:f0:63: f4:7f:2c:aa:0c:84:91:0a:79:a2:30:2e:91:e6:7d:d9:b5:95: 82:9b:3b:1b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZslWj6Sme2HuKxjIzHruEcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMjE2MDQxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWNkMzBiZjEzMzhiNmRlNWM5Mzc0MjU1MzUzMmM3N2ZmNDM0OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn4x+E3jb0O/Q941caA0J0G5yFge 5W+tQJo+c5eaanyrjMJ40LEjs731RouzuCq7NFBHks7v2sUcTlAO5B/+0uyCht/n a4ypoxOy7QoDbo7PsMFbx5m9PNWYD+OynHcbKEO/mmhiwRgUtJMUbkMOVj+hIgUI EasfAPwf/DjhlP6IqTX/hPYEAgYMJjZQufhgljD/GGoHKTXOWZZNKiFJKHvI2lz0 AUiZlIdFrVoFdLRlxvr+G8k8aHGdv75JRJY93WEmRfFYdUBng+C/J2BJl4gnhywQ DfbSj2kL4AXqlPDr9hEbjP5i6ZfEg0k6FPhPHSbGPE/HrSOfPyMp9UkF0QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNXNML8TOLbeXJN0JVNTLHf/Q0meMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvMWMwd3Z4TTR0dDVjazNRbFUxTXNkXzlEU1o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwlclAwQA w4URAwQAw4UnMA0GCSqGSIb3DQEBCwUAA4IBAQBHHgVnA3/xf8j32D+hpXhWgCI3 t8s1F4RHt1MzZmmbmqX9zydxbVTU/uTAC3ss11hQrvj6GKhhT+96zXBnKuyxL/1h StyHvl0Zc4q7MB8pYS6vRxDo3Okd9YQ97hqdguLzo0OtOEY+MuuqHxxJB87FzBov 4AffmR0G/1zz5nL8NcM3WJ3f9+LpTPFiuiXw47VXnHQ+yPwWR9nB23fsm6J7Nt5d vZCsr3sqhre6ZXkSfI28/aTuufgdi+iGW1cN42kdKErLruS9wDcSSUEBeRZVnVM1 l44XyPtvEMo8dPU+E/RU/TUrOwI+8GP0fyyqDISRCnmiMC6R5n3ZtZWCmzsb -----END CERTIFICATE-----Generated at Wed Dec 17 12:31:13 2025 by rpki-client