This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gwtdZp5ZHZsOkMtBIqwdjpbchbU.roa File: gwtdZp5ZHZsOkMtBIqwdjpbchbU.roa (raw, json) Hash identifier: v/CLt1SKZGHqaGR8D3dHlTeEflfXweXUpHPJXiqWSEE= Subject key identifier: 83:0B:5D:66:9E:59:1D:9B:0E:90:CB:41:22:AC:1D:8E:96:DC:85:B5 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019A96C535525F8CF34B1F2AC9AC8C3677C9 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gwtdZp5ZHZsOkMtBIqwdjpbchbU.roa Signing time: Tue 18 Nov 2025 11:41:37 +0000 ROA not before: Tue 18 Nov 2025 11:41:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 62.76.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:c5:35:52:5f:8c:f3:4b:1f:2a:c9:ac:8c:36:77:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 18 11:41:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=830b5d669e591d9b0e90cb4122ac1d8e96dc85b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:11:17:db:c1:be:bd:d0:9a:0b:df:aa:a6: bf:93:5d:6d:64:18:ca:42:c3:8c:76:a9:93:d2:82: fb:04:76:52:bc:c1:06:55:5c:33:27:be:aa:6b:04: d1:02:bc:7e:69:48:ce:0d:71:37:19:ba:cb:26:41: 68:a8:69:d9:d0:4c:65:fe:b2:bc:cf:4e:5a:65:a4: 14:d1:23:9e:71:88:02:9a:3b:21:7c:27:0e:ec:0b: 03:34:a1:22:4d:06:c4:5f:6a:fc:fc:35:f0:7f:0c: b1:40:aa:4c:2a:7c:e6:8d:23:c1:cf:1a:c2:84:d2: f2:22:3f:13:f2:56:5b:33:a5:4c:fe:8c:ea:e0:60: ec:f3:02:62:0f:ec:da:f9:92:c4:b8:bb:89:ae:04: 20:72:a6:0d:a4:98:4c:5d:63:31:a8:ea:76:78:2c: ed:d2:84:89:de:05:24:a6:1a:b7:83:bc:fb:4e:1c: 43:9f:75:d6:fc:90:88:9b:87:32:f7:9a:5b:d5:f2: 08:00:97:15:b1:8f:4a:ef:12:65:f1:7f:e9:85:c7: 78:4b:e7:a0:44:5d:b3:6f:80:41:51:d8:81:6b:62: fa:f3:9f:b9:2f:43:04:39:3c:07:97:90:c8:68:ab: ae:53:f8:45:bf:99:d1:c4:2f:87:2f:74:49:0f:bb: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0B:5D:66:9E:59:1D:9B:0E:90:CB:41:22:AC:1D:8E:96:DC:85:B5 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gwtdZp5ZHZsOkMtBIqwdjpbchbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.230.0/24 Signature Algorithm: sha256WithRSAEncryption 43:53:cf:38:cd:15:c3:a6:e7:70:5f:29:da:a5:90:82:d2:3f: 78:64:75:9a:9b:1e:36:c7:86:46:4f:08:6e:a4:0f:b4:49:93: 5e:0d:27:bc:59:f8:83:7d:98:b8:6f:11:34:e8:c8:b6:52:fa: b4:1a:85:04:9a:06:99:a1:82:19:8a:e5:39:ab:74:ac:a9:0d: b7:2c:6c:69:5e:00:c0:da:40:2d:71:50:71:4e:fb:29:cc:e4: 8b:48:2b:13:19:00:6a:d9:f0:72:1f:ff:13:4f:80:33:d2:e7: c9:eb:b3:1e:86:e2:3f:83:2b:43:66:fc:6e:b2:e2:c8:6c:8c: 4f:6f:a0:20:3a:fc:60:fc:1f:8b:a8:5e:3e:1b:2e:c8:05:3c: d6:bc:80:c3:ca:77:72:93:56:bb:54:88:43:61:de:34:43:cd: b8:7f:2e:69:9a:4d:58:12:75:d0:2c:50:5c:35:ca:07:5d:06: d6:74:f3:98:40:c3:e4:00:26:dc:54:b5:a4:5a:c9:36:b4:93: 4c:e0:14:ce:8a:a4:5a:9c:4a:1e:af:c6:33:9e:31:77:c4:cd: e5:e6:df:3b:2a:3f:67:da:c4:16:c5:84:4f:f0:4e:07:0d:05: 13:c1:a4:f0:c4:ba:22:25:0c:a9:9a:0b:b3:71:87:d4:76:20: 71:49:c5:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqWxTVSX4zzSx8qyayMNnfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTE4MTE0MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzBiNWQ2NjllNTkxZDliMGU5MGNiNDEyMmFjMWQ4ZTk2ZGM4NWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+cRF9vBvr3Qmgvfqqa/k11tZBjK QsOMdqmT0oL7BHZSvMEGVVwzJ76qawTRArx+aUjODXE3GbrLJkFoqGnZ0Exl/rK8 z05aZaQU0SOecYgCmjshfCcO7AsDNKEiTQbEX2r8/DXwfwyxQKpMKnzmjSPBzxrC hNLyIj8T8lZbM6VM/ozq4GDs8wJiD+za+ZLEuLuJrgQgcqYNpJhMXWMxqOp2eCzt 0oSJ3gUkphq3g7z7ThxDn3XW/JCIm4cy95pb1fIIAJcVsY9K7xJl8X/phcd4S+eg RF2zb4BBUdiBa2L685+5L0MEOTwHl5DIaKuuU/hFv5nRxC+HL3RJD7tirQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMLXWaeWR2bDpDLQSKsHY6W3IW1MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvZ3d0ZFpwNVpIWnNPa010Qklxd2RqcGJjaGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkzmMA0G CSqGSIb3DQEBCwUAA4IBAQBDU884zRXDpudwXynapZCC0j94ZHWamx42x4ZGTwhu pA+0SZNeDSe8WfiDfZi4bxE06Mi2Uvq0GoUEmgaZoYIZiuU5q3SsqQ23LGxpXgDA 2kAtcVBxTvspzOSLSCsTGQBq2fByH/8TT4Az0ufJ67MehuI/gytDZvxusuLIbIxP b6AgOvxg/B+LqF4+Gy7IBTzWvIDDyndyk1a7VIhDYd40Q824fy5pmk1YEnXQLFBc NcoHXQbWdPOYQMPkACbcVLWkWsk2tJNM4BTOiqRanEoer8YznjF3xM3l5t87Kj9n 2sQWxYRP8E4HDQUTwaTwxLoiJQypmguzcYfUdiBxScV5 -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:12 2025 by rpki-client