This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/w1gkOlnqiWnrW_xkYkv3EsGlRT0.roa File: w1gkOlnqiWnrW_xkYkv3EsGlRT0.roa (raw, json) Hash identifier: bsBlgK649HEcOCZObiNbWwsOwY2QTRWbzYBskG9A/Qw= Subject key identifier: C3:58:24:3A:59:EA:89:69:EB:5B:FC:64:62:4B:F7:12:C1:A5:45:3D Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019AC04CE37A13F04FA7E5A4790671632B92 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/w1gkOlnqiWnrW_xkYkv3EsGlRT0.roa Signing time: Wed 26 Nov 2025 13:14:15 +0000 ROA not before: Wed 26 Nov 2025 13:14:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.155.253.0/24 maxlen: 24 45.157.209.0/24 maxlen: 24 176.125.251.0/24 maxlen: 24 185.199.212.0/23 maxlen: 23 185.199.213.0/24 maxlen: 24 185.221.26.0/24 maxlen: 24 185.225.168.0/24 maxlen: 24 185.225.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 13:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:4c:e3:7a:13:f0:4f:a7:e5:a4:79:06:71:63:2b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 26 13:14:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c358243a59ea8969eb5bfc64624bf712c1a5453d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:76:05:c5:1d:2a:b7:18:56:5c:df:86:e9: 49:7a:28:2a:da:ba:00:70:b7:30:ba:10:92:38:27: b5:2f:c6:24:3d:d0:f4:a4:36:9c:ed:cf:9b:43:fa: a6:2c:6b:2b:6e:f2:ef:ad:f8:57:90:21:46:7a:9c: 0b:1b:8b:14:54:d1:ed:2f:7a:3f:09:57:08:d5:6c: d3:c6:ec:fe:35:e9:f3:2f:37:5e:af:ef:15:26:90: 16:85:e1:7e:f0:8f:f1:1c:05:ba:5d:1d:be:3b:52: 99:46:a2:66:87:11:a5:d7:17:74:77:b9:76:50:be: 9d:8e:4d:4b:dd:c4:8a:6a:61:c5:7a:c2:67:79:ec: ed:9f:5f:df:43:d5:fb:2f:cd:68:f6:26:82:64:74: 6a:7a:be:a4:d0:39:24:9b:32:28:b3:64:b8:ef:d3: 0e:35:8f:d5:f2:97:ec:4b:1f:04:5e:f3:32:3d:59: a3:b4:c6:08:dc:dd:14:ea:f8:80:7a:b2:50:d7:b7: 03:25:56:ba:55:85:8b:f0:3f:29:9b:11:56:24:1e: 57:4a:96:87:da:2c:2f:c2:15:64:2c:06:ce:bb:19: d8:13:f6:23:5f:32:0f:74:f5:e7:d6:60:58:bb:3b: 22:30:79:73:04:af:ab:ca:d4:c0:84:5c:c3:1e:4a: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:58:24:3A:59:EA:89:69:EB:5B:FC:64:62:4B:F7:12:C1:A5:45:3D X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/w1gkOlnqiWnrW_xkYkv3EsGlRT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.253.0/24 45.157.209.0/24 176.125.251.0/24 185.199.212.0/23 185.221.26.0/24 185.225.168.0/23 Signature Algorithm: sha256WithRSAEncryption 74:1c:24:5e:16:06:ec:b2:3a:b5:8d:94:4b:2d:50:fb:1d:e9: 1e:8c:13:42:f8:bc:cc:00:0e:fe:37:84:a8:61:59:1e:b3:9b: cb:7c:ba:33:bd:c9:67:23:43:1a:23:bc:3a:ef:4c:ec:45:c0: ca:b9:94:d8:30:b8:47:e4:7c:9b:fe:31:5c:d4:18:25:93:ed: 35:7b:81:b6:ae:49:8f:e7:91:a4:37:2c:8b:ed:6a:c4:ca:cc: 14:55:08:b0:59:05:36:b2:5d:83:e8:77:3c:41:78:34:b6:a4: 86:d6:ee:b8:46:c8:7a:06:42:01:f9:a2:3f:78:c7:c5:c3:85: 5b:2c:82:5d:05:7f:35:a6:81:a5:26:97:ac:45:99:71:a9:50: 1f:47:07:0b:d1:25:60:5f:3c:da:93:a4:71:e5:e1:d3:30:6c: 64:88:ba:f5:7e:df:e1:1b:98:78:c1:60:e1:16:0a:ce:22:cc: 8e:7e:4d:95:c3:02:e8:0e:ca:3d:ab:aa:c3:f9:fa:f7:dd:95: 20:77:40:7f:6a:4b:ba:aa:49:8f:91:0f:09:76:2d:11:8c:2f: 7e:cf:83:8d:23:4b:4d:a5:a1:a3:f4:79:23:5d:9e:a7:1a:a5: d7:16:95:da:3f:09:ef:a2:b5:d1:4a:ef:22:99:69:58:07:d4: 59:a8:3c:ce -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrATON6E/BPp+WkeQZxYyuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTI2MTMxNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzU4MjQzYTU5ZWE4OTY5ZWI1YmZjNjQ2MjRiZjcxMmMxYTU0NTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAN2BcUdKrcYVlzfhulJeigq2roA cLcwuhCSOCe1L8YkPdD0pDac7c+bQ/qmLGsrbvLvrfhXkCFGepwLG4sUVNHtL3o/ CVcI1WzTxuz+NenzLzder+8VJpAWheF+8I/xHAW6XR2+O1KZRqJmhxGl1xd0d7l2 UL6djk1L3cSKamHFesJneeztn1/fQ9X7L81o9iaCZHRqer6k0DkkmzIos2S479MO NY/V8pfsSx8EXvMyPVmjtMYI3N0U6viAerJQ17cDJVa6VYWL8D8pmxFWJB5XSpaH 2iwvwhVkLAbOuxnYE/YjXzIPdPXn1mBYuzsiMHlzBK+rytTAhFzDHkqvjwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMNYJDpZ6olp61v8ZGJL9xLBpUU9MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvdzFna09sbnFpV25yV194a1lrdjNFc0dsUlQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALZv9AwQA LZ3RAwQAsH37AwQBucfUAwQAud0aAwQBueGoMA0GCSqGSIb3DQEBCwUAA4IBAQB0 HCReFgbssjq1jZRLLVD7HekejBNC+LzMAA7+N4SoYVkes5vLfLozvclnI0MaI7w6 70zsRcDKuZTYMLhH5Hyb/jFc1Bglk+01e4G2rkmP55GkNyyL7WrEyswUVQiwWQU2 sl2D6Hc8QXg0tqSG1u64Rsh6BkIB+aI/eMfFw4VbLIJdBX81poGlJpesRZlxqVAf RwcL0SVgXzzak6Rx5eHTMGxkiLr1ft/hG5h4wWDhFgrOIsyOfk2VwwLoDso9q6rD +fr33ZUgd0B/aku6qkmPkQ8Jdi0RjC9+z4ONI0tNpaGj9HkjXZ6nGqXXFpXaPwnv orXRSu8imWlYB9RZqDzO -----END CERTIFICATE-----Generated at Wed Nov 26 22:33:28 2025 by rpki-client