This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/PweI0mFj3Tiasy_-FgFcdiXd5Wc.roa File: PweI0mFj3Tiasy_-FgFcdiXd5Wc.roa (raw, json) Hash identifier: h8gryQFmZboK49XsA1Ellb+NtbMnnoryffQmXlXy4Lg= Subject key identifier: 3F:07:88:D2:61:63:DD:38:9A:B3:2F:FE:16:01:5C:76:25:DD:E5:67 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B4CB85E899B248EC0E5CB07C13679FA9E Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/PweI0mFj3Tiasy_-FgFcdiXd5Wc.roa Signing time: Tue 23 Dec 2025 19:38:29 +0000 ROA not before: Tue 23 Dec 2025 19:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203771 IP address blocks: 141.98.151.0/24 maxlen: 24 212.66.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:b8:5e:89:9b:24:8e:c0:e5:cb:07:c1:36:79:fa:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 23 19:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3f0788d26163dd389ab32ffe16015c7625dde567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:d7:68:2e:ab:cf:66:12:47:5b:79:c9:9b: 95:bf:5f:85:95:4a:c6:06:5f:fc:a1:49:e7:13:a4: 02:b7:84:70:6d:bb:64:a5:f9:66:51:0f:3c:1d:b0: 85:49:9b:a1:d2:8d:54:61:e3:02:ff:5d:97:d5:3a: 98:d4:0c:6c:08:cc:20:1f:78:db:30:ac:e1:e0:de: b0:d9:41:12:64:44:6d:01:22:b8:d7:95:6c:58:f3: ed:9e:c3:bf:dc:08:21:69:de:ee:b1:ab:ab:17:ed: 37:4a:d2:83:66:53:56:dd:e6:66:4e:a4:60:73:a8: b3:c1:67:c6:23:38:4b:d1:20:df:28:f4:4b:33:b8: 76:5d:55:03:e5:e1:38:59:cc:9c:b2:1e:63:d1:dd: 72:00:d3:88:d3:f8:5c:6e:00:b5:43:c3:b2:fa:fc: 26:ae:7a:22:44:ba:af:53:30:01:71:27:97:bb:d8: 86:c9:94:b8:20:a1:58:99:80:56:5b:c0:c8:84:1d: b4:ac:bf:1e:e7:52:05:9c:0b:18:1e:97:d6:54:ab: 46:2f:0e:7b:e5:e5:4f:cb:3b:30:6f:09:bf:57:e1: 19:2b:bf:92:28:28:ff:6d:c7:e3:56:02:c6:18:bd: 20:e4:e1:87:d8:b9:ae:87:db:a7:68:14:c5:79:da: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:07:88:D2:61:63:DD:38:9A:B3:2F:FE:16:01:5C:76:25:DD:E5:67 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/PweI0mFj3Tiasy_-FgFcdiXd5Wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.151.0/24 212.66.50.0/24 Signature Algorithm: sha256WithRSAEncryption ac:81:11:60:1f:f2:78:c8:d0:81:ce:e9:1f:1e:57:b0:6b:60: d9:b0:98:89:f5:4f:5b:8f:35:68:42:26:d7:dd:c4:0f:8c:90: 7b:15:23:af:f5:8d:39:46:b5:e8:da:e4:8d:82:e9:b7:f2:0b: 65:f6:53:02:e6:93:de:2c:4e:00:53:10:74:e9:fc:49:0a:56: 55:4d:2a:9e:8e:d5:85:e3:69:49:5c:29:c6:24:af:4a:76:51: c2:1e:67:79:81:f5:7c:18:c4:e8:c6:81:68:6f:de:a7:af:26: cc:be:62:fd:ec:46:02:ca:2f:1d:10:80:e1:58:c4:39:24:a7: 5d:c0:e8:62:a4:90:d4:aa:cb:75:d8:44:d5:f1:a9:01:27:bc: ed:59:e3:0c:65:a9:e6:52:78:28:f4:ed:44:7e:f9:32:11:2c: 74:1c:74:6f:42:77:52:e4:65:c8:d8:58:a5:fa:31:8e:d6:1f: 81:ae:6f:c4:17:3e:ab:43:ae:2c:62:94:1d:a0:19:d3:d4:bc: d9:0e:c7:4f:e9:ab:94:97:7f:26:10:c8:fb:4a:b3:69:95:e0: 90:40:f5:53:0b:93:2b:8d:d3:5a:bc:c4:b6:19:89:e3:14:37: 62:31:4d:bb:6b:56:31:81:63:06:58:72:4b:06:60:e4:a8:24: 12:2d:ee:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtMuF6JmySOwOXLB8E2efqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjIzMTkzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjA3ODhkMjYxNjNkZDM4OWFiMzJmZmUxNjAxNWM3NjI1ZGRlNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH/XaC6rz2YSR1t5yZuVv1+FlUrG Bl/8oUnnE6QCt4RwbbtkpflmUQ88HbCFSZuh0o1UYeMC/12X1TqY1AxsCMwgH3jb MKzh4N6w2UESZERtASK415VsWPPtnsO/3Aghad7usaurF+03StKDZlNW3eZmTqRg c6izwWfGIzhL0SDfKPRLM7h2XVUD5eE4Wcycsh5j0d1yANOI0/hcbgC1Q8Oy+vwm rnoiRLqvUzABcSeXu9iGyZS4IKFYmYBWW8DIhB20rL8e51IFnAsYHpfWVKtGLw57 5eVPyzswbwm/V+EZK7+SKCj/bcfjVgLGGL0g5OGH2Lmuh9unaBTFedqyiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD8HiNJhY904mrMv/hYBXHYl3eVnMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvUHdlSTBtRmozVGlhc3lfLUZnRmNkaVhkNVdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWKXAwQA 1EIyMA0GCSqGSIb3DQEBCwUAA4IBAQCsgRFgH/J4yNCBzukfHlewa2DZsJiJ9U9b jzVoQibX3cQPjJB7FSOv9Y05RrXo2uSNgum38gtl9lMC5pPeLE4AUxB06fxJClZV TSqejtWF42lJXCnGJK9KdlHCHmd5gfV8GMToxoFob96nrybMvmL97EYCyi8dEIDh WMQ5JKddwOhipJDUqst12ETV8akBJ7ztWeMMZanmUngo9O1EfvkyESx0HHRvQndS 5GXI2Fil+jGO1h+Brm/EFz6rQ64sYpQdoBnT1LzZDsdP6auUl38mEMj7SrNpleCQ QPVTC5MrjdNavMS2GYnjFDdiMU27a1YxgWMGWHJLBmDkqCQSLe7l -----END CERTIFICATE-----Generated at Sat Dec 27 08:40:27 2025 by rpki-client