This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/W4uvINAUncyhDgHefqxIHnh6S6w.roa File: W4uvINAUncyhDgHefqxIHnh6S6w.roa (raw, json) Hash identifier: 4GuU8xiFkQuH7WcU3bhOsj4SXwISNOORfbx84fh3y0w= Subject key identifier: 5B:8B:AF:20:D0:14:9D:CC:A1:0E:01:DE:7E:AC:48:1E:78:7A:4B:AC Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B118CF7FBB0CA0AE23FA5519540E05F5D Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/W4uvINAUncyhDgHefqxIHnh6S6w.roa Signing time: Fri 12 Dec 2025 07:53:29 +0000 ROA not before: Fri 12 Dec 2025 07:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212314 IP address blocks: 37.221.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:8c:f7:fb:b0:ca:0a:e2:3f:a5:51:95:40:e0:5f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Dec 12 07:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b8baf20d0149dcca10e01de7eac481e787a4bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ce:45:16:22:89:fc:44:9f:2b:86:65:f2:03: 94:3c:11:ce:5c:fe:fe:97:c9:4f:83:69:73:f5:31: 9c:a1:0a:35:ff:1a:95:ff:d8:b1:b3:64:8c:30:da: 64:0d:13:a8:92:1f:5e:0e:a9:f9:8e:55:91:00:77: ac:9e:83:5e:75:03:0a:0c:37:9d:10:ea:5b:87:17: 9f:3b:14:62:2b:d2:5c:77:33:91:52:4b:c3:04:59: a9:44:7a:a7:f6:72:de:82:44:a2:ea:00:95:6c:a6: 0e:af:f1:ee:2b:22:f1:b1:e2:d6:17:eb:8a:27:67: 14:31:22:0f:af:9f:b9:97:4f:bb:bf:f7:d8:63:a8: 4b:8b:fc:de:bc:1b:94:8a:de:2d:91:d0:b1:b9:1d: cc:c3:08:6d:a8:98:fe:78:d2:d1:3a:33:17:33:25: 3d:3d:26:93:23:50:17:ec:26:b2:b1:42:5c:55:8b: c3:69:37:c9:bc:38:9f:3c:67:6e:30:78:78:47:26: 1d:d8:83:cb:01:a6:1d:58:14:54:74:ed:b6:66:55: 94:18:2b:43:03:e8:7a:c8:20:36:30:72:ef:b5:f2: c7:8c:1b:aa:02:01:90:e9:34:d9:3f:52:96:f2:0e: 00:de:2a:78:87:09:e1:da:48:df:b8:cd:42:49:14: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8B:AF:20:D0:14:9D:CC:A1:0E:01:DE:7E:AC:48:1E:78:7A:4B:AC X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/W4uvINAUncyhDgHefqxIHnh6S6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.81.0/24 Signature Algorithm: sha256WithRSAEncryption 59:70:8e:81:8b:10:b8:01:3c:16:0e:7a:a6:8d:a2:f7:b9:4e: 66:be:26:37:e8:0c:d1:2f:31:21:46:99:2a:c9:d8:29:67:bf: d9:5d:90:6a:76:3d:e5:d1:85:35:e4:83:89:e2:d5:15:15:bb: b1:6a:37:3c:9b:25:c2:e9:a5:ba:23:a3:49:52:ce:db:9b:08: 78:ff:26:fc:97:61:41:80:15:90:f5:c4:f5:de:21:2f:47:d2: 59:9b:c6:82:bf:3e:01:bb:63:d3:eb:b7:d3:d5:49:e9:a6:6b: 47:11:94:fc:15:27:bf:0e:02:46:cd:39:76:12:93:e9:ad:1c: d9:4e:3f:09:9e:56:e7:c5:4e:5e:b4:8a:e2:63:fb:82:fc:8d: b8:43:4f:9b:13:cc:e0:23:e0:82:71:20:f1:f6:45:bc:32:3e: 77:8e:45:54:ea:d7:28:6e:5d:f1:44:d4:59:80:43:b8:2c:8e: cc:de:77:98:fb:9d:de:54:58:46:ae:d7:dc:64:9d:7b:05:c8: f8:97:b9:2d:07:6a:2e:83:c7:14:0a:d7:be:3f:ea:a8:fd:c9: 13:de:77:de:5b:6a:8b:fe:5a:67:35:e5:5c:1f:e5:51:1f:be: 83:25:97:59:41:fc:12:c5:b9:9d:75:5b:17:dc:68:80:ff:98: 96:85:f9:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsRjPf7sMoK4j+lUZVA4F9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjUxMjEyMDc1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjhiYWYyMGQwMTQ5ZGNjYTEwZTAxZGU3ZWFjNDgxZTc4N2E0YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM5FFiKJ/ESfK4Zl8gOUPBHOXP7+ l8lPg2lz9TGcoQo1/xqV/9ixs2SMMNpkDROokh9eDqn5jlWRAHesnoNedQMKDDed EOpbhxefOxRiK9JcdzORUkvDBFmpRHqn9nLegkSi6gCVbKYOr/HuKyLxseLWF+uK J2cUMSIPr5+5l0+7v/fYY6hLi/zevBuUit4tkdCxuR3MwwhtqJj+eNLROjMXMyU9 PSaTI1AX7CaysUJcVYvDaTfJvDifPGduMHh4RyYd2IPLAaYdWBRUdO22ZlWUGCtD A+h6yCA2MHLvtfLHjBuqAgGQ6TTZP1KW8g4A3ip4hwnh2kjfuM1CSRRjdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFuLryDQFJ3MoQ4B3n6sSB54ekusMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvVzR1dklOQVVuY3loRGdIZWZxeElIbmg2UzZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJd1RMA0G CSqGSIb3DQEBCwUAA4IBAQBZcI6BixC4ATwWDnqmjaL3uU5mviY36AzRLzEhRpkq ydgpZ7/ZXZBqdj3l0YU15IOJ4tUVFbuxajc8myXC6aW6I6NJUs7bmwh4/yb8l2FB gBWQ9cT13iEvR9JZm8aCvz4Bu2PT67fT1UnppmtHEZT8FSe/DgJGzTl2EpPprRzZ Tj8JnlbnxU5etIriY/uC/I24Q0+bE8zgI+CCcSDx9kW8Mj53jkVU6tcobl3xRNRZ gEO4LI7M3neY+53eVFhGrtfcZJ17Bcj4l7ktB2oug8cUCte+P+qo/ckT3nfeW2qL /lpnNeVcH+VRH76DJZdZQfwSxbmddVsX3GiA/5iWhfl+ -----END CERTIFICATE-----Generated at Fri Dec 12 11:43:58 2025 by rpki-client