This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/cw8wUzU2TjbQeXA5X-DXO7r3EcI.roa File: cw8wUzU2TjbQeXA5X-DXO7r3EcI.roa (raw, json) Hash identifier: 7PvrSwK3soO30XY3QyWZvOj/XNBSpT3NFfjGHR5XhH8= Subject key identifier: 73:0F:30:53:35:36:4E:36:D0:79:70:39:5F:E0:D7:3B:BA:F7:11:C2 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019AB7452D34BD8A0342D66C59C4A343886E Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/cw8wUzU2TjbQeXA5X-DXO7r3EcI.roa Signing time: Mon 24 Nov 2025 19:09:15 +0000 ROA not before: Mon 24 Nov 2025 19:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213883 IP address blocks: 81.177.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:45:2d:34:bd:8a:03:42:d6:6c:59:c4:a3:43:88:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Nov 24 19:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=730f305335364e36d07970395fe0d73bbaf711c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:fb:e6:b0:d2:c5:e6:34:04:66:25:01:ac: e0:cf:0a:96:4a:8b:de:35:bf:38:0e:58:39:40:28: 42:34:8e:fa:78:8d:ba:3c:81:aa:10:ca:08:ca:81: 6c:29:ed:a4:88:64:24:09:d2:8c:2c:b1:4c:f4:08: 76:09:d0:49:5f:a9:27:14:0c:82:06:f6:f9:4e:83: ea:86:1c:ce:47:4b:f5:76:f3:44:ab:6c:f1:14:7a: f1:64:a8:8d:dc:5b:f4:ba:17:4c:68:04:4b:61:be: 20:71:0c:29:6c:d7:31:8c:d9:68:f2:db:72:cb:22: b2:79:af:4f:27:61:06:49:95:e3:bc:ca:00:a5:ab: 16:26:3c:3c:66:d7:93:c7:80:84:b5:b7:c9:cd:8c: 0e:a7:21:8b:d5:84:64:4a:4d:6f:97:ca:6b:d7:6b: 6d:e9:12:39:28:bd:59:84:e7:dd:a7:9c:6d:be:5b: 4d:97:a4:38:b9:ef:56:b3:6b:c7:b9:fc:02:8e:bb: b8:4d:2b:25:bf:20:e8:06:b3:a8:7f:39:b5:1f:cc: 37:d9:8f:1a:35:13:ed:db:f4:bb:a9:00:45:9c:a0: dc:b6:dd:06:c2:5a:97:55:66:4e:7f:7d:4a:9c:68: d9:cb:22:9b:11:79:40:ea:50:fb:e6:32:64:ca:2b: 55:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0F:30:53:35:36:4E:36:D0:79:70:39:5F:E0:D7:3B:BA:F7:11:C2 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/cw8wUzU2TjbQeXA5X-DXO7r3EcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.177.212.0/24 Signature Algorithm: sha256WithRSAEncryption 91:34:d4:b2:be:31:95:00:15:e8:e3:aa:b8:39:31:b0:05:8e: 14:78:30:e7:b3:41:4d:04:7c:60:39:a6:5e:5b:4e:46:24:24: 1e:19:ce:07:c4:4e:8d:df:1e:ef:1b:8c:26:37:a7:d0:1f:f7: 27:4e:55:29:58:a5:bb:3f:65:f1:b4:82:50:c5:bb:3e:97:07: 8f:9a:56:fc:0c:1c:09:af:94:82:fd:c3:97:4e:4f:e2:9f:cf: 93:c1:e7:44:94:a2:f6:5e:a7:e4:71:c1:8d:a0:61:d0:75:05: 3b:c6:49:dd:ac:e0:79:da:31:bc:50:f5:c2:26:76:fe:25:d5: 5e:16:73:69:b7:9f:fa:cf:9d:23:1c:a1:c5:aa:7d:3e:0c:4c: 31:b0:a3:8d:86:23:f6:1f:a6:8c:8a:47:53:6a:98:9c:68:35: 61:78:49:25:1e:ef:f5:47:e7:7a:da:bc:95:42:3d:83:d0:60: 61:de:51:85:06:7f:8b:6d:2b:dd:13:a1:a1:5c:9d:ce:20:09: 05:0b:e4:3d:af:05:19:ae:66:6a:92:48:4d:75:4e:ba:7b:31: 27:fe:8d:61:2a:80:c0:d2:f5:45:f8:50:bc:fc:7b:69:d8:96: 6d:96:e7:0b:ee:f8:09:ac:9e:42:c2:3e:65:14:a3:99:9b:39: 7a:f4:f1:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq3RS00vYoDQtZsWcSjQ4huMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjUxMTI0MTkwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzBmMzA1MzM1MzY0ZTM2ZDA3OTcwMzk1ZmUwZDczYmJhZjcxMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J/75rDSxeY0BGYlAazgzwqWSove Nb84Dlg5QChCNI76eI26PIGqEMoIyoFsKe2kiGQkCdKMLLFM9Ah2CdBJX6knFAyC Bvb5ToPqhhzOR0v1dvNEq2zxFHrxZKiN3Fv0uhdMaARLYb4gcQwpbNcxjNlo8tty yyKyea9PJ2EGSZXjvMoApasWJjw8ZteTx4CEtbfJzYwOpyGL1YRkSk1vl8pr12tt 6RI5KL1ZhOfdp5xtvltNl6Q4ue9Ws2vHufwCjru4TSslvyDoBrOofzm1H8w32Y8a NRPt2/S7qQBFnKDctt0GwlqXVWZOf31KnGjZyyKbEXlA6lD75jJkyitVUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMPMFM1Nk420HlwOV/g1zu69xHCMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvY3c4d1V6VTJUamJRZVhBNVgtRFhPN3IzRWNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbHUMA0G CSqGSIb3DQEBCwUAA4IBAQCRNNSyvjGVABXo46q4OTGwBY4UeDDns0FNBHxgOaZe W05GJCQeGc4HxE6N3x7vG4wmN6fQH/cnTlUpWKW7P2XxtIJQxbs+lwePmlb8DBwJ r5SC/cOXTk/in8+TwedElKL2XqfkccGNoGHQdQU7xkndrOB52jG8UPXCJnb+JdVe FnNpt5/6z50jHKHFqn0+DEwxsKONhiP2H6aMikdTapicaDVheEklHu/1R+d62ryV Qj2D0GBh3lGFBn+LbSvdE6GhXJ3OIAkFC+Q9rwUZrmZqkkhNdU66ezEn/o1hKoDA 0vVF+FC8/Htp2JZtlucL7vgJrJ5Cwj5lFKOZmzl69PEu -----END CERTIFICATE-----Generated at Sun Dec 7 05:20:14 2025 by rpki-client