This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/w8XXySwPtjghOPNGiAj3MbN-wUU.roa File: w8XXySwPtjghOPNGiAj3MbN-wUU.roa (raw, json) Hash identifier: l+mxQRaZBxV5LuGvSkos7MnnKo1PALRzoIewlr/Bc3Y= Subject key identifier: C3:C5:D7:C9:2C:0F:B6:38:21:38:F3:46:88:08:F7:31:B3:7E:C1:45 Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Certificate serial: 019B21F017A23CA6E2D26773F03B19FFB3E6 Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/w8XXySwPtjghOPNGiAj3MbN-wUU.roa Signing time: Mon 15 Dec 2025 12:15:41 +0000 ROA not before: Mon 15 Dec 2025 12:15:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47527 IP address blocks: 45.95.208.0/24 maxlen: 24 46.30.120.0/21 maxlen: 21 62.69.152.0/21 maxlen: 21 79.174.152.0/21 maxlen: 21 91.223.235.0/24 maxlen: 24 91.230.239.0/24 maxlen: 24 178.23.176.0/21 maxlen: 21 185.31.76.0/22 maxlen: 22 185.126.152.0/23 maxlen: 23 185.208.212.0/22 maxlen: 24 188.116.39.0/24 maxlen: 24 194.247.61.0/24 maxlen: 24 195.182.36.0/24 maxlen: 24 213.142.140.0/23 maxlen: 23 2a00:1b18::/29 maxlen: 32 2a00:1cf0::/29 maxlen: 32 2a00:b920::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:f0:17:a2:3c:a6:e2:d2:67:73:f0:3b:19:ff:b3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Validity Not Before: Dec 15 12:15:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c3c5d7c92c0fb6382138f3468808f731b37ec145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:20:44:79:14:9e:6a:75:35:53:77:27:f5: 2f:1e:e3:94:6e:e1:23:66:41:c0:33:18:08:91:0f: 9e:70:68:54:5c:f9:7a:dc:b7:b5:1f:2b:37:a5:9a: d9:65:f7:25:f5:d9:87:21:4c:ec:e6:1f:3d:2e:8f: 7d:42:7c:5f:a3:1c:31:12:9b:e5:e5:99:76:ae:68: b7:48:23:8b:b7:be:b4:4b:b0:d2:cd:7d:1f:fd:bb: ce:c4:96:d8:9c:6e:c0:20:f0:e3:e8:be:6e:07:ae: af:e6:98:25:bb:e3:47:f8:ec:e4:a5:f9:bd:8d:e2: 88:51:52:a9:cb:e3:36:df:f4:8b:71:f7:5d:fd:8e: 1f:e1:87:d4:f3:d2:01:a0:3c:42:7e:45:b1:b3:d5: ce:19:bc:ba:43:09:bf:82:ab:f3:9a:70:cc:0e:fa: 32:4e:97:1c:9a:3d:b6:8a:a9:71:8c:c7:b7:53:f1: 12:42:42:19:13:ab:b1:ee:7c:43:10:b1:de:51:3c: ef:29:18:70:ad:0b:01:2e:9e:8d:13:1f:66:bd:3e: 8d:6a:e2:cd:b4:d4:f0:38:94:16:9c:67:1b:fa:1f: 57:4a:a2:d8:fd:78:75:9d:fc:73:73:2d:83:2c:a7: 93:b9:4d:6b:04:4b:36:86:f1:67:cb:a4:42:5d:cf: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C5:D7:C9:2C:0F:B6:38:21:38:F3:46:88:08:F7:31:B3:7E:C1:45 X509v3 Authority Key Identifier: keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/w8XXySwPtjghOPNGiAj3MbN-wUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.208.0/24 46.30.120.0/21 62.69.152.0/21 79.174.152.0/21 91.223.235.0/24 91.230.239.0/24 178.23.176.0/21 185.31.76.0/22 185.126.152.0/23 185.208.212.0/22 188.116.39.0/24 194.247.61.0/24 195.182.36.0/24 213.142.140.0/23 IPv6: 2a00:1b18::/29 2a00:1cf0::/29 2a00:b920::/29 Signature Algorithm: sha256WithRSAEncryption a5:18:f0:15:ea:94:0f:2f:b2:f5:38:94:5e:fe:bb:05:68:5b: 45:47:d9:a6:c4:b5:20:df:1f:57:bb:6f:ee:4c:bd:22:47:a2: 04:4b:51:ce:76:d9:08:84:0d:84:ed:a6:2c:31:00:e0:ad:5d: b1:d6:42:88:44:af:8b:16:e6:46:a2:76:50:b7:bb:1d:81:12: a2:41:33:a2:13:78:0b:74:41:42:ec:a3:7c:2a:96:3c:f7:4e: c7:d3:b9:f9:2f:e8:e2:d5:e0:ea:1a:12:31:e5:81:a4:ff:29: d7:49:75:33:85:1f:a4:98:39:de:fd:60:92:6e:5e:c6:f8:aa: 60:58:7e:9b:03:9b:b3:e7:8d:5f:29:38:b1:39:15:a2:30:2c: 32:33:1f:bf:c8:e0:4c:7e:cb:30:cd:b0:0f:51:32:7f:5c:31: a7:5c:c3:75:d2:11:32:0e:7b:43:0c:f5:1a:84:b0:d7:3f:d9: a7:6d:24:02:79:e8:05:ab:99:3c:a1:78:f9:bc:2b:ec:7e:8b: 11:63:a5:4a:4a:8b:4d:3c:93:fa:a9:13:4b:ef:44:69:a5:32: eb:36:ad:ac:d6:18:c9:3b:0a:66:d2:dc:a4:21:b0:f3:5f:ff: 02:9e:d5:a8:25:7f:c2:40:ec:63:d1:74:cd:6c:25:79:06:23: 52:7d:c7:d4 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISAZsh8BeiPKbi0mdz8DsZ/7PmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi YjdhOWIwHhcNMjUxMjE1MTIxNTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2M1ZDdjOTJjMGZiNjM4MjEzOGYzNDY4ODA4ZjczMWIzN2VjMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0QgRHkUnmp1NVN3J/UvHuOUbuEj ZkHAMxgIkQ+ecGhUXPl63Le1Hys3pZrZZfcl9dmHIUzs5h89Lo99QnxfoxwxEpvl 5Zl2rmi3SCOLt760S7DSzX0f/bvOxJbYnG7AIPDj6L5uB66v5pglu+NH+Ozkpfm9 jeKIUVKpy+M23/SLcfdd/Y4f4YfU89IBoDxCfkWxs9XOGby6Qwm/gqvzmnDMDvoy Tpccmj22iqlxjMe3U/ESQkIZE6ux7nxDELHeUTzvKRhwrQsBLp6NEx9mvT6NauLN tNTwOJQWnGcb+h9XSqLY/Xh1nfxzcy2DLKeTuU1rBEs2hvFny6RCXc980wIDAQAB o4ICdTCCAnEwHQYDVR0OBBYEFMPF18ksD7Y4ITjzRogI9zGzfsFFMB8GA1UdIwQY MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt MWJlNzUzZmFkMWJmLzEvdzhYWHlTd1B0amdoT1BOR2lBajNNYk4td1VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwWgQCAAEwVAMEAC1f0AME Ay4eeAMEAz5FmAMEA0+umAMEAFvf6wMEAFvm7wMEA7IXsAMEArkfTAMEAbl+mAME ArnQ1AMEALx0JwMEAML3PQMEAMO2JAMEAdWOjDAbBAIAAjAVAwUDKgAbGAMFAyoA HPADBQMqALkgMA0GCSqGSIb3DQEBCwUAA4IBAQClGPAV6pQPL7L1OJRe/rsFaFtF R9mmxLUg3x9Xu2/uTL0iR6IES1HOdtkIhA2E7aYsMQDgrV2x1kKIRK+LFuZGonZQ t7sdgRKiQTOiE3gLdEFC7KN8KpY8907H07n5L+ji1eDqGhIx5YGk/ynXSXUzhR+k mDne/WCSbl7G+KpgWH6bA5uz541fKTixORWiMCwyMx+/yOBMfsswzbAPUTJ/XDGn XMN10hEyDntDDPUahLDXP9mnbSQCeegFq5k8oXj5vCvsfosRY6VKSotNPJP6qRNL 70RppTLrNq2s1hjJOwpm0tykIbDzX/8CntWoJX/CQOxj0XTNbCV5BiNSfcfU -----END CERTIFICATE-----Generated at Fri Dec 19 04:00:03 2025 by rpki-client