This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/nwWuECVg9JQAYn8jLwCeC3bTdbo.roa File: nwWuECVg9JQAYn8jLwCeC3bTdbo.roa (raw, json) Hash identifier: yNlc9hnJI63Z5bMFLpkARqr7N3n25vphcwDSS9RWssA= Subject key identifier: 9F:05:AE:10:25:60:F4:94:00:62:7F:23:2F:00:9E:0B:76:D3:75:BA Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019ABC47D48EB0FE4B12B8D1B1E4B9CDD8F6 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/nwWuECVg9JQAYn8jLwCeC3bTdbo.roa Signing time: Tue 25 Nov 2025 18:30:15 +0000 ROA not before: Tue 25 Nov 2025 18:30:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41457 IP address blocks: 89.36.33.0/24 maxlen: 24 95.175.150.0/24 maxlen: 24 185.79.19.0/24 maxlen: 24 192.40.69.0/24 maxlen: 24 194.46.60.0/24 maxlen: 24 2a0c:2505:1000::/48 maxlen: 48 2a14:6780::/32 maxlen: 32 2a14:6780:2::/48 maxlen: 48 2a14:6780:3::/48 maxlen: 48 2a14:6780:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:47:d4:8e:b0:fe:4b:12:b8:d1:b1:e4:b9:cd:d8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Nov 25 18:30:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f05ae102560f49400627f232f009e0b76d375ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:14:9e:6c:32:65:bb:0d:72:d1:19:e9:a4: 2b:14:f8:af:34:eb:27:7e:5c:3b:4f:eb:d3:48:c3: 22:11:15:5b:d6:1a:1f:cc:dd:63:da:94:92:1d:bb: 24:a3:e1:3c:76:3d:56:d1:12:8d:3e:dc:a3:b5:7e: 17:47:d8:e4:9d:1b:eb:99:1c:02:8a:ff:c0:4c:bf: 18:38:50:23:47:a9:4b:68:7f:82:e7:58:f3:a8:af: 2c:13:40:f2:d5:f1:aa:1d:4f:ae:7e:d9:4f:f1:5f: 2d:3e:5f:85:7d:5d:8f:ca:58:84:89:98:11:a5:2e: f1:d6:26:e3:91:fd:7e:bc:0b:27:74:42:b2:94:c7: 22:dd:6b:f0:90:73:9b:6c:99:4e:3a:46:e3:43:48: c6:20:31:e2:4d:a8:45:7a:fb:a0:d4:7a:68:ec:27: 50:b7:ab:a5:4f:1a:3f:3a:ca:f7:78:73:ef:b3:5d: af:aa:73:be:a7:e6:fd:d2:01:c5:b3:92:25:ee:76: 06:00:9b:3d:13:24:c6:d1:b4:03:1c:4d:76:ab:55: e5:bc:f2:4e:94:cf:f3:ac:ba:49:79:35:92:c2:d1: 8b:0f:22:3d:b5:3a:2c:3b:df:68:27:f9:80:3c:99: 79:8c:68:89:91:2e:73:c9:21:e4:68:28:1e:c7:9e: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:05:AE:10:25:60:F4:94:00:62:7F:23:2F:00:9E:0B:76:D3:75:BA X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/nwWuECVg9JQAYn8jLwCeC3bTdbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.33.0/24 95.175.150.0/24 185.79.19.0/24 192.40.69.0/24 194.46.60.0/24 IPv6: 2a0c:2505:1000::/48 2a14:6780::/32 Signature Algorithm: sha256WithRSAEncryption 4b:4b:0c:73:96:ab:35:da:67:1a:54:94:de:a7:18:8b:cc:b8: b0:f2:df:8b:ce:ca:5e:b1:98:f6:2b:b7:6c:5d:92:b2:4e:02: 29:5b:35:7b:6e:89:11:94:25:99:33:2b:06:79:51:9f:cc:39: 29:f8:ed:a6:b0:24:5e:da:7c:0f:02:d1:bb:6a:19:25:ab:86: c3:20:31:4b:52:07:db:1b:43:aa:8c:b1:bc:b4:09:90:14:fd: 1f:99:bf:1c:5c:c6:be:5f:d3:d2:5b:ed:5b:a6:f4:56:53:35: a7:19:7e:d2:17:79:76:2d:30:41:4e:19:fd:b6:c5:46:b8:29: 85:15:27:67:d6:47:16:63:51:22:4d:c5:cf:20:16:53:53:11: 59:e3:ac:74:cb:66:58:a1:f5:28:99:0c:40:20:23:ab:f2:34: a8:40:a6:33:79:3c:e5:f8:49:32:23:51:02:fa:9a:2f:43:ad: 7f:df:19:7a:8f:06:45:71:56:31:8d:64:a2:ab:34:de:29:0a: 1d:6a:25:76:5f:9d:31:a3:40:d5:a4:5a:0d:e6:4d:fd:fc:6c: 0d:ff:b3:a1:4c:60:cf:78:b8:6c:5f:f9:41:56:4f:9e:fd:2f: 08:3d:bc:d0:1f:9c:8d:ad:5e:f8:7c:0f:e3:19:cb:48:aa:d7: 72:5a:6d:c8 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZq8R9SOsP5LErjRseS5zdj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjUxMTI1MTgzMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjA1YWUxMDI1NjBmNDk0MDA2MjdmMjMyZjAwOWUwYjc2ZDM3NWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9gUnmwyZbsNctEZ6aQrFPivNOsn flw7T+vTSMMiERVb1hofzN1j2pSSHbsko+E8dj1W0RKNPtyjtX4XR9jknRvrmRwC iv/ATL8YOFAjR6lLaH+C51jzqK8sE0Dy1fGqHU+uftlP8V8tPl+FfV2PyliEiZgR pS7x1ibjkf1+vAsndEKylMci3WvwkHObbJlOOkbjQ0jGIDHiTahFevug1Hpo7CdQ t6ulTxo/Osr3eHPvs12vqnO+p+b90gHFs5Il7nYGAJs9EyTG0bQDHE12q1XlvPJO lM/zrLpJeTWSwtGLDyI9tTosO99oJ/mAPJl5jGiJkS5zySHkaCgex56NqwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFJ8FrhAlYPSUAGJ/Iy8Angt203W6MB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvbndXdUVDVmc5SlFBWW44akx3Q2VDM2JUZGJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIAATAeAwQAWSQhAwQA X6+WAwQAuU8TAwQAwChFAwQAwi48MBYEAgACMBADBwAqDCUFEAADBQAqFGeAMA0G CSqGSIb3DQEBCwUAA4IBAQBLSwxzlqs12mcaVJTepxiLzLiw8t+LzspesZj2K7ds XZKyTgIpWzV7bokRlCWZMysGeVGfzDkp+O2msCRe2nwPAtG7ahklq4bDIDFLUgfb G0OqjLG8tAmQFP0fmb8cXMa+X9PSW+1bpvRWUzWnGX7SF3l2LTBBThn9tsVGuCmF FSdn1kcWY1EiTcXPIBZTUxFZ46x0y2ZYofUomQxAICOr8jSoQKYzeTzl+EkyI1EC +povQ61/3xl6jwZFcVYxjWSiqzTeKQodaiV2X50xo0DVpFoN5k39/GwN/7OhTGDP eLhsX/lBVk+e/S8IPbzQH5yNrV74fA/jGctIqtdyWm3I -----END CERTIFICATE-----Generated at Sun Dec 7 12:19:40 2025 by rpki-client