This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/w2Cy4HixgJA4ANFqIORF91KD1uY.roa File: w2Cy4HixgJA4ANFqIORF91KD1uY.roa (raw, json) Hash identifier: pES26ptpfymIqlZU84FsS/cE397IEYZ0afXZ6qtLKRY= Subject key identifier: C3:60:B2:E0:78:B1:80:90:38:00:D1:6A:20:E4:45:F7:52:83:D6:E6 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019AC562C6B6F7343A29C7E4FCF01CE01E50 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/w2Cy4HixgJA4ANFqIORF91KD1uY.roa Signing time: Thu 27 Nov 2025 12:56:16 +0000 ROA not before: Thu 27 Nov 2025 12:56:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 273301 IP address blocks: 89.42.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:62:c6:b6:f7:34:3a:29:c7:e4:fc:f0:1c:e0:1e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Nov 27 12:56:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c360b2e078b180903800d16a20e445f75283d6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fb:2d:10:05:d8:2e:b6:8f:0f:6a:40:74:5c: 0e:37:c1:38:44:5e:3b:67:f6:53:04:52:e4:3b:43: 18:c6:0d:c1:82:02:7f:dd:97:25:41:c1:d3:e2:cb: f6:6b:b3:57:80:62:19:78:ab:32:d7:8e:cc:05:77: 6e:37:ed:c7:b5:05:c6:01:9c:2b:ae:5d:cf:a0:57: 8f:dc:23:63:01:4c:62:23:33:bf:6c:e1:61:cf:e9: 67:db:37:7d:af:07:f5:c7:75:14:68:d4:47:e7:88: eb:b1:f2:66:f3:f8:ab:be:bd:7f:95:b7:97:c5:00: 32:dd:b5:14:ae:1b:fd:8b:32:3d:d6:ed:6a:6e:6e: 22:93:69:85:3c:07:10:44:39:6d:5f:a6:07:a4:c9: 6a:09:68:ef:cb:1b:92:3b:e0:c3:2e:6d:98:c4:c9: d5:c8:d0:63:66:e3:df:cd:5b:1b:8f:ca:56:3f:47: 6d:12:bd:25:03:d7:fd:c7:4d:cf:fa:4e:ad:b6:c0: 85:9a:74:13:40:58:8b:38:f7:61:1d:ec:25:42:30: 25:9a:0e:de:09:9c:88:ee:17:71:a3:f4:fc:da:a4: c9:42:c8:03:78:d0:55:0a:e3:b2:31:ff:af:a3:d8: 10:cd:b4:34:58:2e:1b:43:7b:76:57:b8:1c:c0:da: 51:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:60:B2:E0:78:B1:80:90:38:00:D1:6A:20:E4:45:F7:52:83:D6:E6 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/w2Cy4HixgJA4ANFqIORF91KD1uY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.113.0/24 Signature Algorithm: sha256WithRSAEncryption 34:9b:61:a1:a7:e9:ee:15:49:8a:01:20:35:a2:54:d9:a8:3a: 50:0e:a8:87:51:5c:9a:9e:86:d5:e1:72:33:a2:ea:5e:e3:10: 9e:85:29:85:ec:a0:82:71:7c:3c:6d:06:10:64:49:ba:43:0b: 3a:a4:73:7c:3c:de:6d:43:e2:e3:95:90:6e:87:79:01:0f:fb: 60:41:56:26:2b:aa:9b:09:23:9e:05:99:3f:9d:05:2d:84:55: 1f:5e:fc:1e:20:0a:58:74:61:89:bf:ff:02:15:be:dd:85:40: 56:91:35:ef:66:00:4b:19:fd:f0:c0:39:95:06:4d:42:77:3f: 85:62:b2:90:87:a3:c7:9d:0e:83:02:12:2b:bf:38:b3:3a:34: 0c:91:3b:90:11:cd:40:8e:1e:54:61:16:4b:fc:c2:4c:7c:86: ae:0e:4f:4f:02:d0:4a:0f:2f:9c:36:81:00:bc:d9:f9:eb:a0: 91:58:42:b8:b6:41:ef:3d:e5:93:9e:ef:e5:a4:cf:fd:4f:0b: 6d:3f:ee:4f:c2:14:2c:35:32:51:a7:31:18:d9:45:55:e4:8d: b7:71:92:e7:e6:98:dd:6d:61:3d:75:c2:d7:80:69:29:55:6a: 05:39:cc:21:4c:b2:25:c1:e2:24:ef:5f:78:59:a5:50:c0:9e: b6:6a:fc:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrFYsa29zQ6Kcfk/PAc4B5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMTI3MTI1NjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzYwYjJlMDc4YjE4MDkwMzgwMGQxNmEyMGU0NDVmNzUyODNkNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/stEAXYLraPD2pAdFwON8E4RF47 Z/ZTBFLkO0MYxg3BggJ/3ZclQcHT4sv2a7NXgGIZeKsy147MBXduN+3HtQXGAZwr rl3PoFeP3CNjAUxiIzO/bOFhz+ln2zd9rwf1x3UUaNRH54jrsfJm8/irvr1/lbeX xQAy3bUUrhv9izI91u1qbm4ik2mFPAcQRDltX6YHpMlqCWjvyxuSO+DDLm2YxMnV yNBjZuPfzVsbj8pWP0dtEr0lA9f9x03P+k6ttsCFmnQTQFiLOPdhHewlQjAlmg7e CZyI7hdxo/T82qTJQsgDeNBVCuOyMf+vo9gQzbQ0WC4bQ3t2V7gcwNpRkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMNgsuB4sYCQOADRaiDkRfdSg9bmMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvdzJDeTRIaXhnSkE0QU5GcUlPUkY5MUtEMXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpxMA0G CSqGSIb3DQEBCwUAA4IBAQA0m2Ghp+nuFUmKASA1olTZqDpQDqiHUVyanobV4XIz oupe4xCehSmF7KCCcXw8bQYQZEm6Qws6pHN8PN5tQ+LjlZBuh3kBD/tgQVYmK6qb CSOeBZk/nQUthFUfXvweIApYdGGJv/8CFb7dhUBWkTXvZgBLGf3wwDmVBk1Cdz+F YrKQh6PHnQ6DAhIrvzizOjQMkTuQEc1Ajh5UYRZL/MJMfIauDk9PAtBKDy+cNoEA vNn566CRWEK4tkHvPeWTnu/lpM/9TwttP+5PwhQsNTJRpzEY2UVV5I23cZLn5pjd bWE9dcLXgGkpVWoFOcwhTLIlweIk7194WaVQwJ62avxw -----END CERTIFICATE-----Generated at Mon Dec 8 01:40:40 2025 by rpki-client