This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/W6VeJiHlvuRMQjeGZHv3mokER-c.roa File: W6VeJiHlvuRMQjeGZHv3mokER-c.roa (raw, json) Hash identifier: qcyR5RW8f0zdUSnAWl6lW42oNtIicHOzXOEszMGa+ME= Subject key identifier: 5B:A5:5E:26:21:E5:BE:E4:4C:42:37:86:64:7B:F7:9A:89:04:47:E7 Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Certificate serial: 019B0CC313CEAA110F55800D0407523DE3BD Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/W6VeJiHlvuRMQjeGZHv3mokER-c.roa Signing time: Thu 11 Dec 2025 09:34:29 +0000 ROA not before: Thu 11 Dec 2025 09:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199369 IP address blocks: 89.33.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:c3:13:ce:aa:11:0f:55:80:0d:04:07:52:3d:e3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Validity Not Before: Dec 11 09:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5ba55e2621e5bee44c423786647bf79a890447e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:b5:43:73:47:1b:5c:9e:ee:8b:9d:01:3a: 61:b7:2f:da:5f:a5:66:f8:2e:7b:12:cd:ed:13:fe: 2b:70:b3:83:89:fb:58:eb:7b:60:7b:26:7a:e3:54: fe:7f:b6:a1:f2:e8:19:fc:98:09:c4:7f:e1:ba:40: bf:ba:d0:a0:b8:49:2b:53:8b:9e:1d:e7:66:11:66: 52:94:83:a5:e0:04:41:f4:94:38:ff:a6:79:ff:af: 57:75:d0:b5:37:89:f2:e5:fe:63:d7:e9:50:27:2c: 6b:88:07:2d:7b:e0:1c:51:f5:ca:bd:0e:25:d3:84: 4f:7a:d3:52:54:8e:97:12:cd:33:19:c3:e3:7e:c7: f8:c7:0e:1f:f4:c1:31:b8:ab:af:60:bd:af:53:20: 00:31:da:d4:dd:97:14:67:f7:65:d1:fa:63:fb:48: 34:66:42:0d:ac:5b:4e:b2:ab:a3:d1:13:e9:12:3e: a9:3a:aa:60:60:2e:d3:85:29:21:45:5c:be:53:a4: 3b:77:1f:43:66:f5:27:a6:89:68:ff:6e:80:3d:75: 06:90:c1:e7:02:46:67:e7:fa:17:c1:4a:a5:cf:e4: 1f:04:1a:d2:8c:0c:f9:ac:95:41:0b:ed:e4:42:7f: 31:49:42:da:97:9d:3a:1a:bc:22:88:51:60:01:f7: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A5:5E:26:21:E5:BE:E4:4C:42:37:86:64:7B:F7:9A:89:04:47:E7 X509v3 Authority Key Identifier: keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/W6VeJiHlvuRMQjeGZHv3mokER-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.166.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:19:5c:73:e3:4a:fe:b5:22:8d:7e:2b:94:bf:a4:63:18:7c: 91:82:e0:ad:82:df:c3:a9:e8:f5:a8:a6:95:fa:a0:29:95:b3: 01:10:38:5a:51:67:65:19:6d:c8:b8:a2:0c:6d:65:c9:bc:02: 3c:35:dd:3a:4d:a4:e8:86:58:38:c8:b1:09:a0:73:d1:3b:cb: 8c:26:e1:cf:59:79:d0:d6:fe:4a:06:f9:7d:2f:6a:17:bd:0f: 4e:32:f0:07:b5:ab:a5:90:25:71:c6:ba:48:b0:c2:d6:c9:07: 95:43:9e:0b:e8:7c:aa:34:3a:b7:e8:c8:8f:ac:6f:ed:89:58: fb:86:bb:b4:8e:f7:99:38:39:5c:04:78:91:9a:b6:01:9c:f1: af:6c:bc:74:5a:33:f9:db:88:e6:b9:41:6b:e7:62:2a:57:c3: c9:39:89:85:de:77:a0:f7:02:0c:d6:c2:48:54:8d:88:04:6a: c3:00:45:2a:55:81:5e:4b:3b:e8:df:c1:49:23:46:84:7c:cb: 51:82:ae:2b:9b:c9:4d:6e:02:9c:65:7f:e7:38:38:76:91:06: 3e:cf:b2:e9:97:dd:69:df:26:1e:3f:ce:8c:4d:f7:d3:0f:ac: 80:d4:3c:df:df:0c:7d:7d:5b:d5:74:03:99:f4:ff:58:ec:d8: 31:3f:0f:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMwxPOqhEPVYANBAdSPeO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDkxNjhmZGI1MmU5YjdkMWE3YTVlOGY1MThlZGZiYzJj M2Y5YWYwHhcNMjUxMjExMDkzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmE1NWUyNjIxZTViZWU0NGM0MjM3ODY2NDdiZjc5YTg5MDQ0N2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxa1Q3NHG1ye7oudATphty/aX6Vm +C57Es3tE/4rcLODiftY63tgeyZ641T+f7ah8ugZ/JgJxH/hukC/utCguEkrU4ue HedmEWZSlIOl4ARB9JQ4/6Z5/69XddC1N4ny5f5j1+lQJyxriActe+AcUfXKvQ4l 04RPetNSVI6XEs0zGcPjfsf4xw4f9MExuKuvYL2vUyAAMdrU3ZcUZ/dl0fpj+0g0 ZkINrFtOsquj0RPpEj6pOqpgYC7ThSkhRVy+U6Q7dx9DZvUnpolo/26APXUGkMHn AkZn5/oXwUqlz+QfBBrSjAz5rJVBC+3kQn8xSULal506GrwiiFFgAfeIzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFulXiYh5b7kTEI3hmR795qJBEfnMB8GA1UdIwQY MBaAFLQJFo/bUum30ael6PUY7fvCw/mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2Qt ZmE3MThhYzlkNzU4LzEvVzZWZUppSGx2dVJNUWplR1pIdjNtb2tFUi1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2QtZmE3MThhYzlkNzU4 LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSGmMA0G CSqGSIb3DQEBCwUAA4IBAQCbGVxz40r+tSKNfiuUv6RjGHyRguCtgt/Dqej1qKaV +qAplbMBEDhaUWdlGW3IuKIMbWXJvAI8Nd06TaTohlg4yLEJoHPRO8uMJuHPWXnQ 1v5KBvl9L2oXvQ9OMvAHtaulkCVxxrpIsMLWyQeVQ54L6HyqNDq36MiPrG/tiVj7 hru0jveZODlcBHiRmrYBnPGvbLx0WjP524jmuUFr52IqV8PJOYmF3neg9wIM1sJI VI2IBGrDAEUqVYFeSzvo38FJI0aEfMtRgq4rm8lNbgKcZX/nODh2kQY+z7Lpl91p 3yYeP86MTffTD6yA1Dzf3wx9fVvVdAOZ9P9Y7NgxPw9p -----END CERTIFICATE-----Generated at Fri Dec 12 03:40:18 2025 by rpki-client