This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/W27NQHDSt-8QijhI1HYZsZz3Tfo.roa File: W27NQHDSt-8QijhI1HYZsZz3Tfo.roa (raw, json) Hash identifier: yNqWLj2CL2ilT9Yb7jbV3Mx92Lx6x20uHpMieW58ZKw= Subject key identifier: 5B:6E:CD:40:70:D2:B7:EF:10:8A:38:48:D4:76:19:B1:9C:F7:4D:FA Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019A73268CB49E28C413043037790C96ACD7 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/W27NQHDSt-8QijhI1HYZsZz3Tfo.roa Signing time: Tue 11 Nov 2025 13:41:37 +0000 ROA not before: Tue 11 Nov 2025 13:41:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 81.22.138.0/24 maxlen: 24 89.185.0.0/24 maxlen: 24 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:26:8c:b4:9e:28:c4:13:04:30:37:79:0c:96:ac:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Nov 11 13:41:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b6ecd4070d2b7ef108a3848d47619b19cf74dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:11:3c:ee:ab:04:7f:9a:e7:b9:af:e3:37: bd:8e:fb:28:0b:97:cd:72:54:e7:b6:a2:91:40:9a: 9b:be:de:a3:d2:93:26:81:4b:70:ef:82:25:2b:3d: e4:61:e4:9e:fa:5c:0d:c0:74:f9:20:d4:cd:e8:ed: f9:4b:ad:d7:1a:77:52:72:4c:6d:4d:9e:30:8b:31: 88:68:8d:08:68:69:9e:66:c9:7c:03:17:f9:5d:10: ec:e6:2e:43:08:9c:20:80:66:6b:8b:f6:0c:13:44: 49:1c:d9:95:b5:57:a5:13:9d:c9:04:94:2a:5e:dc: 08:3e:a5:3b:95:d6:69:e0:b4:10:08:18:14:e1:e7: ff:7c:7a:e6:bc:58:dd:50:9d:18:85:7f:d2:af:a1: 8d:d0:60:7c:de:2f:cb:ae:7c:ed:5a:dd:58:42:65: c2:db:29:3e:60:07:87:7b:96:89:7a:b8:11:b6:16: 68:b3:47:0e:a9:10:2b:83:f0:26:13:da:6f:93:7a: e0:cc:44:d6:dc:91:35:6f:d3:61:e6:eb:5b:8d:f3: 0b:1c:10:5f:6e:84:0f:5c:42:f6:fd:06:a5:8e:19: ab:c6:7d:ee:9c:45:80:ec:45:2a:f7:c7:0a:0b:91: 9f:ec:f4:2f:8d:33:5f:b1:69:e1:af:5e:7c:15:58: c7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6E:CD:40:70:D2:B7:EF:10:8A:38:48:D4:76:19:B1:9C:F7:4D:FA X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/W27NQHDSt-8QijhI1HYZsZz3Tfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.138.0/24 89.185.0.0/24 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 03:72:c8:3d:00:33:75:13:7d:9a:4d:57:f7:a5:c1:a2:d2:09: 02:58:7f:e8:92:ea:d5:f4:85:b2:e1:65:a4:6e:3a:e6:1b:78: 18:72:17:a0:3f:57:57:97:5e:38:b2:b4:88:36:ca:98:e7:d8: 82:ed:2f:46:56:12:68:fe:40:1d:16:22:7b:df:94:fb:e6:dd: bf:30:6f:f0:74:1a:e7:5d:95:ae:d1:70:ed:92:98:85:93:c0: 5f:66:41:17:64:69:34:e3:01:a9:35:e1:44:f4:6d:89:bb:de: 65:54:e0:8f:2c:ec:4a:df:d8:95:f8:a1:9d:8e:4a:8c:32:32: f5:a6:e0:07:b5:ba:6b:27:b3:a5:50:69:69:be:a8:e7:41:09: 74:5f:d2:1d:34:76:99:53:5f:42:b5:e9:6e:e8:e9:94:d6:40: ea:eb:e8:4c:cc:ef:35:9d:36:3f:d7:f2:c4:9e:a1:cb:ea:ce: 22:67:32:83:14:d4:17:89:40:57:a9:d1:00:3a:94:ff:a9:56: 8e:51:7a:89:7d:85:c1:ec:74:71:09:29:d6:fb:19:88:d9:b2: 37:13:85:d1:dc:ec:93:64:87:01:9b:9e:e3:13:b7:47:35:09: 0e:a9:d6:09:3c:40:dd:76:ec:39:c4:a4:a3:2b:e9:5d:3d:36: 85:58:49:88 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpzJoy0nijEEwQwN3kMlqzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMTExMTM0MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjZlY2Q0MDcwZDJiN2VmMTA4YTM4NDhkNDc2MTliMTljZjc0ZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4URPO6rBH+a57mv4ze9jvsoC5fN clTntqKRQJqbvt6j0pMmgUtw74IlKz3kYeSe+lwNwHT5INTN6O35S63XGndSckxt TZ4wizGIaI0IaGmeZsl8Axf5XRDs5i5DCJwggGZri/YME0RJHNmVtVelE53JBJQq XtwIPqU7ldZp4LQQCBgU4ef/fHrmvFjdUJ0YhX/Sr6GN0GB83i/LrnztWt1YQmXC 2yk+YAeHe5aJergRthZos0cOqRArg/AmE9pvk3rgzETW3JE1b9Nh5utbjfMLHBBf boQPXEL2/Qaljhmrxn3unEWA7EUq98cKC5Gf7PQvjTNfsWnhr158FVjH2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFtuzUBw0rfvEIo4SNR2GbGc9036MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvVzI3TlFIRFN0LThRaWpoSTFIWVpzWnozVGZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAURaKAwQA WbkAAwQAbUh7MA0GCSqGSIb3DQEBCwUAA4IBAQADcsg9ADN1E32aTVf3pcGi0gkC WH/okurV9IWy4WWkbjrmG3gYchegP1dXl144srSINsqY59iC7S9GVhJo/kAdFiJ7 35T75t2/MG/wdBrnXZWu0XDtkpiFk8BfZkEXZGk04wGpNeFE9G2Ju95lVOCPLOxK 39iV+KGdjkqMMjL1puAHtbprJ7OlUGlpvqjnQQl0X9IdNHaZU19Ctelu6OmU1kDq 6+hMzO81nTY/1/LEnqHL6s4iZzKDFNQXiUBXqdEAOpT/qVaOUXqJfYXB7HRxCSnW +xmI2bI3E4XR3OyTZIcBm57jE7dHNQkOqdYJPEDdduw5xKSjK+ldPTaFWEmI -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:49 2025 by rpki-client