This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/pWCods6SP1-TwrIaXyXEahg6hSk.roa File: pWCods6SP1-TwrIaXyXEahg6hSk.roa (raw, json) Hash identifier: U/lqxnFFyY4IfL+Wh8Z1AqEVFTTqD0Mud4Ulygu2dBg= Subject key identifier: A5:60:A8:76:CE:92:3F:5F:93:C2:B2:1A:5F:25:C4:6A:18:3A:85:29 Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019AA1D75711970FD825DEEA66D74487DAB1 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/pWCods6SP1-TwrIaXyXEahg6hSk.roa Signing time: Thu 20 Nov 2025 15:17:15 +0000 ROA not before: Thu 20 Nov 2025 15:17:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213541 IP address blocks: 89.185.79.0/24 maxlen: 24 92.240.196.0/24 maxlen: 24 92.240.198.0/24 maxlen: 24 92.240.199.0/24 maxlen: 24 92.240.204.0/24 maxlen: 24 92.240.215.0/24 maxlen: 24 92.240.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:d7:57:11:97:0f:d8:25:de:ea:66:d7:44:87:da:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Nov 20 15:17:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a560a876ce923f5f93c2b21a5f25c46a183a8529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:a1:76:9d:e6:55:f4:64:15:3c:5b:c0:8e: 62:59:51:a9:d7:2f:fc:e7:87:3f:21:80:af:d2:cd: cb:af:6e:dd:69:8c:19:dd:e9:8a:7b:91:f5:4e:79: b3:ab:b1:34:c6:fb:81:d9:05:ac:8a:6d:35:1d:90: 6a:b3:93:d5:ed:ae:c4:e8:bc:b4:5c:d6:b9:27:e1: 1f:42:a4:28:46:14:ce:49:e6:a9:c7:ed:6a:be:cc: d9:68:39:d7:26:bf:9f:ea:e8:5b:6c:18:41:81:97: 3f:21:4b:b2:17:d1:5c:e2:72:85:a5:12:75:80:16: e0:dc:12:46:99:da:39:ef:1a:59:51:78:71:c5:20: bc:8a:18:ff:db:ea:02:c8:9e:65:70:61:f8:36:16: 3d:b5:42:a0:b1:8c:3c:19:6d:c0:1c:eb:f3:3b:25: 0b:a9:d8:1d:ab:bf:41:33:6c:29:39:a6:5b:10:0e: 13:bf:86:37:ea:ab:44:ec:12:3e:d8:f8:9a:7d:73: ad:ad:86:4c:55:f2:26:cd:50:11:31:56:a2:5c:77: f1:20:7d:c7:a8:2d:65:f3:78:92:56:93:62:6c:50: 63:1e:2d:f6:fb:31:4f:4b:76:a9:5a:6f:36:8d:4f: 17:be:15:10:6a:fa:fa:e8:43:57:d1:fa:dc:9e:8f: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:60:A8:76:CE:92:3F:5F:93:C2:B2:1A:5F:25:C4:6A:18:3A:85:29 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/pWCods6SP1-TwrIaXyXEahg6hSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.79.0/24 92.240.196.0/24 92.240.198.0/23 92.240.204.0/24 92.240.215.0/24 92.240.217.0/24 Signature Algorithm: sha256WithRSAEncryption 78:7c:13:9f:ba:0e:f2:a8:ef:17:d0:bf:e4:5b:eb:97:37:7a: 75:f6:22:41:65:d0:a2:47:7e:43:3b:17:29:ac:d7:b5:7c:9a: 5f:ae:00:d8:0b:e7:bf:ff:0c:4e:ff:39:6a:7a:71:a1:1f:fc: e5:50:fe:e4:89:cc:87:6a:2e:87:62:e8:ef:3d:90:c4:ce:13: a6:54:85:c0:b1:13:fc:a9:20:8b:b3:5b:40:b4:f2:3a:60:80: aa:f2:98:d2:98:ce:70:b5:5a:f9:ae:5a:61:44:ec:97:4e:46: 59:34:3a:ab:e2:7e:f7:51:20:16:f2:10:13:77:f7:d0:df:9d: d2:4e:92:c2:5c:ad:fa:74:dd:7a:a6:5c:23:37:cf:40:40:ba: 19:df:ad:2c:b9:fd:a7:b3:ff:53:c9:e3:89:29:d5:dd:b6:6e: 5e:d7:75:bf:de:20:b7:9b:96:43:aa:02:c6:25:90:3e:64:31: 82:4e:1d:64:16:66:c0:d7:29:7c:0c:24:66:0c:e1:a2:56:a9: 67:e8:a6:58:e0:ce:bb:49:21:cf:b6:af:71:c3:9a:40:de:14: d5:f9:88:75:2c:71:97:99:d9:29:3e:fb:4b:cc:89:76:4a:2f: d5:92:89:76:a7:9a:d3:ac:2f:a8:50:a4:23:aa:ad:ae:5c:d9: 63:1f:d8:eb -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZqh11cRlw/YJd7qZtdEh9qxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjUxMTIwMTUxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTYwYTg3NmNlOTIzZjVmOTNjMmIyMWE1ZjI1YzQ2YTE4M2E4NTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+6hdp3mVfRkFTxbwI5iWVGp1y/8 54c/IYCv0s3Lr27daYwZ3emKe5H1Tnmzq7E0xvuB2QWsim01HZBqs5PV7a7E6Ly0 XNa5J+EfQqQoRhTOSeapx+1qvszZaDnXJr+f6uhbbBhBgZc/IUuyF9Fc4nKFpRJ1 gBbg3BJGmdo57xpZUXhxxSC8ihj/2+oCyJ5lcGH4NhY9tUKgsYw8GW3AHOvzOyUL qdgdq79BM2wpOaZbEA4Tv4Y36qtE7BI+2PiafXOtrYZMVfImzVARMVaiXHfxIH3H qC1l83iSVpNibFBjHi32+zFPS3apWm82jU8XvhUQavr66ENX0frcno/MXwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKVgqHbOkj9fk8KyGl8lxGoYOoUpMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvcFdDb2RzNlNQMS1Ud3JJYVh5WEVhaGc2aFNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWblPAwQA XPDEAwQBXPDGAwQAXPDMAwQAXPDXAwQAXPDZMA0GCSqGSIb3DQEBCwUAA4IBAQB4 fBOfug7yqO8X0L/kW+uXN3p19iJBZdCiR35DOxcprNe1fJpfrgDYC+e//wxO/zlq enGhH/zlUP7kicyHai6HYujvPZDEzhOmVIXAsRP8qSCLs1tAtPI6YICq8pjSmM5w tVr5rlphROyXTkZZNDqr4n73USAW8hATd/fQ353STpLCXK36dN16plwjN89AQLoZ 360suf2ns/9TyeOJKdXdtm5e13W/3iC3m5ZDqgLGJZA+ZDGCTh1kFmbA1yl8DCRm DOGiVqln6KZY4M67SSHPtq9xw5pA3hTV+Yh1LHGXmdkpPvtLzIl2Si/Vkol2p5rT rC+oUKQjqq2uXNljH9jr -----END CERTIFICATE-----Generated at Fri Dec 5 10:11:25 2025 by rpki-client