This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/PwNKn35Sokbr7evbRQGt6ldKTJc.roa File: PwNKn35Sokbr7evbRQGt6ldKTJc.roa (raw, json) Hash identifier: xbgSTs/2Kz3u8buklKtIXDkz4OYgPF3eYqw2N++Xd9U= Subject key identifier: 3F:03:4A:9F:7E:52:A2:46:EB:ED:EB:DB:45:01:AD:EA:57:4A:4C:97 Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef Certificate serial: 019A590AF7DCE511421850104652A39EBB59 Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/PwNKn35Sokbr7evbRQGt6ldKTJc.roa Signing time: Thu 06 Nov 2025 12:01:22 +0000 ROA not before: Thu 06 Nov 2025 12:01:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 185.179.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:0a:f7:dc:e5:11:42:18:50:10:46:52:a3:9e:bb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef Validity Not Before: Nov 6 12:01:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3f034a9f7e52a246ebedebdb4501adea574a4c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:26:50:1d:1a:34:eb:66:7b:ff:42:46:4a: 3e:de:a8:ac:ea:07:85:3b:48:eb:1d:97:98:14:41: 7b:d8:e8:c5:94:c2:7a:ae:dc:07:78:46:d4:74:6e: 2e:aa:fd:b2:a2:e2:f6:76:fe:1d:29:dd:e5:96:d4: d0:ac:05:d1:08:05:25:e6:b7:a6:88:36:98:17:d4: 1b:61:25:b2:b3:25:80:01:79:bd:51:b4:35:ef:75: a7:4c:ba:19:c1:a9:3b:47:ff:65:6c:4f:88:99:e5: 70:d8:4c:b8:3d:ae:fa:e7:fc:59:73:29:ff:21:f9: e4:eb:7e:ae:df:e5:d3:51:56:c5:8e:61:4d:41:f0: a7:a0:04:0a:14:c1:b8:3e:a7:21:33:ab:fd:f9:43: f6:e4:83:6f:a8:f6:78:33:eb:52:3e:2d:f5:a1:93: 1f:50:69:46:a8:9e:39:13:1d:0d:16:a1:75:98:14: be:00:a3:4a:36:ee:6b:18:57:51:e1:4f:e0:fb:64: d2:4b:e8:e0:d7:90:25:dc:3c:72:b4:3d:ab:cc:7d: 8f:71:d4:e5:d3:51:0a:8c:50:3b:4b:1d:b0:59:b1: 1d:d6:e0:e7:fe:cc:dc:00:ca:11:4c:4a:8e:1c:6b: 35:da:56:89:e4:4a:f0:76:84:eb:cd:44:4e:7c:16: 7e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:03:4A:9F:7E:52:A2:46:EB:ED:EB:DB:45:01:AD:EA:57:4A:4C:97 X509v3 Authority Key Identifier: keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/PwNKn35Sokbr7evbRQGt6ldKTJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.91.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:dc:ab:3b:20:66:5c:7e:91:76:63:9a:00:65:20:81:aa:1e: 04:b0:75:67:5a:23:01:be:60:27:67:24:8b:bb:03:55:54:d9: 15:fd:0b:61:2d:e2:6c:09:13:74:1c:d8:59:8e:33:0e:bb:96: 21:e4:3c:38:7c:0d:88:ed:30:55:bf:f5:c9:2f:f9:e9:e6:c9: 27:22:f6:f8:d8:1e:89:a8:a6:eb:75:95:c0:38:c8:94:3a:32: f5:60:50:d6:3c:06:07:0b:4d:e5:32:7b:6f:e6:07:b1:38:cc: 41:cd:f2:bc:1b:d5:9e:c1:2e:9b:e8:04:3a:c6:64:c0:70:82: f5:48:7e:86:fc:80:98:c5:08:d6:0e:53:d6:b1:aa:bd:67:75: 88:1c:26:ff:b4:8b:f7:c9:9d:6e:88:93:7e:1d:b4:22:ad:58: 85:e1:6f:3a:54:ef:a5:94:be:85:3a:b5:5c:e7:f8:f6:0d:35: e7:0d:80:c8:ad:a4:6e:1d:be:e3:95:d7:bb:da:2e:66:d5:29: 92:51:8f:d1:84:d8:00:15:3b:f7:05:2e:a5:4d:71:0e:f8:5e: 5c:7c:01:6a:11:bd:08:91:f7:7e:d9:20:b9:df:34:a0:c8:91: 3c:22:d2:ba:3f:f9:d8:e2:f9:5f:58:8f:6b:62:8e:ba:a1:be: e9:a5:4f:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpZCvfc5RFCGFAQRlKjnrtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk NmIxZWYwHhcNMjUxMTA2MTIwMTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjAzNGE5ZjdlNTJhMjQ2ZWJlZGViZGI0NTAxYWRlYTU3NGE0Yzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzssmUB0aNOtme/9CRko+3qis6geF O0jrHZeYFEF72OjFlMJ6rtwHeEbUdG4uqv2youL2dv4dKd3lltTQrAXRCAUl5rem iDaYF9QbYSWysyWAAXm9UbQ173WnTLoZwak7R/9lbE+ImeVw2Ey4Pa765/xZcyn/ Ifnk636u3+XTUVbFjmFNQfCnoAQKFMG4PqchM6v9+UP25INvqPZ4M+tSPi31oZMf UGlGqJ45Ex0NFqF1mBS+AKNKNu5rGFdR4U/g+2TSS+jg15Al3DxytD2rzH2PcdTl 01EKjFA7Sx2wWbEd1uDn/szcAMoRTEqOHGs12laJ5ErwdoTrzUROfBZ+fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8DSp9+UqJG6+3r20UBrepXSkyXMB8GA1UdIwQY MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt YmU1N2Q3ZGZhMGRlLzEvUHdOS24zNVNva2JyN2V2YlJRR3Q2bGRLVEpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubNbMA0G CSqGSIb3DQEBCwUAA4IBAQBK3Ks7IGZcfpF2Y5oAZSCBqh4EsHVnWiMBvmAnZySL uwNVVNkV/QthLeJsCRN0HNhZjjMOu5Yh5Dw4fA2I7TBVv/XJL/np5sknIvb42B6J qKbrdZXAOMiUOjL1YFDWPAYHC03lMntv5gexOMxBzfK8G9WewS6b6AQ6xmTAcIL1 SH6G/ICYxQjWDlPWsaq9Z3WIHCb/tIv3yZ1uiJN+HbQirViF4W86VO+llL6FOrVc 5/j2DTXnDYDIraRuHb7jlde72i5m1SmSUY/RhNgAFTv3BS6lTXEO+F5cfAFqEb0I kfd+2SC53zSgyJE8ItK6P/nY4vlfWI9rYo66ob7ppU/y -----END CERTIFICATE-----Generated at Sat Dec 6 09:48:23 2025 by rpki-client