This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/W5hSAR4sZalO8wqJY5l805Zgmmc.roa File: W5hSAR4sZalO8wqJY5l805Zgmmc.roa (raw, json) Hash identifier: BNtHkanpnpWtZP85x9b7xHDyrh1q2+yrxaroucbMTVc= Subject key identifier: 5B:98:52:01:1E:2C:65:A9:4E:F3:0A:89:63:99:7C:D3:96:60:9A:67 Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688 Certificate serial: 019ABA6646481FEB58AF20BD01002D5A6514 Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/W5hSAR4sZalO8wqJY5l805Zgmmc.roa Signing time: Tue 25 Nov 2025 09:44:15 +0000 ROA not before: Tue 25 Nov 2025 09:44:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397451 IP address blocks: 45.67.100.0/24 maxlen: 24 185.25.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:66:46:48:1f:eb:58:af:20:bd:01:00:2d:5a:65:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2893a4b284acb5d8a4164289045492109511688 Validity Not Before: Nov 25 09:44:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b9852011e2c65a94ef30a8963997cd396609a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:20:73:f9:b0:7e:d6:be:2d:9c:65:e6:c9: 89:ef:ff:c5:af:a2:42:40:1a:d0:99:27:1c:4a:33: c6:ca:9f:d4:72:c5:77:2e:b4:5b:dc:3e:8d:ed:61: 77:f7:5e:da:71:ee:8e:b3:ea:05:11:d5:10:45:dc: b2:0d:d9:2e:06:ee:28:b5:cd:15:a3:2d:af:2a:9b: 1f:31:eb:5e:65:d8:e8:83:a1:4e:9d:91:d6:ae:e9: cf:6d:76:52:8a:33:ba:16:46:2e:13:75:6d:ba:7f: 88:81:4e:8d:bd:03:7b:8f:26:1e:f5:00:d7:5e:ee: b7:7f:bc:e5:3b:49:f4:53:1b:37:c7:44:49:50:43: 8f:a1:8d:0f:02:37:1a:e2:8a:c9:c2:41:b9:6f:1d: 84:31:2a:b5:9d:21:1c:3f:11:a1:58:77:23:33:58: 45:41:43:7b:a2:3f:41:43:05:10:d9:ff:f6:be:26: 83:4d:d7:53:85:51:d5:a3:7e:f3:ed:8a:ea:6e:16: 3c:c0:f9:69:75:c2:4f:f4:cd:e2:dd:99:76:89:35: b4:8d:92:e2:ac:b5:21:48:f5:e6:07:dc:a6:4e:94: 5c:a3:eb:a0:74:07:60:c3:8c:fd:51:33:68:12:b7: d6:a9:bc:34:cb:6f:3d:50:e7:d9:3d:73:46:03:4c: b4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:98:52:01:1E:2C:65:A9:4E:F3:0A:89:63:99:7C:D3:96:60:9A:67 X509v3 Authority Key Identifier: keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/W5hSAR4sZalO8wqJY5l805Zgmmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.100.0/24 185.25.156.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:90:96:56:26:9a:bd:46:59:d8:b8:2d:d1:6b:95:ff:39:36: e8:7a:d7:80:36:64:c6:38:1f:e9:2d:c3:a7:a2:53:59:aa:bd: 37:33:ad:80:25:a6:ec:69:a1:91:bf:da:33:93:4d:e8:7b:0d: d3:28:48:7a:03:0d:fb:c8:62:22:2d:f2:85:79:ac:26:2e:ec: ad:da:79:30:98:1f:1f:04:31:0a:e2:a6:9f:52:fe:87:50:da: 95:d2:c2:1f:45:ea:16:63:68:c4:51:87:99:7b:2d:3c:5f:5e: f1:58:88:df:23:46:73:48:96:e2:3d:b9:75:93:14:10:13:c4: 2d:a4:d0:b5:f5:e7:13:02:d9:a0:f4:a8:25:bf:62:29:f2:a6: d1:a2:7b:d1:94:6f:82:40:ad:22:b5:b1:93:ca:c8:f7:29:5a: eb:85:64:c9:e0:1b:b9:7d:44:c5:db:88:d1:43:39:7e:1d:3c: 99:9f:0c:30:40:dc:71:79:5a:fd:43:a8:e6:a1:11:2c:2d:56: 28:69:e7:77:22:cd:dd:c1:2e:9a:b2:64:fb:7e:9f:fe:a9:fa: 58:3b:ab:ba:64:0b:83:34:da:67:54:7e:af:a9:a6:95:b0:75: 41:e6:a4:ff:b5:21:a5:74:46:97:fe:cd:73:71:7a:8b:56:d6: bd:72:ce:a3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq6ZkZIH+tYryC9AQAtWmUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1 MTE2ODgwHhcNMjUxMTI1MDk0NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjk4NTIwMTFlMmM2NWE5NGVmMzBhODk2Mzk5N2NkMzk2NjA5YTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujggc/mwfta+LZxl5smJ7//Fr6JC QBrQmSccSjPGyp/UcsV3LrRb3D6N7WF3917ace6Os+oFEdUQRdyyDdkuBu4otc0V oy2vKpsfMeteZdjog6FOnZHWrunPbXZSijO6FkYuE3Vtun+IgU6NvQN7jyYe9QDX Xu63f7zlO0n0Uxs3x0RJUEOPoY0PAjca4orJwkG5bx2EMSq1nSEcPxGhWHcjM1hF QUN7oj9BQwUQ2f/2viaDTddThVHVo37z7YrqbhY8wPlpdcJP9M3i3Zl2iTW0jZLi rLUhSPXmB9ymTpRco+ugdAdgw4z9UTNoErfWqbw0y289UOfZPXNGA0y02wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFuYUgEeLGWpTvMKiWOZfNOWYJpnMB8GA1UdIwQY MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt YTVkM2NiOTE4MjA2LzEvVzVoU0FSNHNaYWxPOHdxSlk1bDgwNVpnbW1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2 LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALUNkAwQA uRmcMA0GCSqGSIb3DQEBCwUAA4IBAQBrkJZWJpq9RlnYuC3Ra5X/OTboeteANmTG OB/pLcOnolNZqr03M62AJabsaaGRv9ozk03oew3TKEh6Aw37yGIiLfKFeawmLuyt 2nkwmB8fBDEK4qafUv6HUNqV0sIfReoWY2jEUYeZey08X17xWIjfI0ZzSJbiPbl1 kxQQE8QtpNC19ecTAtmg9Kglv2Ip8qbRonvRlG+CQK0itbGTysj3KVrrhWTJ4Bu5 fUTF24jRQzl+HTyZnwwwQNxxeVr9Q6jmoREsLVYoaed3Is3dwS6asmT7fp/+qfpY O6u6ZAuDNNpnVH6vqaaVsHVB5qT/tSGldEaX/s1zcXqLVta9cs6j -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:50 2025 by rpki-client