This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/WCfjChyA9D2SKAzCeaN1yr1cksU.roa File: WCfjChyA9D2SKAzCeaN1yr1cksU.roa (raw, json) Hash identifier: MnNx5I8AC7aU64AxF3SWeU+kL9QY1gnFcWJmB0EHgIA= Subject key identifier: 58:27:E3:0A:1C:80:F4:3D:92:28:0C:C2:79:A3:75:CA:BD:5C:92:C5 Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019ABF5EDB5EA228DDD62BE093164AD7D617 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/WCfjChyA9D2SKAzCeaN1yr1cksU.roa Signing time: Wed 26 Nov 2025 08:54:15 +0000 ROA not before: Wed 26 Nov 2025 08:54:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200482 IP address blocks: 37.114.35.0/24 maxlen: 32 37.114.38.0/24 maxlen: 24 37.114.60.0/24 maxlen: 24 37.114.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:5e:db:5e:a2:28:dd:d6:2b:e0:93:16:4a:d7:d6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Nov 26 08:54:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5827e30a1c80f43d92280cc279a375cabd5c92c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:b2:69:a9:bd:68:49:80:b9:b2:b9:93:e3: 23:c5:21:dd:d2:cc:00:e5:1f:07:1d:aa:6f:0e:0b: 99:46:74:52:30:16:81:87:1a:cd:9e:c3:c2:da:36: 7d:84:16:ba:32:32:24:ac:2b:e4:e4:ce:3d:d4:be: 0f:07:d1:36:fc:d7:eb:83:ed:2e:5e:f7:d5:46:02: 57:ba:0c:04:f3:dd:1a:f5:16:3f:8f:4f:c7:b5:a7: 76:88:32:91:98:3a:87:0e:bd:0b:c0:29:5d:b4:d8: 8a:10:fb:43:72:a2:e7:1f:36:69:3c:a9:b8:60:a5: 9b:55:76:0b:22:9b:40:bd:d4:24:79:4c:73:9d:f7: c7:a0:a0:80:80:91:f0:c0:5d:be:bc:82:38:24:36: 32:9d:2a:b6:95:71:59:90:26:5b:d1:d5:fb:05:f9: 8a:82:d0:a6:a2:01:b5:42:6c:3b:b9:2e:5d:7e:65: 7a:bd:8e:d7:00:86:49:21:c4:07:b8:ce:ba:10:d0: 2e:7b:97:88:ca:fc:9b:d9:f2:b7:98:ef:07:c2:79: 4a:d4:89:0c:28:d4:0d:1a:85:01:8d:f8:5a:b4:37: 28:3c:f3:48:c4:4a:50:15:06:05:49:38:4e:8f:a2: 52:b4:bf:ff:8e:77:18:33:bc:2c:23:9c:2b:34:27: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:27:E3:0A:1C:80:F4:3D:92:28:0C:C2:79:A3:75:CA:BD:5C:92:C5 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/WCfjChyA9D2SKAzCeaN1yr1cksU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.35.0/24 37.114.38.0/24 37.114.60.0/23 Signature Algorithm: sha256WithRSAEncryption 44:8c:e1:d2:c2:e3:74:24:7b:04:9c:29:30:4a:2f:04:5d:8a: 7b:d2:93:0b:5e:40:9a:9f:e9:f3:66:34:60:ab:20:99:40:6d: eb:a8:a4:40:4f:d8:30:61:db:06:4d:9f:79:19:64:32:48:f1: ac:c8:c7:df:94:05:83:b1:99:5e:fb:5a:61:e6:83:4d:54:dd: 21:a4:38:3f:da:47:c0:27:e5:4e:95:f4:0d:0c:e8:40:cb:8f: 7a:39:50:f6:f6:fc:2f:da:38:9a:1a:48:eb:f5:19:29:3f:0a: 36:74:60:ca:9e:d6:ef:eb:2f:ff:60:9a:80:2c:9c:28:bd:3f: a6:9b:e8:ee:b4:a9:45:19:5e:3c:59:17:b6:ed:3d:4d:0b:ee: 27:2e:cf:a9:00:9e:8a:39:f4:cb:a9:6f:19:9b:ba:ca:74:b4: 34:21:67:06:b7:4a:30:ad:cd:c7:4b:ff:40:a8:d0:e9:59:79: f6:8b:68:78:28:b8:e5:d5:fa:8a:2d:c6:2c:89:f2:52:eb:10: e5:62:0a:cf:85:4a:43:d5:0d:13:68:3c:e3:15:73:ca:c8:35: 49:b4:4a:cd:a3:87:09:90:3a:c6:43:57:14:74:be:c8:94:57: 4f:51:c2:73:b2:bb:33:13:a9:69:57:43:79:92:68:8f:68:6b: 2d:ec:ac:b1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZq/Xtteoijd1ivgkxZK19YXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjUxMTI2MDg1NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODI3ZTMwYTFjODBmNDNkOTIyODBjYzI3OWEzNzVjYWJkNWM5MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DCyaam9aEmAubK5k+MjxSHd0swA 5R8HHapvDguZRnRSMBaBhxrNnsPC2jZ9hBa6MjIkrCvk5M491L4PB9E2/Nfrg+0u XvfVRgJXugwE890a9RY/j0/Htad2iDKRmDqHDr0LwCldtNiKEPtDcqLnHzZpPKm4 YKWbVXYLIptAvdQkeUxznffHoKCAgJHwwF2+vII4JDYynSq2lXFZkCZb0dX7BfmK gtCmogG1Qmw7uS5dfmV6vY7XAIZJIcQHuM66ENAue5eIyvyb2fK3mO8HwnlK1IkM KNQNGoUBjfhatDcoPPNIxEpQFQYFSThOj6JStL//jncYM7wsI5wrNCdfMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFgn4wocgPQ9kigMwnmjdcq9XJLFMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvV0NmakNoeUE5RDJTS0F6Q2VhTjF5cjFja3NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJXIjAwQA JXImAwQBJXI8MA0GCSqGSIb3DQEBCwUAA4IBAQBEjOHSwuN0JHsEnCkwSi8EXYp7 0pMLXkCan+nzZjRgqyCZQG3rqKRAT9gwYdsGTZ95GWQySPGsyMfflAWDsZle+1ph 5oNNVN0hpDg/2kfAJ+VOlfQNDOhAy496OVD29vwv2jiaGkjr9RkpPwo2dGDKntbv 6y//YJqALJwovT+mm+jutKlFGV48WRe27T1NC+4nLs+pAJ6KOfTLqW8Zm7rKdLQ0 IWcGt0owrc3HS/9AqNDpWXn2i2h4KLjl1fqKLcYsifJS6xDlYgrPhUpD1Q0TaDzj FXPKyDVJtErNo4cJkDrGQ1cUdL7IlFdPUcJzsrszE6lpV0N5kmiPaGst7Kyx -----END CERTIFICATE-----Generated at Sat Dec 6 18:40:08 2025 by rpki-client