This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/CWdDghT3_44LrVneFkbqjnlT4cA.roa File: CWdDghT3_44LrVneFkbqjnlT4cA.roa (raw, json) Hash identifier: Q02kM8CfSaq9MzAlsDA/tm+pjhwNKI52SBxdLvNBsrc= Subject key identifier: 09:67:43:82:14:F7:FF:8E:0B:AD:59:DE:16:46:EA:8E:79:53:E1:C0 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019A50C5F969E967D1B238939B1B6DA281B4 Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/CWdDghT3_44LrVneFkbqjnlT4cA.roa Signing time: Tue 04 Nov 2025 21:29:03 +0000 ROA not before: Tue 04 Nov 2025 21:29:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49000 IP address blocks: 89.29.255.0/24 maxlen: 24 176.57.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:c5:f9:69:e9:67:d1:b2:38:93:9b:1b:6d:a2:81:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Nov 4 21:29:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0967438214f7ff8e0bad59de1646ea8e7953e1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:e3:20:aa:e5:33:2e:36:e7:35:26:c6:5c: 6f:71:df:d9:d8:29:08:78:bb:53:e3:ad:90:5a:9e: a3:49:85:8a:db:eb:28:a6:a9:e8:33:54:cf:8d:93: 25:55:23:33:21:7b:29:d1:94:01:0b:05:ea:f5:ec: 1b:f7:2e:94:25:be:18:e3:51:cb:7d:8d:18:94:f8: e6:3a:d3:60:91:85:cd:08:94:3f:bd:c2:45:78:f5: a6:2f:f5:1e:7d:29:0a:ff:1e:44:6f:be:22:83:05: 36:5e:20:35:9d:18:8e:a6:a8:95:7d:b4:f1:6d:8f: 18:56:a4:c5:9e:9b:a4:83:51:9b:fd:72:bc:4e:e0: 42:4d:0e:37:f2:bc:f0:0e:bb:0f:72:bb:18:3c:4b: 0b:49:be:bc:47:1a:94:78:83:bc:71:bc:16:93:36: b2:e8:59:73:22:b7:0c:bd:9a:92:48:0e:4f:ff:58: 8e:b4:3f:ae:66:5a:2f:14:ad:9c:61:86:e7:31:5f: 2c:7a:08:16:79:c9:e9:04:30:bd:4e:b4:1e:e8:42: 6c:88:87:6c:64:dc:b3:ac:45:18:30:3d:a0:a5:0f: b6:8b:b2:28:da:e9:e9:8a:f3:09:a5:21:03:3b:67: 13:d6:db:a3:8b:2d:83:1e:4f:cd:f6:f2:4b:0f:7f: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:67:43:82:14:F7:FF:8E:0B:AD:59:DE:16:46:EA:8E:79:53:E1:C0 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/CWdDghT3_44LrVneFkbqjnlT4cA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.255.0/24 176.57.96.0/24 Signature Algorithm: sha256WithRSAEncryption cd:10:78:dc:1d:ed:bf:9a:e7:f1:ec:74:8d:e2:03:c6:6c:25: 16:43:79:66:06:3c:90:c2:6f:33:b9:b7:6e:fb:37:4f:3a:78: e0:9c:c0:55:77:f6:4e:43:7d:21:fd:31:58:4c:15:30:ab:c2: 29:c8:f4:ce:76:83:de:22:8f:e4:81:91:48:06:cb:a9:ea:88: 56:a5:af:fa:04:6f:b4:84:b7:db:c6:b3:6e:eb:61:68:7e:26: 05:86:1c:ac:8b:6a:9d:bb:d0:04:dc:ed:e7:5b:19:6d:b3:1c: fc:a1:00:4d:c3:d7:9f:99:e6:46:42:92:36:e4:13:89:7c:2b: b2:e0:bd:fc:ac:a3:ca:aa:bd:a4:b7:07:de:56:b4:3c:6c:5d: c8:88:09:27:ee:e4:43:55:99:82:52:06:ea:a9:94:a3:69:42: ac:7c:d4:f6:22:64:76:25:7c:2f:6f:1b:81:f5:bf:1e:3c:1a: 3c:6b:21:1e:f6:4d:4d:43:ec:32:69:3f:5e:e9:c7:fe:b8:9b: 7d:a7:c8:68:93:87:6a:79:36:41:ae:de:67:c1:fc:3c:ed:0e: 42:a8:1c:fd:a5:ab:70:16:f6:4e:bd:91:99:ec:f9:fe:d9:40: 23:0e:43:bf:42:88:cc:15:9c:04:b0:de:2b:1b:bb:5d:f0:ce: fe:20:d7:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpQxflp6WfRsjiTmxttooG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjUxMTA0MjEyOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTY3NDM4MjE0ZjdmZjhlMGJhZDU5ZGUxNjQ2ZWE4ZTc5NTNlMWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz/jIKrlMy425zUmxlxvcd/Z2CkI eLtT462QWp6jSYWK2+sopqnoM1TPjZMlVSMzIXsp0ZQBCwXq9ewb9y6UJb4Y41HL fY0YlPjmOtNgkYXNCJQ/vcJFePWmL/UefSkK/x5Eb74igwU2XiA1nRiOpqiVfbTx bY8YVqTFnpukg1Gb/XK8TuBCTQ438rzwDrsPcrsYPEsLSb68RxqUeIO8cbwWkzay 6FlzIrcMvZqSSA5P/1iOtD+uZlovFK2cYYbnMV8seggWecnpBDC9TrQe6EJsiIds ZNyzrEUYMD2gpQ+2i7Io2unpivMJpSEDO2cT1tujiy2DHk/N9vJLD38I9wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAlnQ4IU9/+OC61Z3hZG6o55U+HAMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvQ1dkRGdoVDNfNDRMclZuZUZrYnFqbmxUNGNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWR3/AwQA sDlgMA0GCSqGSIb3DQEBCwUAA4IBAQDNEHjcHe2/mufx7HSN4gPGbCUWQ3lmBjyQ wm8zubdu+zdPOnjgnMBVd/ZOQ30h/TFYTBUwq8IpyPTOdoPeIo/kgZFIBsup6ohW pa/6BG+0hLfbxrNu62FofiYFhhysi2qdu9AE3O3nWxltsxz8oQBNw9efmeZGQpI2 5BOJfCuy4L38rKPKqr2ktwfeVrQ8bF3IiAkn7uRDVZmCUgbqqZSjaUKsfNT2ImR2 JXwvbxuB9b8ePBo8ayEe9k1NQ+wyaT9e6cf+uJt9p8hok4dqeTZBrt5nwfw87Q5C qBz9patwFvZOvZGZ7Pn+2UAjDkO/QojMFZwEsN4rG7td8M7+INdD -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:48 2025 by rpki-client