This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/w4J0TIAEWujBGgpj8d8lhV_FEz8.roa File: w4J0TIAEWujBGgpj8d8lhV_FEz8.roa (raw, json) Hash identifier: uc8eoValtNzKzj5GxQfj9E9hDrpvbBPgPn+eZXVok3A= Subject key identifier: C3:82:74:4C:80:04:5A:E8:C1:1A:0A:63:F1:DF:25:85:5F:C5:13:3F Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019A9D3E4FEBAE6AB1EB0C639AD1B7D1EB86 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/w4J0TIAEWujBGgpj8d8lhV_FEz8.roa Signing time: Wed 19 Nov 2025 17:51:37 +0000 ROA not before: Wed 19 Nov 2025 17:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201179 IP address blocks: 188.130.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:3e:4f:eb:ae:6a:b1:eb:0c:63:9a:d1:b7:d1:eb:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Nov 19 17:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c382744c80045ae8c11a0a63f1df25855fc5133f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:c5:91:43:10:4e:7f:08:be:6b:99:2d:02: 29:2e:1e:5b:4a:37:22:fd:3c:eb:0b:4d:ee:25:e9: ad:1b:38:1e:88:e9:ef:44:ff:d2:ed:f5:d7:12:4a: fa:e8:d9:20:6f:f9:98:60:42:4d:90:52:31:1a:f1: 32:11:01:3c:28:9f:d3:41:b8:4d:69:f1:32:2b:64: e6:e3:9b:18:48:60:f7:a1:12:5f:b7:c2:53:d0:10: 0e:66:27:b7:3e:37:fb:a7:ba:26:13:83:cd:fb:b4: 39:3b:49:ca:9a:15:79:05:52:1a:45:ae:03:19:ef: 1e:48:dd:b2:19:2d:1b:b8:31:5f:34:69:cd:aa:f7: 95:7b:6e:f8:ee:ee:dc:4b:a1:3b:5b:b5:47:8a:f8: 8d:e3:bd:e6:47:a8:d0:05:03:a2:46:ac:e3:5c:ca: b1:8c:37:40:6f:85:7d:82:bd:50:1c:67:22:aa:12: ca:a7:e6:d2:1a:68:ee:a8:e8:99:9d:15:aa:a8:38: 57:14:15:17:7a:25:2b:41:1f:34:3e:28:75:bd:2c: 14:e6:ed:b4:3d:14:a0:39:fa:6d:3f:c2:56:8f:7c: 04:76:e9:b3:e3:a1:84:65:12:01:89:a4:c3:2c:58: 33:ec:da:ab:90:bf:8e:33:b7:43:4c:ea:08:37:c6: 2c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:82:74:4C:80:04:5A:E8:C1:1A:0A:63:F1:DF:25:85:5F:C5:13:3F X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/w4J0TIAEWujBGgpj8d8lhV_FEz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.223.0/24 Signature Algorithm: sha256WithRSAEncryption a0:6a:2a:6f:bd:b7:fa:93:92:ee:99:87:30:9b:79:87:70:f3: a9:e5:d1:4d:02:00:0e:04:56:51:c5:17:d5:f9:44:69:c8:de: 56:0b:b1:80:c6:26:b8:ce:b2:af:0e:22:0a:16:90:cd:c1:09: 2e:97:12:f2:71:fa:60:1b:bd:f9:50:8f:b7:fc:64:52:01:18: 07:6d:ea:99:0a:a2:34:4f:b8:e3:c6:d6:2c:53:3e:d9:02:7b: d1:85:37:48:1d:0a:48:3d:2d:76:42:5d:ea:c6:62:e6:d8:35: ad:ea:74:fc:b2:1a:de:83:88:6a:36:d4:7d:3e:8d:48:bf:bc: 11:0b:54:e1:34:05:f7:e2:da:75:f7:08:1e:7f:e2:eb:3e:7a: a4:49:cd:a3:93:af:9b:0f:07:75:4d:f8:03:d7:85:90:a0:da: 6e:de:41:73:f1:af:a3:52:38:a3:b5:81:58:55:2e:3e:1c:60: 60:15:fe:b6:5b:93:85:0f:53:32:99:c7:61:80:7f:28:44:c1: 7f:17:f7:0d:e9:1f:fa:ae:24:26:5e:24:6f:ef:a5:d9:c3:28: 73:c7:f7:ea:46:6d:d3:9c:82:81:bf:06:15:71:3c:a6:c5:18: ad:e4:59:e0:ef:11:1d:34:4f:a8:ef:a0:ef:6f:ab:e9:c3:52: b0:63:e8:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqdPk/rrmqx6wxjmtG30euGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjUxMTE5MTc1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzgyNzQ0YzgwMDQ1YWU4YzExYTBhNjNmMWRmMjU4NTVmYzUxMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8DFkUMQTn8IvmuZLQIpLh5bSjci /TzrC03uJemtGzgeiOnvRP/S7fXXEkr66Nkgb/mYYEJNkFIxGvEyEQE8KJ/TQbhN afEyK2Tm45sYSGD3oRJft8JT0BAOZie3Pjf7p7omE4PN+7Q5O0nKmhV5BVIaRa4D Ge8eSN2yGS0buDFfNGnNqveVe2747u7cS6E7W7VHiviN473mR6jQBQOiRqzjXMqx jDdAb4V9gr1QHGciqhLKp+bSGmjuqOiZnRWqqDhXFBUXeiUrQR80Pih1vSwU5u20 PRSgOfptP8JWj3wEdumz46GEZRIBiaTDLFgz7NqrkL+OM7dDTOoIN8Ys/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMOCdEyABFrowRoKY/HfJYVfxRM/MB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvdzRKMFRJQUVXdWpCR2dwajhkOGxoVl9GRXo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvILfMA0G CSqGSIb3DQEBCwUAA4IBAQCgaipvvbf6k5LumYcwm3mHcPOp5dFNAgAOBFZRxRfV +URpyN5WC7GAxia4zrKvDiIKFpDNwQkulxLycfpgG735UI+3/GRSARgHbeqZCqI0 T7jjxtYsUz7ZAnvRhTdIHQpIPS12Ql3qxmLm2DWt6nT8shreg4hqNtR9Po1Iv7wR C1ThNAX34tp19wgef+LrPnqkSc2jk6+bDwd1TfgD14WQoNpu3kFz8a+jUjijtYFY VS4+HGBgFf62W5OFD1MymcdhgH8oRMF/F/cN6R/6riQmXiRv76XZwyhzx/fqRm3T nIKBvwYVcTymxRit5Fng7xEdNE+o76Dvb6vpw1KwY+g+ -----END CERTIFICATE-----Generated at Sat Dec 6 16:25:14 2025 by rpki-client