This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/wDRNVGfCfFpT0KL5KWdncpjKmrU.roa File: wDRNVGfCfFpT0KL5KWdncpjKmrU.roa (raw, json) Hash identifier: dd5hEWdRRbgBUUxwR6vJEl9R7LMSAx7EstPyaawGUNU= Subject key identifier: C0:34:4D:54:67:C2:7C:5A:53:D0:A2:F9:29:67:67:72:98:CA:9A:B5 Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019AE4C72A4F009A9EA19CDDEF3E39E53BFF Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/wDRNVGfCfFpT0KL5KWdncpjKmrU.roa Signing time: Wed 03 Dec 2025 15:14:09 +0000 ROA not before: Wed 03 Dec 2025 15:14:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215590 IP address blocks: 93.185.157.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:c7:2a:4f:00:9a:9e:a1:9c:dd:ef:3e:39:e5:3b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Dec 3 15:14:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0344d5467c27c5a53d0a2f92967677298ca9ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d5:4c:10:25:25:70:d4:90:a0:a5:5a:19:06: 88:9c:0b:92:2f:dc:28:14:1f:40:13:cc:e6:93:94: 68:5c:f8:04:ad:30:c5:db:19:a6:1a:22:3d:41:47: a6:d6:19:b8:20:e1:5a:25:31:af:6c:22:7c:c9:b5: e0:33:34:b7:71:7e:ca:87:41:d7:e4:0d:7b:62:ea: e9:fc:3a:a0:fd:4a:e9:68:01:3c:10:1d:66:a0:c8: e7:ad:34:9e:45:b5:0d:7d:99:ca:c0:70:bb:c0:5a: 72:d5:c1:35:01:4f:ad:11:5d:07:81:e0:87:bb:45: f9:86:bb:ae:18:77:c1:23:f8:5b:e0:9c:47:1f:45: e7:78:23:7c:06:bc:88:d4:59:ab:45:16:f8:a9:03: a9:9e:2e:d6:98:d7:82:06:1c:f6:42:81:b0:84:9c: 80:5d:8b:74:8f:74:f8:a5:69:49:67:3f:7d:e5:60: 4c:bc:8d:82:66:10:24:6b:c2:5a:2e:3e:8e:60:7f: 8f:97:4c:33:82:f1:28:6f:f9:9b:c8:ea:f8:2d:a3: 71:a5:13:47:a4:73:2d:1e:bc:7d:19:7a:f4:62:3d: 1b:67:a3:60:68:9a:ba:7e:e4:93:27:37:ad:b4:16: 31:91:b9:f8:e7:2b:df:d1:58:36:a1:f2:10:95:13: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:34:4D:54:67:C2:7C:5A:53:D0:A2:F9:29:67:67:72:98:CA:9A:B5 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/wDRNVGfCfFpT0KL5KWdncpjKmrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.185.157.0/24 Signature Algorithm: sha256WithRSAEncryption 33:3b:c5:e6:96:88:b6:e9:22:a0:07:8f:ca:05:8b:2c:52:f4: 25:89:e7:2f:ef:dc:56:cc:c4:37:de:5c:34:9e:46:09:66:2a: 38:a9:2f:3a:c9:9d:dd:c2:50:61:66:21:7b:33:4c:8d:37:ae: 27:79:13:07:a9:56:5b:98:6e:0b:c3:cd:80:90:0a:27:93:e9: 94:4b:b8:05:6f:1e:af:4f:e2:d9:22:f7:a1:eb:35:b2:cd:d5: fe:4b:cd:8e:fb:fd:5e:a3:a7:52:3f:2e:db:f6:09:e2:5a:3d: fe:d8:e6:90:fe:1d:a9:9d:56:82:6f:40:0f:a5:fa:d0:a9:09: 92:a2:80:8f:0a:4a:a0:6d:22:2c:c7:eb:5a:05:03:91:f5:ae: a2:78:ca:f1:75:57:ff:ff:51:ad:27:cc:6d:da:00:17:92:e8: 01:54:57:1a:fc:3e:9c:23:a8:8c:d9:3b:89:2b:e5:eb:58:bf: c3:74:f1:fb:ae:fd:fe:12:c9:7f:e9:91:9e:28:b0:a5:38:ef: 0a:18:87:52:21:ee:b9:9b:8f:f0:68:48:31:65:59:35:73:60: 63:9d:5a:65:30:53:db:86:aa:25:90:af:ee:22:01:5e:7e:79: 12:7c:82:b2:db:be:40:30:af:9c:3a:eb:04:f6:8e:d7:df:65: c5:40:ce:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkxypPAJqeoZzd7z455Tv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUxMjAzMTUxNDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDM0NGQ1NDY3YzI3YzVhNTNkMGEyZjkyOTY3Njc3Mjk4Y2E5YWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNVMECUlcNSQoKVaGQaInAuSL9wo FB9AE8zmk5RoXPgErTDF2xmmGiI9QUem1hm4IOFaJTGvbCJ8ybXgMzS3cX7Kh0HX 5A17Yurp/Dqg/UrpaAE8EB1moMjnrTSeRbUNfZnKwHC7wFpy1cE1AU+tEV0HgeCH u0X5hruuGHfBI/hb4JxHH0XneCN8BryI1FmrRRb4qQOpni7WmNeCBhz2QoGwhJyA XYt0j3T4pWlJZz995WBMvI2CZhAka8JaLj6OYH+Pl0wzgvEob/mbyOr4LaNxpRNH pHMtHrx9GXr0Yj0bZ6NgaJq6fuSTJzettBYxkbn45yvf0Vg2ofIQlRPcIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMA0TVRnwnxaU9Ci+SlnZ3KYypq1MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvd0RSTlZHZkNmRnBUMEtMNUtXZG5jcGpLbXJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbmdMA0G CSqGSIb3DQEBCwUAA4IBAQAzO8Xmloi26SKgB4/KBYssUvQliecv79xWzMQ33lw0 nkYJZio4qS86yZ3dwlBhZiF7M0yNN64neRMHqVZbmG4Lw82AkAonk+mUS7gFbx6v T+LZIveh6zWyzdX+S82O+/1eo6dSPy7b9gniWj3+2OaQ/h2pnVaCb0APpfrQqQmS ooCPCkqgbSIsx+taBQOR9a6ieMrxdVf//1GtJ8xt2gAXkugBVFca/D6cI6iM2TuJ K+XrWL/DdPH7rv3+Esl/6ZGeKLClOO8KGIdSIe65m4/waEgxZVk1c2BjnVplMFPb hqolkK/uIgFefnkSfIKy275AMK+cOusE9o7X32XFQM7p -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:34 2025 by rpki-client