This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/4wsomeR7iVlRk7fXm0iht8PO9PY.roa File: 4wsomeR7iVlRk7fXm0iht8PO9PY.roa (raw, json) Hash identifier: yFGK/6SHSFcnWo+mmonM2EnCgU/D44Pg91uZp7acGs0= Subject key identifier: E3:0B:28:99:E4:7B:89:59:51:93:B7:D7:9B:48:A1:B7:C3:CE:F4:F6 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019A91A62ABBD3C9A3BC54CEE053F318CB6C Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/4wsomeR7iVlRk7fXm0iht8PO9PY.roa Signing time: Mon 17 Nov 2025 11:49:37 +0000 ROA not before: Mon 17 Nov 2025 11:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41656 IP address blocks: 185.242.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:a6:2a:bb:d3:c9:a3:bc:54:ce:e0:53:f3:18:cb:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Nov 17 11:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e30b2899e47b89595193b7d79b48a1b7c3cef4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:7d:f5:c8:65:66:46:9c:1c:8a:f7:11:8d: 11:46:a3:1d:ab:dd:4d:49:14:a6:d7:f2:62:29:df: 7b:8f:41:fe:45:a7:13:3f:7e:7d:4a:cb:34:55:fa: 32:82:aa:95:b6:cd:89:5b:97:98:ed:da:4b:5e:c7: d9:72:f0:d8:9d:69:bf:eb:fa:5c:fd:ab:a6:7d:bd: db:6d:04:70:23:15:71:d0:f7:35:02:10:4b:16:40: 5b:d2:51:8b:c5:6c:2f:f5:fb:9c:d4:17:22:f1:27: 84:e5:3b:b2:a4:83:12:b2:05:d6:64:23:a3:08:a3: 8b:5e:30:be:1c:b7:36:86:10:ed:a2:d6:4f:ca:50: 33:12:91:0f:2a:82:5e:78:c0:6f:81:77:64:01:61: d4:8d:f6:ad:e3:fb:7d:7f:87:8e:18:d8:fa:da:82: 93:ca:9d:e8:41:a7:92:d4:19:2a:34:72:87:5e:43: 94:23:0f:9b:00:eb:d6:b8:7a:7f:f8:81:18:a9:7b: b9:b3:f5:5a:c8:d4:7e:a3:72:00:99:ce:0f:86:93: 6a:88:7c:c7:33:a2:36:9c:4b:44:cc:b0:c1:5e:d3: 24:bd:71:a8:99:61:e3:b9:72:87:c6:60:64:1d:11: ed:73:3b:1f:c1:c5:b0:7a:c0:88:42:3b:de:f6:81: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0B:28:99:E4:7B:89:59:51:93:B7:D7:9B:48:A1:B7:C3:CE:F4:F6 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/4wsomeR7iVlRk7fXm0iht8PO9PY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.0.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:de:69:f4:9c:80:e5:78:51:5a:04:03:ff:d9:c4:5c:ea:69: b2:a2:c5:0b:f7:22:ad:a0:c8:8f:43:27:04:b6:7f:f3:55:4b: 83:f7:bb:0c:cc:52:8a:6a:4d:7a:25:50:5c:74:af:e1:cf:e2: cb:eb:96:5c:82:eb:8b:cf:f1:83:cc:cf:76:4a:92:1f:8e:95: 68:f6:f9:14:ff:8e:3d:1f:43:db:81:a1:28:c9:9d:87:c3:43: dc:a2:a3:82:1d:fe:e3:7d:a9:aa:da:8a:91:6a:74:22:24:59: 64:7c:13:77:76:93:b0:fd:37:a8:0a:d0:96:fd:a8:3e:ba:47: e6:6d:70:6e:e5:60:f8:c3:81:88:21:73:d5:ff:07:5f:2f:1f: 31:0d:19:c1:1b:6a:2a:5d:c7:16:06:bd:ea:18:0e:5d:98:ab: a3:53:e2:ac:00:c1:7c:7b:3e:c6:73:63:b7:3c:cf:43:70:f1: d7:4d:34:e8:d1:b2:50:67:dd:a8:cf:d0:93:cd:2b:69:ef:26: 4c:58:28:c4:25:ef:ab:7f:31:31:14:40:7c:2c:aa:c4:a8:8c: 69:0b:16:1b:f1:f5:23:35:44:a7:cb:cd:0e:20:a1:05:58:54: 21:de:a5:1f:f2:58:76:3f:b3:67:1b:f8:3c:f9:f9:e5:6a:ff: 5d:9d:36:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqRpiq708mjvFTO4FPzGMtsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjUxMTE3MTE0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzBiMjg5OWU0N2I4OTU5NTE5M2I3ZDc5YjQ4YTFiN2MzY2VmNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V199chlZkacHIr3EY0RRqMdq91N SRSm1/JiKd97j0H+RacTP359Sss0VfoygqqVts2JW5eY7dpLXsfZcvDYnWm/6/pc /aumfb3bbQRwIxVx0Pc1AhBLFkBb0lGLxWwv9fuc1Bci8SeE5TuypIMSsgXWZCOj CKOLXjC+HLc2hhDtotZPylAzEpEPKoJeeMBvgXdkAWHUjfat4/t9f4eOGNj62oKT yp3oQaeS1BkqNHKHXkOUIw+bAOvWuHp/+IEYqXu5s/VayNR+o3IAmc4PhpNqiHzH M6I2nEtEzLDBXtMkvXGomWHjuXKHxmBkHRHtczsfwcWwesCIQjve9oFPxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMLKJnke4lZUZO315tIobfDzvT2MB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvNHdzb21lUjdpVmxSazdmWG0waWh0OFBPOVBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufIAMA0G CSqGSIb3DQEBCwUAA4IBAQBc3mn0nIDleFFaBAP/2cRc6mmyosUL9yKtoMiPQycE tn/zVUuD97sMzFKKak16JVBcdK/hz+LL65ZcguuLz/GDzM92SpIfjpVo9vkU/449 H0PbgaEoyZ2Hw0PcoqOCHf7jfamq2oqRanQiJFlkfBN3dpOw/TeoCtCW/ag+ukfm bXBu5WD4w4GIIXPV/wdfLx8xDRnBG2oqXccWBr3qGA5dmKujU+KsAMF8ez7Gc2O3 PM9DcPHXTTTo0bJQZ92oz9CTzStp7yZMWCjEJe+rfzExFEB8LKrEqIxpCxYb8fUj NUSny80OIKEFWFQh3qUf8lh2P7NnG/g8+fnlav9dnTbd -----END CERTIFICATE-----Generated at Sat Dec 6 17:58:55 2025 by rpki-client