This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/WUOj7q7caeNuF2NA52tqE_pMcw4.roa File: WUOj7q7caeNuF2NA52tqE_pMcw4.roa (raw, json) Hash identifier: xuYnwxDWmHDBu/SvXJhLivsRJT8nUKL6jpxmRmy+O+k= Subject key identifier: 59:43:A3:EE:AE:DC:69:E3:6E:17:63:40:E7:6B:6A:13:FA:4C:73:0E Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019ABA33E97253BB4012C5C836D5C24F5C14 Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/WUOj7q7caeNuF2NA52tqE_pMcw4.roa Signing time: Tue 25 Nov 2025 08:49:15 +0000 ROA not before: Tue 25 Nov 2025 08:49:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201807 IP address blocks: 194.56.233.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:33:e9:72:53:bb:40:12:c5:c8:36:d5:c2:4f:5c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Nov 25 08:49:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5943a3eeaedc69e36e176340e76b6a13fa4c730e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:ba:14:cb:fc:4a:de:60:8a:34:a2:8e:30: 78:a4:da:6c:ed:eb:0e:36:83:f3:8d:2b:8a:54:21: c6:4f:fe:23:f1:e6:d8:99:14:03:2b:8a:1b:31:02: 36:de:90:76:4c:19:ab:91:22:5f:e0:6f:9a:ea:6e: 64:16:d8:8c:6d:91:c6:4f:3e:d4:31:9c:1b:6f:97: 87:a5:62:88:bb:bc:68:46:cb:71:1a:bb:a4:40:7f: e2:3f:12:55:1a:e4:62:45:4a:98:e4:39:e5:26:17: 00:c2:d8:b3:40:c2:79:df:f8:95:bc:78:f7:cd:9f: 87:f9:de:8b:a7:f6:f0:48:d8:c7:e6:29:e1:59:bc: 4a:82:d6:5a:8e:d4:5a:12:4b:94:6f:72:b4:ca:44: 9a:f7:3e:93:ce:8b:ac:c8:88:b4:ac:70:8a:43:93: 45:03:d6:2a:13:3e:03:df:a1:b5:f6:6b:25:50:6f: 90:e6:67:fa:a4:97:d4:e5:9e:c8:d6:bb:b7:98:29: 66:7a:08:da:0c:71:19:44:c7:c9:4d:6e:c8:b0:bb: 16:60:2b:50:2c:cd:1f:bc:e6:43:45:06:7f:02:27: 0e:cc:eb:e6:f2:b9:49:77:36:f1:ae:c9:ba:28:51: 84:58:4e:aa:71:98:5c:a1:cc:e2:35:d2:b2:5b:7e: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:43:A3:EE:AE:DC:69:E3:6E:17:63:40:E7:6B:6A:13:FA:4C:73:0E X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/WUOj7q7caeNuF2NA52tqE_pMcw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.233.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:7f:9d:2e:6b:9b:90:16:17:e6:c7:2c:22:9c:04:d3:ef:a1: a7:4b:4e:44:91:35:0d:92:18:17:54:4f:45:33:c4:8a:69:cc: 32:78:a1:fe:25:0b:a5:53:ec:2e:59:3e:35:c7:0a:c2:e7:50: 39:4a:57:cd:4c:d2:d2:d7:88:ba:49:86:4d:25:9b:c2:d3:a0: 65:c6:ee:e9:46:d4:8d:21:c3:4a:7d:47:31:01:d3:b2:dc:05: 45:1c:3a:69:e0:e8:df:6f:21:09:a0:66:c3:2c:69:76:78:82: c5:b8:73:90:69:3c:d1:9e:1b:c6:1a:ec:70:6b:d6:ac:ca:ab: 8b:7b:fa:8b:4e:20:85:19:96:3e:f2:a2:f7:68:b2:53:98:f6: 72:0e:6a:f4:65:db:b0:f2:4b:6b:2a:a7:61:78:bb:1e:c6:de: 3b:f0:48:9b:73:b4:ae:cd:b3:ba:0f:1f:c4:32:9a:bc:46:f8: 3b:a9:77:9e:e7:aa:ba:62:28:77:11:10:f2:60:eb:29:50:05: de:48:9a:d5:59:80:8c:cd:53:ff:43:d4:20:ce:78:f3:15:d4: eb:88:2e:c8:5b:0e:f7:45:c7:c7:43:9a:98:5f:b1:70:9c:d1: 5c:8e:1f:e2:77:59:45:d4:a1:c4:29:30:d5:dd:ef:0e:08:45: 6b:49:d1:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq6M+lyU7tAEsXINtXCT1wUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjUxMTI1MDg0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTQzYTNlZWFlZGM2OWUzNmUxNzYzNDBlNzZiNmExM2ZhNGM3MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KK6FMv8St5gijSijjB4pNps7esO NoPzjSuKVCHGT/4j8ebYmRQDK4obMQI23pB2TBmrkSJf4G+a6m5kFtiMbZHGTz7U MZwbb5eHpWKIu7xoRstxGrukQH/iPxJVGuRiRUqY5DnlJhcAwtizQMJ53/iVvHj3 zZ+H+d6Lp/bwSNjH5inhWbxKgtZajtRaEkuUb3K0ykSa9z6TzousyIi0rHCKQ5NF A9YqEz4D36G19mslUG+Q5mf6pJfU5Z7I1ru3mClmegjaDHEZRMfJTW7IsLsWYCtQ LM0fvOZDRQZ/AicOzOvm8rlJdzbxrsm6KFGEWE6qcZhcocziNdKyW37vQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFlDo+6u3GnjbhdjQOdrahP6THMOMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvV1VPajdxN2NhZU51RjJOQTUydHFFX3BNY3c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjjpMA0G CSqGSIb3DQEBCwUAA4IBAQB7f50ua5uQFhfmxywinATT76GnS05EkTUNkhgXVE9F M8SKacwyeKH+JQulU+wuWT41xwrC51A5SlfNTNLS14i6SYZNJZvC06Blxu7pRtSN IcNKfUcxAdOy3AVFHDpp4OjfbyEJoGbDLGl2eILFuHOQaTzRnhvGGuxwa9asyquL e/qLTiCFGZY+8qL3aLJTmPZyDmr0Zduw8ktrKqdheLsext478Eibc7SuzbO6Dx/E Mpq8Rvg7qXee56q6Yih3ERDyYOspUAXeSJrVWYCMzVP/Q9QgznjzFdTriC7IWw73 RcfHQ5qYX7FwnNFcjh/id1lF1KHEKTDV3e8OCEVrSdFI -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:06 2025 by rpki-client