This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/1WlLcmmxweS7j8qiCskfARNsOMc.roa File: 1WlLcmmxweS7j8qiCskfARNsOMc.roa (raw, json) Hash identifier: JYwBY6Xv7sFgQsJheKvHyCm021NA06+6lq9nOcGOlrI= Subject key identifier: D5:69:4B:72:69:B1:C1:E4:BB:8F:CA:A2:0A:C9:1F:01:13:6C:38:C7 Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a Certificate serial: 019A773FBF8AEED0D6FF8959F24E37F1A2AA Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/1WlLcmmxweS7j8qiCskfARNsOMc.roa Signing time: Wed 12 Nov 2025 08:47:37 +0000 ROA not before: Wed 12 Nov 2025 08:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212676 IP address blocks: 185.178.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:3f:bf:8a:ee:d0:d6:ff:89:59:f2:4e:37:f1:a2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a Validity Not Before: Nov 12 08:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d5694b7269b1c1e4bb8fcaa20ac91f01136c38c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cc:3b:a5:63:b2:24:05:b5:17:09:20:4d:fa: 27:4c:6d:e4:71:33:c9:20:85:de:7e:db:74:94:7d: 9c:c5:0c:ba:70:04:a3:10:cd:cc:ce:3e:9f:b3:e9: 6a:20:6f:62:93:a3:fe:b2:40:93:5f:63:e9:4f:9c: 09:33:ad:86:1d:78:22:37:19:94:33:8d:e0:a5:e9: e8:c7:9b:c3:9c:fe:ed:14:f2:ad:9c:b0:93:cf:a3: 31:ab:10:74:7e:d2:5f:3a:d7:83:b4:8d:67:62:af: 91:b4:12:07:84:0f:18:d7:bb:24:63:bb:64:32:74: 26:5a:66:ef:35:3a:76:5d:14:71:ff:8f:2f:9f:13: 67:e8:64:86:61:c8:bf:f7:e9:0b:eb:2a:0c:af:a2: 58:00:88:aa:e5:43:ea:c4:12:2e:9e:2b:bf:06:94: 6c:82:b8:9e:91:17:d7:39:f2:91:40:fe:94:28:a6: 95:a4:46:06:1f:15:bc:de:12:89:8e:b4:5e:73:64: f8:cc:51:fd:78:4a:31:15:7f:e8:57:3f:68:a2:da: f0:6c:21:61:cb:d8:eb:da:a5:59:0c:27:13:93:61: 66:cb:45:e5:ff:3e:1b:a7:28:2d:58:ad:15:11:ed: 4f:ab:2f:bc:b7:7b:d1:27:16:63:c3:d3:ee:fb:2d: f7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:69:4B:72:69:B1:C1:E4:BB:8F:CA:A2:0A:C9:1F:01:13:6C:38:C7 X509v3 Authority Key Identifier: keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/1WlLcmmxweS7j8qiCskfARNsOMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.48.0/24 Signature Algorithm: sha256WithRSAEncryption a2:c8:ea:ef:a6:aa:f8:1a:68:7f:4f:a0:0d:a4:35:35:6f:21: 46:4c:24:de:2e:bd:10:17:b4:c0:cc:fa:ab:53:5e:ab:98:b7: 7e:c4:88:10:61:d8:5c:a7:c8:6c:6d:18:8c:71:e9:54:86:01: 6d:dc:2e:43:5d:83:d2:1d:30:9d:a6:08:3b:8b:8b:c4:37:93: b7:b3:86:97:f6:7f:fe:05:01:da:8b:8e:9d:24:30:8f:92:f4: 29:13:dc:56:d4:82:49:04:cc:55:e2:f2:f2:63:5f:37:75:09: 93:d2:0a:a2:78:e5:e4:1b:34:5f:53:87:c7:2a:0f:fd:75:e7: 6c:71:33:2e:b1:e9:6f:3d:f8:01:be:eb:10:c7:f8:de:58:ef: eb:bb:fe:2d:39:2b:5b:da:42:ef:1c:19:fa:0b:4b:8d:70:11: ca:cb:65:73:96:9c:3d:c5:f0:37:7b:5b:ae:99:85:a0:c8:af: 60:bb:29:d7:c4:01:a4:44:c8:76:bc:ac:95:fb:4f:e3:26:7a: 60:ac:95:44:a2:31:44:7a:af:f8:a0:b8:57:f8:73:a2:2a:f7: 1e:e1:33:94:66:07:21:7e:26:65:64:54:07:cd:b5:61:0f:54: c4:9a:3a:b1:64:b9:56:04:0b:3c:1f:ba:4c:03:e2:bc:78:74: 52:44:40:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp3P7+K7tDW/4lZ8k438aKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmN2Q3NjU0ZTg3Y2U0Zjk2NzkyZDU2NWM1NmUxOTFmNDRk ZTlmNWEwHhcNMjUxMTEyMDg0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTY5NGI3MjY5YjFjMWU0YmI4ZmNhYTIwYWM5MWYwMTEzNmMzOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cw7pWOyJAW1FwkgTfonTG3kcTPJ IIXeftt0lH2cxQy6cASjEM3Mzj6fs+lqIG9ik6P+skCTX2PpT5wJM62GHXgiNxmU M43gpenox5vDnP7tFPKtnLCTz6MxqxB0ftJfOteDtI1nYq+RtBIHhA8Y17skY7tk MnQmWmbvNTp2XRRx/48vnxNn6GSGYci/9+kL6yoMr6JYAIiq5UPqxBIuniu/BpRs griekRfXOfKRQP6UKKaVpEYGHxW83hKJjrRec2T4zFH9eEoxFX/oVz9ootrwbCFh y9jr2qVZDCcTk2Fmy0Xl/z4bpygtWK0VEe1Pqy+8t3vRJxZjw9Pu+y33LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNVpS3JpscHku4/KogrJHwETbDjHMB8GA1UdIwQY MBaAFM99dlTofOT5Z5LVZcVuGR9E3p9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejMxMlZPaDg1UGxua3RWbHhXNFpIMFRlbjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mYmEwZWMtZGU1Ni00MGE1LTg5Y2Yt NzcwZDdlM2MwNjIwLzEvMVdsTGNtbXh3ZVM3ajhxaUNza2ZBUk5zT01jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9mYmEwZWMtZGU1Ni00MGE1LTg5Y2YtNzcwZDdlM2MwNjIw LzEvejMxMlZPaDg1UGxua3RWbHhXNFpIMFRlbjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubIwMA0G CSqGSIb3DQEBCwUAA4IBAQCiyOrvpqr4Gmh/T6ANpDU1byFGTCTeLr0QF7TAzPqr U16rmLd+xIgQYdhcp8hsbRiMcelUhgFt3C5DXYPSHTCdpgg7i4vEN5O3s4aX9n/+ BQHai46dJDCPkvQpE9xW1IJJBMxV4vLyY183dQmT0gqieOXkGzRfU4fHKg/9deds cTMuselvPfgBvusQx/jeWO/ru/4tOStb2kLvHBn6C0uNcBHKy2Vzlpw9xfA3e1uu mYWgyK9guynXxAGkRMh2vKyV+0/jJnpgrJVEojFEeq/4oLhX+HOiKvce4TOUZgch fiZlZFQHzbVhD1TEmjqxZLlWBAs8H7pMA+K8eHRSRECW -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:28 2025 by rpki-client