This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cwlw5XeuhCCQXGVxPrap_-8qNEc.roa File: cwlw5XeuhCCQXGVxPrap_-8qNEc.roa (raw, json) Hash identifier: Svq+i9gInSsszdCx8TetVKGpKOJf/N3DvAYZrorDv8Q= Subject key identifier: 73:09:70:E5:77:AE:84:20:90:5C:65:71:3E:B6:A9:FF:EF:2A:34:47 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0C83EBF39B46AAA293CDCFE2BE1CCDF2 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cwlw5XeuhCCQXGVxPrap_-8qNEc.roa Signing time: Thu 11 Dec 2025 08:25:30 +0000 ROA not before: Thu 11 Dec 2025 08:25:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 77.107.95.0/24 maxlen: 24 82.152.142.0/24 maxlen: 24 212.38.89.0/24 maxlen: 24 213.130.138.0/24 maxlen: 24 213.210.28.0/24 maxlen: 24 217.144.158.0/24 maxlen: 24 217.145.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:83:eb:f3:9b:46:aa:a2:93:cd:cf:e2:be:1c:cd:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 11 08:25:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=730970e577ae8420905c65713eb6a9ffef2a3447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:ea:16:77:d3:e6:65:e1:37:80:99:66:0f: e9:91:c4:45:fd:be:34:9a:49:1c:c0:62:41:42:fd: 8d:91:52:ef:3e:53:da:22:75:3c:df:94:ee:b3:bf: 15:6c:c4:31:19:97:3b:08:a2:5a:cb:c1:49:64:ce: 59:45:c5:07:91:e5:ef:22:8f:6f:3b:cc:fe:1b:a3: 53:c5:d7:93:91:dd:01:25:41:47:9f:29:22:b5:a5: dd:8b:9d:72:67:98:c4:46:ca:f7:8a:54:2b:85:06: 7c:07:7a:36:96:86:21:a0:13:db:8f:cf:24:06:55: c4:b6:b9:22:85:ac:28:09:11:ab:63:45:43:1f:f8: aa:b9:1f:d9:54:91:0c:d3:71:0d:35:e1:82:ce:33: ce:c5:e3:d1:bb:2f:24:a0:5d:4d:5b:f8:3b:7a:38: a0:47:05:37:cd:97:1d:bd:36:52:be:9b:41:02:2b: ae:41:93:85:65:4c:ca:f7:63:49:ba:34:5e:f8:d6: d5:e5:0b:14:7d:2c:c0:29:77:db:cf:d0:6c:fb:9f: 7d:88:48:f9:be:3b:d3:a4:9c:ff:cb:72:12:09:f4: 68:f0:99:ea:2b:0a:aa:2d:3e:0d:f2:fd:d0:b0:4e: 34:d3:61:96:e9:2b:96:8b:4d:9c:2f:c3:88:8f:ad: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:09:70:E5:77:AE:84:20:90:5C:65:71:3E:B6:A9:FF:EF:2A:34:47 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cwlw5XeuhCCQXGVxPrap_-8qNEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.107.95.0/24 82.152.142.0/24 212.38.89.0/24 213.130.138.0/24 213.210.28.0/24 217.144.158.0/24 217.145.75.0/24 Signature Algorithm: sha256WithRSAEncryption 22:8c:f8:40:cc:35:cc:48:02:bb:40:dd:1e:0e:ac:66:cc:c0: b5:b3:e8:7d:ea:cb:59:c9:3b:6d:63:4c:50:1d:2b:f2:ab:fb: f5:bf:9f:6d:64:89:e9:11:31:8e:b0:30:2f:2a:71:cf:d9:bf: ba:7f:a2:2a:9c:2e:6f:1e:c4:3e:a0:99:d2:cb:7b:ab:9b:fa: e9:c9:e5:ab:e0:c1:cc:8e:c8:c2:f4:a1:31:2d:f6:2d:fb:c6: 43:26:9f:03:bd:ab:f4:d2:19:32:60:2f:3e:cd:0b:58:e9:1a: aa:14:7f:f9:e2:d8:ee:9e:6a:0a:a1:14:5b:9d:5c:c3:ef:8a: 7f:a9:ae:eb:6f:c7:98:a0:b0:26:ee:fc:e6:aa:e7:61:09:c6: aa:00:7b:14:47:a3:7d:2f:eb:7c:c5:1c:69:ea:12:80:dc:ff: b2:e5:f6:6f:23:82:95:09:06:a6:c5:07:6c:5f:3c:4a:87:11: 0c:43:d4:f4:84:a8:fb:72:fa:7b:b1:89:c3:af:a8:e1:ba:88: e7:5c:ea:d5:33:76:f4:f5:7e:f7:19:84:ff:1a:70:11:f9:d5: f4:3d:0e:33:21:d2:d9:97:9b:68:29:f4:62:1a:74:cc:15:42: 7a:25:56:d0:ba:db:03:23:5b:62:6a:5c:db:16:fc:64:17:81: 13:b7:4c:ee -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsMg+vzm0aqopPNz+K+HM3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjExMDgyNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzA5NzBlNTc3YWU4NDIwOTA1YzY1NzEzZWI2YTlmZmVmMmEzNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6jqFnfT5mXhN4CZZg/pkcRF/b40 mkkcwGJBQv2NkVLvPlPaInU835Tus78VbMQxGZc7CKJay8FJZM5ZRcUHkeXvIo9v O8z+G6NTxdeTkd0BJUFHnykitaXdi51yZ5jERsr3ilQrhQZ8B3o2loYhoBPbj88k BlXEtrkihawoCRGrY0VDH/iquR/ZVJEM03ENNeGCzjPOxePRuy8koF1NW/g7ejig RwU3zZcdvTZSvptBAiuuQZOFZUzK92NJujRe+NbV5QsUfSzAKXfbz9Bs+599iEj5 vjvTpJz/y3ISCfRo8JnqKwqqLT4N8v3QsE4002GW6SuWi02cL8OIj6190wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFHMJcOV3roQgkFxlcT62qf/vKjRHMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvY3dsdzVYZXVoQ0NRWEdWeFByYXBfLThxTkVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQATWtfAwQA UpiOAwQA1CZZAwQA1YKKAwQA1dIcAwQA2ZCeAwQA2ZFLMA0GCSqGSIb3DQEBCwUA A4IBAQAijPhAzDXMSAK7QN0eDqxmzMC1s+h96stZyTttY0xQHSvyq/v1v59tZInp ETGOsDAvKnHP2b+6f6IqnC5vHsQ+oJnSy3urm/rpyeWr4MHMjsjC9KExLfYt+8ZD Jp8Dvav00hkyYC8+zQtY6RqqFH/54tjunmoKoRRbnVzD74p/qa7rb8eYoLAm7vzm qudhCcaqAHsUR6N9L+t8xRxp6hKA3P+y5fZvI4KVCQamxQdsXzxKhxEMQ9T0hKj7 cvp7sYnDr6jhuojnXOrVM3b09X73GYT/GnAR+dX0PQ4zIdLZl5toKfRiGnTMFUJ6 JVbQutsDI1tialzbFvxkF4ETt0zu -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:16 2025 by rpki-client