This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/W5zZNm3rP9OhRSRxJX4pofXvMvo.roa File: W5zZNm3rP9OhRSRxJX4pofXvMvo.roa (raw, json) Hash identifier: 9UO3j7hoIXhCpO7F6lG7nY6BgOqZZWN7FA4/q0az8Jc= Subject key identifier: 5B:9C:D9:36:6D:EB:3F:D3:A1:45:24:71:25:7E:29:A1:F5:EF:32:FA Certificate issuer: /CN=73f82e0ed0f36e099237cc42cf8778b407828001 Certificate serial: 019A9175A56BFD89550403309ADE399E5A8D Authority key identifier: 73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/W5zZNm3rP9OhRSRxJX4pofXvMvo.roa Signing time: Mon 17 Nov 2025 10:56:37 +0000 ROA not before: Mon 17 Nov 2025 10:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50673 IP address blocks: 141.98.32.0/22 maxlen: 22 195.114.100.0/23 maxlen: 23 195.182.1.0/24 maxlen: 24 2a09:e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:75:a5:6b:fd:89:55:04:03:30:9a:de:39:9e:5a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f82e0ed0f36e099237cc42cf8778b407828001 Validity Not Before: Nov 17 10:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b9cd9366deb3fd3a1452471257e29a1f5ef32fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:31:18:11:5a:6e:7e:84:68:60:67:18:35:f5: 42:7f:86:1c:9b:18:a1:41:19:0b:27:2c:2a:b8:53: 66:c3:2c:a2:dd:26:cb:2f:2d:f4:eb:d0:0d:62:72: 22:47:00:8d:15:91:5d:8d:dc:5a:09:a1:ad:67:7b: 24:dd:41:14:17:6e:b7:d4:ad:ce:9f:ac:1b:e4:e1: fd:cc:31:e2:0f:17:8e:10:ac:fe:32:35:bd:99:f7: d1:5d:25:c7:74:98:f5:c8:6d:3c:45:d4:7f:12:d3: e9:60:31:57:2e:5a:bc:3b:a6:fd:81:32:99:a4:23: dd:9e:d3:68:f5:e3:ca:c1:83:79:9c:05:76:1f:95: 49:e5:c4:03:a9:13:cb:4e:94:4b:0c:4a:ec:30:b1: ad:5e:7c:a0:01:6d:e9:46:23:4a:42:7a:34:aa:6c: 7c:c2:6c:c5:8b:0e:e8:3a:24:ab:ff:2e:62:30:6f: b2:1b:58:f2:2a:35:d4:54:6b:1b:d3:a0:e5:65:bf: fb:0f:82:8d:43:c3:66:7b:11:38:92:a7:6b:48:74: a1:55:97:f8:59:0b:03:23:ed:e9:b1:b0:ba:17:c3: 51:fd:82:bc:e3:9d:ac:2a:3f:1e:15:cd:48:3c:85: 20:b2:2d:ee:2f:64:c9:e5:9e:fe:e1:5f:47:5e:c6: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9C:D9:36:6D:EB:3F:D3:A1:45:24:71:25:7E:29:A1:F5:EF:32:FA X509v3 Authority Key Identifier: keyid:73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/W5zZNm3rP9OhRSRxJX4pofXvMvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.32.0/22 195.114.100.0/23 195.182.1.0/24 IPv6: 2a09:e40::/32 Signature Algorithm: sha256WithRSAEncryption 4f:a7:d2:db:91:0a:24:4a:71:cf:8f:bf:c9:eb:88:ba:4b:28: c9:7c:03:9f:c3:d9:f6:0e:c1:71:89:0b:65:be:0e:05:bb:8e: 4f:8d:27:89:6b:d9:bb:dd:c2:b2:e6:4c:57:d9:78:a7:d6:58: fd:68:50:e2:d1:7b:de:2c:8b:fe:5d:bc:20:90:34:7d:84:f4: 7b:0a:16:e0:a9:4f:f7:f9:4c:65:e2:5d:3e:60:5f:ae:4f:f2: 98:a0:ed:b7:1a:a0:e0:04:ad:0f:7c:c8:7a:53:6a:9c:0e:a8: 38:f9:c8:f2:a3:19:56:f4:6f:d2:6e:6d:42:0b:c1:82:07:bd: 23:68:32:19:30:b9:36:de:81:66:bf:3d:9b:e8:d4:85:45:1c: fa:d9:0b:8b:82:0b:d7:f3:ef:2c:de:f7:8b:4f:58:f4:e8:52: 05:57:9f:ed:cf:49:77:21:56:84:a9:f0:e0:8f:ae:b8:e4:6a: ae:72:2a:fc:de:3d:9f:c9:f7:6e:9d:0c:8c:b5:8e:6e:b6:e2: 2d:5b:b8:03:e0:91:1c:64:ba:08:28:6d:0a:43:8c:f0:82:f5: 4f:85:7c:41:8c:92:72:0d:99:31:3b:98:a4:c0:15:cc:32:6b: b9:87:73:ef:67:14:eb:f1:ed:08:0c:30:ca:5c:e4:c3:5e:e2: 11:c1:29:d8 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZqRdaVr/YlVBAMwmt45nlqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjgyZTBlZDBmMzZlMDk5MjM3Y2M0MmNmODc3OGI0MDc4 MjgwMDEwHhcNMjUxMTE3MTA1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjljZDkzNjZkZWIzZmQzYTE0NTI0NzEyNTdlMjlhMWY1ZWYzMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zEYEVpufoRoYGcYNfVCf4Ycmxih QRkLJywquFNmwyyi3SbLLy3069ANYnIiRwCNFZFdjdxaCaGtZ3sk3UEUF2631K3O n6wb5OH9zDHiDxeOEKz+MjW9mffRXSXHdJj1yG08RdR/EtPpYDFXLlq8O6b9gTKZ pCPdntNo9ePKwYN5nAV2H5VJ5cQDqRPLTpRLDErsMLGtXnygAW3pRiNKQno0qmx8 wmzFiw7oOiSr/y5iMG+yG1jyKjXUVGsb06DlZb/7D4KNQ8NmexE4kqdrSHShVZf4 WQsDI+3psbC6F8NR/YK8452sKj8eFc1IPIUgsi3uL2TJ5Z7+4V9HXsZnDQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFuc2TZt6z/ToUUkcSV+KaH17zL6MB8GA1UdIwQY MBaAFHP4Lg7Q824JkjfMQs+HeLQHgoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19ndUR0RHpiZ21TTjh4Q3o0ZDR0QWVDZ0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOGFkNDQtNzE5Ny00MmE3LThmNDUt ZTBmZGNjZmI5ZmEzLzEvVzV6Wk5tM3JQOU9oUlNSeEpYNHBvZlh2TXZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lOGFkNDQtNzE5Ny00MmE3LThmNDUtZTBmZGNjZmI5ZmEz LzEvY19ndUR0RHpiZ21TTjh4Q3o0ZDR0QWVDZ0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCjWIgAwQB w3JkAwQAw7YBMA0EAgACMAcDBQAqCQ5AMA0GCSqGSIb3DQEBCwUAA4IBAQBPp9Lb kQokSnHPj7/J64i6SyjJfAOfw9n2DsFxiQtlvg4Fu45PjSeJa9m73cKy5kxX2Xin 1lj9aFDi0XveLIv+XbwgkDR9hPR7ChbgqU/3+Uxl4l0+YF+uT/KYoO23GqDgBK0P fMh6U2qcDqg4+cjyoxlW9G/Sbm1CC8GCB70jaDIZMLk23oFmvz2b6NSFRRz62QuL ggvX8+8s3veLT1j06FIFV5/tz0l3IVaEqfDgj6645Gqucir83j2fyfdunQyMtY5u tuItW7gD4JEcZLoIKG0KQ4zwgvVPhXxBjJJyDZkxO5ikwBXMMmu5h3PvZxTr8e0I DDDKXOTDXuIRwSnY -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:18 2025 by rpki-client