This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/gwWPOsWAzisobb1-Q2EhnTtJaJo.roa File: gwWPOsWAzisobb1-Q2EhnTtJaJo.roa (raw, json) Hash identifier: rPvxxj91M6LJ4Ua0hV1vECQuuEY2DKFSbkNP4mgGfiU= Subject key identifier: 83:05:8F:3A:C5:80:CE:2B:28:6D:BD:7E:43:61:21:9D:3B:49:68:9A Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019AC60E781BEE8ACFBDBB52DF4F4A5A9987 Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/gwWPOsWAzisobb1-Q2EhnTtJaJo.roa Signing time: Thu 27 Nov 2025 16:03:48 +0000 ROA not before: Thu 27 Nov 2025 16:03:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 81.31.198.0/24 maxlen: 24 91.188.253.0/24 maxlen: 24 91.188.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:0e:78:1b:ee:8a:cf:bd:bb:52:df:4f:4a:5a:99:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Nov 27 16:03:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=83058f3ac580ce2b286dbd7e4361219d3b49689a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8c:0c:6f:a9:13:85:df:55:67:a1:7e:11:90: d1:82:a5:3f:8a:a9:7b:9a:7e:bc:1f:0d:be:7d:ae: e7:1d:fb:28:b4:03:6a:7b:b5:31:8e:0f:5b:2a:b3: d5:34:45:ed:20:ad:3e:f1:e7:24:0d:e8:3d:7b:a8: fa:2d:6f:35:d1:67:04:f9:61:41:f7:67:e7:1d:38: 20:29:56:d8:cb:75:b7:72:89:9f:75:8a:5d:fb:42: c7:a2:ec:33:60:0f:4b:d9:fb:6f:f8:dd:f6:6e:92: 7e:af:da:cf:17:b7:31:ac:43:25:61:74:70:ce:6c: 7a:be:c5:a1:43:c6:31:f1:82:93:75:54:29:ef:aa: 30:60:cf:e2:5d:d2:2d:51:fe:c9:96:48:6d:26:eb: 81:37:b0:be:57:f6:7a:20:c0:7d:7d:61:6e:d0:b2: 8b:37:17:c4:23:b9:21:18:05:b1:49:1f:bd:1e:71: c9:5d:ff:d9:bf:4d:d5:70:f1:1f:80:21:1f:dd:05: ab:e7:8c:84:b7:aa:4e:37:6a:1b:59:f1:2c:9c:ec: a9:14:19:09:41:2d:33:82:9e:15:8e:26:58:1b:48: d5:d8:f6:9f:fc:ca:3c:51:9b:f5:47:be:e0:17:ac: 0f:cb:49:45:ad:b5:39:3f:3d:14:99:4e:10:b2:d9: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:05:8F:3A:C5:80:CE:2B:28:6D:BD:7E:43:61:21:9D:3B:49:68:9A X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/gwWPOsWAzisobb1-Q2EhnTtJaJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.198.0/24 91.188.253.0/24 91.188.255.0/24 Signature Algorithm: sha256WithRSAEncryption c9:ac:4a:7a:3a:88:fe:21:74:45:f7:df:2b:d8:fb:38:26:91: cd:f1:09:b8:69:ba:01:bc:85:e6:4b:80:a0:6f:9a:90:ac:08: 85:05:8a:01:5c:68:a3:10:46:d2:73:61:84:10:1c:e8:5d:2d: 13:8d:03:63:05:6d:31:ca:b2:f5:29:16:a9:3e:3a:ef:77:ae: b3:fa:cf:6e:6b:ce:df:72:6f:0d:40:7d:a9:bd:9f:ec:ca:37: 6e:0f:e4:87:02:fe:50:71:25:21:09:9e:b7:6d:61:38:ce:a2: a0:e5:1f:98:8b:fe:be:4b:90:13:35:df:b6:e7:f8:ad:b7:3e: 1b:12:fb:c3:9c:47:99:47:ea:a7:b6:c0:08:84:dd:90:0a:c5: 05:d4:ca:f9:2e:3d:ce:d3:0e:a2:a0:0e:79:1c:02:b4:74:e8: 4c:42:d5:27:3a:52:6b:aa:7c:54:26:a6:ac:8c:49:4c:c6:0f: da:0b:76:6a:c2:05:2b:6f:01:bd:ca:f1:ad:81:e2:d1:66:e5: 50:95:1f:98:e5:01:b0:75:06:22:49:82:5a:37:98:e3:c3:7f: 61:de:97:9a:71:28:d8:3b:bf:9e:79:c7:5b:36:72:eb:80:92: 9f:89:64:9b:58:b0:3b:19:28:35:2c:fd:79:99:78:da:f1:de: 69:47:01:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrGDngb7orPvbtS309KWpmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjUxMTI3MTYwMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzA1OGYzYWM1ODBjZTJiMjg2ZGJkN2U0MzYxMjE5ZDNiNDk2ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YwMb6kThd9VZ6F+EZDRgqU/iql7 mn68Hw2+fa7nHfsotANqe7Uxjg9bKrPVNEXtIK0+8eckDeg9e6j6LW810WcE+WFB 92fnHTggKVbYy3W3comfdYpd+0LHouwzYA9L2ftv+N32bpJ+r9rPF7cxrEMlYXRw zmx6vsWhQ8Yx8YKTdVQp76owYM/iXdItUf7JlkhtJuuBN7C+V/Z6IMB9fWFu0LKL NxfEI7khGAWxSR+9HnHJXf/Zv03VcPEfgCEf3QWr54yEt6pON2obWfEsnOypFBkJ QS0zgp4VjiZYG0jV2Paf/Mo8UZv1R77gF6wPy0lFrbU5Pz0UmU4QstlM3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIMFjzrFgM4rKG29fkNhIZ07SWiaMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvZ3dXUE9zV0F6aXNvYmIxLVEyRWhuVHRKYUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUR/GAwQA W7z9AwQAW7z/MA0GCSqGSIb3DQEBCwUAA4IBAQDJrEp6Ooj+IXRF998r2Ps4JpHN 8Qm4aboBvIXmS4Cgb5qQrAiFBYoBXGijEEbSc2GEEBzoXS0TjQNjBW0xyrL1KRap Pjrvd66z+s9ua87fcm8NQH2pvZ/syjduD+SHAv5QcSUhCZ63bWE4zqKg5R+Yi/6+ S5ATNd+25/ittz4bEvvDnEeZR+qntsAIhN2QCsUF1Mr5Lj3O0w6ioA55HAK0dOhM QtUnOlJrqnxUJqasjElMxg/aC3ZqwgUrbwG9yvGtgeLRZuVQlR+Y5QGwdQYiSYJa N5jjw39h3peacSjYO7+eecdbNnLrgJKfiWSbWLA7GSg1LP15mXja8d5pRwHW -----END CERTIFICATE-----Generated at Sun Dec 7 02:06:04 2025 by rpki-client