This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/6wgIIIZZn9PKkWyj1o24YVKslZY.roa File: 6wgIIIZZn9PKkWyj1o24YVKslZY.roa (raw, json) Hash identifier: ItzXFRJIwEcM+B1Foxna1VuLqIlGbg+/9MVYoMgJCug= Subject key identifier: EB:08:08:20:86:59:9F:D3:CA:91:6C:A3:D6:8D:B8:61:52:AC:95:96 Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Certificate serial: 019ACCD739239F15B4D7404024DD996AD986 Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/6wgIIIZZn9PKkWyj1o24YVKslZY.roa Signing time: Fri 28 Nov 2025 23:40:48 +0000 ROA not before: Fri 28 Nov 2025 23:40:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57363 IP address blocks: 185.141.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:d7:39:23:9f:15:b4:d7:40:40:24:dd:99:6a:d9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Validity Not Before: Nov 28 23:40:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eb08082086599fd3ca916ca3d68db86152ac9596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ee:9e:95:c9:69:63:84:35:b4:34:d1:96:09: 77:fa:50:67:8d:b2:dd:af:8d:70:9c:53:bc:b3:26: 0d:cd:60:b2:a6:0e:13:e0:c6:5a:59:81:2b:47:c7: 87:47:ce:0e:e7:2a:0e:49:67:d9:6c:fc:18:2c:7f: 55:1b:65:18:34:f4:e9:5a:81:52:65:ff:05:b2:1d: 3b:01:ae:79:d1:e0:ff:28:04:c9:bd:98:be:8f:c6: 2f:d4:eb:bf:6b:da:32:53:2b:4d:81:ef:ba:a4:03: 9d:d8:d5:38:c3:77:37:25:93:38:c6:10:a7:6e:3c: d5:88:17:12:98:c4:8f:31:91:e9:18:03:11:c4:2e: 85:7e:2d:8d:df:f7:b1:af:f4:ae:2c:0f:04:de:b4: ac:e9:83:96:4c:66:ec:49:62:c2:51:06:96:a4:67: cf:78:29:50:76:61:c1:0d:f8:83:a3:14:9c:1d:c9: 3e:f7:6c:06:4d:17:9e:fe:13:0f:da:f7:63:74:d4: ac:77:70:99:11:26:40:b5:3c:d7:99:df:e7:a4:0c: 6d:c5:23:47:f7:09:a7:e2:62:91:e4:d6:b4:6f:a8: 3d:9d:b2:17:ac:32:9e:11:c7:43:a7:bc:2f:b5:c5: c9:6e:c8:d2:16:9c:69:df:a5:df:ee:44:06:d3:36: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:08:08:20:86:59:9F:D3:CA:91:6C:A3:D6:8D:B8:61:52:AC:95:96 X509v3 Authority Key Identifier: keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/6wgIIIZZn9PKkWyj1o24YVKslZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.225.0/24 Signature Algorithm: sha256WithRSAEncryption 29:ac:a0:83:d1:77:ef:fb:40:6d:2a:56:f0:9b:ec:9c:a4:60: c4:d2:20:d9:68:6c:16:c4:52:a5:71:12:4a:a4:88:b7:5e:85: 32:3c:90:f5:50:41:46:4a:96:fd:dd:06:ec:ce:60:d7:80:a6: 49:3c:9e:b7:38:11:9a:74:09:ac:19:61:d6:54:c6:4f:c8:e7: 7e:e4:e0:7f:dd:03:de:e7:a4:88:1f:87:02:13:ec:bd:8c:cf: 42:81:c0:f3:1b:8a:08:b7:8d:20:e1:ea:63:7a:cb:6e:7f:ba: 74:d1:a9:45:b4:a1:f9:be:d2:3e:fd:09:b1:fc:cc:db:67:a8: 95:81:62:e5:91:2d:8d:b6:02:0a:78:3e:cf:47:a2:0a:54:6e: 5c:5e:d5:d8:ff:fa:1d:de:4b:1b:e3:f1:12:78:08:c1:83:e9: ad:e5:8b:f8:d9:11:bc:ae:e2:97:7b:34:16:74:d9:34:57:8a: 01:b4:83:54:88:dc:56:31:f8:b4:7a:31:d2:55:06:72:56:95: e7:72:d4:58:e4:8a:df:d4:6f:ae:55:95:3b:57:a6:2f:34:2a: 67:e0:58:69:36:d1:ea:ba:50:b7:48:06:b3:94:c6:74:f2:8f: 48:f9:73:89:05:be:0e:c8:09:25:99:39:ca:11:d3:5e:c3:c7: 78:85:d7:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrM1zkjnxW010BAJN2ZatmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODdhMTY5NjU4NzVmNmY1M2JjYzMxZjBlNDkzYTk2MTU0 ZWI3YjkwHhcNMjUxMTI4MjM0MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjA4MDgyMDg2NTk5ZmQzY2E5MTZjYTNkNjhkYjg2MTUyYWM5NTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u6elclpY4Q1tDTRlgl3+lBnjbLd r41wnFO8syYNzWCypg4T4MZaWYErR8eHR84O5yoOSWfZbPwYLH9VG2UYNPTpWoFS Zf8Fsh07Aa550eD/KATJvZi+j8Yv1Ou/a9oyUytNge+6pAOd2NU4w3c3JZM4xhCn bjzViBcSmMSPMZHpGAMRxC6Ffi2N3/exr/SuLA8E3rSs6YOWTGbsSWLCUQaWpGfP eClQdmHBDfiDoxScHck+92wGTRee/hMP2vdjdNSsd3CZESZAtTzXmd/npAxtxSNH 9wmn4mKR5Na0b6g9nbIXrDKeEcdDp7wvtcXJbsjSFpxp36Xf7kQG0zbCQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsICCCGWZ/TypFso9aNuGFSrJWWMB8GA1UdIwQY MBaAFHiHoWllh19vU7zDHw5JOpYVTre5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDIt NzU2OGExMGRmNDQzLzEvNndnSUlJWlpuOVBLa1d5ajFvMjRZVktzbFpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDItNzU2OGExMGRmNDQz LzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY3hMA0G CSqGSIb3DQEBCwUAA4IBAQAprKCD0Xfv+0BtKlbwm+ycpGDE0iDZaGwWxFKlcRJK pIi3XoUyPJD1UEFGSpb93QbszmDXgKZJPJ63OBGadAmsGWHWVMZPyOd+5OB/3QPe 56SIH4cCE+y9jM9CgcDzG4oIt40g4epjestuf7p00alFtKH5vtI+/Qmx/MzbZ6iV gWLlkS2NtgIKeD7PR6IKVG5cXtXY//od3ksb4/ESeAjBg+mt5Yv42RG8ruKXezQW dNk0V4oBtINUiNxWMfi0ejHSVQZyVpXnctRY5Irf1G+uVZU7V6YvNCpn4FhpNtHq ulC3SAazlMZ08o9I+XOJBb4OyAklmTnKEdNew8d4hdeL -----END CERTIFICATE-----Generated at Sat Dec 6 19:23:32 2025 by rpki-client