This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/w1wE-GTVXdtS8_s6-jCqXeRbv54.roa File: w1wE-GTVXdtS8_s6-jCqXeRbv54.roa (raw, json) Hash identifier: tWxx0MAwHTEu1ZGxtJdO+Nj7usmdmMpLOetyWJHeUhM= Subject key identifier: C3:5C:04:F8:64:D5:5D:DB:52:F3:FB:3A:FA:30:AA:5D:E4:5B:BF:9E Certificate issuer: /CN=c85f510c72ce0b79c2899b35845ffe3670693f05 Certificate serial: 019AB5322B3C36698DF47D516F4A8F8B138A Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/w1wE-GTVXdtS8_s6-jCqXeRbv54.roa Signing time: Mon 24 Nov 2025 09:29:15 +0000 ROA not before: Mon 24 Nov 2025 09:29:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35681 IP address blocks: 185.160.68.0/22 maxlen: 22 185.160.68.0/24 maxlen: 24 185.160.69.0/24 maxlen: 24 185.160.70.0/24 maxlen: 24 185.160.71.0/24 maxlen: 24 2a09:2640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:32:2b:3c:36:69:8d:f4:7d:51:6f:4a:8f:8b:13:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05 Validity Not Before: Nov 24 09:29:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c35c04f864d55ddb52f3fb3afa30aa5de45bbf9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:b7:df:b3:55:55:55:04:40:5e:a6:0b:57: e7:30:71:cc:c7:bb:62:15:5e:04:df:67:26:95:59: 80:09:4a:f7:43:f0:bd:77:3f:83:63:da:08:60:c3: 8b:8f:ea:63:68:36:eb:4e:19:86:34:6b:78:62:a8: 06:35:f1:4d:9c:f5:22:d6:5a:1a:28:cd:42:ae:ad: c9:a9:8e:e0:bd:57:5c:0b:16:31:38:e8:35:85:06: 5e:b1:00:55:ca:7c:dc:df:c9:63:86:96:2f:4e:5c: 4d:24:a7:ae:a7:ff:ec:a8:73:83:dc:e2:df:07:cd: cc:6b:0a:0b:dd:7e:90:f4:4d:ec:d9:39:7d:0a:52: ea:9e:b0:aa:e7:ec:72:12:7a:c1:f1:90:77:9d:ee: f1:89:0a:c7:0d:ce:73:e8:f8:bf:55:6b:f2:92:36: 9c:e7:08:2e:d9:1d:5d:d5:ff:a4:2f:29:5c:5d:ea: f7:fe:78:17:4a:b4:c8:9a:3f:a0:78:0d:6e:fc:11: 66:10:2c:b3:ea:11:b5:ec:75:e1:6d:53:95:f2:5a: 18:27:a0:16:be:14:af:4f:c7:f1:80:c7:d1:68:5b: 35:aa:0f:37:c1:72:0d:f9:59:ed:e4:f2:22:bf:22: f2:ba:26:73:ac:f4:a9:2d:78:de:68:4b:25:1c:2e: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5C:04:F8:64:D5:5D:DB:52:F3:FB:3A:FA:30:AA:5D:E4:5B:BF:9E X509v3 Authority Key Identifier: keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/w1wE-GTVXdtS8_s6-jCqXeRbv54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.68.0/22 IPv6: 2a09:2640::/32 Signature Algorithm: sha256WithRSAEncryption b6:88:21:41:83:4c:60:bb:4a:cf:11:43:d3:17:a6:e1:5e:31: 43:6a:2f:d9:ef:94:ef:b1:9f:51:eb:4e:83:d5:e7:4d:34:55: c8:a8:8d:c4:2b:16:b5:1c:b0:8c:02:01:64:ba:d5:d2:ea:16: 58:7c:9a:07:52:2c:a8:0a:78:b5:1d:b9:b1:85:3f:88:c7:5e: bf:8e:04:02:00:1c:83:71:82:e9:3a:58:6e:c7:fc:db:bb:65: d9:e7:80:3d:73:e6:96:39:d3:4d:34:0e:db:6b:37:41:e3:36: ed:d4:61:be:d3:ff:ae:40:ef:64:a2:ff:e9:9b:7e:d9:2f:58: e1:89:7a:d2:8b:47:b8:99:e9:52:64:23:e9:3f:57:34:51:55: ae:8d:71:10:9b:4b:fc:56:4b:6c:02:b6:8b:a7:70:6e:cf:0b: ea:90:31:49:db:1b:d9:a0:25:2c:9f:25:f2:b2:61:dc:4e:9c: 6e:46:8b:17:4a:dd:4b:e4:86:c8:82:31:d3:a1:9b:58:cb:29: 86:ce:73:44:5e:84:2b:57:ee:d5:2b:62:8c:f6:d3:e0:b0:5d: 30:60:b6:5f:64:c3:98:a1:11:0c:80:85:dd:c6:4b:4f:fc:95: 60:72:c5:70:74:74:e3:83:a3:b3:1e:55:7a:73:2a:b6:65:20: 19:97:48:42 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZq1Mis8NmmN9H1Rb0qPixOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NWY1MTBjNzJjZTBiNzljMjg5OWIzNTg0NWZmZTM2NzA2 OTNmMDUwHhcNMjUxMTI0MDkyOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzVjMDRmODY0ZDU1ZGRiNTJmM2ZiM2FmYTMwYWE1ZGU0NWJiZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQW337NVVVUEQF6mC1fnMHHMx7ti FV4E32cmlVmACUr3Q/C9dz+DY9oIYMOLj+pjaDbrThmGNGt4YqgGNfFNnPUi1loa KM1Crq3JqY7gvVdcCxYxOOg1hQZesQBVynzc38ljhpYvTlxNJKeup//sqHOD3OLf B83MawoL3X6Q9E3s2Tl9ClLqnrCq5+xyEnrB8ZB3ne7xiQrHDc5z6Pi/VWvykjac 5wgu2R1d1f+kLylcXer3/ngXSrTImj+geA1u/BFmECyz6hG17HXhbVOV8loYJ6AW vhSvT8fxgMfRaFs1qg83wXIN+Vnt5PIivyLyuiZzrPSpLXjeaEslHC4NhQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMNcBPhk1V3bUvP7Ovowql3kW7+eMB8GA1UdIwQY MBaAFMhfUQxyzgt5wombNYRf/jZwaT8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEt YjhjOWEyYTlkYTQ2LzEvdzF3RS1HVFZYZHRTOF9zNi1qQ3FYZVJidjU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEtYjhjOWEyYTlkYTQ2 LzEveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaBEMA0E AgACMAcDBQAqCSZAMA0GCSqGSIb3DQEBCwUAA4IBAQC2iCFBg0xgu0rPEUPTF6bh XjFDai/Z75TvsZ9R606D1edNNFXIqI3EKxa1HLCMAgFkutXS6hZYfJoHUiyoCni1 HbmxhT+Ix16/jgQCAByDcYLpOlhux/zbu2XZ54A9c+aWOdNNNA7bazdB4zbt1GG+ 0/+uQO9kov/pm37ZL1jhiXrSi0e4melSZCPpP1c0UVWujXEQm0v8VktsAraLp3Bu zwvqkDFJ2xvZoCUsnyXysmHcTpxuRosXSt1L5IbIgjHToZtYyymGznNEXoQrV+7V K2KM9tPgsF0wYLZfZMOYoREMgIXdxktP/JVgcsVwdHTjg6OzHlV6cyq2ZSAZl0hC -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:43 2025 by rpki-client