This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/dWwVRALAzAqrPFMH_475HoZXSNw.roa File: dWwVRALAzAqrPFMH_475HoZXSNw.roa (raw, json) Hash identifier: UJ+bbnCj2UBf8wQPJOa00WAwj/A+Ao4RrFugnSe3cZA= Subject key identifier: 75:6C:15:44:02:C0:CC:0A:AB:3C:53:07:FF:8E:F9:1E:86:57:48:DC Certificate issuer: /CN=6d085d177eeb0cb91a42f43e2d4c3c808dec5708 Certificate serial: 019AEB40958ACB988B85C4C00B36336E6FF2 Authority key identifier: 6D:08:5D:17:7E:EB:0C:B9:1A:42:F4:3E:2D:4C:3C:80:8D:EC:57:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQhdF37rDLkaQvQ-LUw8gI3sVwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/dWwVRALAzAqrPFMH_475HoZXSNw.roa Signing time: Thu 04 Dec 2025 21:24:29 +0000 ROA not before: Thu 04 Dec 2025 21:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60153 IP address blocks: 185.55.196.0/24 maxlen: 24 185.55.197.0/24 maxlen: 24 185.55.198.0/24 maxlen: 24 185.55.199.0/24 maxlen: 24 185.182.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.mft rsync://rpki.ripe.net/repository/DEFAULT/bQhdF37rDLkaQvQ-LUw8gI3sVwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:40:95:8a:cb:98:8b:85:c4:c0:0b:36:33:6e:6f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d085d177eeb0cb91a42f43e2d4c3c808dec5708 Validity Not Before: Dec 4 21:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=756c154402c0cc0aab3c5307ff8ef91e865748dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:77:39:29:9f:22:60:d5:b4:c6:4f:a7:c2: ce:90:31:dd:25:71:fc:63:43:8a:2f:64:63:c9:4f: 0f:90:56:0c:7d:b6:6f:25:68:74:c3:5b:51:4e:f7: 2b:29:07:a3:f9:99:dc:9d:47:01:1e:83:85:3c:26: 7f:e5:1c:6d:4d:dd:c1:70:b9:36:38:de:6a:eb:4c: c9:41:9d:e3:06:7d:bd:c4:f0:86:b5:a1:a7:62:c7: ae:43:64:0f:f5:78:d4:5e:3e:4d:51:75:fd:3e:4f: 99:18:bd:0f:a1:b2:b3:d3:07:44:b4:d6:a6:5c:b8: f4:45:23:ba:cb:95:f2:0a:d4:29:eb:0e:17:c4:e7: a7:a8:9a:99:fd:04:fe:2c:70:45:be:4d:c2:78:85: c2:06:a0:6a:95:0c:c4:52:2f:db:7b:52:12:c5:45: 35:e4:2c:ee:a0:3e:b6:34:bb:25:c3:29:1f:4a:82: c1:ce:8e:d2:11:e4:47:28:35:d1:6a:f6:d7:fb:7e: 8b:60:fa:49:8e:a3:a8:a9:e9:d3:4c:63:ce:85:11: 84:f2:d9:61:18:f1:ac:78:56:82:e7:60:05:f7:b5: 15:7e:a2:cf:4a:eb:37:14:5d:82:cf:a5:c4:03:2f: 28:0c:1a:45:1e:1b:59:d9:f0:70:af:de:87:0a:5c: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6C:15:44:02:C0:CC:0A:AB:3C:53:07:FF:8E:F9:1E:86:57:48:DC X509v3 Authority Key Identifier: keyid:6D:08:5D:17:7E:EB:0C:B9:1A:42:F4:3E:2D:4C:3C:80:8D:EC:57:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQhdF37rDLkaQvQ-LUw8gI3sVwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/dWwVRALAzAqrPFMH_475HoZXSNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.196.0/22 185.182.64.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:fa:05:80:28:df:56:8d:20:2d:76:76:24:4e:8e:b9:64:8f: 6a:db:70:2c:05:65:ea:8a:cc:30:d0:e6:ba:ec:c8:01:17:5e: a4:a3:21:5f:07:58:7f:9d:11:55:2f:f5:df:76:5c:a4:7e:94: f8:70:b9:5d:f3:8c:81:57:20:bb:99:33:e6:df:02:08:29:4b: 08:e9:5d:52:c1:d5:cc:3b:f2:25:6a:c1:4a:73:7f:67:c6:c7: 83:ae:26:69:0b:57:3d:16:b3:9f:9e:00:7d:e4:86:67:b7:69: 1d:e3:14:5c:cb:1e:f5:6c:ab:71:fe:b6:db:c6:fd:2d:51:1b: e4:93:69:7c:0f:ad:00:fb:a5:d4:9e:f2:7d:50:2a:d4:0e:4d: 12:24:89:f0:16:8f:ce:46:45:20:9d:3f:42:54:1e:70:c5:96: 5a:c7:ab:15:a4:fe:3d:05:47:b5:f1:8b:4f:63:d4:c8:4c:cd: a0:35:80:f5:e0:f5:92:f3:bb:3a:35:b1:72:48:8f:98:70:52: d5:95:ee:20:43:36:44:97:79:6f:c7:c7:a0:63:e9:21:bb:f9: 79:96:8d:81:dc:bc:75:db:25:b1:8d:7c:b0:56:2a:84:7e:89: 74:2c:71:48:24:c5:20:c2:74:7c:84:8d:ef:c7:fc:d7:6f:ae: 70:e1:10:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrrQJWKy5iLhcTACzYzbm/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg1ZDE3N2VlYjBjYjkxYTQyZjQzZTJkNGMzYzgwOGRl YzU3MDgwHhcNMjUxMjA0MjEyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTZjMTU0NDAyYzBjYzBhYWIzYzUzMDdmZjhlZjkxZTg2NTc0OGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtp3OSmfImDVtMZPp8LOkDHdJXH8 Y0OKL2RjyU8PkFYMfbZvJWh0w1tRTvcrKQej+ZncnUcBHoOFPCZ/5RxtTd3BcLk2 ON5q60zJQZ3jBn29xPCGtaGnYseuQ2QP9XjUXj5NUXX9Pk+ZGL0PobKz0wdEtNam XLj0RSO6y5XyCtQp6w4XxOenqJqZ/QT+LHBFvk3CeIXCBqBqlQzEUi/be1ISxUU1 5CzuoD62NLslwykfSoLBzo7SEeRHKDXRavbX+36LYPpJjqOoqenTTGPOhRGE8tlh GPGseFaC52AF97UVfqLPSus3FF2Cz6XEAy8oDBpFHhtZ2fBwr96HClzjMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHVsFUQCwMwKqzxTB/+O+R6GV0jcMB8GA1UdIwQY MBaAFG0IXRd+6wy5GkL0Pi1MPICN7FcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFoZEYzN3JETGthUXZRLUxVdzhnSTNzVndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNTM4OTItNzNiZS00MTJlLTk1NTkt OTdkNDkzNDhjYzAxLzEvZFd3VlJBTEF6QXFyUEZNSF80NzVIb1pYU053LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wNTM4OTItNzNiZS00MTJlLTk1NTktOTdkNDkzNDhjYzAx LzEvYlFoZEYzN3JETGthUXZRLUxVdzhnSTNzVndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuTfEAwQA ubZAMA0GCSqGSIb3DQEBCwUAA4IBAQCO+gWAKN9WjSAtdnYkTo65ZI9q23AsBWXq isww0Oa67MgBF16koyFfB1h/nRFVL/XfdlykfpT4cLld84yBVyC7mTPm3wIIKUsI 6V1SwdXMO/IlasFKc39nxseDriZpC1c9FrOfngB95IZnt2kd4xRcyx71bKtx/rbb xv0tURvkk2l8D60A+6XUnvJ9UCrUDk0SJInwFo/ORkUgnT9CVB5wxZZax6sVpP49 BUe18YtPY9TITM2gNYD14PWS87s6NbFySI+YcFLVle4gQzZEl3lvx8egY+khu/l5 lo2B3Lx12yWxjXywViqEfol0LHFIJMUgwnR8hI3vx/zXb65w4RC9 -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:47 2025 by rpki-client