This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/pw-kmcsXStqEGowMkHLAk5Mf6U4.roa File: pw-kmcsXStqEGowMkHLAk5Mf6U4.roa (raw, json) Hash identifier: rRJ79fHcm5M4bm1f6K+EVmHKjAp+H/ZjHlqCTGktjWw= Subject key identifier: A7:0F:A4:99:CB:17:4A:DA:84:1A:8C:0C:90:72:C0:93:93:1F:E9:4E Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4 Certificate serial: 019A7FC487CE5B6D7CE3B4B5E13B499BC791 Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/pw-kmcsXStqEGowMkHLAk5Mf6U4.roa Signing time: Fri 14 Nov 2025 00:29:37 +0000 ROA not before: Fri 14 Nov 2025 00:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211470 IP address blocks: 185.216.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7f:c4:87:ce:5b:6d:7c:e3:b4:b5:e1:3b:49:9b:c7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744327750414d349dade02233497cf47655cd3e4 Validity Not Before: Nov 14 00:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a70fa499cb174ada841a8c0c9072c093931fe94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:88:92:b9:62:57:81:d1:7f:de:ef:4b:0b: d7:58:ab:6c:e8:57:db:eb:02:20:8d:7f:39:c4:57: ca:f1:0d:51:99:0c:cd:46:10:f6:69:aa:5b:6a:03: ea:44:c1:b6:99:ef:cc:9f:2a:70:59:a8:a9:7e:8f: d9:c3:d4:74:7f:82:4a:ed:9f:25:3f:cd:62:49:48: 36:8f:c5:b1:48:eb:6b:2d:ce:58:2f:f4:76:6d:3a: cb:8a:ca:02:e5:29:5c:b0:67:52:de:34:0e:39:25: f2:cf:bf:d2:59:7a:9d:1f:50:57:cb:a1:aa:ae:e6: 51:bf:40:8c:51:84:e6:1f:08:60:32:5b:a2:bc:09: 21:19:2b:60:e6:5a:e3:6a:45:d9:27:6d:ce:a4:a6: 3e:68:f7:98:ec:c1:ff:62:cf:71:d3:ae:bb:9d:14: d0:6e:e1:f0:ac:6f:5d:e7:02:7f:6a:fc:5b:12:78: ca:74:b4:8e:46:7b:b8:89:d9:cd:cf:dc:a7:74:ed: 68:0d:c2:cb:01:f6:5f:61:fc:53:f9:5f:91:e0:54: e7:03:08:b0:be:7b:7a:37:09:62:52:b3:48:2e:99: 24:1a:00:ec:d0:ec:f9:99:87:ee:ea:cf:b1:9c:07: a9:24:90:9c:43:91:da:15:86:82:e2:ec:bc:5f:c9: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0F:A4:99:CB:17:4A:DA:84:1A:8C:0C:90:72:C0:93:93:1F:E9:4E X509v3 Authority Key Identifier: keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/pw-kmcsXStqEGowMkHLAk5Mf6U4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.15.0/24 Signature Algorithm: sha256WithRSAEncryption aa:56:c3:d4:2a:79:af:75:31:03:55:bf:03:6d:b3:c0:f3:a6: 4c:58:bc:3f:30:09:9a:23:a6:aa:ea:0d:80:c6:f9:c0:69:38: 10:4c:25:fe:04:da:d5:a0:14:c8:b0:9c:50:50:bf:2f:d5:fc: 45:cf:ea:1e:eb:49:c1:19:ca:79:34:ea:47:dd:9d:a0:21:53: 97:f9:ee:25:84:ee:c0:6d:52:da:a1:2a:62:3d:9d:1a:b6:4a: fe:ff:4f:51:9e:e8:ff:65:c6:2e:ea:c3:64:32:8c:13:b1:4e: 05:6d:e1:c3:00:6a:6e:0b:ff:71:be:bc:0f:55:f1:d3:a4:02: 54:a8:c3:1e:99:7d:81:46:61:5a:ef:06:f5:23:44:ea:21:35: 72:f0:1c:f9:a3:6c:46:d1:6d:f9:6e:a9:48:91:5e:b7:e7:1a: 8b:1b:1d:9e:30:a4:c7:ed:4e:34:f8:2c:35:dd:63:55:cb:6a: d3:07:90:e5:f3:ca:b8:b8:b0:99:a8:82:93:19:48:22:de:80: ab:be:71:5d:e0:8d:60:ed:3e:c4:06:8d:00:42:7a:34:06:23: fc:b5:93:c1:f5:54:9e:a8:26:7b:d5:72:0a:91:57:ca:6d:26: 05:42:89:f8:d2:fe:c4:fc:80:5e:6f:a5:9a:f9:91:55:f1:8e: 7c:a3:39:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp/xIfOW21847S14TtJm8eRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NDMyNzc1MDQxNGQzNDlkYWRlMDIyMzM0OTdjZjQ3NjU1 Y2QzZTQwHhcNMjUxMTE0MDAyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzBmYTQ5OWNiMTc0YWRhODQxYThjMGM5MDcyYzA5MzkzMWZlOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA+IkrliV4HRf97vSwvXWKts6Ffb 6wIgjX85xFfK8Q1RmQzNRhD2aapbagPqRMG2me/MnypwWaipfo/Zw9R0f4JK7Z8l P81iSUg2j8WxSOtrLc5YL/R2bTrLisoC5SlcsGdS3jQOOSXyz7/SWXqdH1BXy6Gq ruZRv0CMUYTmHwhgMluivAkhGStg5lrjakXZJ23OpKY+aPeY7MH/Ys9x0667nRTQ buHwrG9d5wJ/avxbEnjKdLSORnu4idnNz9yndO1oDcLLAfZfYfxT+V+R4FTnAwiw vnt6NwliUrNILpkkGgDs0Oz5mYfu6s+xnAepJJCcQ5HaFYaC4uy8X8mduQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcPpJnLF0rahBqMDJBywJOTH+lOMB8GA1UdIwQY MBaAFHRDJ3UEFNNJ2t4CIzSXz0dlXNPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82MTA4NzItYjViNS00NDJmLWI2MzAt ZTVkMWFmNTlkZWE2LzEvcHcta21jc1hTdHFFR293TWtITEFrNU1mNlU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82MTA4NzItYjViNS00NDJmLWI2MzAtZTVkMWFmNTlkZWE2 LzEvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudgPMA0G CSqGSIb3DQEBCwUAA4IBAQCqVsPUKnmvdTEDVb8DbbPA86ZMWLw/MAmaI6aq6g2A xvnAaTgQTCX+BNrVoBTIsJxQUL8v1fxFz+oe60nBGcp5NOpH3Z2gIVOX+e4lhO7A bVLaoSpiPZ0atkr+/09Rnuj/ZcYu6sNkMowTsU4FbeHDAGpuC/9xvrwPVfHTpAJU qMMemX2BRmFa7wb1I0TqITVy8Bz5o2xG0W35bqlIkV635xqLGx2eMKTH7U40+Cw1 3WNVy2rTB5Dl88q4uLCZqIKTGUgi3oCrvnFd4I1g7T7EBo0AQno0BiP8tZPB9VSe qCZ71XIKkVfKbSYFQon40v7E/IBeb6Wa+ZFV8Y58ozl3 -----END CERTIFICATE-----Generated at Sat Dec 6 13:13:25 2025 by rpki-client