This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/E8WGVCVQ2vQcr6hkNNKIojuNOXE.roa File: E8WGVCVQ2vQcr6hkNNKIojuNOXE.roa (raw, json) Hash identifier: iVgNdkvECViWn4o3AN2B9ArIprpbGN6IKP4DqlGFKl4= Subject key identifier: 13:C5:86:54:25:50:DA:F4:1C:AF:A8:64:34:D2:88:A2:3B:8D:39:71 Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459 Certificate serial: 019A89C36E51510E55CF90FFAC90BED40BC5 Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/E8WGVCVQ2vQcr6hkNNKIojuNOXE.roa Signing time: Sat 15 Nov 2025 23:04:37 +0000 ROA not before: Sat 15 Nov 2025 23:04:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209899 IP address blocks: 45.65.96.0/22 maxlen: 24 185.136.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:89:c3:6e:51:51:0e:55:cf:90:ff:ac:90:be:d4:0b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459 Validity Not Before: Nov 15 23:04:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13c586542550daf41cafa86434d288a23b8d3971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1e:55:45:37:38:a0:e6:82:4d:40:31:be:4d: fb:67:55:4e:98:9d:2e:fa:f3:ac:65:6a:d6:51:35: 09:54:2e:f7:88:bf:4a:dd:4c:9c:2c:2c:d4:32:1b: 0a:82:93:77:0c:68:61:5d:5f:a2:dd:a7:5d:98:08: ae:2d:9f:c2:75:6b:a8:86:15:4d:81:53:19:4d:6a: cd:a0:4e:31:bf:db:2f:97:76:03:35:d5:17:b5:14: 34:27:e1:15:5e:f6:46:3d:c2:31:57:0e:9b:8d:ea: 3b:65:19:f8:14:e7:dd:bd:d1:19:b7:53:42:42:0e: ba:f9:62:9a:23:9f:42:b5:b8:6e:6a:11:d0:8b:30: e2:61:c9:41:80:5a:ac:a2:db:d1:ae:0a:bf:97:65: 3f:e7:9a:ba:e8:0d:92:dc:64:f5:1e:40:82:3c:49: 77:23:8a:0a:43:9d:f2:0e:79:9e:d6:42:41:5d:83: 43:f3:2b:c1:c5:58:a3:09:a9:d5:01:51:32:99:82: 43:47:95:e4:06:e7:f5:f9:c4:02:1d:a4:b5:51:9c: da:36:98:9c:9f:69:b7:a8:33:ed:22:93:57:28:73: 85:f4:59:ee:ec:ad:b5:52:ad:b7:e9:9d:b9:ed:84: 84:a0:a9:6e:85:b5:7d:05:1e:b2:35:18:82:ad:1c: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C5:86:54:25:50:DA:F4:1C:AF:A8:64:34:D2:88:A2:3B:8D:39:71 X509v3 Authority Key Identifier: keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/E8WGVCVQ2vQcr6hkNNKIojuNOXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.96.0/22 185.136.244.0/22 Signature Algorithm: sha256WithRSAEncryption 65:2b:16:c8:fc:4a:1b:11:2d:fe:ec:77:7a:1f:53:6a:13:d7: d6:20:2e:39:30:bd:54:a2:f5:0c:e7:bf:8d:89:88:a0:1a:86: e0:47:b1:95:7b:16:7b:52:e3:0c:f5:3a:4f:5d:02:de:ee:f5: 8f:28:98:c5:c5:3c:66:4f:92:4e:d9:86:74:a3:91:37:fd:41: b8:9d:e6:66:c4:a3:37:f0:33:7c:80:a1:87:6a:bf:34:8e:6f: 52:69:f1:8f:63:a0:28:95:77:d8:5f:8f:1d:4a:8e:11:44:c9: 4c:18:1f:80:74:8c:21:8c:27:7c:d9:e0:f7:d0:a6:df:37:18: ad:a8:6b:f1:5f:85:81:f5:a0:e6:ec:bf:7c:46:88:13:98:61: 2c:c3:0e:0e:04:a1:12:11:c4:7e:fe:6d:81:26:a8:80:41:d7: 0c:fa:1d:4d:d0:33:6b:86:28:11:08:a4:92:e8:81:b1:f1:20: 9d:bf:ae:83:16:26:53:76:48:ab:64:ab:a5:6c:06:c6:12:ed: 44:de:a8:59:b3:65:46:47:9f:b9:92:83:1f:ea:18:40:d4:ac: 85:ca:3f:27:5d:5d:88:f9:8a:7c:ca:37:c1:04:c6:55:c3:8b: 2b:08:3a:78:57:bf:22:55:da:a9:04:71:f3:a8:40:b3:d6:ee: 88:24:9f:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqJw25RUQ5Vz5D/rJC+1AvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWMwOGFlNmE5MzI1Mjg1YmRkNGE0YWRlOWMyMDdkN2Zh MTA0NTkwHhcNMjUxMTE1MjMwNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2M1ODY1NDI1NTBkYWY0MWNhZmE4NjQzNGQyODhhMjNiOGQzOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x5VRTc4oOaCTUAxvk37Z1VOmJ0u +vOsZWrWUTUJVC73iL9K3UycLCzUMhsKgpN3DGhhXV+i3addmAiuLZ/CdWuohhVN gVMZTWrNoE4xv9svl3YDNdUXtRQ0J+EVXvZGPcIxVw6bjeo7ZRn4FOfdvdEZt1NC Qg66+WKaI59CtbhuahHQizDiYclBgFqsotvRrgq/l2U/55q66A2S3GT1HkCCPEl3 I4oKQ53yDnme1kJBXYND8yvBxVijCanVAVEymYJDR5XkBuf1+cQCHaS1UZzaNpic n2m3qDPtIpNXKHOF9Fnu7K21Uq236Z257YSEoKluhbV9BR6yNRiCrRzuwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBPFhlQlUNr0HK+oZDTSiKI7jTlxMB8GA1UdIwQY MBaAFAPsCK5qkyUoW91KSt6cIH1/oQRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDIt M2Q3NWM0ZjQ4OWU3LzEvRThXR1ZDVlEydlFjcjZoa05OS0lvanVOT1hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDItM2Q3NWM0ZjQ4OWU3 LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLUFgAwQC uYj0MA0GCSqGSIb3DQEBCwUAA4IBAQBlKxbI/EobES3+7Hd6H1NqE9fWIC45ML1U ovUM57+NiYigGobgR7GVexZ7UuMM9TpPXQLe7vWPKJjFxTxmT5JO2YZ0o5E3/UG4 neZmxKM38DN8gKGHar80jm9SafGPY6AolXfYX48dSo4RRMlMGB+AdIwhjCd82eD3 0KbfNxitqGvxX4WB9aDm7L98RogTmGEsww4OBKESEcR+/m2BJqiAQdcM+h1N0DNr higRCKSS6IGx8SCdv66DFiZTdkirZKulbAbGEu1E3qhZs2VGR5+5koMf6hhA1KyF yj8nXV2I+Yp8yjfBBMZVw4srCDp4V78iVdqpBHHzqECz1u6IJJ/R -----END CERTIFICATE-----Generated at Sat Dec 6 22:12:25 2025 by rpki-client