This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Ws7ebYOOtcSWgaO52CwEX3ZpAZ4.roa File: Ws7ebYOOtcSWgaO52CwEX3ZpAZ4.roa (raw, json) Hash identifier: jwm4sVn8ojypt4tfebC3RTiKjFTUgpzDZ55TBqyGkgI= Subject key identifier: 5A:CE:DE:6D:83:8E:B5:C4:96:81:A3:B9:D8:2C:04:5F:76:69:01:9E Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B130D7E4B955C65BC1AE32D0BA6C8D9DC Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Ws7ebYOOtcSWgaO52CwEX3ZpAZ4.roa Signing time: Fri 12 Dec 2025 14:53:29 +0000 ROA not before: Fri 12 Dec 2025 14:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199959 IP address blocks: 45.128.156.0/24 maxlen: 24 45.141.60.0/24 maxlen: 24 185.227.83.0/24 maxlen: 24 195.88.191.0/24 maxlen: 24 2a0b:3c40:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:0d:7e:4b:95:5c:65:bc:1a:e3:2d:0b:a6:c8:d9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 12 14:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5acede6d838eb5c49681a3b9d82c045f7669019e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1a:8c:ce:77:70:c8:28:8c:84:7e:44:73:96: cf:df:70:e4:7e:f7:ff:2a:74:08:d9:22:ff:d8:b6: b1:68:32:44:fc:e6:2a:f6:e7:ac:f9:90:3e:0b:95: 73:a3:1f:df:d3:7f:2f:af:66:d0:88:4a:3e:e7:84: df:35:6f:e1:c0:1e:02:70:14:a0:9e:64:a7:1a:7b: af:f4:eb:84:25:18:94:a5:b8:6d:32:e3:1a:b7:ee: 6f:de:e9:86:f7:b0:fc:ff:7a:15:93:9d:d6:d1:57: 50:6e:fa:72:c7:50:df:4c:da:b1:1e:ea:b0:6e:61: 56:f4:a8:81:de:cf:b8:dd:bb:43:10:f9:7f:2d:ef: ec:f7:cd:30:2b:3e:54:0a:3f:03:29:17:a5:2e:ac: 73:79:33:94:13:df:78:8c:7b:c7:77:66:24:b7:e3: 4f:52:8f:f3:1f:70:a3:49:a1:70:df:8d:5f:1a:bb: 53:80:0b:39:54:4c:5c:f7:79:64:f6:3e:b2:04:82: 85:af:bd:c2:57:fa:0e:af:b6:ce:d4:ae:85:2f:ba: 3c:05:ba:d7:58:5e:3e:cd:94:db:89:65:48:ad:6f: 2c:8c:68:b1:15:65:77:5e:be:bc:50:dd:21:bc:fe: 52:84:6c:b7:25:6d:bd:17:c8:c0:75:93:9a:b7:45: b4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CE:DE:6D:83:8E:B5:C4:96:81:A3:B9:D8:2C:04:5F:76:69:01:9E X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Ws7ebYOOtcSWgaO52CwEX3ZpAZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.156.0/24 45.141.60.0/24 185.227.83.0/24 195.88.191.0/24 IPv6: 2a0b:3c40:50::/48 Signature Algorithm: sha256WithRSAEncryption 4a:e3:41:7b:fd:06:6e:c8:4c:13:3b:8e:d7:28:c0:ec:4b:cb: 20:e7:84:19:e3:2c:73:5c:ef:6e:25:3c:7f:26:d0:10:c9:a1: 2d:62:73:69:3e:ba:33:47:3a:e1:c7:5b:93:e1:27:5a:a3:c0: 6d:44:d7:eb:e3:d6:e2:bf:c1:af:a2:25:11:46:56:24:a3:62: 37:11:fa:56:08:0b:a0:c5:65:b1:34:c4:42:d4:4f:00:74:72: 1a:fc:ba:ff:ca:c1:ea:33:49:b6:9e:0c:c6:66:03:48:6b:42: 28:69:21:9a:c3:7b:98:dd:7a:29:a2:b9:04:5c:50:33:0a:4c: 35:0e:05:4e:b0:23:a8:59:26:8f:a3:79:0e:59:08:4f:b5:2d: d1:32:3e:55:1f:89:f0:c7:83:8e:51:c2:5d:6e:a5:1e:c0:17: 06:63:68:d3:30:db:80:82:0c:9f:f4:fe:51:f9:85:6d:54:00: 11:d1:09:3d:07:42:e4:3b:85:66:42:7d:e0:59:cd:8e:41:96: 51:ca:91:9c:9b:ed:1d:3c:13:46:b4:d5:2d:bb:95:9c:58:25: 8e:6c:e3:40:e4:43:84:57:f8:0c:af:b1:4f:b6:ca:50:bf:df: 3b:e5:e4:e7:08:2d:70:77:b5:04:8f:96:b0:46:a8:e4:8d:e8: c8:fc:8a:0a -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZsTDX5LlVxlvBrjLQumyNncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjEyMTQ1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWNlZGU2ZDgzOGViNWM0OTY4MWEzYjlkODJjMDQ1Zjc2NjkwMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRqMzndwyCiMhH5Ec5bP33Dkfvf/ KnQI2SL/2LaxaDJE/OYq9ues+ZA+C5Vzox/f038vr2bQiEo+54TfNW/hwB4CcBSg nmSnGnuv9OuEJRiUpbhtMuMat+5v3umG97D8/3oVk53W0VdQbvpyx1DfTNqxHuqw bmFW9KiB3s+43btDEPl/Le/s980wKz5UCj8DKRelLqxzeTOUE994jHvHd2Ykt+NP Uo/zH3CjSaFw341fGrtTgAs5VExc93lk9j6yBIKFr73CV/oOr7bO1K6FL7o8BbrX WF4+zZTbiWVIrW8sjGixFWV3Xr68UN0hvP5ShGy3JW29F8jAdZOat0W0LwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFFrO3m2DjrXEloGjudgsBF92aQGeMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvV3M3ZWJZT090Y1NXZ2FPNTJDd0VYM1pwQVo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALYCcAwQA LY08AwQAueNTAwQAw1i/MA8EAgACMAkDBwAqCzxAAFAwDQYJKoZIhvcNAQELBQAD ggEBAErjQXv9Bm7ITBM7jtcowOxLyyDnhBnjLHNc724lPH8m0BDJoS1ic2k+ujNH OuHHW5PhJ1qjwG1E1+vj1uK/wa+iJRFGViSjYjcR+lYIC6DFZbE0xELUTwB0chr8 uv/KweozSbaeDMZmA0hrQihpIZrDe5jdeimiuQRcUDMKTDUOBU6wI6hZJo+jeQ5Z CE+1LdEyPlUfifDHg45Rwl1upR7AFwZjaNMw24CCDJ/0/lH5hW1UABHRCT0HQuQ7 hWZCfeBZzY5BllHKkZyb7R08E0a01S27lZxYJY5s40DkQ4RX+AyvsU+2ylC/3zvl 5OcILXB3tQSPlrBGqOSN6Mj8igo= -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:21 2025 by rpki-client