This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/wu3eDFxvkuABk7iChg-PKeXLE20.roa File: wu3eDFxvkuABk7iChg-PKeXLE20.roa (raw, json) Hash identifier: EABKS1lR2rRtw3fRAXv+taBION+pQLSP6NQZWVabvIk= Subject key identifier: C2:ED:DE:0C:5C:6F:92:E0:01:93:B8:82:86:0F:8F:29:E5:CB:13:6D Certificate issuer: /CN=fd385a616398e416c70dcb322566f93e3d2fbf13 Certificate serial: 019B26734F8325C6AD4FC633F176A50C1D2E Authority key identifier: FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/wu3eDFxvkuABk7iChg-PKeXLE20.roa Signing time: Tue 16 Dec 2025 09:17:29 +0000 ROA not before: Tue 16 Dec 2025 09:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204498 IP address blocks: 185.247.92.0/24 maxlen: 24 185.247.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:73:4f:83:25:c6:ad:4f:c6:33:f1:76:a5:0c:1d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd385a616398e416c70dcb322566f93e3d2fbf13 Validity Not Before: Dec 16 09:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c2edde0c5c6f92e00193b882860f8f29e5cb136d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:49:9b:9f:22:3b:54:7d:e5:f2:23:5a:ce:15: 5b:ae:f4:67:e9:e2:3e:cb:14:c6:9d:b9:61:24:c3: 01:e7:2f:85:e3:76:01:75:45:6f:41:2c:5a:c4:ea: 22:88:06:70:96:9f:e7:1a:98:78:c2:4e:a2:66:44: 36:ed:2e:39:ec:64:6f:f5:23:b6:63:e3:3d:d1:6e: 45:75:48:0f:f2:62:cb:fd:8a:00:a5:4e:7b:fd:ac: aa:e8:a2:ba:d8:b7:42:90:f0:79:c6:1d:84:0e:c3: a3:c5:c1:f5:ab:45:8e:ca:75:cb:10:b0:bd:f6:07: 46:dd:ea:8a:28:cc:37:9b:53:c9:b3:e2:74:f6:8f: b4:0e:e6:cd:fe:30:4d:3d:97:56:44:6b:90:c7:38: be:33:e8:04:c5:4b:d4:4f:38:10:3b:62:26:9b:3b: 08:60:33:dc:e8:50:ec:53:db:d0:a2:6b:ec:58:de: fc:aa:bf:22:0f:c4:86:8a:01:de:9c:fe:82:0a:a9: d6:94:6a:04:71:63:b5:40:0e:97:02:af:d6:74:28: 63:1c:36:5d:38:af:da:03:c5:b3:59:f2:c2:06:b0: 82:2a:08:dc:3c:0d:d7:64:15:f5:f1:43:ba:0c:32: 87:a2:47:4f:2c:d9:ac:88:2f:72:94:7f:46:7e:48: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:ED:DE:0C:5C:6F:92:E0:01:93:B8:82:86:0F:8F:29:E5:CB:13:6D X509v3 Authority Key Identifier: keyid:FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/wu3eDFxvkuABk7iChg-PKeXLE20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.92.0/23 Signature Algorithm: sha256WithRSAEncryption a0:3e:4f:39:e5:78:fb:34:c6:b9:e6:4e:25:13:c9:70:4e:dc: 23:00:1c:a3:28:0e:0e:bf:51:69:a7:8a:9b:3e:b9:bf:94:b2: 58:2f:4b:84:7f:01:20:2a:75:49:42:41:c2:03:7b:6e:c4:96: ba:a1:93:7e:08:f4:ea:49:fe:69:5a:a5:c1:c1:c6:fd:36:07: 82:2a:9a:bf:d0:4b:f3:8d:31:2e:ce:40:7e:58:6e:88:81:85: 86:6e:77:66:89:c0:ed:9c:c2:bf:3f:13:d6:90:51:57:09:c1: 9f:46:bd:61:c2:3f:29:a2:84:a3:ed:70:35:42:ca:c6:e1:e7: ce:ed:42:26:8c:ff:78:69:87:b0:c1:3c:cf:09:d4:3f:0a:79: 0b:4b:4f:c8:88:64:4c:20:e7:0d:14:6a:ad:37:d1:c6:8e:66: 74:ae:c3:9c:2d:2b:2b:02:52:e1:42:21:99:8f:dd:18:51:41: b4:fe:13:5a:88:71:d2:11:5e:2c:80:04:b9:32:cb:8b:31:d3: a7:a3:0b:13:86:2a:34:ea:ab:50:10:15:dd:99:bb:cf:78:76: 72:a6:46:01:3c:0c:e3:eb:d7:e5:c6:37:e7:c2:03:e5:ce:eb: 11:40:d4:87:ed:1e:26:56:dd:2d:3f:e2:5a:eb:ee:71:94:3c: 68:e0:e4:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsmc0+DJcatT8Yz8XalDB0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzg1YTYxNjM5OGU0MTZjNzBkY2IzMjI1NjZmOTNlM2Qy ZmJmMTMwHhcNMjUxMjE2MDkxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmVkZGUwYzVjNmY5MmUwMDE5M2I4ODI4NjBmOGYyOWU1Y2IxMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EmbnyI7VH3l8iNazhVbrvRn6eI+ yxTGnblhJMMB5y+F43YBdUVvQSxaxOoiiAZwlp/nGph4wk6iZkQ27S457GRv9SO2 Y+M90W5FdUgP8mLL/YoApU57/ayq6KK62LdCkPB5xh2EDsOjxcH1q0WOynXLELC9 9gdG3eqKKMw3m1PJs+J09o+0DubN/jBNPZdWRGuQxzi+M+gExUvUTzgQO2ImmzsI YDPc6FDsU9vQomvsWN78qr8iD8SGigHenP6CCqnWlGoEcWO1QA6XAq/WdChjHDZd OK/aA8WzWfLCBrCCKgjcPA3XZBX18UO6DDKHokdPLNmsiC9ylH9GfkieLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLt3gxcb5LgAZO4goYPjynlyxNtMB8GA1UdIwQY MBaAFP04WmFjmOQWxw3LMiVm+T49L78TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RoYVlXT1k1QmJIRGNzeUpXYjVQajB2dnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yNTdmZDctYTlmNy00Mjg0LWFjZjMt MzQzMDRmNWNkYTk4LzEvd3UzZURGeHZrdUFCazdpQ2hnLVBLZVhMRTIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yNTdmZDctYTlmNy00Mjg0LWFjZjMtMzQzMDRmNWNkYTk4 LzEvX1RoYVlXT1k1QmJIRGNzeUpXYjVQajB2dnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufdcMA0G CSqGSIb3DQEBCwUAA4IBAQCgPk855Xj7NMa55k4lE8lwTtwjAByjKA4Ov1Fpp4qb Prm/lLJYL0uEfwEgKnVJQkHCA3tuxJa6oZN+CPTqSf5pWqXBwcb9NgeCKpq/0Evz jTEuzkB+WG6IgYWGbndmicDtnMK/PxPWkFFXCcGfRr1hwj8pooSj7XA1QsrG4efO 7UImjP94aYewwTzPCdQ/CnkLS0/IiGRMIOcNFGqtN9HGjmZ0rsOcLSsrAlLhQiGZ j90YUUG0/hNaiHHSEV4sgAS5MsuLMdOnowsThio06qtQEBXdmbvPeHZypkYBPAzj 69flxjfnwgPlzusRQNSH7R4mVt0tP+Ja6+5xlDxo4OSf -----END CERTIFICATE-----Generated at Sun Dec 21 15:35:49 2025 by rpki-client