This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wMLCEAPJkdOMpLem1ZfF9aJa_dI.roa File: wMLCEAPJkdOMpLem1ZfF9aJa_dI.roa (raw, json) Hash identifier: kGNEe2lbUfniN/TJaj6eIFEQsok9n64DM98NwhfmxFM= Subject key identifier: C0:C2:C2:10:03:C9:91:D3:8C:A4:B7:A6:D5:97:C5:F5:A2:5A:FD:D2 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B63A7A74AE5E669EDD170CB2E4E42D888 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wMLCEAPJkdOMpLem1ZfF9aJa_dI.roa Signing time: Sun 28 Dec 2025 06:31:30 +0000 ROA not before: Sun 28 Dec 2025 06:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 194.231.196.0/24 maxlen: 24 195.86.149.0/24 maxlen: 24 195.86.150.0/24 maxlen: 24 195.86.151.0/24 maxlen: 24 195.86.152.0/24 maxlen: 24 195.86.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:a7:a7:4a:e5:e6:69:ed:d1:70:cb:2e:4e:42:d8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 28 06:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0c2c21003c991d38ca4b7a6d597c5f5a25afdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1a:95:74:98:d0:88:52:e2:e6:60:59:30:ad: e4:e2:72:96:66:8c:08:80:b0:70:65:b0:12:a5:20: 3e:e3:da:30:b8:47:bf:76:44:77:b5:bf:84:5c:72: bf:b4:46:4a:97:72:87:80:bb:44:08:54:e9:60:79: a3:ba:ee:1f:c8:56:98:32:02:42:e0:94:ba:1f:2b: c9:5c:07:0d:a7:88:ea:0d:bc:32:5c:d7:20:d8:55: 8b:76:1d:e2:57:d9:88:a6:32:b5:dc:e9:15:ae:c5: 7b:e0:e0:e3:94:7a:85:5f:9e:a0:ff:3d:33:db:fa: 6f:79:48:0a:1f:9c:bd:92:6c:7a:99:a0:41:b9:b1: 2a:e9:5f:fe:9a:44:e7:25:01:e7:d3:78:e9:97:dc: 54:b5:88:43:0c:94:2f:d4:51:b5:74:62:f2:32:b5: 76:bd:ff:c0:eb:19:8a:de:13:83:3e:fe:6f:d5:73: 41:84:46:08:07:dc:ac:06:05:b6:f8:0e:3a:67:7b: 50:43:e2:43:4f:49:7b:f4:c6:e1:ec:53:4e:d6:74: dc:2b:c9:6b:26:51:0c:26:e8:c0:98:5f:ff:88:21: 35:db:ea:0e:c9:22:32:01:f2:aa:25:f1:a9:73:6b: 05:fb:08:73:f3:3d:0c:5d:0a:98:8f:46:fe:7e:3f: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C2:C2:10:03:C9:91:D3:8C:A4:B7:A6:D5:97:C5:F5:A2:5A:FD:D2 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wMLCEAPJkdOMpLem1ZfF9aJa_dI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.196.0/24 195.86.149.0-195.86.153.255 Signature Algorithm: sha256WithRSAEncryption d2:d8:f5:e3:99:85:19:65:b4:e8:8e:e6:d1:ee:5d:bb:53:ff: 53:d9:b0:89:13:cf:58:ab:8e:e3:49:c3:a6:3c:78:b7:e6:ba: d0:83:08:74:f8:48:a8:d9:cf:e7:3a:9d:91:94:98:bc:27:5f: 39:18:0a:7d:f6:39:00:ac:f4:23:46:3d:3d:15:d5:9b:d6:be: d8:bd:e0:ff:42:8e:39:49:f9:be:9f:2d:11:9d:2f:36:41:34: 9b:89:19:75:63:5b:e0:4a:f7:de:79:6b:35:d3:86:c7:c0:a5: 82:b4:38:eb:8f:66:41:d8:3b:2c:72:01:ca:f5:63:7b:85:1f: 0f:17:1c:f6:dd:a5:97:3f:51:c2:9c:03:db:a1:b4:d4:50:b1: a6:9e:a2:2c:e0:ca:45:fc:1d:78:29:0b:ea:41:ef:bb:6e:10: d3:d2:d3:21:40:24:b7:f5:f2:24:86:a9:39:c0:19:bd:08:3c: 1c:fe:a2:a2:f6:b6:9c:f8:bb:f9:b0:29:60:ef:35:93:ed:ae: a4:0f:fd:f6:ac:5e:3f:1e:5d:2e:6b:6b:97:f7:d5:7e:a7:20: 2c:3b:2f:23:98:fb:a3:2f:21:77:76:2b:86:80:a5:db:b8:fd: c6:b9:dd:2e:fa:0d:1f:e9:c4:b7:67:37:a5:a7:bd:0d:4c:07: dc:8a:7c:fe -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZtjp6dK5eZp7dFwyy5OQtiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjI4MDYzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGMyYzIxMDAzYzk5MWQzOGNhNGI3YTZkNTk3YzVmNWEyNWFmZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRqVdJjQiFLi5mBZMK3k4nKWZowI gLBwZbASpSA+49owuEe/dkR3tb+EXHK/tEZKl3KHgLtECFTpYHmjuu4fyFaYMgJC 4JS6HyvJXAcNp4jqDbwyXNcg2FWLdh3iV9mIpjK13OkVrsV74ODjlHqFX56g/z0z 2/pveUgKH5y9kmx6maBBubEq6V/+mkTnJQHn03jpl9xUtYhDDJQv1FG1dGLyMrV2 vf/A6xmK3hODPv5v1XNBhEYIB9ysBgW2+A46Z3tQQ+JDT0l79Mbh7FNO1nTcK8lr JlEMJujAmF//iCE12+oOySIyAfKqJfGpc2sF+whz8z0MXQqYj0b+fj9zvwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMDCwhADyZHTjKS3ptWXxfWiWv3SMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvd01MQ0VBUEprZE9NcExlbTFaZkY5YUphX2RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwufEMAwD BADDVpUDBAHDVpgwDQYJKoZIhvcNAQELBQADggEBANLY9eOZhRlltOiO5tHuXbtT /1PZsIkTz1irjuNJw6Y8eLfmutCDCHT4SKjZz+c6nZGUmLwnXzkYCn32OQCs9CNG PT0V1ZvWvti94P9CjjlJ+b6fLRGdLzZBNJuJGXVjW+BK9955azXThsfApYK0OOuP ZkHYOyxyAcr1Y3uFHw8XHPbdpZc/UcKcA9uhtNRQsaaeoizgykX8HXgpC+pB77tu ENPS0yFAJLf18iSGqTnAGb0IPBz+oqL2tpz4u/mwKWDvNZPtrqQP/fasXj8eXS5r a5f31X6nICw7LyOY+6MvIXd2K4aApdu4/ca53S76DR/pxLdnN6WnvQ1MB9yKfP4= -----END CERTIFICATE-----Generated at Tue Dec 30 10:27:38 2025 by rpki-client