This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/wwwkcL3miDsh5xssiFZMPe1zPKE.roa
File: wwwkcL3miDsh5xssiFZMPe1zPKE.roa (raw, json)
Hash identifier: NogKig6+RMsNmyxhGcAKbzxQTtzXkHiD3L1+tKJVTUk=
Subject key identifier: C3:0C:24:70:BD:E6:88:3B:21:E7:1B:2C:88:56:4C:3D:ED:73:3C:A1
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019B2B849CA8ECC63452B14CA5D9F759D3B2
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/wwwkcL3miDsh5xssiFZMPe1zPKE.roa
Signing time: Wed 17 Dec 2025 08:54:29 +0000
ROA not before: Wed 17 Dec 2025 08:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3920
IP address blocks: 37.49.224.0/24 maxlen: 24
37.49.225.0/24 maxlen: 24
37.49.226.0/24 maxlen: 24
37.49.227.0/24 maxlen: 24
37.49.228.0/24 maxlen: 24
37.49.229.0/24 maxlen: 24
77.247.111.0/24 maxlen: 24
84.247.19.0/24 maxlen: 24
117.18.118.0/24 maxlen: 24
117.55.202.0/24 maxlen: 24
117.55.203.0/24 maxlen: 24
185.53.91.0/24 maxlen: 24
185.209.15.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
2a13:adc0::/48 maxlen: 48
2a13:adc0:1::/48 maxlen: 48
2a13:adc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:84:9c:a8:ec:c6:34:52:b1:4c:a5:d9:f7:59:d3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Dec 17 08:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c30c2470bde6883b21e71b2c88564c3ded733ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:f9:e1:49:26:88:48:2c:53:37:3b:a2:05:
73:f8:c6:5a:de:1d:c0:27:db:ad:cc:36:d7:22:c7:
b0:bb:56:7f:8a:bd:65:07:ac:fa:45:7b:8a:d9:3a:
32:be:47:6f:a0:6d:c9:11:aa:2c:30:e7:e4:65:a2:
19:77:13:18:16:09:bc:7c:0e:38:b2:b2:e3:0b:6e:
07:bc:ce:04:f8:f2:c4:dd:91:5b:b3:79:55:86:66:
f7:68:fe:c5:bf:f6:24:cb:05:0b:10:08:e1:2c:04:
fd:a0:5f:37:a4:ca:4f:e8:03:5f:48:ce:ff:ff:53:
12:dd:b7:13:4f:f2:6c:b4:fd:fb:ce:d5:23:cf:14:
52:90:31:de:33:5b:62:04:f6:e0:ae:b0:db:b7:76:
50:a8:22:1a:ed:ea:1a:88:a6:f8:f9:39:10:0e:7e:
53:1c:cf:19:23:44:a5:6e:ec:25:1d:f9:4a:d9:91:
ba:6d:74:21:8a:8a:77:c2:2f:a4:18:6d:96:19:db:
e1:15:46:3c:13:6d:e0:9b:55:ed:77:56:70:99:e1:
fc:3a:b4:c9:9f:a5:62:58:53:0c:eb:c4:d1:3e:ee:
8a:b9:dd:26:f5:b1:ff:1a:2e:b4:5e:a0:18:a3:0b:
13:03:03:0d:00:19:d6:60:a4:da:68:29:df:2c:4a:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0C:24:70:BD:E6:88:3B:21:E7:1B:2C:88:56:4C:3D:ED:73:3C:A1
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/wwwkcL3miDsh5xssiFZMPe1zPKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.224.0-37.49.229.255
77.247.111.0/24
84.247.19.0/24
117.18.118.0/24
117.55.202.0/23
185.53.91.0/24
185.209.15.0/24
212.237.231.0/24
IPv6:
2a13:adc0::-2a13:adc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:21:40:5d:d0:05:c6:93:61:8b:d1:d0:ab:b5:10:dc:ec:08:
5a:57:5c:83:9a:70:16:ab:43:b6:b5:18:12:52:2a:6d:ad:41:
3b:60:32:b5:e6:71:25:53:53:a1:9a:1b:9c:33:d4:f5:4d:1d:
71:8c:ce:5b:cc:f5:94:5c:1d:02:9b:1f:3b:7b:6a:39:e0:2f:
84:dc:04:27:95:64:cc:17:cc:f8:35:c5:86:56:a3:3f:9f:12:
52:a5:65:d7:23:9f:a9:c9:2f:92:b8:13:f1:95:4f:e1:be:d1:
34:11:77:81:30:0d:aa:b1:c7:17:78:be:c5:d9:23:da:9c:0c:
f0:1a:56:b4:ef:75:2c:d6:73:b2:f1:4b:36:de:3d:08:1b:05:
9d:79:91:42:06:33:33:93:52:2b:7f:46:b1:0a:40:fc:d0:4e:
6a:c3:64:60:e9:60:30:3b:d1:9f:3c:f5:84:d1:01:96:6c:35:
1d:10:34:8c:1c:a8:d0:8d:b3:cb:2b:6c:93:87:f1:5c:77:99:
9b:29:42:de:e5:17:62:6f:8d:79:ad:03:c6:b7:28:7b:65:03:
dd:43:06:72:eb:b1:c1:85:90:11:21:29:23:99:18:8e:f1:3b:
3a:d1:33:5e:e7:a2:52:ad:b9:1f:84:c1:e1:22:f0:ce:a8:01:
51:15:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:51:34 2025 by rpki-client