This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/W1cX2OJgS2qkw8YjNBmVV4nRNYg.roa File: W1cX2OJgS2qkw8YjNBmVV4nRNYg.roa (raw, json) Hash identifier: gCsrGayjVLx6T0gBJNOgZ1gstEQom+pJ2IuOFnwQ/XQ= Subject key identifier: 5B:57:17:D8:E2:60:4B:6A:A4:C3:C6:23:34:19:95:57:89:D1:35:88 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019B1630674A794EC1B16E177089244FF2C4 Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/W1cX2OJgS2qkw8YjNBmVV4nRNYg.roa Signing time: Sat 13 Dec 2025 05:30:29 +0000 ROA not before: Sat 13 Dec 2025 05:30:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207279 IP address blocks: 85.117.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:30:67:4a:79:4e:c1:b1:6e:17:70:89:24:4f:f2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Dec 13 05:30:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b5717d8e2604b6aa4c3c6233419955789d13588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:bf:a8:af:6b:e9:92:5e:bc:e3:d3:9c:89: cd:03:4e:68:f3:4d:28:b8:ec:b2:e9:dd:04:4c:11: 06:87:25:65:53:d5:6b:a5:46:db:22:b7:be:6a:43: 82:6d:c2:eb:f9:9f:14:13:2b:b3:a4:b2:7a:e6:8f: 9b:0d:99:52:b8:2a:ef:cf:a8:c9:7b:35:67:f0:82: 3d:2d:ae:06:bb:2e:9e:c4:1a:fa:8c:f9:82:e1:55: 31:1b:b9:96:d9:d9:12:ba:1d:4d:18:6d:b1:08:d1: 66:bb:85:ac:0d:9a:e5:98:3c:68:5c:69:a3:7a:a2: 14:2a:d2:4a:b9:c8:3b:ad:ac:ed:01:cf:4c:7c:32: 80:ed:56:b3:c5:e0:c0:ad:47:23:5a:2d:40:61:5b: 08:e3:f6:d5:8d:ad:b5:9e:23:94:87:22:01:e6:e5: 5a:a1:80:d6:a9:2d:fe:9e:9e:84:ea:e1:0b:7a:bf: 09:5e:f4:99:16:8c:e8:b3:87:8f:e3:f7:f1:7d:da: 9d:f0:dd:6f:7e:df:74:96:9d:17:53:15:7b:50:f8: 6d:92:95:99:b9:84:23:cc:de:30:4e:cd:90:c0:d8: 23:91:03:de:a7:63:48:96:64:38:d0:c9:ed:56:58: bf:64:6d:d3:5a:7e:f3:59:0b:b2:e3:cc:6b:6c:4f: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:57:17:D8:E2:60:4B:6A:A4:C3:C6:23:34:19:95:57:89:D1:35:88 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/W1cX2OJgS2qkw8YjNBmVV4nRNYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.239.0/24 Signature Algorithm: sha256WithRSAEncryption 95:65:9c:57:ef:db:db:b3:1f:8d:83:1b:e0:05:a0:c6:45:fb: 01:c2:93:01:52:0d:8d:4c:1c:3a:78:d1:10:ad:aa:80:5a:f5: d5:9a:bc:01:de:5f:b8:36:bd:a3:3a:e5:3b:fd:c1:cf:81:81: ab:10:d7:4f:24:19:0d:af:d8:c3:34:09:e2:de:b4:ef:63:93: bc:22:fc:58:5e:cb:ed:e1:1e:1d:c6:df:f4:0e:8a:46:25:60: 13:08:a7:42:cc:e6:10:a6:d1:6d:d2:64:6b:b3:7c:78:eb:b7: b0:81:e3:4c:11:3c:f6:66:fe:ea:d3:a7:0e:e6:25:a9:44:c2: a2:e0:d0:35:d8:6b:72:05:d2:92:e2:48:e1:5a:4d:f7:8e:b6: f6:f2:d0:a7:58:03:9a:34:36:4b:5e:08:4b:a4:cb:45:ce:c5: 24:05:15:8b:6a:d8:7d:a3:42:8c:59:6e:7b:50:2e:34:ca:e3: 7a:a6:4c:20:36:20:c2:7f:b6:0f:4a:97:d7:bf:85:b5:5a:1e: 75:0f:db:d9:63:08:a6:8c:a8:41:d2:47:75:15:8f:30:31:92: 4c:19:95:bd:0d:f9:15:f9:5e:e2:b8:94:c6:fb:72:04:e6:e8: e4:94:10:c9:f7:bb:5d:8c:44:36:12:5d:00:82:c4:64:66:1b: b5:9b:33:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsWMGdKeU7BsW4XcIkkT/LEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMjEzMDUzMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjU3MTdkOGUyNjA0YjZhYTRjM2M2MjMzNDE5OTU1Nzg5ZDEzNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8q/qK9r6ZJevOPTnInNA05o800o uOyy6d0ETBEGhyVlU9VrpUbbIre+akOCbcLr+Z8UEyuzpLJ65o+bDZlSuCrvz6jJ ezVn8II9La4Guy6exBr6jPmC4VUxG7mW2dkSuh1NGG2xCNFmu4WsDZrlmDxoXGmj eqIUKtJKucg7raztAc9MfDKA7VazxeDArUcjWi1AYVsI4/bVja21niOUhyIB5uVa oYDWqS3+np6E6uELer8JXvSZFozos4eP4/fxfdqd8N1vft90lp0XUxV7UPhtkpWZ uYQjzN4wTs2QwNgjkQPep2NIlmQ40MntVli/ZG3TWn7zWQuy48xrbE/Y5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtXF9jiYEtqpMPGIzQZlVeJ0TWIMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvVzFjWDJPSmdTMnFrdzhZak5CbVZWNG5STllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXXvMA0G CSqGSIb3DQEBCwUAA4IBAQCVZZxX79vbsx+NgxvgBaDGRfsBwpMBUg2NTBw6eNEQ raqAWvXVmrwB3l+4Nr2jOuU7/cHPgYGrENdPJBkNr9jDNAni3rTvY5O8IvxYXsvt 4R4dxt/0DopGJWATCKdCzOYQptFt0mRrs3x467ewgeNMETz2Zv7q06cO5iWpRMKi 4NA12GtyBdKS4kjhWk33jrb28tCnWAOaNDZLXghLpMtFzsUkBRWLath9o0KMWW57 UC40yuN6pkwgNiDCf7YPSpfXv4W1Wh51D9vZYwimjKhB0kd1FY8wMZJMGZW9DfkV +V7iuJTG+3IE5ujklBDJ97tdjEQ2El0AgsRkZhu1mzNG -----END CERTIFICATE-----Generated at Sat Dec 20 11:37:17 2025 by rpki-client