This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dwJlDiKCw8UmcYwSbPbzqug3lR8.roa File: dwJlDiKCw8UmcYwSbPbzqug3lR8.roa (raw, json) Hash identifier: yjghzck20UZRXyGQ9csrFXNS5/4feQqt95+xRi4R0II= Subject key identifier: 77:02:65:0E:22:82:C3:C5:26:71:8C:12:6C:F6:F3:AA:E8:37:95:1F Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B5404F6A2A55F7373190A921E81435BC3 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dwJlDiKCw8UmcYwSbPbzqug3lR8.roa Signing time: Thu 25 Dec 2025 05:39:30 +0000 ROA not before: Thu 25 Dec 2025 05:39:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203597 IP address blocks: 194.190.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:04:f6:a2:a5:5f:73:73:19:0a:92:1e:81:43:5b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Dec 25 05:39:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7702650e2282c3c526718c126cf6f3aae837951f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e6:9f:b5:67:ee:fa:13:46:59:11:25:14:a6: 71:94:c3:77:ce:86:23:84:ec:dc:3c:a1:e4:f1:0e: cd:6a:eb:19:34:9d:22:7a:70:f6:95:d7:fe:c8:0a: fe:c0:9b:a2:50:61:a6:21:11:8b:c5:02:18:70:1f: 91:5d:3e:09:77:fb:39:c5:1e:27:d5:ca:b4:5f:2c: 3a:43:17:e7:c8:8a:1a:34:41:99:a7:fb:f1:5a:e4: 75:33:9c:ee:76:89:cf:e6:b7:cf:26:6a:f6:ed:68: 76:3f:20:71:37:74:2d:ef:4f:3f:d8:d4:c2:38:28: db:7d:9e:1f:9f:ed:31:0a:95:71:52:7b:92:fe:b2: ae:3d:9d:b4:a7:03:16:1c:f2:56:67:04:0c:a4:cc: 3c:1b:8e:33:94:a0:1b:ba:5a:0f:2f:94:d2:28:b5: 9e:f1:fa:3a:cc:e2:58:9b:fe:b9:b0:d8:2b:4d:63: d2:2f:ff:a4:9e:27:e2:48:08:0a:d0:cc:90:4d:90: 0b:87:b7:41:7a:de:ab:f5:30:f2:64:cb:53:c0:f4: 1f:8e:78:e6:5c:28:61:00:3a:25:c9:c8:7d:e8:62: 90:1b:3f:70:9b:00:b4:6e:9c:47:15:14:16:4a:01: 25:14:f9:fc:41:1e:12:d4:2f:ec:65:3f:3d:a2:18: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:02:65:0E:22:82:C3:C5:26:71:8C:12:6C:F6:F3:AA:E8:37:95:1F X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dwJlDiKCw8UmcYwSbPbzqug3lR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.190.151.0/24 Signature Algorithm: sha256WithRSAEncryption 00:b7:a8:b9:9b:03:5f:f5:e0:37:f8:fd:57:9b:06:88:d5:c1: 19:47:47:f0:1a:f8:ee:a1:a3:ef:2f:9c:84:f9:30:e1:6d:10: a4:86:4c:df:56:1a:6d:0b:27:34:1b:be:3f:9d:4b:79:1d:ac: 68:ef:99:05:91:23:89:cb:64:d8:8c:7a:77:a3:f5:1a:9d:9f: c1:87:2e:fe:29:96:79:4d:f5:61:f3:2d:88:27:c8:17:19:a8: 19:70:da:94:fe:25:e3:fa:25:82:72:32:7c:ab:51:ec:d8:02: 7c:fe:d7:09:dc:53:26:d5:ca:8b:b4:3c:34:7d:ae:cb:60:9e: a8:8f:83:9a:b0:df:52:ca:c2:fb:38:a9:56:14:7d:76:72:f5: c3:91:fa:e6:54:7d:0f:45:09:75:fa:25:28:64:34:08:5f:6d: f0:23:ec:ce:bb:0e:02:7d:5c:e9:42:61:99:b2:36:61:68:1f: d6:8e:4d:b3:59:7c:1f:1d:6c:0f:5a:d9:56:16:bd:93:67:12: 3b:69:89:6e:5b:27:da:a1:5b:2d:fb:d6:41:8f:ca:99:7d:41: 86:72:b0:f2:74:b5:10:74:54:ea:62:1c:63:41:17:1d:fd:1f: 28:e3:50:1c:84:6a:22:9c:17:dc:f6:a5:7a:11:a6:cf:57:af: fa:f3:cd:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtUBPaipV9zcxkKkh6BQ1vDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjUxMjI1MDUzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzAyNjUwZTIyODJjM2M1MjY3MThjMTI2Y2Y2ZjNhYWU4Mzc5NTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OaftWfu+hNGWRElFKZxlMN3zoYj hOzcPKHk8Q7NausZNJ0ienD2ldf+yAr+wJuiUGGmIRGLxQIYcB+RXT4Jd/s5xR4n 1cq0Xyw6QxfnyIoaNEGZp/vxWuR1M5zudonP5rfPJmr27Wh2PyBxN3Qt708/2NTC OCjbfZ4fn+0xCpVxUnuS/rKuPZ20pwMWHPJWZwQMpMw8G44zlKAbuloPL5TSKLWe 8fo6zOJYm/65sNgrTWPSL/+knifiSAgK0MyQTZALh7dBet6r9TDyZMtTwPQfjnjm XChhADolych96GKQGz9wmwC0bpxHFRQWSgElFPn8QR4S1C/sZT89ohhOiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHcCZQ4igsPFJnGMEmz286roN5UfMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvZHdKbERpS0N3OFVtY1l3U2JQYnpxdWczbFI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwr6XMA0G CSqGSIb3DQEBCwUAA4IBAQAAt6i5mwNf9eA3+P1XmwaI1cEZR0fwGvjuoaPvL5yE +TDhbRCkhkzfVhptCyc0G74/nUt5Haxo75kFkSOJy2TYjHp3o/UanZ/Bhy7+KZZ5 TfVh8y2IJ8gXGagZcNqU/iXj+iWCcjJ8q1Hs2AJ8/tcJ3FMm1cqLtDw0fa7LYJ6o j4OasN9SysL7OKlWFH12cvXDkfrmVH0PRQl1+iUoZDQIX23wI+zOuw4CfVzpQmGZ sjZhaB/Wjk2zWXwfHWwPWtlWFr2TZxI7aYluWyfaoVst+9ZBj8qZfUGGcrDydLUQ dFTqYhxjQRcd/R8o41AchGoinBfc9qV6EabPV6/6882C -----END CERTIFICATE-----Generated at Thu Dec 25 23:50:16 2025 by rpki-client