This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/1-r0dRetOEqYF6eQtHqu-5X5ITo.roa File: 1-r0dRetOEqYF6eQtHqu-5X5ITo.roa (raw, json) Hash identifier: 7J2slXoiV72vH0hzqxXwzaOSf+sOEc7xUDkOaSkw2UU= Subject key identifier: D7:EA:F4:75:17:AD:38:4A:98:17:A7:90:B4:7A:AE:FB:95:F9:21:3A Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894 Certificate serial: 019AFDA17A4707E997E8CA8CF6545C18E45C Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/1-r0dRetOEqYF6eQtHqu-5X5ITo.roa Signing time: Mon 08 Dec 2025 11:03:29 +0000 ROA not before: Mon 08 Dec 2025 11:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 178.255.218.0/24 maxlen: 24 185.203.67.0/24 maxlen: 24 185.204.187.0/24 maxlen: 24 193.163.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:a1:7a:47:07:e9:97:e8:ca:8c:f6:54:5c:18:e4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894 Validity Not Before: Dec 8 11:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7eaf47517ad384a9817a790b47aaefb95f9213a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e2:0c:14:a9:f3:6c:dc:4e:3e:c4:7c:74:43: 65:b5:f4:3b:23:a5:7b:0b:f3:40:68:e1:f9:ae:8d: 45:76:e7:d3:6e:72:c4:ce:a7:0e:f1:ca:49:d9:f6: 2c:7c:95:2b:bd:4c:bb:d4:48:7e:fe:b4:41:5e:de: 2d:08:a7:c9:e9:ee:46:66:af:b2:4e:75:2a:e1:b0: 84:c8:0e:f3:93:11:cb:a5:f4:88:32:db:14:24:26: 57:6f:ba:30:1e:03:f8:b0:58:d1:43:b3:2f:9d:b8: 66:bc:83:94:ac:ef:89:60:26:a4:e4:06:29:3b:f6: 7f:33:10:5f:c3:1c:84:ea:b5:da:88:c9:24:be:49: 6e:06:b0:6b:22:62:46:6d:a7:58:e2:54:04:63:57: 23:c6:ba:d2:bf:c4:0f:08:84:a4:61:31:7e:b9:ea: 90:a3:d9:fe:42:05:1d:3f:84:85:9a:fb:c7:07:59: 43:26:82:a9:d9:0e:61:50:ee:53:20:c9:24:4e:d4: 63:85:94:9a:fe:0d:17:af:aa:89:9b:1c:41:3c:ba: 32:f4:c5:69:3c:9e:c6:14:3a:16:11:44:a2:ce:9c: 16:a6:e9:dd:a5:d2:26:d8:c5:4b:9b:d2:7a:b6:09: 6b:6f:87:be:7c:6c:1c:1f:ec:0b:a2:42:61:57:b5: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:F4:75:17:AD:38:4A:98:17:A7:90:B4:7A:AE:FB:95:F9:21:3A X509v3 Authority Key Identifier: keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/1-r0dRetOEqYF6eQtHqu-5X5ITo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.218.0/24 185.203.67.0/24 185.204.187.0/24 193.163.88.0/24 Signature Algorithm: sha256WithRSAEncryption 39:e0:28:80:45:75:3d:11:ab:6a:ce:9c:cf:b8:93:65:17:b4: 85:fa:df:2f:27:0d:37:11:fe:e0:db:39:15:0e:7f:22:8c:77: d1:34:8a:52:30:59:f6:8b:74:e3:43:df:bb:93:ef:10:92:e6: c1:3e:bd:31:14:a6:fe:a3:5f:a5:79:bf:b0:e9:27:fb:8b:06: 8c:1f:96:a2:fa:a0:46:c8:94:fe:4c:57:a2:ea:01:6d:e8:56: 1e:12:07:f3:22:15:a7:0c:e1:11:7f:44:6b:e0:68:ea:c7:c3: f5:ee:0e:ce:ac:f5:12:70:0c:e5:25:ce:bc:1d:43:fe:ed:32: 44:48:40:7d:33:ce:0a:fb:04:85:a2:57:06:b7:21:55:7c:59: e3:eb:d4:0f:0c:36:09:1c:29:ec:af:09:b6:a6:0b:6c:82:94: 37:0e:b2:fb:d6:d0:14:20:20:f8:e8:96:7e:1a:54:98:a1:10: 76:99:b2:ad:0c:ec:34:85:eb:e4:93:4d:5c:48:01:0f:16:99: b5:6e:72:54:b9:cb:d9:74:41:98:38:cb:5a:23:c2:5b:aa:e7: b2:93:4c:5d:f2:b5:b5:51:6a:6f:4b:2b:d8:e0:f1:26:04:d6: 84:5e:ea:04:43:2a:be:cd:2e:86:55:10:ef:91:5d:a5:25:ba: b3:a2:4f:29 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZr9oXpHB+mX6MqM9lRcGORcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzQ2Y2NiN2U3M2E5Y2MzMGVmMDRlZGQ3Y2YxNmNjMWQ5 NDY4OTQwHhcNMjUxMjA4MTEwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2VhZjQ3NTE3YWQzODRhOTgxN2E3OTBiNDdhYWVmYjk1ZjkyMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluIMFKnzbNxOPsR8dENltfQ7I6V7 C/NAaOH5ro1FdufTbnLEzqcO8cpJ2fYsfJUrvUy71Eh+/rRBXt4tCKfJ6e5GZq+y TnUq4bCEyA7zkxHLpfSIMtsUJCZXb7owHgP4sFjRQ7MvnbhmvIOUrO+JYCak5AYp O/Z/MxBfwxyE6rXaiMkkvkluBrBrImJGbadY4lQEY1cjxrrSv8QPCISkYTF+ueqQ o9n+QgUdP4SFmvvHB1lDJoKp2Q5hUO5TIMkkTtRjhZSa/g0Xr6qJmxxBPLoy9MVp PJ7GFDoWEUSizpwWpundpdIm2MVLm9J6tglrb4e+fGwcH+wLokJhV7WeswIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNfq9HUXrThKmBenkLR6rvuV+SE6MB8GA1UdIwQY MBaAFMJ0bMt+c6nMMO8E7dfPFswdlGiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2Et OTNlOTE4ZDEwZWM1LzEvMS1yMGRSZXRPRXFZRjZlUXRIcXUtNVg1SVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2EtOTNlOTE4ZDEwZWM1 LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAsv/aAwQA uctDAwQAucy7AwQAwaNYMA0GCSqGSIb3DQEBCwUAA4IBAQA54CiARXU9EatqzpzP uJNlF7SF+t8vJw03Ef7g2zkVDn8ijHfRNIpSMFn2i3TjQ9+7k+8QkubBPr0xFKb+ o1+leb+w6Sf7iwaMH5ai+qBGyJT+TFei6gFt6FYeEgfzIhWnDOERf0Rr4Gjqx8P1 7g7OrPUScAzlJc68HUP+7TJESEB9M84K+wSFolcGtyFVfFnj69QPDDYJHCnsrwm2 pgtsgpQ3DrL71tAUICD46JZ+GlSYoRB2mbKtDOw0hevkk01cSAEPFpm1bnJUucvZ dEGYOMtaI8Jbqueyk0xd8rW1UWpvSyvY4PEmBNaEXuoEQyq+zS6GVRDvkV2lJbqz ok8p -----END CERTIFICATE-----Generated at Fri Dec 19 10:17:21 2025 by rpki-client