This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/CwX0hVAW2m8y3-QKe1o9agkrEZg.roa File: CwX0hVAW2m8y3-QKe1o9agkrEZg.roa (raw, json) Hash identifier: GWnBUupXxvIG3yIDtbywvxEWU0CEfjQYJEFZdIVgR4w= Subject key identifier: 0B:05:F4:85:50:16:DA:6F:32:DF:E4:0A:7B:5A:3D:6A:09:2B:11:98 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C8055E6B9173266B66F2D85DDCBAE6A Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/CwX0hVAW2m8y3-QKe1o9agkrEZg.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47247 IP address blocks: 81.25.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:55:e6:b9:17:32:66:b6:6f:2d:85:dd:cb:ae:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b05f4855016da6f32dfe40a7b5a3d6a092b1198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:8d:1e:4a:a3:96:fb:17:22:fd:f1:a2:59: cc:ea:4d:ab:14:8c:51:32:c8:88:c2:f3:7b:34:26: 71:ce:33:62:43:6c:bc:25:57:fd:c4:a7:68:d4:af: 1e:65:a3:f0:83:92:55:cb:1e:f5:a0:10:5c:ab:8b: aa:ba:52:13:d3:a1:87:d3:6c:e9:a1:dd:8f:fb:b7: 93:9d:50:d3:52:14:e6:95:8f:b5:b7:8f:9e:88:a8: cc:e1:8a:79:22:c7:3f:1a:3a:ba:0d:f5:98:60:06: c9:10:40:ee:1b:1d:e3:27:9a:c8:27:a7:c8:20:c1: 48:0e:6a:d5:1d:7a:31:98:76:0c:52:c5:aa:4b:ee: a2:7f:58:b9:4f:e6:f3:61:d5:21:8b:c4:2a:f4:da: e5:35:2d:eb:83:4d:7e:c2:f7:d8:45:e3:a7:8c:e8: 59:9f:73:33:8b:0b:e3:fd:b5:a0:d7:7c:ad:fb:88: 91:09:5c:5d:80:b0:3e:5a:4b:0d:1f:2b:00:3c:08: c8:88:59:41:6d:88:18:c2:57:36:29:6b:b5:ad:5d: 26:d5:ac:93:49:c0:e3:b2:60:69:9e:82:e1:31:a7: 25:82:c5:a3:59:71:5c:6c:62:81:24:d3:b7:f2:86: 8d:50:e9:bd:da:13:92:2e:03:67:a7:6b:fe:36:74: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:05:F4:85:50:16:DA:6F:32:DF:E4:0A:7B:5A:3D:6A:09:2B:11:98 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/CwX0hVAW2m8y3-QKe1o9agkrEZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.25.68.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d8:ef:36:cf:ba:3e:1e:b2:01:fa:db:40:fa:38:ea:73:90: 33:43:79:14:78:20:fd:8e:0b:6e:aa:85:66:05:49:8a:31:bb: 53:b6:e6:9a:62:d6:95:9f:da:f5:50:3f:75:20:1a:93:0a:6a: 62:46:79:e5:cd:6b:f9:59:bb:b4:46:04:91:da:31:f4:7b:d3: 19:e5:4c:55:71:6a:2d:3f:e5:3c:fd:f2:f4:c7:fa:79:94:b7: 46:04:57:91:29:e4:7e:18:f8:7c:ec:08:0b:74:c2:2e:bc:d7: 66:4d:0f:a4:30:db:fd:c8:1d:05:8e:c9:77:f3:91:fd:91:bb: 07:dd:9f:31:9f:c1:3c:b9:d7:ea:ba:a2:52:cd:33:85:33:27: b8:dc:fb:76:6e:6c:01:3a:8e:74:6f:92:8d:8f:66:9f:cb:75: fc:c2:16:37:b4:f8:ce:1f:e7:51:ef:40:d3:7e:27:17:06:aa: 6b:a8:a3:61:1a:03:d5:22:c0:86:1e:5f:17:48:ae:24:12:37: dc:27:7f:bd:8c:1b:e1:01:43:26:17:79:7f:07:40:40:a4:f7: 97:82:7f:c2:ce:68:d1:af:49:46:40:2b:e7:b9:56:d9:ea:9a: f2:fa:02:ff:c2:31:ef:c8:4d:e3:21:19:ee:d7:a4:35:4f:2d: b5:25:a2:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFXmuRcyZrZvLYXdy65qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjA1ZjQ4NTUwMTZkYTZmMzJkZmU0MGE3YjVhM2Q2YTA5MmIxMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscCNHkqjlvsXIv3xolnM6k2rFIxR MsiIwvN7NCZxzjNiQ2y8JVf9xKdo1K8eZaPwg5JVyx71oBBcq4uqulIT06GH02zp od2P+7eTnVDTUhTmlY+1t4+eiKjM4Yp5Isc/Gjq6DfWYYAbJEEDuGx3jJ5rIJ6fI IMFIDmrVHXoxmHYMUsWqS+6if1i5T+bzYdUhi8Qq9NrlNS3rg01+wvfYReOnjOhZ n3Mziwvj/bWg13yt+4iRCVxdgLA+WksNHysAPAjIiFlBbYgYwlc2KWu1rV0m1ayT ScDjsmBpnoLhMaclgsWjWXFcbGKBJNO38oaNUOm92hOSLgNnp2v+NnTZPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsF9IVQFtpvMt/kCntaPWoJKxGYMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvQ3dYMGhWQVcybTh5My1RS2UxbzlhZ2tyRVpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURlEMA0G CSqGSIb3DQEBCwUAA4IBAQBZ2O82z7o+HrIB+ttA+jjqc5AzQ3kUeCD9jgtuqoVm BUmKMbtTtuaaYtaVn9r1UD91IBqTCmpiRnnlzWv5Wbu0RgSR2jH0e9MZ5UxVcWot P+U8/fL0x/p5lLdGBFeRKeR+GPh87AgLdMIuvNdmTQ+kMNv9yB0Fjsl385H9kbsH 3Z8xn8E8udfquqJSzTOFMye43Pt2bmwBOo50b5KNj2afy3X8whY3tPjOH+dR70DT ficXBqprqKNhGgPVIsCGHl8XSK4kEjfcJ3+9jBvhAUMmF3l/B0BApPeXgn/CzmjR r0lGQCvnuVbZ6pry+gL/wjHvyE3jIRnu16Q1Ty21JaI5 -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:47 2026 by rpki-client