This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/lwZoOwQGd5fo97UPUMV3wZG_QI0.roa File: lwZoOwQGd5fo97UPUMV3wZG_QI0.roa (raw, json) Hash identifier: WmbdNshzuwBtZsP+yY9NP8RAMJlu3UvRZKhwEjpmPMY= Subject key identifier: 97:06:68:3B:04:06:77:97:E8:F7:B5:0F:50:C5:77:C1:91:BF:40:8D Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019AF9EDE94D65E8CB699C21B11CF14DF196 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/lwZoOwQGd5fo97UPUMV3wZG_QI0.roa Signing time: Sun 07 Dec 2025 17:48:29 +0000 ROA not before: Sun 07 Dec 2025 17:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205090 IP address blocks: 89.44.86.0/24 maxlen: 24 89.44.87.0/24 maxlen: 24 91.200.12.0/24 maxlen: 24 91.200.13.0/24 maxlen: 24 95.81.121.0/24 maxlen: 24 95.81.122.0/24 maxlen: 24 103.71.20.0/24 maxlen: 24 103.71.21.0/24 maxlen: 24 104.128.133.0/24 maxlen: 24 109.69.62.0/24 maxlen: 24 185.105.88.0/24 maxlen: 24 185.105.89.0/24 maxlen: 24 185.105.90.0/24 maxlen: 24 185.105.91.0/24 maxlen: 24 185.128.105.0/24 maxlen: 24 185.128.106.0/24 maxlen: 24 185.128.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:ed:e9:4d:65:e8:cb:69:9c:21:b1:1c:f1:4d:f1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Dec 7 17:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9706683b04067797e8f7b50f50c577c191bf408d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:f8:84:fe:a9:f5:32:90:32:13:b9:e3:e1: 9c:4c:90:eb:c5:05:19:98:f7:e6:19:14:ae:ba:23: 74:ea:c0:94:9c:4d:6f:7b:4e:22:7b:fb:86:04:af: 3f:f1:cd:c2:de:c0:85:c3:83:0d:c2:c1:df:f9:ab: a8:0d:3e:28:b0:9a:1f:8e:78:e2:29:83:37:3e:9f: 36:3d:7b:82:1f:93:43:41:b7:be:cd:d1:fd:a1:f5: 4b:47:12:ab:d9:cb:d5:53:c0:b1:36:88:41:7c:23: 10:ca:ad:45:aa:25:93:5e:53:13:b8:cc:52:f4:27: e7:2f:80:c9:d8:48:15:0c:8c:59:8c:1d:b9:de:77: f6:47:28:70:8b:f3:64:4c:de:af:1f:92:02:8c:dd: a6:ca:5a:9e:de:1d:2e:66:3d:98:15:60:ad:73:f0: 2c:e1:6f:e4:3f:b3:a2:20:f0:bd:d1:d3:aa:99:43: bb:1b:c0:fb:4b:8a:20:e7:ad:5d:76:7c:b5:e0:cb: f6:b9:a9:d0:c2:6e:89:57:3a:8b:bf:e4:bb:c0:4d: 1a:58:be:e6:53:fa:2a:8f:95:ac:4c:fd:93:b1:6a: 70:e0:83:54:00:97:dd:e3:30:7f:e7:56:1d:7a:1e: 60:98:1b:45:9a:5a:4f:f1:13:7e:d9:cf:e5:a6:d5: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:06:68:3B:04:06:77:97:E8:F7:B5:0F:50:C5:77:C1:91:BF:40:8D X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/lwZoOwQGd5fo97UPUMV3wZG_QI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.86.0/23 91.200.12.0/23 95.81.121.0-95.81.122.255 103.71.20.0/23 104.128.133.0/24 109.69.62.0/24 185.105.88.0/22 185.128.105.0-185.128.107.255 Signature Algorithm: sha256WithRSAEncryption 38:e5:56:d2:a7:c3:72:08:14:0e:fb:2b:5d:b1:ad:6b:c8:5a: fe:85:b5:d2:a0:cd:91:8d:e0:4f:be:07:63:ab:da:9f:37:7b: 7e:9e:a6:48:7d:4a:64:a0:10:9e:f1:f9:ce:3a:07:34:1b:4a: 70:4e:ad:98:c8:5e:aa:4f:5c:a5:8b:e4:7a:9d:00:2c:c4:0d: 7d:bd:69:c1:78:d5:9d:6a:71:e1:27:d4:f1:da:d6:3e:9a:53: a6:9f:42:1f:c9:36:c6:08:45:c2:d9:75:9f:4d:f8:2d:15:32: 38:eb:da:8c:da:82:d8:b2:e0:fb:34:c9:29:02:fb:19:a7:f4: 13:87:5e:b6:b6:a2:28:57:0c:f0:89:f8:39:0d:df:55:24:cf: ee:80:8c:71:71:59:f2:32:7a:15:b8:77:5f:59:2f:ee:6a:56: bf:30:32:0f:6f:a3:75:b1:ef:96:cf:f0:fb:2e:35:ba:0f:63: de:aa:3a:9f:69:2b:d2:54:4b:ea:7a:5e:e9:71:af:2d:bb:b8: 06:9c:e6:3b:dd:05:b8:b2:d6:ea:02:43:31:9f:7f:cb:a5:7f: 93:15:cb:73:37:c1:0f:c1:55:a4:dd:42:ef:ee:49:88:12:87: 5e:04:34:da:de:45:ea:1a:0e:f4:15:12:ce:8a:2a:25:55:df: 96:c5:5b:ae -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZr57elNZejLaZwhsRzxTfGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMjA3MTc0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzA2NjgzYjA0MDY3Nzk3ZThmN2I1MGY1MGM1NzdjMTkxYmY0MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQT4hP6p9TKQMhO54+GcTJDrxQUZ mPfmGRSuuiN06sCUnE1ve04ie/uGBK8/8c3C3sCFw4MNwsHf+auoDT4osJofjnji KYM3Pp82PXuCH5NDQbe+zdH9ofVLRxKr2cvVU8CxNohBfCMQyq1FqiWTXlMTuMxS 9CfnL4DJ2EgVDIxZjB253nf2Ryhwi/NkTN6vH5ICjN2mylqe3h0uZj2YFWCtc/As 4W/kP7OiIPC90dOqmUO7G8D7S4og561ddny14Mv2uanQwm6JVzqLv+S7wE0aWL7m U/oqj5WsTP2TsWpw4INUAJfd4zB/51Ydeh5gmBtFmlpP8RN+2c/lptWhFQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFJcGaDsEBneX6Pe1D1DFd8GRv0CNMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvbHdab093UUdkNWZvOTdVUFVNVjN3WkdfUUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQBWSxWAwQB W8gMMAwDBABfUXkDBABfUXoDBAFnRxQDBABogIUDBABtRT4DBAK5aVgwDAMEALmA aQMEArmAaDANBgkqhkiG9w0BAQsFAAOCAQEAOOVW0qfDcggUDvsrXbGta8ha/oW1 0qDNkY3gT74HY6vanzd7fp6mSH1KZKAQnvH5zjoHNBtKcE6tmMheqk9cpYvkep0A LMQNfb1pwXjVnWpx4SfU8drWPppTpp9CH8k2xghFwtl1n034LRUyOOvajNqC2LLg +zTJKQL7Gaf0E4detraiKFcM8In4OQ3fVSTP7oCMcXFZ8jJ6Fbh3X1kv7mpWvzAy D2+jdbHvls/w+y41ug9j3qo6n2kr0lRL6npe6XGvLbu4BpzmO90FuLLW6gJDMZ9/ y6V/kxXLczfBD8FVpN1C7+5JiBKHXgQ02t5F6hoO9BUSzooqJVXflsVbrg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:11:40 2025 by rpki-client