This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_WFFpjDhjHkgzCJxN39Kawt9leE.roa File: _WFFpjDhjHkgzCJxN39Kawt9leE.roa (raw, json) Hash identifier: 6P9Y76iIvzuEePN1GRGY+oaObyN1LNt+ITT9DgP09zk= Subject key identifier: FD:61:45:A6:30:E1:8C:79:20:CC:22:71:37:7F:4A:6B:0B:7D:95:E1 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B3139B4D075E5D21479889339D47A6245 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_WFFpjDhjHkgzCJxN39Kawt9leE.roa Signing time: Thu 18 Dec 2025 11:30:24 +0000 ROA not before: Thu 18 Dec 2025 11:30:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39238 IP address blocks: 91.195.125.0/24 maxlen: 24 91.229.112.0/23 maxlen: 23 185.202.0.0/24 maxlen: 24 185.202.1.0/24 maxlen: 24 185.202.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:39:b4:d0:75:e5:d2:14:79:88:93:39:d4:7a:62:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Dec 18 11:30:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd6145a630e18c7920cc2271377f4a6b0b7d95e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:67:01:b9:72:57:0f:6d:e7:e2:4f:8a:0a: 7f:d3:ad:9f:6b:f2:f4:8a:b6:32:b6:b3:bb:a9:e9: 38:5a:c7:9e:7e:5b:05:d5:93:38:e3:4c:97:85:4b: bf:11:26:8a:b9:b3:68:ca:d0:d1:53:07:11:c2:26: 3b:f2:0c:4b:a5:0a:2e:ec:9b:a3:63:ea:53:4a:07: 7d:77:04:77:82:16:48:00:7e:be:eb:7e:15:12:d3: f5:10:83:15:8c:1a:46:48:ef:0c:63:ce:e7:b3:47: 2f:33:0f:7c:cf:27:5c:55:6a:7d:cf:c6:39:94:d4: e4:5a:47:6d:12:d4:4d:91:49:a9:db:5a:8f:12:1e: 7c:d4:43:c0:6d:ec:e5:63:81:59:37:8c:67:ed:ce: 3e:ea:3e:fb:e6:57:f8:64:a0:a8:e2:30:02:12:82: d8:88:4b:24:73:bd:b5:a1:c9:22:bf:6a:9f:ea:d0: 4c:89:3a:08:4b:8b:33:79:77:fb:1d:a6:9b:43:f0: 21:69:d0:8c:cb:86:ff:58:8c:2f:a8:e5:32:74:a3: a0:05:42:c6:20:10:25:33:86:03:dd:4f:e1:9c:9e: fc:12:9e:54:e6:e4:af:76:76:2c:54:73:a8:15:63: 22:6d:d9:8b:40:35:28:d1:66:c7:62:f6:86:cc:a5: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:61:45:A6:30:E1:8C:79:20:CC:22:71:37:7F:4A:6B:0B:7D:95:E1 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_WFFpjDhjHkgzCJxN39Kawt9leE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.125.0/24 91.229.112.0/23 185.202.0.0-185.202.2.255 Signature Algorithm: sha256WithRSAEncryption 0b:20:42:da:c0:c7:9d:52:68:94:5f:d7:d4:a7:92:d4:bf:e5: 36:b2:ef:72:4a:8f:a7:3a:eb:4d:c0:65:4f:39:82:f1:5e:89: 76:66:62:08:fe:32:5d:10:12:d7:20:b0:e2:3e:94:ae:0b:06: de:e7:d1:09:f6:1b:7e:87:a2:25:f1:83:e1:11:a0:94:93:0a: 6d:dd:0c:6d:2b:4d:2f:b5:68:be:6a:46:8f:96:66:fd:e2:60: ef:9d:81:2a:a6:a7:94:a0:15:f1:3d:42:ad:1d:19:cf:d7:20: f5:04:8e:96:22:f7:ef:2f:24:ba:17:87:61:ad:67:03:07:ea: 81:09:61:d5:62:a3:4a:fd:f7:74:21:54:c1:da:b1:3c:c8:d3: b2:3b:ac:a5:1d:12:de:30:ca:e6:e3:26:0e:eb:e6:f2:40:aa: 44:84:09:c0:59:fa:58:a0:bc:c9:83:c5:0e:00:48:04:d4:66: 44:02:21:3d:39:3d:f6:a2:ab:77:7f:49:7c:51:15:07:55:26: c6:3c:08:e6:4d:30:05:4d:a2:07:b0:da:0d:bd:34:ac:68:1d: 89:06:19:4b:e0:0c:81:94:e5:c9:2c:e2:47:a9:df:7d:3f:26: 7c:09:e1:5a:f8:63:b3:5c:4d:a1:e8:e2:b2:fe:79:af:ed:27: 01:84:ec:fa -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZsxObTQdeXSFHmIkznUemJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMjE4MTEzMDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDYxNDVhNjMwZTE4Yzc5MjBjYzIyNzEzNzdmNGE2YjBiN2Q5NWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNlnAblyVw9t5+JPigp/062fa/L0 irYytrO7qek4WseeflsF1ZM440yXhUu/ESaKubNoytDRUwcRwiY78gxLpQou7Juj Y+pTSgd9dwR3ghZIAH6+634VEtP1EIMVjBpGSO8MY87ns0cvMw98zydcVWp9z8Y5 lNTkWkdtEtRNkUmp21qPEh581EPAbezlY4FZN4xn7c4+6j775lf4ZKCo4jACEoLY iEskc721ockiv2qf6tBMiToIS4szeXf7HaabQ/AhadCMy4b/WIwvqOUydKOgBULG IBAlM4YD3U/hnJ78Ep5U5uSvdnYsVHOoFWMibdmLQDUo0WbHYvaGzKXdowIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFP1hRaYw4Yx5IMwicTd/SmsLfZXhMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvX1dGRnBqRGhqSGtnekNKeE4zOUthd3Q5bGVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQAW8N9AwQB W+VwMAsDAwG5ygMEALnKAjANBgkqhkiG9w0BAQsFAAOCAQEACyBC2sDHnVJolF/X 1KeS1L/lNrLvckqPpzrrTcBlTzmC8V6JdmZiCP4yXRAS1yCw4j6UrgsG3ufRCfYb foeiJfGD4RGglJMKbd0MbStNL7VovmpGj5Zm/eJg752BKqanlKAV8T1CrR0Zz9cg 9QSOliL37y8kuheHYa1nAwfqgQlh1WKjSv33dCFUwdqxPMjTsjuspR0S3jDK5uMm Duvm8kCqRIQJwFn6WKC8yYPFDgBIBNRmRAIhPTk99qKrd39JfFEVB1UmxjwI5k0w BU2iB7DaDb00rGgdiQYZS+AMgZTlySziR6nffT8mfAnhWvhjs1xNoejisv55r+0n AYTs+g== -----END CERTIFICATE-----Generated at Sat Dec 20 06:33:21 2025 by rpki-client