This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wB1lW2rIJasuksqYwZr-8IedH6Y.roa File: wB1lW2rIJasuksqYwZr-8IedH6Y.roa (raw, json) Hash identifier: 2A1nXq312jOhfPrjkXKOaMw1Z9TGuoxL6WKOmTCQhIQ= Subject key identifier: C0:1D:65:5B:6A:C8:25:AB:2E:92:CA:98:C1:9A:FE:F0:87:9D:1F:A6 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019ACBCD12A38B2CD802C5CE33CAA058F288 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wB1lW2rIJasuksqYwZr-8IedH6Y.roa Signing time: Fri 28 Nov 2025 18:50:05 +0000 ROA not before: Fri 28 Nov 2025 18:50:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.120.245.0/24 maxlen: 24 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.27.0/24 maxlen: 24 91.92.248.0/21 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 178.215.239.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 194.31.222.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Nov 2025 03:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:cd:12:a3:8b:2c:d8:02:c5:ce:33:ca:a0:58:f2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 28 18:50:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c01d655b6ac825ab2e92ca98c19afef0879d1fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:06:ef:f6:87:50:79:d6:8c:5a:68:85:1b: 35:9d:b4:28:5e:2f:70:71:bd:92:cc:9b:8b:20:b7: a1:7a:59:6f:1c:a9:90:35:95:61:e2:df:de:02:f2: 2c:11:51:12:4f:7a:f7:b6:0b:75:9b:16:98:76:3a: 19:08:e7:cb:54:d2:d4:cf:f3:58:a0:6f:37:12:df: 53:f1:5f:e0:93:9f:a6:aa:2d:2a:42:d3:41:3d:59: 09:5b:83:e8:f9:12:cb:3d:da:44:6b:d7:5c:96:c2: 6e:b5:7c:fd:e5:d9:ff:08:db:84:20:0b:ca:74:f5: c6:ef:17:a5:36:5f:5b:6c:7a:0b:97:c1:93:fb:64: 67:f5:95:db:34:2a:81:05:71:59:9a:7c:77:cb:4d: 41:7b:c0:9e:24:d0:a3:15:ee:9e:75:3d:ed:da:22: 29:0d:ea:32:27:08:81:c3:10:d4:7b:d5:1b:d4:7f: d1:01:0c:08:21:8f:35:94:79:2a:e7:13:fd:f0:ff: b6:23:f6:83:27:a0:a2:42:fa:bf:c6:a0:d5:55:87: e9:c1:48:b7:0c:d6:82:ba:72:e4:4c:13:b1:1a:1b: 4c:32:62:4d:25:f8:8d:ba:4d:84:40:55:c0:b9:10: 1e:0f:ff:38:82:b6:1e:56:61:6c:6d:03:4f:21:0a: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1D:65:5B:6A:C8:25:AB:2E:92:CA:98:C1:9A:FE:F0:87:9D:1F:A6 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wB1lW2rIJasuksqYwZr-8IedH6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.120.245.0/24 87.121.132.0/22 87.121.165.0/24 91.92.27.0/24 91.92.248.0/21 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 178.215.239.0/24 185.222.160.0/24 193.25.216.0/24 194.31.222.0/24 194.55.186.0/24 194.169.175.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:bc:5b:22:25:20:18:1d:b4:ee:8b:64:9f:85:59:a5:e7:cc: 31:0e:fb:a9:a7:3f:89:ff:82:4b:47:67:93:24:58:f2:b7:83: 24:dd:b5:53:07:f6:71:98:50:37:92:69:ec:f3:e2:d8:ed:33: 79:61:d0:69:dd:a0:bb:af:ab:13:24:67:96:92:c5:d5:6b:e6: aa:d0:88:48:2c:7a:8c:22:5c:39:10:72:5f:eb:c8:a2:d8:7d: 08:66:13:f4:04:47:01:bc:30:70:d9:d5:09:54:ad:f3:10:a9: 4b:fb:83:cf:a0:9b:10:46:bc:45:8e:be:cc:b5:93:2c:49:63: fd:bf:75:6e:11:dd:b8:e6:69:d3:5a:dc:b4:5a:4e:a6:bf:0e: 32:81:39:f7:cf:3a:27:9a:ac:de:51:43:94:ed:63:2e:12:30: 0c:2f:6b:76:68:e4:7a:ea:90:c3:15:74:5f:df:93:aa:17:a1: a3:9a:63:31:e0:ad:f1:87:aa:10:54:bf:16:48:c3:9b:dd:02: 8b:53:99:05:ac:42:3b:7b:8e:ff:83:dc:b5:08:57:25:fe:e4: 45:74:47:7b:46:1a:ee:7a:2b:09:88:36:dd:dd:76:9b:91:51: e5:07:cc:24:b1:8e:77:6d:b8:21:3e:3d:51:62:53:8d:52:99: f9:fb:e9:82 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZrLzRKjiyzYAsXOM8qgWPKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTI4MTg1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDFkNjU1YjZhYzgyNWFiMmU5MmNhOThjMTlhZmVmMDg3OWQxZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvasG7/aHUHnWjFpohRs1nbQoXi9w cb2SzJuLILehellvHKmQNZVh4t/eAvIsEVEST3r3tgt1mxaYdjoZCOfLVNLUz/NY oG83Et9T8V/gk5+mqi0qQtNBPVkJW4Po+RLLPdpEa9dclsJutXz95dn/CNuEIAvK dPXG7xelNl9bbHoLl8GT+2Rn9ZXbNCqBBXFZmnx3y01Be8CeJNCjFe6edT3t2iIp DeoyJwiBwxDUe9Ub1H/RAQwIIY81lHkq5xP98P+2I/aDJ6CiQvq/xqDVVYfpwUi3 DNaCunLkTBOxGhtMMmJNJfiNuk2EQFXAuRAeD/84grYeVmFsbQNPIQovYwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFMAdZVtqyCWrLpLKmMGa/vCHnR+mMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvd0IxbFcycklKYXN1a3NxWXdaci04SWVkSDZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAAt QuQDBAAtQucDBAAtWfcDBAAtjZ4DBABRoe4DBAFV2YIDBABXeFcDBABXeH4DBABX eKYDBABXePUDBAJXeYQDBABXeaUDBABbXBsDBANbXPgDBAFcd8QDBABc+TIDBABd e20DBACy1+8DBAC53qADBADBGdgDBADCH94DBADCN7oDBADCqa8wDQYJKoZIhvcN AQELBQADggEBAF28WyIlIBgdtO6LZJ+FWaXnzDEO+6mnP4n/gktHZ5MkWPK3gyTd tVMH9nGYUDeSaezz4tjtM3lh0GndoLuvqxMkZ5aSxdVr5qrQiEgseowiXDkQcl/r yKLYfQhmE/QERwG8MHDZ1QlUrfMQqUv7g8+gmxBGvEWOvsy1kyxJY/2/dW4R3bjm adNa3LRaTqa/DjKBOffPOiearN5RQ5TtYy4SMAwva3Zo5HrqkMMVdF/fk6oXoaOa YzHgrfGHqhBUvxZIw5vdAotTmQWsQjt7jv+D3LUIVyX+5EV0R3tGGu56KwmINt3d dpuRUeUHzCSxjndtuCE+PVFiU41Smfn76YI= -----END CERTIFICATE-----Generated at Sat Nov 29 12:38:56 2025 by rpki-client