This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WTZVFa5O8_naDIAA3eWFElGq7X0.roa File: WTZVFa5O8_naDIAA3eWFElGq7X0.roa (raw, json) Hash identifier: zWpqshm3ZgF1Oaq7XhQgfRVgLet4zoCql0QR+yddee8= Subject key identifier: 59:36:55:15:AE:4E:F3:F9:DA:0C:80:00:DD:E5:85:12:51:AA:ED:7D Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019AEA4B3CB9F03394ACA978658DFB9887CE Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WTZVFa5O8_naDIAA3eWFElGq7X0.roa Signing time: Thu 04 Dec 2025 16:56:30 +0000 ROA not before: Thu 04 Dec 2025 16:56:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211507 IP address blocks: 45.67.138.0/24 maxlen: 24 45.133.73.0/24 maxlen: 24 45.137.201.0/24 maxlen: 24 45.141.117.0/24 maxlen: 24 45.141.119.0/24 maxlen: 24 92.119.164.0/24 maxlen: 24 185.132.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:4b:3c:b9:f0:33:94:ac:a9:78:65:8d:fb:98:87:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Dec 4 16:56:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=59365515ae4ef3f9da0c8000dde5851251aaed7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:11:02:5b:88:fc:a8:51:a5:d7:80:3d:9d:e1: 8d:4d:f9:cc:27:c5:73:cc:ec:fb:50:f5:de:cd:5e: 90:99:51:be:89:47:b8:b7:3f:cb:d8:a7:9b:49:97: d7:f8:2c:b4:da:7a:f2:fc:cd:e5:11:15:b0:d5:c9: 7b:48:64:a2:f2:bc:41:6a:e9:d4:07:86:61:eb:48: 2f:cb:2a:96:d2:4a:d9:79:1c:d2:b9:f9:6a:da:34: b2:18:ee:95:4f:a6:fc:84:fc:15:fd:6e:a8:8d:00: e5:f9:da:cb:19:ae:ee:bd:a5:91:f9:27:f8:5d:f1: da:08:f7:f5:4d:9a:88:ad:7c:10:fe:53:c3:fb:22: f3:1e:1b:7b:d0:6c:a6:bd:56:d3:29:4e:77:6f:5e: b2:9b:0e:e2:d7:61:76:0f:91:fa:3d:9e:8f:51:98: 51:01:57:ec:d6:d8:72:2a:18:8b:51:43:61:aa:33: 02:1b:50:6d:2b:2e:56:ee:f9:60:65:ef:f8:29:fd: 5d:20:39:ea:fc:d1:4a:2c:12:b2:fd:a6:fb:1b:3f: 47:00:5c:f5:e9:3f:6a:81:53:6b:2d:19:e0:41:f4: c2:82:d9:8a:88:dc:ed:37:dc:11:b0:63:6a:db:7b: 4f:bc:0f:10:a8:35:6a:d8:e0:36:b5:22:50:11:2a: 45:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:36:55:15:AE:4E:F3:F9:DA:0C:80:00:DD:E5:85:12:51:AA:ED:7D X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WTZVFa5O8_naDIAA3eWFElGq7X0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.138.0/24 45.133.73.0/24 45.137.201.0/24 45.141.117.0/24 45.141.119.0/24 92.119.164.0/24 185.132.53.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:52:0c:2f:52:55:05:d3:7f:0b:79:29:3c:3b:85:f8:88:2e: ae:df:b2:93:1e:77:e8:5d:b5:c5:26:eb:b4:aa:74:7a:ce:dc: e3:d6:87:86:11:cb:08:98:26:2e:c7:45:45:d8:75:98:d3:6e: 31:0a:4c:71:00:ae:62:25:22:79:7f:29:23:9d:af:a5:98:97: 08:a7:27:27:c3:00:18:10:4b:da:96:c6:ba:d1:bc:29:71:17: b3:e3:77:1c:fc:89:db:7d:88:96:ad:ab:c3:b7:fe:3a:28:6a: a5:92:1b:ad:06:34:12:9e:e7:fd:83:85:ba:c1:df:f8:0a:cb: ad:7a:4c:e1:d2:da:57:25:64:74:19:16:cb:f4:9e:e6:e2:a4: a5:64:2b:d8:a2:39:88:50:a4:ec:3c:bc:75:b6:e0:3b:1d:3a: 3a:15:14:48:7e:de:eb:4c:0b:4a:c2:e2:9f:bc:b2:ac:ca:c0: cd:dd:80:27:b9:4d:ee:3f:88:2f:1c:82:d3:6f:7c:e8:ab:2a: bc:d9:6e:81:61:7b:31:3a:48:62:5e:e7:07:6d:03:08:6c:c5: 4a:50:ea:11:bd:6e:d1:33:5b:33:a0:75:13:05:77:db:b4:8c: 29:f4:07:c0:d4:23:6e:5e:f7:82:74:cb:0a:b1:77:ea:10:e7: d4:cd:1d:27 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZrqSzy58DOUrKl4ZY37mIfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjUxMjA0MTY1NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTM2NTUxNWFlNGVmM2Y5ZGEwYzgwMDBkZGU1ODUxMjUxYWFlZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RECW4j8qFGl14A9neGNTfnMJ8Vz zOz7UPXezV6QmVG+iUe4tz/L2KebSZfX+Cy02nry/M3lERWw1cl7SGSi8rxBaunU B4Zh60gvyyqW0krZeRzSuflq2jSyGO6VT6b8hPwV/W6ojQDl+drLGa7uvaWR+Sf4 XfHaCPf1TZqIrXwQ/lPD+yLzHht70GymvVbTKU53b16ymw7i12F2D5H6PZ6PUZhR AVfs1thyKhiLUUNhqjMCG1BtKy5W7vlgZe/4Kf1dIDnq/NFKLBKy/ab7Gz9HAFz1 6T9qgVNrLRngQfTCgtmKiNztN9wRsGNq23tPvA8QqDVq2OA2tSJQESpFKQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFFk2VRWuTvP52gyAAN3lhRJRqu19MB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvV1RaVkZhNU84X25hRElBQTNlV0ZFbEdxN1gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALUOKAwQA LYVJAwQALYnJAwQALY11AwQALY13AwQAXHekAwQAuYQ1MA0GCSqGSIb3DQEBCwUA A4IBAQBuUgwvUlUF038LeSk8O4X4iC6u37KTHnfoXbXFJuu0qnR6ztzj1oeGEcsI mCYux0VF2HWY024xCkxxAK5iJSJ5fykjna+lmJcIpycnwwAYEEvalsa60bwpcRez 43cc/InbfYiWravDt/46KGqlkhutBjQSnuf9g4W6wd/4Csutekzh0tpXJWR0GRbL 9J7m4qSlZCvYojmIUKTsPLx1tuA7HTo6FRRIft7rTAtKwuKfvLKsysDN3YAnuU3u P4gvHILTb3zoqyq82W6BYXsxOkhiXucHbQMIbMVKUOoRvW7RM1szoHUTBXfbtIwp 9AfA1CNuXveCdMsKsXfqEOfUzR0n -----END CERTIFICATE-----Generated at Fri Dec 5 16:31:56 2025 by rpki-client