This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/W8EpPY2s_5YYs-QXDW4z_HgFk2Q.roa File: W8EpPY2s_5YYs-QXDW4z_HgFk2Q.roa (raw, json) Hash identifier: I9IsJsSxzHuGEhdFDgs748RfLLGE6UGmJBw8ug/8wr0= Subject key identifier: 5B:C1:29:3D:8D:AC:FF:96:18:B3:E4:17:0D:6E:33:FC:78:05:93:64 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B3733A67BFE6BD802C3412B37E3E4D0B6 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/W8EpPY2s_5YYs-QXDW4z_HgFk2Q.roa Signing time: Fri 19 Dec 2025 15:21:30 +0000 ROA not before: Fri 19 Dec 2025 15:21:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205463 IP address blocks: 2.56.108.0/24 maxlen: 24 2.56.109.0/24 maxlen: 24 45.9.30.0/24 maxlen: 24 45.81.113.0/24 maxlen: 24 45.81.115.0/24 maxlen: 24 45.88.136.0/24 maxlen: 24 45.88.139.0/24 maxlen: 24 45.94.170.0/24 maxlen: 24 45.132.181.0/24 maxlen: 24 45.151.3.0/24 maxlen: 24 77.83.37.0/24 maxlen: 24 85.209.120.0/24 maxlen: 24 193.57.41.0/24 maxlen: 24 194.15.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:33:a6:7b:fe:6b:d8:02:c3:41:2b:37:e3:e4:d0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Dec 19 15:21:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5bc1293d8dacff9618b3e4170d6e33fc78059364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:a3:3c:27:52:47:f1:16:3f:c3:9a:eb:70: 36:e8:48:42:18:59:cf:af:c0:d6:0c:6d:cb:df:0c: 01:15:e1:79:ce:fc:ae:b5:a1:c3:56:74:f5:48:79: 3a:63:70:b8:ed:85:79:18:2e:1f:ad:03:aa:55:c9: 7e:bb:b8:9f:48:38:cc:1d:f9:54:52:05:80:37:62: f1:2d:29:5e:cf:11:59:8b:67:64:6c:5e:ca:17:20: 53:6b:da:57:f4:26:15:69:7a:28:e9:bc:8b:30:6d: 4c:71:e1:5d:86:0b:04:c2:46:e9:7b:31:38:93:32: 29:39:35:86:7f:d8:c7:78:34:f1:89:86:7f:fd:7a: 80:48:33:00:a5:df:ca:30:1b:67:2e:f7:26:e7:86: 57:5a:06:26:32:76:1b:ae:ce:0d:13:57:4a:4f:ec: 51:9a:22:f2:6a:7b:8e:ff:c5:6b:f4:85:ea:4b:cd: 8e:0e:55:1e:ab:12:98:d0:6a:e9:21:04:9a:99:21: eb:e2:f3:2d:f7:c8:e9:8d:04:7f:ba:27:60:f4:35: cc:a1:b1:a8:0c:37:7f:fe:cb:69:de:b0:6a:e4:e2: 89:d9:73:35:d5:42:d2:94:05:39:65:b7:81:6e:54: 86:46:d0:d2:cb:03:a9:1c:fe:cf:7d:90:f3:11:a6: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C1:29:3D:8D:AC:FF:96:18:B3:E4:17:0D:6E:33:FC:78:05:93:64 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/W8EpPY2s_5YYs-QXDW4z_HgFk2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.108.0/23 45.9.30.0/24 45.81.113.0/24 45.81.115.0/24 45.88.136.0/24 45.88.139.0/24 45.94.170.0/24 45.132.181.0/24 45.151.3.0/24 77.83.37.0/24 85.209.120.0/24 193.57.41.0/24 194.15.52.0/24 Signature Algorithm: sha256WithRSAEncryption 23:a5:40:62:ca:17:7e:1e:ac:cf:f8:7b:6d:50:f5:51:cb:24: fa:49:92:bd:59:9e:4f:b1:6f:46:48:9c:ae:f2:64:ff:3b:90: 8b:f2:32:84:46:0a:bd:23:a9:a5:23:6c:31:53:d7:62:b4:25: 78:72:7a:83:81:40:0f:4a:c8:f6:33:6c:33:fe:04:d1:b6:d5: de:69:dc:9f:5f:a4:09:bb:c0:d9:37:76:c8:6e:91:5f:e6:c0: 92:61:32:16:59:2b:45:64:c3:ed:46:67:3e:8d:ea:43:a4:01: 7a:32:99:7a:0f:c6:f4:1e:85:85:70:d8:f9:f4:96:5f:d9:71: 5c:d9:92:d3:bf:59:78:21:ff:5a:cc:85:8c:08:5a:54:61:e3: ba:25:76:26:3e:73:5e:d7:25:97:89:02:99:ed:fc:a9:33:bb: bf:d2:bf:f2:46:09:a3:8a:8c:0a:70:2c:a2:c4:e0:52:96:26: 00:d2:da:e8:67:29:6c:3b:0c:5d:e3:1b:cd:ef:8b:53:8d:01: f1:8e:6b:14:46:22:3e:2f:76:80:6e:b2:80:14:f2:52:02:36: 53:38:97:13:47:ce:55:93:e8:ae:32:02:45:b8:fa:c0:86:0d: 47:b7:fa:59:78:5a:4b:6e:63:24:3d:8a:d6:0e:34:79:98:b6: 94:f6:f4:96 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZs3M6Z7/mvYAsNBKzfj5NC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMjE5MTUyMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmMxMjkzZDhkYWNmZjk2MThiM2U0MTcwZDZlMzNmYzc4MDU5MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTCjPCdSR/EWP8Oa63A26EhCGFnP r8DWDG3L3wwBFeF5zvyutaHDVnT1SHk6Y3C47YV5GC4frQOqVcl+u7ifSDjMHflU UgWAN2LxLSlezxFZi2dkbF7KFyBTa9pX9CYVaXoo6byLMG1MceFdhgsEwkbpezE4 kzIpOTWGf9jHeDTxiYZ//XqASDMApd/KMBtnLvcm54ZXWgYmMnYbrs4NE1dKT+xR miLyanuO/8Vr9IXqS82ODlUeqxKY0GrpIQSamSHr4vMt98jpjQR/uidg9DXMobGo DDd//stp3rBq5OKJ2XM11ULSlAU5ZbeBblSGRtDSywOpHP7PfZDzEaZ0OwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFFvBKT2NrP+WGLPkFw1uM/x4BZNkMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvVzhFcFBZMnNfNVlZcy1RWERXNHpfSGdGazJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBAjhsAwQA LQkeAwQALVFxAwQALVFzAwQALViIAwQALViLAwQALV6qAwQALYS1AwQALZcDAwQA TVMlAwQAVdF4AwQAwTkpAwQAwg80MA0GCSqGSIb3DQEBCwUAA4IBAQAjpUBiyhd+ HqzP+HttUPVRyyT6SZK9WZ5PsW9GSJyu8mT/O5CL8jKERgq9I6mlI2wxU9ditCV4 cnqDgUAPSsj2M2wz/gTRttXeadyfX6QJu8DZN3bIbpFf5sCSYTIWWStFZMPtRmc+ jepDpAF6Mpl6D8b0HoWFcNj59JZf2XFc2ZLTv1l4If9azIWMCFpUYeO6JXYmPnNe 1yWXiQKZ7fypM7u/0r/yRgmjiowKcCyixOBSliYA0troZylsOwxd4xvN74tTjQHx jmsURiI+L3aAbrKAFPJSAjZTOJcTR85Vk+iuMgJFuPrAhg1Ht/pZeFpLbmMkPYrW DjR5mLaU9vSW -----END CERTIFICATE-----Generated at Sat Dec 20 16:14:09 2025 by rpki-client