This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WNki2D2sSC41bbhAU0tR4_2oRHE.roa File: WNki2D2sSC41bbhAU0tR4_2oRHE.roa (raw, json) Hash identifier: /ZiEvxSCYUwIn7nqoQmWj7skMdyF225W4GePEefqS1Q= Subject key identifier: 58:D9:22:D8:3D:AC:48:2E:35:6D:B8:40:53:4B:51:E3:FD:A8:44:71 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019ABCE28EFB9330F5B27921A6398E834D55 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WNki2D2sSC41bbhAU0tR4_2oRHE.roa Signing time: Tue 25 Nov 2025 21:19:15 +0000 ROA not before: Tue 25 Nov 2025 21:19:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 146.19.21.0/24 maxlen: 24 212.46.37.0/24 maxlen: 24 2a05:9a40::/29 maxlen: 29 2a06:5fc0::/29 maxlen: 29 2a0b:ac00::/29 maxlen: 29 2a0f:9b40::/29 maxlen: 29 2a10:3f80::/29 maxlen: 29 2a10:77c0::/29 maxlen: 29 2a13:b4c1::/32 maxlen: 32 2a13:b9c0::/29 maxlen: 29 2a13:bb40::/29 maxlen: 29 2a13:c240::/29 maxlen: 29 2a13:c340::/29 maxlen: 29 2a14:1100::/32 maxlen: 32 2a14:1101::/32 maxlen: 32 2a14:1102::/32 maxlen: 32 2a14:1103::/32 maxlen: 32 2a14:1104::/32 maxlen: 32 2a14:1105::/32 maxlen: 32 2a14:1106::/32 maxlen: 32 2a14:1107::/32 maxlen: 32 2a14:42c0::/29 maxlen: 29 2a14:62c0::/29 maxlen: 29 2a14:6a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 00:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:e2:8e:fb:93:30:f5:b2:79:21:a6:39:8e:83:4d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Nov 25 21:19:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=58d922d83dac482e356db840534b51e3fda84471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:b8:b7:00:f3:be:95:6b:38:39:a2:f7:88: 4d:a0:78:93:4e:12:7e:38:ca:91:82:e8:63:41:ae: e6:d6:64:f4:b9:34:f4:47:85:83:4d:9a:66:fe:30: c4:be:c9:ce:c4:a5:33:95:9c:f9:d9:ba:94:7b:ad: 5d:64:0a:87:13:23:b9:1e:34:7d:24:3c:0d:b9:77: c1:08:31:48:61:c4:e6:ed:58:4f:f8:4f:0e:c4:75: 3b:b8:be:69:fb:91:56:99:b0:c9:70:b1:99:8b:ae: 3b:5d:50:d7:df:4f:97:50:29:7d:fe:ce:05:22:59: c2:45:b6:a9:f0:e8:76:81:24:fa:71:be:d8:5d:a6: fa:53:91:de:b4:4f:84:92:10:84:75:8d:f1:60:f4: 6b:b0:bb:16:7a:e9:ac:62:e7:4d:5d:25:00:21:ec: 72:df:1c:b6:30:1f:62:f4:95:ec:0c:66:4b:ce:22: 35:00:a7:a0:84:50:f1:c4:8b:32:f8:d2:d5:34:87: c2:14:b3:6f:74:b0:10:1e:1a:01:34:8e:43:7f:8f: 15:b2:09:f2:1e:e7:48:9c:2e:ac:2f:7d:98:f0:69: 36:fe:65:ca:38:22:9b:a8:37:fa:fc:09:1b:d4:2f: 8f:2d:39:18:ee:a0:e4:b2:bd:10:8f:19:d8:f4:56: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:22:D8:3D:AC:48:2E:35:6D:B8:40:53:4B:51:E3:FD:A8:44:71 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WNki2D2sSC41bbhAU0tR4_2oRHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.21.0/24 212.46.37.0/24 IPv6: 2a05:9a40::/29 2a06:5fc0::/29 2a0b:ac00::/29 2a0f:9b40::/29 2a10:3f80::/29 2a10:77c0::/29 2a13:b4c1::/32 2a13:b9c0::/29 2a13:bb40::/29 2a13:c240::/29 2a13:c340::/29 2a14:1100::/29 2a14:42c0::/29 2a14:62c0::/29 2a14:6a40::/32 Signature Algorithm: sha256WithRSAEncryption 0b:fa:b1:15:a7:a2:6f:78:00:bf:40:e7:10:10:11:47:7d:e5: 9c:73:d1:09:92:17:b0:8d:4f:d2:1a:2d:df:98:10:fe:ee:25: 8e:1a:76:e3:6f:40:99:9c:04:c6:b6:30:8e:15:bb:f7:dd:10: 9c:02:68:42:68:fa:8f:b9:ef:89:1a:e4:6a:c2:cc:66:6c:da: 5c:4c:cf:83:7e:10:cc:1c:2f:43:b7:1c:ea:38:30:e6:f9:5a: e4:38:6b:2a:ed:8c:af:9b:e8:42:85:05:aa:64:b5:b5:14:82: 64:cd:47:44:64:1c:0f:35:96:e8:b9:66:0b:3d:d0:cd:93:67: 65:81:6a:31:ce:64:5c:6e:41:64:f6:e1:55:8e:24:1d:1e:e3: c0:06:45:df:c0:0f:0f:80:7c:40:38:5e:51:55:d3:34:e8:3f: 4a:15:b1:a2:8f:e7:62:c2:30:dd:37:5a:0a:d4:f1:5e:aa:43: 8e:af:2d:93:c8:c4:9e:7b:64:e1:58:ac:f3:7e:fb:ac:ae:8c: cd:09:fd:b8:7a:b6:a2:de:47:fc:18:cb:a2:20:37:d4:3e:a8: 50:01:b2:16:01:c1:d6:af:c9:32:93:5b:95:56:32:61:aa:26: 0f:d9:34:10:d4:2f:d9:2f:50:e6:df:53:57:2f:84:f3:2f:29: f1:83:6b:4e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZq84o77kzD1snkhpjmOg01VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMTI1MjExOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGQ5MjJkODNkYWM0ODJlMzU2ZGI4NDA1MzRiNTFlM2ZkYTg0NDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUC4twDzvpVrODmi94hNoHiTThJ+ OMqRguhjQa7m1mT0uTT0R4WDTZpm/jDEvsnOxKUzlZz52bqUe61dZAqHEyO5HjR9 JDwNuXfBCDFIYcTm7VhP+E8OxHU7uL5p+5FWmbDJcLGZi647XVDX30+XUCl9/s4F IlnCRbap8Oh2gST6cb7YXab6U5HetE+EkhCEdY3xYPRrsLsWeumsYudNXSUAIexy 3xy2MB9i9JXsDGZLziI1AKeghFDxxIsy+NLVNIfCFLNvdLAQHhoBNI5Df48Vsgny HudInC6sL32Y8Gk2/mXKOCKbqDf6/Akb1C+PLTkY7qDksr0QjxnY9FbVTwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFFjZItg9rEguNW24QFNLUeP9qERxMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvV05raTJEMnNTQzQxYmJoQVUwdFI0XzJvUkhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTASBAIAATAMAwQAkhMV AwQA1C4lMG8EAgACMGkDBQMqBZpAAwUDKgZfwAMFAyoLrAADBQMqD5tAAwUDKhA/ gAMFAyoQd8ADBQAqE7TBAwUDKhO5wAMFAyoTu0ADBQMqE8JAAwUDKhPDQAMFAyoU EQADBQMqFELAAwUDKhRiwAMFACoUakAwDQYJKoZIhvcNAQELBQADggEBAAv6sRWn om94AL9A5xAQEUd95Zxz0QmSF7CNT9IaLd+YEP7uJY4aduNvQJmcBMa2MI4Vu/fd EJwCaEJo+o+574ka5GrCzGZs2lxMz4N+EMwcL0O3HOo4MOb5WuQ4ayrtjK+b6EKF BapktbUUgmTNR0RkHA81lui5Zgs90M2TZ2WBajHOZFxuQWT24VWOJB0e48AGRd/A Dw+AfEA4XlFV0zToP0oVsaKP52LCMN03WgrU8V6qQ46vLZPIxJ57ZOFYrPN++6yu jM0J/bh6tqLeR/wYy6IgN9Q+qFABshYBwdavyTKTW5VWMmGqJg/ZNBDUL9kvUObf U1cvhPMvKfGDa04= -----END CERTIFICATE-----Generated at Mon Dec 1 09:13:35 2025 by rpki-client