This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/WC9kmSMif69P78D7Wa2Ks_eFKz4.roa File: WC9kmSMif69P78D7Wa2Ks_eFKz4.roa (raw, json) Hash identifier: CY6js8ru3Vr+2nkuq1YrxyTt1I/5jRthQR04arUK3Hc= Subject key identifier: 58:2F:64:99:23:22:7F:AF:4F:EF:C0:FB:59:AD:8A:B3:F7:85:2B:3E Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019A9C4D87A37BC749BDBF2FD2EF524DE3BE Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/WC9kmSMif69P78D7Wa2Ks_eFKz4.roa Signing time: Wed 19 Nov 2025 13:28:37 +0000 ROA not before: Wed 19 Nov 2025 13:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 194.231.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:4d:87:a3:7b:c7:49:bd:bf:2f:d2:ef:52:4d:e3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 19 13:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=582f649923227faf4fefc0fb59ad8ab3f7852b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:ec:b3:b7:6a:70:e5:a2:96:e2:01:e2:eb: 91:10:a6:3b:3e:84:3d:75:d9:2c:f6:e8:1e:c7:4d: 73:45:70:30:6f:f1:85:cd:a0:b9:9d:f1:00:29:92: f3:43:ff:68:19:28:db:ec:2c:56:d0:2c:01:65:73: 26:de:bb:42:f1:7b:b1:96:8f:2f:b7:72:05:f4:bf: 81:bd:33:f9:c9:db:be:71:84:f6:d0:9f:dc:58:ae: 76:03:0c:41:44:17:9d:f7:d1:75:d6:f2:70:06:43: 23:fa:61:48:94:b9:08:77:03:0b:43:32:07:e9:b5: b1:d9:27:c8:e7:58:34:6b:5c:68:40:33:03:20:d4: 7a:5e:6a:62:fa:9c:49:92:ac:f0:25:ed:16:84:1d: 41:08:f3:62:4e:88:19:1e:a5:11:7c:f0:a4:ee:30: 65:87:f3:bc:28:ca:8d:2d:2c:c5:b3:af:b9:9f:b1: 47:15:e3:0c:9e:3e:43:3e:6f:85:f0:5e:49:00:ac: 72:5c:2b:a9:65:18:5c:e0:0c:fe:ec:7b:a6:e8:16: 1a:60:18:89:76:29:11:d3:56:ae:17:dd:c3:d6:59: c6:75:f3:72:73:6b:70:6f:8f:f7:26:f7:42:9a:6c: a8:cf:c0:e0:ff:1c:a3:fd:bc:c2:ed:0c:3d:a6:62: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2F:64:99:23:22:7F:AF:4F:EF:C0:FB:59:AD:8A:B3:F7:85:2B:3E X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/WC9kmSMif69P78D7Wa2Ks_eFKz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.208.0/22 Signature Algorithm: sha256WithRSAEncryption c7:53:01:46:37:65:24:b7:82:8f:74:d7:86:d4:68:fd:98:78: ea:5d:fa:9a:e0:3a:a2:e7:cb:21:97:92:05:b7:3e:1e:7f:ce: 59:09:14:75:d7:09:5a:24:0b:bf:56:8f:00:fc:93:e9:a7:f3: 93:c7:ed:03:fd:de:a3:c3:1d:68:1b:33:c1:ed:24:15:d3:f3: 53:b0:0b:5a:87:df:21:47:f3:f1:23:8a:a1:15:28:33:29:1b: 55:89:70:9c:0b:5a:2f:8f:fa:5e:f8:b2:f7:c7:9c:eb:93:9e: f5:08:55:25:99:09:ff:94:27:04:22:a2:8c:78:d8:67:45:54: a1:a3:0b:7c:e3:9a:04:4d:4a:b2:3c:e4:be:82:a7:63:82:32: 24:81:f2:58:ef:28:af:f7:6a:bd:c9:20:62:43:b9:61:98:66: 9d:2a:c5:ea:07:4f:f9:b9:bc:8b:5c:83:18:d9:bc:41:73:e5: 3b:cc:5d:12:94:dc:f7:bd:1d:5d:4f:08:cd:51:27:1b:05:1f: f7:89:1b:ce:a6:85:31:d0:8d:f6:dd:04:f1:45:af:ff:73:ab: 19:73:51:7a:a1:fb:37:09:9e:58:a0:c3:51:cc:db:72:11:05: 7c:be:56:37:70:ea:28:0d:df:e0:36:b5:cf:fe:73:d1:84:bb: cc:71:4d:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqcTYeje8dJvb8v0u9STeO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTE5MTMyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODJmNjQ5OTIzMjI3ZmFmNGZlZmMwZmI1OWFkOGFiM2Y3ODUyYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH3ss7dqcOWiluIB4uuREKY7PoQ9 ddks9ugex01zRXAwb/GFzaC5nfEAKZLzQ/9oGSjb7CxW0CwBZXMm3rtC8Xuxlo8v t3IF9L+BvTP5ydu+cYT20J/cWK52AwxBRBed99F11vJwBkMj+mFIlLkIdwMLQzIH 6bWx2SfI51g0a1xoQDMDINR6Xmpi+pxJkqzwJe0WhB1BCPNiTogZHqURfPCk7jBl h/O8KMqNLSzFs6+5n7FHFeMMnj5DPm+F8F5JAKxyXCupZRhc4Az+7Hum6BYaYBiJ dikR01auF93D1lnGdfNyc2twb4/3JvdCmmyoz8Dg/xyj/bzC7Qw9pmIyuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgvZJkjIn+vT+/A+1mtirP3hSs+MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvV0M5a21TTWlmNjlQNzhEN1dhMktzX2VGS3o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwufQMA0G CSqGSIb3DQEBCwUAA4IBAQDHUwFGN2Ukt4KPdNeG1Gj9mHjqXfqa4Dqi58shl5IF tz4ef85ZCRR11wlaJAu/Vo8A/JPpp/OTx+0D/d6jwx1oGzPB7SQV0/NTsAtah98h R/PxI4qhFSgzKRtViXCcC1ovj/pe+LL3x5zrk571CFUlmQn/lCcEIqKMeNhnRVSh owt845oETUqyPOS+gqdjgjIkgfJY7yiv92q9ySBiQ7lhmGadKsXqB0/5ubyLXIMY 2bxBc+U7zF0SlNz3vR1dTwjNUScbBR/3iRvOpoUx0I323QTxRa//c6sZc1F6ofs3 CZ5YoMNRzNtyEQV8vlY3cOooDd/gNrXP/nPRhLvMcU2R -----END CERTIFICATE-----Generated at Fri Dec 5 12:25:42 2025 by rpki-client