This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/W4ZlH3t9eNXJAG1Ggm5lv7G7mOQ.roa File: W4ZlH3t9eNXJAG1Ggm5lv7G7mOQ.roa (raw, json) Hash identifier: AgwvWRF18WuCtZhgoJvuLZLc+xlbRujNLfGMuxQUJUw= Subject key identifier: 5B:86:65:1F:7B:7D:78:D5:C9:00:6D:46:82:6E:65:BF:B1:BB:98:E4 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B4FB7940D0AFFF342BCB5119D1CA7F3C7 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/W4ZlH3t9eNXJAG1Ggm5lv7G7mOQ.roa Signing time: Wed 24 Dec 2025 09:36:29 +0000 ROA not before: Wed 24 Dec 2025 09:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48529 IP address blocks: 212.66.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:b7:94:0d:0a:ff:f3:42:bc:b5:11:9d:1c:a7:f3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 24 09:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b86651f7b7d78d5c9006d46826e65bfb1bb98e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:93:a0:b7:d1:bd:73:c1:d8:41:a9:a8:32:47: a0:05:58:ee:79:7c:7a:2b:e7:ec:eb:1c:65:f2:ea: b7:39:f9:55:97:8c:6a:3a:f9:cf:ba:fe:11:46:3b: 1c:3e:69:bf:90:e5:7f:fb:15:8b:42:88:cd:08:b5: a8:e6:75:8a:7c:eb:20:fb:28:e7:c3:fe:18:1f:7d: da:70:b4:17:42:21:cd:73:5e:4e:35:fb:61:bf:e2: e4:3d:21:25:13:8c:0c:61:a2:49:f4:d3:f9:e7:74: 70:23:56:77:f9:99:f1:bf:3e:27:ed:da:18:6b:75: 80:d8:b2:50:d2:2f:df:72:1d:bd:11:08:44:5d:45: da:1a:0d:cd:d8:5b:88:49:76:33:08:fb:a7:6b:2b: de:1a:7c:ac:bd:5a:67:6d:3e:c8:8c:1e:35:6f:66: d8:0e:ad:fd:b8:d0:31:04:b6:3d:8d:ec:65:4a:dd: fc:91:4d:da:69:23:88:5c:6c:f3:a2:59:32:34:35: 37:79:aa:9d:d3:6e:97:00:71:da:4d:27:65:d5:8e: 5d:3b:63:6b:cc:be:fb:f5:18:72:21:82:96:68:61: 54:fa:2c:d8:41:0a:31:5a:2c:4a:1c:1c:74:79:27: 0d:cb:8e:a6:f7:8f:f2:87:e7:54:28:5a:b3:56:63: 2e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:65:1F:7B:7D:78:D5:C9:00:6D:46:82:6E:65:BF:B1:BB:98:E4 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/W4ZlH3t9eNXJAG1Ggm5lv7G7mOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.48.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ea:8b:2e:d0:fc:a4:2e:1b:5c:8e:d5:23:7a:38:c5:3d:e2: 89:94:d8:39:e6:50:04:f2:cf:1b:10:5b:8d:a3:40:d2:e8:2c: 14:38:01:51:e0:8b:45:32:22:87:62:4e:72:dc:db:23:bf:41: 0e:e1:5b:f0:86:cf:dd:fa:87:d8:78:e3:a2:07:7c:94:b9:85: a8:79:e7:70:fe:55:1f:ed:f2:34:11:59:c5:27:fa:cc:2b:3a: a1:aa:7c:07:6a:c1:04:af:b5:b1:8a:2b:b0:b9:cb:b4:91:35: 92:f4:b0:bd:7d:45:ba:b1:a3:3a:b2:e3:ae:38:f1:a2:4a:e9: 48:e6:5e:92:ef:33:6f:b6:d1:57:91:2a:05:e4:f6:34:34:71: 89:29:20:70:42:cc:f6:67:22:98:17:e2:d0:c6:c0:73:3e:e5: a2:30:9a:53:47:66:11:5a:14:dd:ea:e1:f5:68:d5:20:76:85: f7:9b:9f:2c:cd:13:b1:27:fb:3b:39:58:0a:13:46:08:09:f9: da:b4:bb:dc:5e:31:41:4f:fc:c0:2e:5b:5e:47:1b:86:eb:38: 18:17:36:3d:b2:f6:cc:92:d5:1c:c0:e7:28:1b:92:0f:2b:9f: 7c:be:8f:a9:46:0e:66:7e:f5:9a:40:a8:25:e9:a8:c5:16:8f: a9:7b:47:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtPt5QNCv/zQry1EZ0cp/PHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjI0MDkzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjg2NjUxZjdiN2Q3OGQ1YzkwMDZkNDY4MjZlNjViZmIxYmI5OGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZOgt9G9c8HYQamoMkegBVjueXx6 K+fs6xxl8uq3OflVl4xqOvnPuv4RRjscPmm/kOV/+xWLQojNCLWo5nWKfOsg+yjn w/4YH33acLQXQiHNc15ONfthv+LkPSElE4wMYaJJ9NP553RwI1Z3+Znxvz4n7doY a3WA2LJQ0i/fch29EQhEXUXaGg3N2FuISXYzCPunayveGnysvVpnbT7IjB41b2bY Dq39uNAxBLY9jexlSt38kU3aaSOIXGzzolkyNDU3eaqd026XAHHaTSdl1Y5dO2Nr zL779RhyIYKWaGFU+izYQQoxWixKHBx0eScNy46m94/yh+dUKFqzVmMuDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFuGZR97fXjVyQBtRoJuZb+xu5jkMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvVzRabEgzdDllTlhKQUcxR2dtNWx2N0c3bU9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EIwMA0G CSqGSIb3DQEBCwUAA4IBAQCA6osu0PykLhtcjtUjejjFPeKJlNg55lAE8s8bEFuN o0DS6CwUOAFR4ItFMiKHYk5y3Nsjv0EO4Vvwhs/d+ofYeOOiB3yUuYWoeedw/lUf 7fI0EVnFJ/rMKzqhqnwHasEEr7Wxiiuwucu0kTWS9LC9fUW6saM6suOuOPGiSulI 5l6S7zNvttFXkSoF5PY0NHGJKSBwQsz2ZyKYF+LQxsBzPuWiMJpTR2YRWhTd6uH1 aNUgdoX3m58szROxJ/s7OVgKE0YICfnatLvcXjFBT/zALlteRxuG6zgYFzY9svbM ktUcwOcoG5IPK598vo+pRg5mfvWaQKgl6ajFFo+pe0eZ -----END CERTIFICATE-----Generated at Sat Dec 27 08:41:12 2025 by rpki-client