This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/WGwbeGIUoFwl-1u0c_ifFPFgKH8.roa File: WGwbeGIUoFwl-1u0c_ifFPFgKH8.roa (raw, json) Hash identifier: gyVFYnAcsaaLwVEd1iixKL/RH7TAmwUXbFoG3gWYfeU= Subject key identifier: 58:6C:1B:78:62:14:A0:5C:25:FB:5B:B4:73:F8:9F:14:F1:60:28:7F Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B44E4471333435B3347C77D0E60C8E003 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/WGwbeGIUoFwl-1u0c_ifFPFgKH8.roa Signing time: Mon 22 Dec 2025 07:09:29 +0000 ROA not before: Mon 22 Dec 2025 07:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4766 IP address blocks: 141.98.150.0/24 maxlen: 24 212.66.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:e4:47:13:33:43:5b:33:47:c7:7d:0e:60:c8:e0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 22 07:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=586c1b786214a05c25fb5bb473f89f14f160287f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:f8:69:4c:96:08:8c:f8:52:0f:36:08:94: 41:71:39:79:83:45:0f:34:83:05:ba:ad:82:9e:01: a8:8b:f9:d0:07:0d:15:a3:ed:a5:0c:27:20:bb:f8: ff:ec:b9:47:ae:65:2d:43:c1:81:28:1b:37:f5:f8: 35:fd:0c:32:05:49:a5:8a:e6:67:e8:3e:9d:99:d8: 8a:3a:1d:3d:81:a8:24:e1:e5:f7:68:d1:f5:84:47: c2:82:06:ca:86:28:2e:59:32:1f:be:a1:c9:a3:db: 63:c2:2c:32:e1:7b:8b:e9:3b:63:21:9c:ab:d9:46: 63:45:ac:ec:6c:5c:03:6e:8d:5c:e0:fe:c7:68:58: 30:36:6b:f3:79:31:02:a5:23:0a:ab:3b:c1:6a:85: 77:f3:b6:54:97:f4:72:2e:c3:fe:bf:b9:a2:cd:79: 7f:d7:46:81:47:60:bf:ba:3b:6c:70:f5:b7:8a:f1: 93:c2:91:dc:d0:cb:79:08:59:dc:6a:fa:6c:40:a1: 18:e4:4a:94:77:b2:8c:70:ac:ac:dc:df:17:18:ea: f4:77:10:a7:b3:43:ee:ac:88:05:5c:ce:d4:52:be: c3:65:af:5a:de:b3:59:ea:9d:de:38:2c:3d:1b:b9: a0:1c:db:97:57:28:6d:04:b5:e9:2f:3d:19:ad:2c: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:1B:78:62:14:A0:5C:25:FB:5B:B4:73:F8:9F:14:F1:60:28:7F X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/WGwbeGIUoFwl-1u0c_ifFPFgKH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.150.0/24 212.66.49.0/24 Signature Algorithm: sha256WithRSAEncryption 04:06:d1:dd:1a:90:0b:59:90:41:59:0d:73:48:37:ff:52:d3: f0:e5:25:a1:f7:9a:92:ec:82:5b:67:e6:3d:91:10:14:54:54: 9d:1e:10:79:6a:0d:30:cc:ca:a3:b5:ce:81:1d:4e:9c:68:56: bd:6a:b3:49:43:38:2f:dd:ef:9e:ff:5e:d4:22:0a:46:d9:43: a7:9f:0c:40:b5:b3:91:e0:f6:c8:43:30:7e:60:26:f6:40:aa: 9d:4a:48:f0:7d:df:e3:d0:13:a5:12:06:77:4d:58:38:80:a0: 99:1e:15:13:d5:52:78:4a:b7:ba:50:9f:29:b0:3a:3d:44:63: f6:78:36:7c:52:65:e1:44:71:db:51:94:90:d6:96:54:1c:cf: 2a:7b:eb:6f:d3:c1:f5:6f:c6:08:56:10:6c:06:e0:4f:49:5d: 92:eb:05:ab:7d:cd:e4:5c:69:7d:02:dd:4d:34:0b:ba:bd:09: 45:51:ef:a2:1a:d2:1c:e9:2c:cb:c8:34:4d:bb:55:54:a6:aa: 0c:c9:eb:fa:f4:cf:ba:7b:d8:ff:0a:76:a8:88:9c:05:bb:f9: 4b:67:9f:4c:a9:b9:23:58:8d:22:07:0b:a9:9d:11:af:89:9c: de:d6:29:a9:56:cf:3a:a9:77:b6:fb:20:50:24:76:08:9d:48: a6:55:8f:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtE5EcTM0NbM0fHfQ5gyOADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjIyMDcwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODZjMWI3ODYyMTRhMDVjMjVmYjViYjQ3M2Y4OWYxNGYxNjAyODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6z4aUyWCIz4Ug82CJRBcTl5g0UP NIMFuq2CngGoi/nQBw0Vo+2lDCcgu/j/7LlHrmUtQ8GBKBs39fg1/QwyBUmliuZn 6D6dmdiKOh09gagk4eX3aNH1hEfCggbKhiguWTIfvqHJo9tjwiwy4XuL6TtjIZyr 2UZjRazsbFwDbo1c4P7HaFgwNmvzeTECpSMKqzvBaoV387ZUl/RyLsP+v7mizXl/ 10aBR2C/ujtscPW3ivGTwpHc0Mt5CFncavpsQKEY5EqUd7KMcKys3N8XGOr0dxCn s0PurIgFXM7UUr7DZa9a3rNZ6p3eOCw9G7mgHNuXVyhtBLXpLz0ZrSxqYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFhsG3hiFKBcJftbtHP4nxTxYCh/MB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvV0d3YmVHSVVvRndsLTF1MGNfaWZGUEZnS0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWKWAwQA 1EIxMA0GCSqGSIb3DQEBCwUAA4IBAQAEBtHdGpALWZBBWQ1zSDf/UtPw5SWh95qS 7IJbZ+Y9kRAUVFSdHhB5ag0wzMqjtc6BHU6caFa9arNJQzgv3e+e/17UIgpG2UOn nwxAtbOR4PbIQzB+YCb2QKqdSkjwfd/j0BOlEgZ3TVg4gKCZHhUT1VJ4Sre6UJ8p sDo9RGP2eDZ8UmXhRHHbUZSQ1pZUHM8qe+tv08H1b8YIVhBsBuBPSV2S6wWrfc3k XGl9At1NNAu6vQlFUe+iGtIc6SzLyDRNu1VUpqoMyev69M+6e9j/CnaoiJwFu/lL Z59MqbkjWI0iBwupnRGviZze1impVs86qXe2+yBQJHYInUimVY9F -----END CERTIFICATE-----Generated at Sat Dec 27 08:40:01 2025 by rpki-client