This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WtnmWaQeJAiMD_bXa6OqWzNxNPs.roa File: WtnmWaQeJAiMD_bXa6OqWzNxNPs.roa (raw, json) Hash identifier: EJgPP4XIVpd2tQBOB7TCHi3rsLddhke7wHOXmL4AGAI= Subject key identifier: 5A:D9:E6:59:A4:1E:24:08:8C:0F:F6:D7:6B:A3:AA:5B:33:71:34:FB Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019ADE1F0DAF1B089684196792F1D76596BD Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WtnmWaQeJAiMD_bXa6OqWzNxNPs.roa Signing time: Tue 02 Dec 2025 08:12:48 +0000 ROA not before: Tue 02 Dec 2025 08:12:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135402 IP address blocks: 109.121.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:1f:0d:af:1b:08:96:84:19:67:92:f1:d7:65:96:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 2 08:12:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5ad9e659a41e24088c0ff6d76ba3aa5b337134fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:4b:8d:b5:9b:97:d3:82:1f:80:ab:3d:a7: 01:44:d8:5b:7d:7e:d6:aa:5a:16:07:fd:26:60:56: 66:41:bb:87:76:0e:82:db:8f:99:e4:f7:c4:1d:96: 4c:45:17:09:6f:75:91:95:31:87:05:21:ca:78:c1: a8:6a:01:2b:80:42:45:04:28:44:1b:11:b9:44:26: 91:32:33:05:55:16:ce:78:8a:b4:ec:87:29:53:71: 42:77:80:c9:89:86:b1:08:1c:b1:35:eb:29:af:a3: 55:79:50:f3:4e:34:a7:e1:1e:91:f6:73:21:fa:ff: e4:39:54:85:cd:4b:29:82:6f:03:7f:90:78:85:8f: db:1a:94:87:20:cc:d2:79:04:46:bb:26:8b:af:8c: fb:57:38:00:e1:af:e3:22:69:0e:96:b1:bd:2f:5b: 92:d4:51:32:cc:d2:c1:2d:84:00:03:5b:72:e2:a5: 35:0c:98:43:ab:46:53:52:b4:4b:a2:68:66:ca:19: 21:88:69:56:8e:12:1f:d7:26:19:c0:15:dd:fc:a0: e3:f7:0c:24:43:b4:b2:82:77:28:be:1d:97:a0:19: 7f:08:c2:b2:7f:96:8b:76:04:3e:23:36:df:51:02: 96:59:2d:b7:d6:58:08:40:56:7f:78:df:3a:36:f2: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:E6:59:A4:1E:24:08:8C:0F:F6:D7:6B:A3:AA:5B:33:71:34:FB X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WtnmWaQeJAiMD_bXa6OqWzNxNPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.47.0/24 Signature Algorithm: sha256WithRSAEncryption a2:ad:42:41:02:68:2a:47:05:82:01:a3:f0:ab:99:5a:61:d6: 11:5f:fa:ec:fc:c8:17:d1:e9:72:fd:fd:86:6c:c5:90:64:a3: 73:1e:b5:70:93:bf:44:1a:a2:de:4b:26:6a:c7:51:29:46:15: 6f:63:7c:04:b8:73:86:2c:25:fc:6b:34:ef:13:0d:aa:12:c6: f8:53:33:29:7b:f1:24:89:d3:97:79:43:70:de:76:15:7a:32: 86:29:0c:fe:37:9c:ec:b4:32:9d:76:32:99:34:b2:8a:60:6d: 13:01:f8:e6:c6:49:aa:f3:dc:18:5f:cc:93:9c:ad:a0:31:2a: 83:cf:dc:21:2a:51:ef:c5:71:dc:8e:27:25:e1:ee:de:1e:8c: d0:22:85:4b:c7:5f:92:95:cf:39:d1:95:5a:7d:6f:aa:86:02: 09:e9:30:8a:f3:d2:b9:b3:45:7f:d6:79:5e:de:3a:44:3a:5a: d5:89:6a:f2:2b:30:c9:dd:3c:52:7c:3d:40:e9:0a:84:65:3d: dc:96:67:7d:6f:ff:7e:82:72:e7:06:67:b5:6f:91:a9:03:45: 56:7f:71:ca:54:ad:6d:86:66:8b:a2:34:13:2a:9b:cc:12:bd: 12:9b:f3:c1:5f:2c:2c:dd:67:33:40:a3:ea:2c:55:a8:28:a8: 75:47:d1:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZreHw2vGwiWhBlnkvHXZZa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjAyMDgxMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ5ZTY1OWE0MWUyNDA4OGMwZmY2ZDc2YmEzYWE1YjMzNzEzNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAZLjbWbl9OCH4CrPacBRNhbfX7W qloWB/0mYFZmQbuHdg6C24+Z5PfEHZZMRRcJb3WRlTGHBSHKeMGoagErgEJFBChE GxG5RCaRMjMFVRbOeIq07IcpU3FCd4DJiYaxCByxNespr6NVeVDzTjSn4R6R9nMh +v/kOVSFzUspgm8Df5B4hY/bGpSHIMzSeQRGuyaLr4z7VzgA4a/jImkOlrG9L1uS 1FEyzNLBLYQAA1ty4qU1DJhDq0ZTUrRLomhmyhkhiGlWjhIf1yYZwBXd/KDj9wwk Q7Sygncovh2XoBl/CMKyf5aLdgQ+IzbfUQKWWS231lgIQFZ/eN86NvJSUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrZ5lmkHiQIjA/212ujqlszcTT7MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvV3RubVdhUWVKQWlNRF9iWGE2T3FXek54TlBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXkvMA0G CSqGSIb3DQEBCwUAA4IBAQCirUJBAmgqRwWCAaPwq5laYdYRX/rs/MgX0ely/f2G bMWQZKNzHrVwk79EGqLeSyZqx1EpRhVvY3wEuHOGLCX8azTvEw2qEsb4UzMpe/Ek idOXeUNw3nYVejKGKQz+N5zstDKddjKZNLKKYG0TAfjmxkmq89wYX8yTnK2gMSqD z9whKlHvxXHcjicl4e7eHozQIoVLx1+Slc850ZVafW+qhgIJ6TCK89K5s0V/1nle 3jpEOlrViWryKzDJ3TxSfD1A6QqEZT3clmd9b/9+gnLnBme1b5GpA0VWf3HKVK1t hmaLojQTKpvMEr0Sm/PBXyws3WczQKPqLFWoKKh1R9F9 -----END CERTIFICATE-----Generated at Fri Dec 5 15:47:43 2025 by rpki-client