This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/x_Wqcrl6lMASnCTH86yZWYCmrJo.roa File: x_Wqcrl6lMASnCTH86yZWYCmrJo.roa (raw, json) Hash identifier: 01Zo1iYysFTI+XplluiZNnYjCDVhj/Hk3jpPa/LikZs= Subject key identifier: C7:F5:AA:72:B9:7A:94:C0:12:9C:24:C7:F3:AC:99:59:80:A6:AC:9A Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Certificate serial: 019B0290A25A854FFBE5B84E5AF0904BB614 Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/x_Wqcrl6lMASnCTH86yZWYCmrJo.roa Signing time: Tue 09 Dec 2025 10:03:11 +0000 ROA not before: Tue 09 Dec 2025 10:03:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43180 IP address blocks: 91.239.76.0/24 maxlen: 24 91.239.77.0/24 maxlen: 24 213.111.157.0/24 maxlen: 24 213.111.158.0/23 maxlen: 23 2a11:6101::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:90:a2:5a:85:4f:fb:e5:b8:4e:5a:f0:90:4b:b6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Validity Not Before: Dec 9 10:03:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7f5aa72b97a94c0129c24c7f3ac995980a6ac9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:21:90:09:cf:b7:52:06:01:c6:87:e9:61: d3:61:b1:bc:91:1f:ad:cc:a9:cb:3d:81:44:2e:0c: 00:d5:35:e8:3d:5f:ef:91:71:0b:ec:09:5d:f3:32: a0:9d:02:a0:d6:02:16:cf:94:41:bb:1f:b7:ca:3c: ec:f0:87:cb:29:c2:09:4c:99:b4:67:8c:98:f9:05: 8d:5e:47:f8:a2:45:40:39:ce:c9:38:d8:9c:99:12: 5b:a3:bb:af:8c:df:b3:ff:16:bf:c1:31:c2:66:74: d2:fa:79:5d:ec:34:92:dd:c8:f0:56:3a:fa:bd:dd: 74:0e:1b:87:93:b7:4c:9a:1e:db:1c:4c:48:5b:76: f2:55:75:24:94:4c:bb:19:ed:e8:61:d8:c9:07:51: f3:52:05:68:13:4a:88:c1:12:04:1d:ad:c8:60:55: e5:a3:af:3f:8a:fd:24:5b:7a:64:c6:1e:32:5e:90: c9:41:1c:a4:0d:74:3a:99:fc:22:4b:af:5b:bc:4c: 06:43:a8:c3:89:95:ae:21:2b:fb:c9:48:ea:41:90: 29:0f:d8:ea:c0:a8:ff:47:9c:57:fd:c5:cf:02:fe: 90:0a:e7:89:f0:41:81:c8:e9:b0:03:09:a3:f3:21: 4c:b4:1b:bd:c9:5a:90:75:16:d7:da:fd:04:73:89: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F5:AA:72:B9:7A:94:C0:12:9C:24:C7:F3:AC:99:59:80:A6:AC:9A X509v3 Authority Key Identifier: keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/x_Wqcrl6lMASnCTH86yZWYCmrJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.76.0/23 213.111.157.0-213.111.159.255 IPv6: 2a11:6101::/32 Signature Algorithm: sha256WithRSAEncryption 48:ae:5b:3b:76:39:47:7d:a0:51:4d:b3:97:20:75:05:13:c2: 75:bb:ce:8e:92:9f:7d:d1:a4:e7:a6:6f:a6:55:71:b4:88:19: 7f:ef:8e:25:e9:3a:9b:58:41:a4:1a:06:1a:1d:3c:21:02:be: b6:bc:f4:03:86:07:2d:29:9c:f9:fb:13:ae:2d:b4:f9:53:3b: bb:b4:f3:42:a2:1c:65:21:9f:77:b8:ce:d1:2d:32:e3:43:c5: 49:2b:7a:c4:ce:29:58:36:31:95:f6:b7:11:0c:bc:bf:37:28: 19:3b:7e:2e:44:54:d3:00:3d:7f:9e:96:78:94:dd:42:77:b1: f2:f9:13:2f:9e:90:ec:ef:89:8f:5d:30:3a:4a:0a:66:fa:46: 57:7d:04:f3:07:a5:be:b1:c8:04:48:89:9f:9d:1d:f9:04:03: dd:ab:dd:40:c3:ba:58:68:77:25:62:cb:5b:b7:8f:1e:1e:cf: b2:cc:6a:c2:28:20:24:df:2b:08:09:dc:7f:2f:d3:67:6e:b6: 65:4b:74:3d:9d:9d:bc:ed:a3:09:22:8b:44:fa:2d:ab:02:56: 4d:0a:0b:83:4b:6c:e1:fc:4c:fa:16:0a:ba:aa:4b:00:55:27: a7:ce:92:69:03:dd:4b:72:07:05:4a:6f:52:9c:d0:62:61:e0: 04:87:e4:e6 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZsCkKJahU/75bhOWvCQS7YUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl YmM3MGQwHhcNMjUxMjA5MTAwMzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2Y1YWE3MmI5N2E5NGMwMTI5YzI0YzdmM2FjOTk1OTgwYTZhYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGUhkAnPt1IGAcaH6WHTYbG8kR+t zKnLPYFELgwA1TXoPV/vkXEL7Ald8zKgnQKg1gIWz5RBux+3yjzs8IfLKcIJTJm0 Z4yY+QWNXkf4okVAOc7JONicmRJbo7uvjN+z/xa/wTHCZnTS+nld7DSS3cjwVjr6 vd10DhuHk7dMmh7bHExIW3byVXUklEy7Ge3oYdjJB1HzUgVoE0qIwRIEHa3IYFXl o68/iv0kW3pkxh4yXpDJQRykDXQ6mfwiS69bvEwGQ6jDiZWuISv7yUjqQZApD9jq wKj/R5xX/cXPAv6QCueJ8EGByOmwAwmj8yFMtBu9yVqQdRbX2v0Ec4kbowIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFMf1qnK5epTAEpwkx/OsmVmApqyaMB8GA1UdIwQY MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt MDg3M2UzOTk0ZDBlLzEveF9XcWNybDZsTUFTbkNUSDg2eVpXWUNtckpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQBW+9MMAwD BADVb50DBAXVb4AwDQQCAAIwBwMFACoRYQEwDQYJKoZIhvcNAQELBQADggEBAEiu Wzt2OUd9oFFNs5cgdQUTwnW7zo6Sn33RpOemb6ZVcbSIGX/vjiXpOptYQaQaBhod PCECvra89AOGBy0pnPn7E64ttPlTO7u080KiHGUhn3e4ztEtMuNDxUkresTOKVg2 MZX2txEMvL83KBk7fi5EVNMAPX+elniU3UJ3sfL5Ey+ekOzviY9dMDpKCmb6Rld9 BPMHpb6xyARIiZ+dHfkEA92r3UDDulhodyViy1u3jx4ez7LMasIoICTfKwgJ3H8v 02dutmVLdD2dnbztowkii0T6LasCVk0KC4NLbOH8TPoWCrqqSwBVJ6fOkmkD3Uty BwVKb1Kc0GJh4ASH5OY= -----END CERTIFICATE-----Generated at Wed Dec 10 08:49:46 2025 by rpki-client