This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/WjbXz_T6fQwwsu_r4_F-5y3dX_Q.roa File: WjbXz_T6fQwwsu_r4_F-5y3dX_Q.roa (raw, json) Hash identifier: iLh3TGVs1ujNjbVfhiVUXg4fodd0lOsGlfiIAkQGeqg= Subject key identifier: 5A:36:D7:CF:F4:FA:7D:0C:30:B2:EF:EB:E3:F1:7E:E7:2D:DD:5F:F4 Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019B124C4F67E4FC06E143AC0C95A4F78CB4 Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/WjbXz_T6fQwwsu_r4_F-5y3dX_Q.roa Signing time: Fri 12 Dec 2025 11:22:29 +0000 ROA not before: Fri 12 Dec 2025 11:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12301 IP address blocks: 46.31.182.0/24 maxlen: 24 77.243.208.0/20 maxlen: 20 185.91.140.0/24 maxlen: 24 185.91.141.0/24 maxlen: 24 185.91.142.0/23 maxlen: 23 185.91.143.0/24 maxlen: 24 2a00:df80::/48 maxlen: 48 2a00:df80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:4c:4f:67:e4:fc:06:e1:43:ac:0c:95:a4:f7:8c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Dec 12 11:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a36d7cff4fa7d0c30b2efebe3f17ee72ddd5ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:2c:3d:37:ee:cd:b3:e5:e9:76:27:59:6c: 0b:e6:7a:91:4e:5b:49:e0:2e:65:04:78:54:0c:ea: 07:3b:03:6a:91:76:bc:23:1a:62:6a:d2:2d:07:f3: c7:3a:e5:13:4f:62:f8:b7:1a:da:a2:72:f7:77:5d: 61:8e:33:a8:78:51:d8:27:c8:b9:5f:13:ca:75:4d: 0b:2d:ee:c2:a3:a9:72:bd:30:56:ac:55:85:0a:5f: 25:fa:0a:db:d2:64:0b:76:21:a4:c5:ff:6d:43:56: a7:79:25:a4:af:d9:4f:9f:80:f4:c9:82:19:16:95: ea:80:40:53:e7:e2:15:fb:82:dd:49:d0:91:d7:f2: 44:76:66:c3:8d:3a:c5:a3:8c:49:4e:69:2f:0e:78: 37:74:9d:8a:47:5c:89:4b:27:88:a4:68:a6:ea:58: ba:d2:1c:a9:71:ed:25:64:97:3e:fe:b9:53:60:2d: d7:e8:ba:d4:97:15:aa:ef:4e:1d:2a:0f:04:e1:ec: f3:11:8c:eb:d5:54:8c:de:e6:66:75:40:a0:44:1b: 01:0c:68:b2:0c:2a:53:99:70:79:51:88:d3:84:85: f9:b0:f5:00:aa:7b:ae:ac:88:d9:72:30:15:ae:e0: 2c:cb:c0:18:66:4b:34:ea:56:1a:b8:0d:a2:e6:55: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:36:D7:CF:F4:FA:7D:0C:30:B2:EF:EB:E3:F1:7E:E7:2D:DD:5F:F4 X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/WjbXz_T6fQwwsu_r4_F-5y3dX_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.182.0/24 77.243.208.0/20 185.91.140.0/22 IPv6: 2a00:df80::/47 Signature Algorithm: sha256WithRSAEncryption 85:48:2b:7f:25:54:03:79:05:f8:47:23:0a:37:25:b3:04:c4: a1:3e:f6:c5:c7:3f:67:36:ac:31:4b:66:58:2e:7b:75:f8:67: ef:51:c5:16:6a:b1:e9:a0:94:67:5f:b8:be:bb:a0:6b:bf:fb: 8e:0d:1c:1b:8c:ba:1e:47:f9:15:59:c5:96:47:97:e5:29:ba: 63:0c:dc:17:dd:46:a2:11:3f:1c:17:1b:e4:a4:8e:fa:bc:eb: 51:f5:42:2c:f5:7d:a7:a6:1f:47:8b:62:1a:e2:0c:ba:ac:7a: 2e:5c:2d:80:c0:fd:17:24:13:7f:a6:17:ae:39:fa:c3:c0:ae: be:e2:72:57:2b:c1:2f:4e:f7:cf:d6:11:25:49:a8:89:fc:ec: 11:d7:33:ba:27:e5:1b:95:f8:4f:b9:2c:b9:6f:9b:86:1f:e5: 70:28:e5:a4:de:23:d9:d5:96:57:b0:3b:57:f4:de:50:b1:06: c1:4b:57:5e:53:5d:12:65:fa:5f:f5:ad:b7:31:b5:76:fa:66: 2b:40:2f:f3:dd:1f:51:4a:b9:d0:76:fa:a3:71:3c:a5:8c:b4: a0:d3:80:f3:82:a9:3e:61:6d:89:ce:91:1c:1c:44:74:c0:c1: ab:76:ab:51:c1:47:8e:ac:f9:ec:4c:0d:2e:44:c7:5e:9c:33: 4f:bc:24:d1 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZsSTE9n5PwG4UOsDJWk94y0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjUxMjEyMTEyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTM2ZDdjZmY0ZmE3ZDBjMzBiMmVmZWJlM2YxN2VlNzJkZGQ1ZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSssPTfuzbPl6XYnWWwL5nqRTltJ 4C5lBHhUDOoHOwNqkXa8IxpiatItB/PHOuUTT2L4txraonL3d11hjjOoeFHYJ8i5 XxPKdU0LLe7Co6lyvTBWrFWFCl8l+grb0mQLdiGkxf9tQ1aneSWkr9lPn4D0yYIZ FpXqgEBT5+IV+4LdSdCR1/JEdmbDjTrFo4xJTmkvDng3dJ2KR1yJSyeIpGim6li6 0hypce0lZJc+/rlTYC3X6LrUlxWq704dKg8E4ezzEYzr1VSM3uZmdUCgRBsBDGiy DCpTmXB5UYjThIX5sPUAqnuurIjZcjAVruAsy8AYZks06lYauA2i5lWzwwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFFo218/0+n0MMLLv6+Pxfuct3V/0MB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvV2piWHpfVDZmUXd3c3VfcjRfRi01eTNkWF9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALh+2AwQE TfPQAwQCuVuMMA8EAgACMAkDBwEqAN+AAAAwDQYJKoZIhvcNAQELBQADggEBAIVI K38lVAN5BfhHIwo3JbMExKE+9sXHP2c2rDFLZlgue3X4Z+9RxRZqsemglGdfuL67 oGu/+44NHBuMuh5H+RVZxZZHl+UpumMM3BfdRqIRPxwXG+Skjvq861H1Qiz1faem H0eLYhriDLqsei5cLYDA/RckE3+mF645+sPArr7iclcrwS9O98/WESVJqIn87BHX M7on5RuV+E+5LLlvm4Yf5XAo5aTeI9nVllewO1f03lCxBsFLV15TXRJl+l/1rbcx tXb6ZitAL/PdH1FKudB2+qNxPKWMtKDTgPOCqT5hbYnOkRwcRHTAwat2q1HBR46s +exMDS5Ex16cM0+8JNE= -----END CERTIFICATE-----Generated at Fri Dec 12 15:42:29 2025 by rpki-client