This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WxQO-9CxlXG8zE5QdPlu1u0G9Lg.roa File: WxQO-9CxlXG8zE5QdPlu1u0G9Lg.roa (raw, json) Hash identifier: 9WXS6IOJjMtxtBOUiDL28bN6truRYGAJ2euUD+fKyK8= Subject key identifier: 5B:14:0E:FB:D0:B1:95:71:BC:CC:4E:50:74:F9:6E:D6:ED:06:F4:B8 Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B13219863E1F8CA6E90B757AA901ED7A1 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WxQO-9CxlXG8zE5QdPlu1u0G9Lg.roa Signing time: Fri 12 Dec 2025 15:15:27 +0000 ROA not before: Fri 12 Dec 2025 15:15:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34471 IP address blocks: 2.59.108.0/22 maxlen: 24 2.59.111.0/24 maxlen: 24 31.25.176.0/21 maxlen: 24 37.122.219.0/24 maxlen: 24 45.92.132.0/22 maxlen: 24 46.28.160.0/21 maxlen: 24 46.28.163.0/24 maxlen: 24 89.40.84.0/22 maxlen: 24 89.44.36.0/22 maxlen: 24 91.242.148.0/22 maxlen: 24 109.235.16.0/21 maxlen: 24 176.56.64.0/19 maxlen: 24 185.4.32.0/22 maxlen: 24 185.5.84.0/22 maxlen: 24 185.10.248.0/22 maxlen: 24 185.70.152.0/22 maxlen: 24 185.83.132.0/22 maxlen: 24 185.85.255.0/24 maxlen: 24 185.102.204.0/22 maxlen: 24 185.103.148.0/22 maxlen: 24 185.110.212.0/22 maxlen: 24 185.153.16.0/22 maxlen: 24 185.176.104.0/22 maxlen: 24 185.205.253.0/24 maxlen: 24 185.205.254.0/24 maxlen: 24 185.223.216.0/22 maxlen: 24 185.228.124.0/22 maxlen: 24 185.239.160.0/22 maxlen: 24 185.243.136.0/22 maxlen: 24 193.108.206.0/23 maxlen: 24 193.108.230.0/23 maxlen: 24 193.246.156.0/23 maxlen: 24 194.156.72.0/22 maxlen: 24 2a02:5dc0::/32 maxlen: 32 2a02:5fc0::/32 maxlen: 48 2a03:440::/32 maxlen: 32 2a05:9b00::/29 maxlen: 29 2a05:a800::/29 maxlen: 29 2a06:3c00::/29 maxlen: 29 2a09:eac0::/29 maxlen: 29 2a0a:1280::/29 maxlen: 29 2a0b:c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:21:98:63:e1:f8:ca:6e:90:b7:57:aa:90:1e:d7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Dec 12 15:15:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b140efbd0b19571bccc4e5074f96ed6ed06f4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:40:46:5f:35:40:fe:7b:ec:17:93:45:c1: f7:af:d6:19:f0:19:d4:fc:9f:f3:83:bc:e5:d5:30: de:f6:59:b8:3c:79:d5:ba:31:aa:7a:12:56:89:da: f0:45:59:3d:be:79:ed:7d:27:24:6b:bc:a9:9f:a9: e3:07:98:85:24:69:5a:b8:4a:5a:02:78:fc:18:0d: 41:17:df:6d:1b:37:8e:f8:5a:d4:e8:bf:49:7f:58: 33:7c:8c:b4:85:af:90:61:22:85:61:61:85:7b:da: 8e:2d:89:74:2a:c9:a9:a3:53:7e:a9:12:4f:01:c0: 0f:b2:89:2d:c3:a8:13:79:60:22:fe:95:1e:de:d7: e8:24:e4:a7:a1:33:d6:55:ba:e6:1c:3d:80:7b:7c: 03:90:37:8a:60:7d:a8:ff:84:aa:f1:51:44:c8:71: c6:9e:72:6e:ce:75:fe:fa:10:09:f0:53:ba:0d:ce: d3:52:e1:b2:a9:71:f8:ff:bb:5b:78:4e:2d:55:61: 4c:35:07:b0:fc:92:90:df:91:d3:ca:d5:3e:05:99: dd:7c:92:73:2a:03:42:60:0e:b9:99:e2:54:7f:3a: e3:37:87:62:50:22:8e:db:29:ba:9a:26:50:d8:bb: 10:6a:a4:4f:cd:ae:93:d7:41:91:7c:2a:8a:d4:90: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:14:0E:FB:D0:B1:95:71:BC:CC:4E:50:74:F9:6E:D6:ED:06:F4:B8 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WxQO-9CxlXG8zE5QdPlu1u0G9Lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.108.0/22 31.25.176.0/21 37.122.219.0/24 45.92.132.0/22 46.28.160.0/21 89.40.84.0/22 89.44.36.0/22 91.242.148.0/22 109.235.16.0/21 176.56.64.0/19 185.4.32.0/22 185.5.84.0/22 185.10.248.0/22 185.70.152.0/22 185.83.132.0/22 185.85.255.0/24 185.102.204.0/22 185.103.148.0/22 185.110.212.0/22 185.153.16.0/22 185.176.104.0/22 185.205.253.0-185.205.254.255 185.223.216.0/22 185.228.124.0/22 185.239.160.0/22 185.243.136.0/22 193.108.206.0/23 193.108.230.0/23 193.246.156.0/23 194.156.72.0/22 IPv6: 2a02:5dc0::/32 2a02:5fc0::/32 2a03:440::/32 2a05:9b00::/29 2a05:a800::/29 2a06:3c00::/29 2a09:eac0::/29 2a0a:1280::/29 2a0b:c40::/29 Signature Algorithm: sha256WithRSAEncryption 2a:92:c8:64:91:4a:0f:51:38:d0:68:77:76:3f:9d:af:15:2d: 61:d0:3e:00:11:36:be:03:b5:77:c2:9b:00:42:76:31:eb:e6: c4:e2:87:39:2f:1e:e7:7c:16:e2:cf:da:cd:65:a8:12:37:e3: d0:f3:ee:e2:f5:e3:57:5e:2d:df:95:82:9f:4f:af:d3:da:da: 70:ba:53:7b:cb:ce:c2:8d:60:50:c6:3f:b2:66:b0:f2:90:e1: 14:82:b8:1e:2b:6c:2f:3d:10:84:e6:29:a5:1f:ed:bb:04:ac: 81:da:ac:9d:32:f8:7f:15:53:f7:36:86:ac:a1:27:5e:4b:d1: 93:08:d0:36:ef:44:d6:6b:61:8c:61:b1:f8:ed:84:7d:b2:f6: 75:b0:84:7f:cb:40:5d:63:35:20:00:63:40:26:c9:7f:99:60: 10:eb:e0:f7:63:de:dd:b4:d5:e3:2e:3f:e3:f7:ae:5f:b9:82: c5:5e:db:d4:f4:be:a2:82:07:f5:a9:4c:a8:80:76:4d:2d:dc: f7:c9:64:d4:14:07:ba:f3:fa:bc:0b:1e:d0:2c:0a:16:df:55: 79:2c:89:9c:ff:d7:78:6d:d2:3c:94:a2:0a:f0:4e:f9:d6:a4: 90:21:bb:cc:67:c4:d9:5a:b2:05:09:20:c7:cb:a3:63:53:8b: 06:64:1a:b7 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgISAZsTIZhj4fjKbpC3V6qQHtehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUxMjEyMTUxNTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjE0MGVmYmQwYjE5NTcxYmNjYzRlNTA3NGY5NmVkNmVkMDZmNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFtARl81QP577BeTRcH3r9YZ8BnU /J/zg7zl1TDe9lm4PHnVujGqehJWidrwRVk9vnntfScka7ypn6njB5iFJGlauEpa Anj8GA1BF99tGzeO+FrU6L9Jf1gzfIy0ha+QYSKFYWGFe9qOLYl0Ksmpo1N+qRJP AcAPsoktw6gTeWAi/pUe3tfoJOSnoTPWVbrmHD2Ae3wDkDeKYH2o/4Sq8VFEyHHG nnJuznX++hAJ8FO6Dc7TUuGyqXH4/7tbeE4tVWFMNQew/JKQ35HTytU+BZndfJJz KgNCYA65meJUfzrjN4diUCKO2ym6miZQ2LsQaqRPza6T10GRfCqK1JDapwIDAQAB o4IDDjCCAwowHQYDVR0OBBYEFFsUDvvQsZVxvMxOUHT5btbtBvS4MB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvV3hRTy05Q3hsWEc4ekU1UWRQbHUxdTBHOUxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIgYIKwYBBQUHAQcBAf8EggERMIIBDTCBwwQCAAEwgbwD BAICO2wDBAMfGbADBAAletsDBAItXIQDBAMuHKADBAJZKFQDBAJZLCQDBAJb8pQD BANt6xADBAWwOEADBAK5BCADBAK5BVQDBAK5CvgDBAK5RpgDBAK5U4QDBAC5Vf8D BAK5ZswDBAK5Z5QDBAK5btQDBAK5mRADBAK5sGgwDAMEALnN/QMEALnN/gMEArnf 2AMEArnkfAMEArnvoAMEArnziAMEAcFszgMEAcFs5gMEAcH2nAMEAsKcSDBFBAIA AjA/AwUAKgJdwAMFACoCX8ADBQAqAwRAAwUDKgWbAAMFAyoFqAADBQMqBjwAAwUD KgnqwAMFAyoKEoADBQMqCwxAMA0GCSqGSIb3DQEBCwUAA4IBAQAqkshkkUoPUTjQ aHd2P52vFS1h0D4AETa+A7V3wpsAQnYx6+bE4oc5Lx7nfBbiz9rNZagSN+PQ8+7i 9eNXXi3flYKfT6/T2tpwulN7y87CjWBQxj+yZrDykOEUgrgeK2wvPRCE5imlH+27 BKyB2qydMvh/FVP3NoasoSdeS9GTCNA270TWa2GMYbH47YR9svZ1sIR/y0BdYzUg AGNAJsl/mWAQ6+D3Y97dtNXjLj/j965fuYLFXtvU9L6iggf1qUyogHZNLdz3yWTU FAe68/q8Cx7QLAoW31V5LImc/9d4bdI8lKIK8E751qSQIbvMZ8TZWrIFCSDHy6Nj U4sGZBq3 -----END CERTIFICATE-----Generated at Fri Dec 19 07:14:08 2025 by rpki-client