This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/WpxhvjlS5qgxoGGYcUSdYnVtNbs.roa File: WpxhvjlS5qgxoGGYcUSdYnVtNbs.roa (raw, json) Hash identifier: 0X0If49M+V2ammA0VwSceRVBIsja0kYtbwYh9ggCEXg= Subject key identifier: 5A:9C:61:BE:39:52:E6:A8:31:A0:61:98:71:44:9D:62:75:6D:35:BB Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e Certificate serial: 019B18643849F608E01AA446A02D3ACD9A78 Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/WpxhvjlS5qgxoGGYcUSdYnVtNbs.roa Signing time: Sat 13 Dec 2025 15:46:19 +0000 ROA not before: Sat 13 Dec 2025 15:46:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44668 IP address blocks: 77.87.40.0/21 maxlen: 21 91.202.104.0/22 maxlen: 22 176.122.88.0/21 maxlen: 21 185.11.80.0/22 maxlen: 22 185.255.48.0/22 maxlen: 22 193.168.51.0/24 maxlen: 24 193.168.55.0/24 maxlen: 24 193.194.112.0/22 maxlen: 22 195.5.126.0/24 maxlen: 24 195.18.28.0/22 maxlen: 22 2a0c:5940::/29 maxlen: 29 2a0c:5940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:64:38:49:f6:08:e0:1a:a4:46:a0:2d:3a:cd:9a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e Validity Not Before: Dec 13 15:46:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a9c61be3952e6a831a0619871449d62756d35bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:77:de:4d:9a:cf:f0:3e:29:0f:12:53:bd: d7:59:f0:b2:2c:91:e0:35:19:e7:14:c1:06:c5:c8: 0e:99:2d:9f:31:ca:0d:21:e1:a9:7a:b1:fa:6d:fe: 32:54:3c:a1:84:6a:8b:2e:14:77:1a:ad:d1:2e:08: 2f:a1:bf:c5:4f:e7:c2:b0:0d:68:9a:53:e1:cf:01: 3b:81:80:3a:66:91:b7:88:6a:02:f5:2e:f8:e8:99: dd:8c:23:88:e9:82:7a:db:9b:cc:ea:94:1a:18:94: 2b:eb:e6:53:01:33:56:0e:24:f3:97:5c:b5:44:7c: 9f:27:af:a1:59:53:22:7e:17:83:84:ec:fc:b7:1b: ee:60:02:1d:26:83:38:75:02:df:d9:d1:28:0e:e9: 80:ca:98:8a:80:c7:96:f2:a3:c2:ad:b7:71:8f:c6: d7:7d:9c:d8:ca:ff:ab:b5:13:f9:87:7d:80:96:07: 75:31:b0:77:f1:63:69:4d:f2:12:b6:84:25:74:63: d0:aa:6c:4b:6f:63:c8:36:f7:3b:be:59:d1:cf:5a: f7:86:11:65:74:15:0f:20:52:e6:12:51:2f:74:aa: da:d6:42:27:40:13:e8:87:bf:52:0b:ac:6a:26:9f: c0:4d:23:71:1c:71:f5:c1:fa:1b:24:0a:55:ec:62: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:61:BE:39:52:E6:A8:31:A0:61:98:71:44:9D:62:75:6D:35:BB X509v3 Authority Key Identifier: keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/WpxhvjlS5qgxoGGYcUSdYnVtNbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.40.0/21 91.202.104.0/22 176.122.88.0/21 185.11.80.0/22 185.255.48.0/22 193.168.51.0/24 193.168.55.0/24 193.194.112.0/22 195.5.126.0/24 195.18.28.0/22 IPv6: 2a0c:5940::/29 Signature Algorithm: sha256WithRSAEncryption 37:fc:d7:a7:93:c7:7d:57:ef:7c:1b:d3:96:4f:92:87:19:7b: 7f:51:68:6c:87:16:db:7d:58:dd:e8:60:0c:05:0e:8f:5e:81: 8e:c1:ed:ef:a6:f1:ab:4a:b0:9f:b5:0f:21:46:fd:37:2f:e7: 39:f0:ce:52:99:e0:69:ac:79:ea:d9:bc:1b:72:61:37:ed:ba: 32:f5:08:12:37:43:2b:79:5b:be:91:ad:bb:6e:7c:30:be:a8: 09:e3:21:de:63:d0:fc:2b:3f:86:1f:0a:c4:fc:f0:4e:3f:fd: 7e:0d:63:0b:79:2e:37:34:8e:de:f4:99:d7:ef:db:e8:12:07: bf:ea:4b:32:61:a5:13:77:13:e4:b9:82:19:54:86:64:bd:72: 53:82:3f:ed:a4:0a:32:c5:1f:e6:09:02:76:d9:0a:2d:a3:d1: 52:92:a2:c7:1a:0e:f9:05:8e:c0:01:58:32:68:a2:a5:41:87: e1:5e:ba:db:85:7a:3b:43:b2:26:d7:ee:4e:e1:7d:ba:be:5c: e2:52:77:8c:dd:d9:f1:6a:7b:1e:32:8f:be:ff:ed:ee:4e:ee: 4b:a8:a5:bd:c8:1d:5e:e2:13:bc:20:f3:05:b3:3f:f3:cf:2e: 1f:3b:80:40:e1:d6:89:46:08:44:05:82:75:f4:c0:7b:62:c4: 71:89:13:1b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZsYZDhJ9gjgGqRGoC06zZp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1 NmQ0NWUwHhcNMjUxMjEzMTU0NjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTljNjFiZTM5NTJlNmE4MzFhMDYxOTg3MTQ0OWQ2Mjc1NmQzNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP933k2az/A+KQ8SU73XWfCyLJHg NRnnFMEGxcgOmS2fMcoNIeGperH6bf4yVDyhhGqLLhR3Gq3RLggvob/FT+fCsA1o mlPhzwE7gYA6ZpG3iGoC9S746JndjCOI6YJ625vM6pQaGJQr6+ZTATNWDiTzl1y1 RHyfJ6+hWVMifheDhOz8txvuYAIdJoM4dQLf2dEoDumAypiKgMeW8qPCrbdxj8bX fZzYyv+rtRP5h32Algd1MbB38WNpTfIStoQldGPQqmxLb2PINvc7vlnRz1r3hhFl dBUPIFLmElEvdKra1kInQBPoh79SC6xqJp/ATSNxHHH1wfobJApV7GKVAwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFFqcYb45UuaoMaBhmHFEnWJ1bTW7MB8GA1UdIwQY MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt ZGY2ODcxZTJmNzM1LzEvV3B4aHZqbFM1cWd4b0dHWWNVU2RZblZ0TmJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1 LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDTVcoAwQC W8poAwQDsHpYAwQCuQtQAwQCuf8wAwQAwagzAwQAwag3AwQCwcJwAwQAwwV+AwQC wxIcMA0EAgACMAcDBQMqDFlAMA0GCSqGSIb3DQEBCwUAA4IBAQA3/Nenk8d9V+98 G9OWT5KHGXt/UWhshxbbfVjd6GAMBQ6PXoGOwe3vpvGrSrCftQ8hRv03L+c58M5S meBprHnq2bwbcmE37boy9QgSN0MreVu+ka27bnwwvqgJ4yHeY9D8Kz+GHwrE/PBO P/1+DWMLeS43NI7e9JnX79voEge/6ksyYaUTdxPkuYIZVIZkvXJTgj/tpAoyxR/m CQJ22Qoto9FSkqLHGg75BY7AAVgyaKKlQYfhXrrbhXo7Q7Im1+5O4X26vlziUneM 3dnxanseMo++/+3uTu5LqKW9yB1e4hO8IPMFsz/zzy4fO4BA4daJRghEBYJ19MB7 YsRxiRMb -----END CERTIFICATE-----Generated at Sun Dec 14 13:48:07 2025 by rpki-client