This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/weimB0J1QnnjxQ9v9IPqrcuwS48.roa File: weimB0J1QnnjxQ9v9IPqrcuwS48.roa (raw, json) Hash identifier: QQzLUjkGzbudsiXvPMgdlbEJ/e9Y6A2tnVdi6XoQRXQ= Subject key identifier: C1:E8:A6:07:42:75:42:79:E3:C5:0F:6F:F4:83:EA:AD:CB:B0:4B:8F Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6CF0C50CBD992BFDBF854249293AF Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/weimB0J1QnnjxQ9v9IPqrcuwS48.roa Signing time: Tue 02 Dec 2025 20:17:48 +0000 ROA not before: Tue 02 Dec 2025 20:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4785 IP address blocks: 45.142.165.0/24 maxlen: 24 192.109.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:cf:0c:50:cb:d9:92:bf:db:f8:54:24:92:93:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1e8a60742754279e3c50f6ff483eaadcbb04b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1c:f2:96:15:27:26:38:04:5f:1a:44:54:55: b4:c3:8c:b9:40:67:ca:69:97:1e:9d:b0:11:c1:9b: 8f:8a:1d:08:ba:e0:2f:d3:cb:72:2b:bc:17:c2:cb: 7c:a0:60:d8:12:33:9c:51:2a:6a:d1:c7:37:fb:e5: 3b:5f:cf:93:78:1f:4b:63:ff:de:d7:30:0e:47:fa: 1c:dd:ab:3f:fa:3e:a7:08:f9:d1:3e:6d:b5:25:b7: 91:1b:d9:34:d8:59:78:5a:41:d5:47:78:f7:7d:29: 77:b6:49:ca:6c:85:5e:a3:dc:f9:c6:d9:fe:a8:97: cd:17:50:af:d0:54:b5:a4:ed:13:9d:e5:60:5e:7f: 54:ab:8f:32:9e:5f:d7:fe:17:23:96:fe:94:d7:e1: 5d:d3:1e:1f:05:18:5e:e6:00:ea:b4:df:42:67:6a: 8b:78:f2:80:92:ba:1c:54:c6:ec:32:a4:30:f0:1b: b6:c4:59:40:b9:0a:58:37:78:12:8d:42:3b:23:51: 9c:9c:2e:d8:db:c2:7d:39:4f:a5:19:00:a3:2c:c3: a9:2a:9e:1a:27:5a:06:f9:cc:e0:3d:97:e4:5c:11: a0:29:f7:90:13:6c:de:62:dd:ad:a1:da:40:de:95: 6a:82:d5:ff:45:da:54:15:1c:f1:99:b9:6a:c2:b3: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E8:A6:07:42:75:42:79:E3:C5:0F:6F:F4:83:EA:AD:CB:B0:4B:8F X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/weimB0J1QnnjxQ9v9IPqrcuwS48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.165.0/24 192.109.232.0/24 Signature Algorithm: sha256WithRSAEncryption 73:0c:45:ed:4b:20:25:67:57:6c:04:f8:8a:cf:c7:1b:f3:84: 94:77:f3:ef:88:ee:d9:3d:1d:66:0e:48:d7:8a:01:b4:e5:91: 52:48:6b:91:07:0a:89:23:19:f2:34:e4:3b:c7:dc:c7:dd:62: 40:53:0c:72:61:e9:5e:0e:15:9d:47:ed:01:62:13:6d:78:87: 46:3b:4e:c2:58:f2:be:46:93:6d:6c:0a:38:32:f8:73:ef:fe: 67:da:7a:25:88:e6:1b:e4:dd:34:82:4e:87:35:28:65:75:a9: 86:a0:2b:6a:93:33:6f:d1:93:04:8c:09:d2:b6:83:d0:58:73: 1d:df:d0:72:d5:78:e0:10:3f:61:96:3e:17:e6:62:b1:ac:9c: ed:c9:6c:b2:8e:f4:31:26:90:c4:44:0f:b6:c3:bd:bb:8f:f4: 5b:73:f1:16:f7:39:bf:2d:b6:1a:70:f8:55:d5:41:0f:fc:08: 8d:e6:5d:27:50:0d:05:31:01:67:dc:d5:a6:de:ca:49:15:38: 7c:13:f8:1d:d1:40:3b:72:c4:3c:99:e8:21:48:4d:11:fb:2b: eb:0e:d9:0b:7b:f7:3b:0a:f6:b6:d7:66:74:36:f7:a7:ab:54: be:3c:5f:ec:69:af:2a:77:00:44:45:75:2e:34:2b:bd:12:52: 40:a9:44:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrgts8MUMvZkr/b+FQkkpOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU4YTYwNzQyNzU0Mjc5ZTNjNTBmNmZmNDgzZWFhZGNiYjA0YjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxzylhUnJjgEXxpEVFW0w4y5QGfK aZcenbARwZuPih0IuuAv08tyK7wXwst8oGDYEjOcUSpq0cc3++U7X8+TeB9LY//e 1zAOR/oc3as/+j6nCPnRPm21JbeRG9k02Fl4WkHVR3j3fSl3tknKbIVeo9z5xtn+ qJfNF1Cv0FS1pO0TneVgXn9Uq48ynl/X/hcjlv6U1+Fd0x4fBRhe5gDqtN9CZ2qL ePKAkrocVMbsMqQw8Bu2xFlAuQpYN3gSjUI7I1GcnC7Y28J9OU+lGQCjLMOpKp4a J1oG+czgPZfkXBGgKfeQE2zeYt2todpA3pVqgtX/RdpUFRzxmblqwrP8LQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMHopgdCdUJ548UPb/SD6q3LsEuPMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvd2VpbUIwSjFRbm5qeFE5djlJUHFyY3V3UzQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY6lAwQA wG3oMA0GCSqGSIb3DQEBCwUAA4IBAQBzDEXtSyAlZ1dsBPiKz8cb84SUd/PviO7Z PR1mDkjXigG05ZFSSGuRBwqJIxnyNOQ7x9zH3WJAUwxyYeleDhWdR+0BYhNteIdG O07CWPK+RpNtbAo4Mvhz7/5n2noliOYb5N00gk6HNShldamGoCtqkzNv0ZMEjAnS toPQWHMd39By1XjgED9hlj4X5mKxrJztyWyyjvQxJpDERA+2w727j/Rbc/EW9zm/ LbYacPhV1UEP/AiN5l0nUA0FMQFn3NWm3spJFTh8E/gd0UA7csQ8meghSE0R+yvr DtkLe/c7Cva212Z0Nvenq1S+PF/saa8qdwBERXUuNCu9ElJAqUSf -----END CERTIFICATE-----Generated at Wed Dec 3 13:11:32 2025 by rpki-client