This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/WFNH6HOtR6EbYmoI7oJmjBC85CA.roa File: WFNH6HOtR6EbYmoI7oJmjBC85CA.roa (raw, json) Hash identifier: riD5vdwjLMPYyaXP6mmRBOnmZYcjqwE9dGa+53hkf5g= Subject key identifier: 58:53:47:E8:73:AD:47:A1:1B:62:6A:08:EE:82:66:8C:10:BC:E4:20 Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13 Certificate serial: 019AA2418A72B26179CE78FB0390ECD9EB3E Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/WFNH6HOtR6EbYmoI7oJmjBC85CA.roa Signing time: Thu 20 Nov 2025 17:13:15 +0000 ROA not before: Thu 20 Nov 2025 17:13:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47279 IP address blocks: 157.97.72.0/24 maxlen: 24 185.97.179.0/24 maxlen: 24 2a03:4340::/32 maxlen: 32 2a03:4340:fff1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:41:8a:72:b2:61:79:ce:78:fb:03:90:ec:d9:eb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13 Validity Not Before: Nov 20 17:13:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=585347e873ad47a11b626a08ee82668c10bce420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:24:cf:33:2e:4d:2c:0f:2c:48:8a:21:6f: 86:b3:9e:12:fa:e3:a2:d5:ef:6b:eb:24:72:da:9f: 7e:d5:68:98:69:25:95:3d:e2:03:8c:a2:87:2b:f9: 88:6f:f6:f7:11:59:b5:8f:9a:25:c1:3d:72:91:c9: a2:1f:00:ef:db:cc:f8:08:61:c6:99:a8:20:98:1e: 0e:05:5f:4b:72:ff:d4:87:45:4c:2c:d6:68:5b:76: e4:e6:02:43:56:8a:30:93:42:ee:3a:f3:b9:97:34: aa:0e:f2:c0:5f:ba:76:71:e0:4b:00:50:03:75:08: 6f:78:3f:75:2b:03:22:6f:d0:1d:bd:66:5e:dc:36: 58:66:60:4a:b6:34:49:05:b6:fc:17:23:bd:43:cb: 53:87:16:7d:1b:6d:f1:f5:24:f1:45:88:cb:94:f3: d0:d0:a7:98:cf:eb:0a:cd:48:c8:84:46:11:a7:91: cc:19:57:0c:d0:ce:a0:3c:0e:88:6d:60:54:67:bc: b3:ce:da:3f:67:92:e9:5d:01:d4:2a:5b:71:34:0e: fd:da:b4:1f:7e:95:11:8e:07:9b:40:da:4e:6c:a7: a7:30:31:1f:7c:9c:b5:f8:fc:ab:7e:13:2a:a6:b9: cb:6e:01:f5:20:b1:f3:a5:97:5e:cc:c5:d7:97:cb: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:47:E8:73:AD:47:A1:1B:62:6A:08:EE:82:66:8C:10:BC:E4:20 X509v3 Authority Key Identifier: keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/WFNH6HOtR6EbYmoI7oJmjBC85CA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.72.0/24 185.97.179.0/24 IPv6: 2a03:4340::/32 Signature Algorithm: sha256WithRSAEncryption 1c:0e:9d:ab:70:4d:1c:40:a7:fe:13:00:a6:9e:a2:04:2e:58: 76:d6:ac:0c:70:29:67:6e:a1:6f:4e:15:6f:fb:a6:49:9e:cd: 46:0b:e3:3e:d7:97:19:48:10:ce:cc:e1:c1:20:69:b5:2a:5f: 38:85:ac:15:b3:4f:f0:59:47:5e:da:51:14:fd:35:34:83:ed: fe:8c:68:02:64:68:1f:69:a2:9b:19:d0:f8:dc:86:7c:bf:15: 65:21:4d:64:51:90:58:a7:28:48:d8:88:1c:78:af:56:71:2f: 05:64:45:7f:96:65:17:dc:0e:86:e1:1b:41:c0:86:5b:c6:36: 3b:88:bd:3d:83:e0:54:07:50:60:f0:33:12:9a:81:3a:6c:06: 5a:60:d3:b6:d3:a5:2f:27:c3:02:b1:d9:03:a2:d9:d8:e0:1f: da:52:12:00:1a:91:fe:57:72:4e:40:3c:40:ad:6d:1c:1f:1d: 01:c0:eb:c2:38:f6:94:27:48:46:ac:f1:53:b7:e9:8b:f6:0f: 74:4b:a9:f9:d4:e1:5e:ae:12:37:e1:e0:8c:1e:a0:53:c7:27: 2b:c8:b3:06:78:e6:5b:b1:34:9e:a8:b7:1d:fd:6e:04:9d:4b: 5a:f4:eb:71:44:98:dc:89:f7:9d:3e:08:98:7d:bb:fc:53:90: 3e:68:9c:b9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqiQYpysmF5znj7A5Ds2es+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGNiZWU1MTk5MGYxZTA1YTlkMWRjMGMyZjJmM2E4YTM0 NzBjMTMwHhcNMjUxMTIwMTcxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODUzNDdlODczYWQ0N2ExMWI2MjZhMDhlZTgyNjY4YzEwYmNlNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeskzzMuTSwPLEiKIW+Gs54S+uOi 1e9r6yRy2p9+1WiYaSWVPeIDjKKHK/mIb/b3EVm1j5olwT1ykcmiHwDv28z4CGHG maggmB4OBV9Lcv/Uh0VMLNZoW3bk5gJDVoowk0LuOvO5lzSqDvLAX7p2ceBLAFAD dQhveD91KwMib9AdvWZe3DZYZmBKtjRJBbb8FyO9Q8tThxZ9G23x9STxRYjLlPPQ 0KeYz+sKzUjIhEYRp5HMGVcM0M6gPA6IbWBUZ7yzzto/Z5LpXQHUKltxNA792rQf fpURjgebQNpObKenMDEffJy1+PyrfhMqprnLbgH1ILHzpZdezMXXl8vDiwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFhTR+hzrUehG2JqCO6CZowQvOQgMB8GA1UdIwQY MBaAFA2MvuUZkPHgWp0dwMLy86ijRwwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWIt MWIxZTc4Y2JiYjA5LzEvV0ZOSDZIT3RSNkViWW1vSTdvSm1qQkM4NUNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWItMWIxZTc4Y2JiYjA5 LzEvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAnWFIAwQA uWGzMA0EAgACMAcDBQAqA0NAMA0GCSqGSIb3DQEBCwUAA4IBAQAcDp2rcE0cQKf+ EwCmnqIELlh21qwMcClnbqFvThVv+6ZJns1GC+M+15cZSBDOzOHBIGm1Kl84hawV s0/wWUde2lEU/TU0g+3+jGgCZGgfaaKbGdD43IZ8vxVlIU1kUZBYpyhI2IgceK9W cS8FZEV/lmUX3A6G4RtBwIZbxjY7iL09g+BUB1Bg8DMSmoE6bAZaYNO206UvJ8MC sdkDotnY4B/aUhIAGpH+V3JOQDxArW0cHx0BwOvCOPaUJ0hGrPFTt+mL9g90S6n5 1OFerhI34eCMHqBTxycryLMGeOZbsTSeqLcd/W4EnUta9OtxRJjcifedPgiYfbv8 U5A+aJy5 -----END CERTIFICATE-----Generated at Fri Dec 5 08:38:03 2025 by rpki-client