This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/W1n1PGNxvSJLvva6M7HJyXlvVrw.roa File: W1n1PGNxvSJLvva6M7HJyXlvVrw.roa (raw, json) Hash identifier: IwTiWZ91NQ9Hk8zwUvKabPBS+en3ECAY+/MeH16SRII= Subject key identifier: 5B:59:F5:3C:63:71:BD:22:4B:BE:F6:BA:33:B1:C9:C9:79:6F:56:BC Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019A79633C1CF7B500E2F82220CD678A9165 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/W1n1PGNxvSJLvva6M7HJyXlvVrw.roa Signing time: Wed 12 Nov 2025 18:45:37 +0000 ROA not before: Wed 12 Nov 2025 18:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62300 IP address blocks: 213.108.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:63:3c:1c:f7:b5:00:e2:f8:22:20:cd:67:8a:91:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Nov 12 18:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b59f53c6371bd224bbef6ba33b1c9c9796f56bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:63:8b:bb:29:25:d0:ff:d3:45:ad:b3:69: b7:3d:11:93:df:e1:fa:96:03:86:0c:6c:13:fe:a1: 14:8d:3c:df:f1:8f:e5:4d:fc:35:89:ab:aa:58:fe: e8:72:79:0d:35:73:49:7d:20:c6:11:ff:60:44:ae: cf:66:24:1b:70:bc:0e:9f:f8:61:a5:2b:61:6d:22: 01:6e:c9:d7:87:8e:ee:71:b4:7c:f6:0f:ce:7d:34: cc:0f:c1:de:8d:01:8f:3e:dc:56:8a:fc:2d:9d:5d: c2:73:85:46:50:bd:91:1c:15:29:89:59:63:95:b3: e5:ba:a2:9a:5f:14:db:fd:3c:6a:37:4f:43:48:5b: 81:f6:4d:0d:7b:3c:6d:08:7a:39:52:e9:d8:98:b3: 9f:8e:62:88:43:80:94:43:f4:fc:c3:07:e9:64:21: c7:94:00:d4:4c:fc:c1:58:c3:cc:b0:94:1b:80:64: 2c:28:42:44:38:00:0d:9f:36:1c:a0:6b:c1:90:fe: 3b:e5:e7:a6:f7:46:39:2b:7e:ca:8e:21:4e:7d:d1: 46:5b:74:74:e4:b8:c5:c1:0e:f2:b8:80:74:50:e5: 1a:b2:72:a9:50:86:54:61:c5:ec:3f:33:1e:9a:03: 38:63:9f:d7:13:f3:11:ec:d1:54:59:2f:32:7c:79: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:59:F5:3C:63:71:BD:22:4B:BE:F6:BA:33:B1:C9:C9:79:6F:56:BC X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/W1n1PGNxvSJLvva6M7HJyXlvVrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.108.7.0/24 Signature Algorithm: sha256WithRSAEncryption 60:53:2c:e8:6d:c6:d0:af:f5:6d:03:1a:2a:46:d8:44:28:fe: c5:1c:45:21:da:71:de:9e:10:3f:5f:cf:bf:b9:f0:9c:79:2c: 33:32:c3:88:fc:c8:3b:0f:19:f3:8d:4f:fd:a6:92:4c:8c:05: b4:2e:c7:54:33:26:ba:86:c3:ae:3f:6b:b4:cd:0e:1e:c8:64: 8b:ab:7a:a8:83:2f:77:45:48:ae:5a:94:ca:9e:97:5f:2b:9e: ac:de:be:86:52:7c:59:59:4c:15:04:6a:7e:2b:92:0b:5b:08: fc:5a:19:0e:ed:ec:59:b5:09:dc:96:8f:79:bc:0b:09:79:ea: cc:6e:22:0d:a8:27:2a:da:da:93:bf:00:10:58:2b:bd:f7:dd: 5d:b1:ae:b7:2e:77:00:29:8e:60:80:50:cc:8d:8d:03:c8:dd: 74:dc:a0:1f:cb:52:c2:55:08:59:ad:2c:1e:97:8a:b8:b1:25: 98:d1:ae:0e:53:aa:6f:bc:cb:bf:63:c6:86:26:74:34:98:f1: 3a:d3:30:17:e1:d2:e1:71:6f:6f:56:c3:cc:7c:c8:19:c1:eb: 43:a8:b8:0e:78:e1:6f:81:85:8e:48:c2:8f:09:4e:a3:54:11: 4c:2d:2f:a0:8b:71:c3:5d:0d:9a:33:7e:e2:2d:c2:8a:40:84: c8:7d:84:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp5Yzwc97UA4vgiIM1nipFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjUxMTEyMTg0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjU5ZjUzYzYzNzFiZDIyNGJiZWY2YmEzM2IxYzljOTc5NmY1NmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F9ji7spJdD/00Wts2m3PRGT3+H6 lgOGDGwT/qEUjTzf8Y/lTfw1iauqWP7ocnkNNXNJfSDGEf9gRK7PZiQbcLwOn/hh pSthbSIBbsnXh47ucbR89g/OfTTMD8HejQGPPtxWivwtnV3Cc4VGUL2RHBUpiVlj lbPluqKaXxTb/TxqN09DSFuB9k0NezxtCHo5UunYmLOfjmKIQ4CUQ/T8wwfpZCHH lADUTPzBWMPMsJQbgGQsKEJEOAANnzYcoGvBkP475eem90Y5K37KjiFOfdFGW3R0 5LjFwQ7yuIB0UOUasnKpUIZUYcXsPzMemgM4Y5/XE/MR7NFUWS8yfHmqPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtZ9Txjcb0iS772ujOxycl5b1a8MB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvVzFuMVBHTnh2U0pMdnZhNk03SEp5WGx2VnJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1WwHMA0G CSqGSIb3DQEBCwUAA4IBAQBgUyzobcbQr/VtAxoqRthEKP7FHEUh2nHenhA/X8+/ ufCceSwzMsOI/Mg7DxnzjU/9ppJMjAW0LsdUMya6hsOuP2u0zQ4eyGSLq3qogy93 RUiuWpTKnpdfK56s3r6GUnxZWUwVBGp+K5ILWwj8WhkO7exZtQnclo95vAsJeerM biINqCcq2tqTvwAQWCu9991dsa63LncAKY5ggFDMjY0DyN103KAfy1LCVQhZrSwe l4q4sSWY0a4OU6pvvMu/Y8aGJnQ0mPE60zAX4dLhcW9vVsPMfMgZwetDqLgOeOFv gYWOSMKPCU6jVBFMLS+gi3HDXQ2aM37iLcKKQITIfYT2 -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:11 2025 by rpki-client