This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WMGRZNKG4xe_7uw08QwiXOk9Kd0.roa File: WMGRZNKG4xe_7uw08QwiXOk9Kd0.roa (raw, json) Hash identifier: NLCbdlU+5vkKuc8CZM1s6PicnPxtP7FRoOlOG/G652U= Subject key identifier: 58:C1:91:64:D2:86:E3:17:BF:EE:EC:34:F1:0C:22:5C:E9:3D:29:DD Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019ADE2AF59891C39E50A2AB05544CDC5328 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WMGRZNKG4xe_7uw08QwiXOk9Kd0.roa Signing time: Tue 02 Dec 2025 08:25:48 +0000 ROA not before: Tue 02 Dec 2025 08:25:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 212.134.19.0/24 maxlen: 24 212.134.83.0/24 maxlen: 24 212.134.87.0/24 maxlen: 24 212.134.89.0/24 maxlen: 24 212.134.109.0/24 maxlen: 24 212.134.148.0/24 maxlen: 24 212.134.156.0/24 maxlen: 24 212.134.232.0/24 maxlen: 24 212.135.20.0/24 maxlen: 24 212.135.21.0/24 maxlen: 24 212.135.27.0/24 maxlen: 24 212.135.31.0/24 maxlen: 24 212.135.155.0/24 maxlen: 24 212.135.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:2a:f5:98:91:c3:9e:50:a2:ab:05:54:4c:dc:53:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 2 08:25:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=58c19164d286e317bfeeec34f10c225ce93d29dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e5:ea:ab:22:3e:98:b5:5e:c3:0d:f5:b1:c5: 12:cf:95:8c:e4:5f:d8:4a:b9:4f:a0:b3:c5:ea:6c: 0e:a8:3a:86:63:70:7f:56:fc:51:c9:6f:8b:d4:2a: f8:6c:5e:4b:03:8d:d8:bd:09:90:74:70:37:5b:60: b3:ca:e1:7d:23:3d:85:af:78:6c:4f:a9:e5:d8:b7: 0e:7d:6a:64:ff:f7:2c:37:47:a5:a6:23:9b:17:45: bd:c9:9a:82:e9:94:51:98:91:82:7d:ac:9e:1e:f6: ab:76:e9:b2:56:22:46:29:83:05:a1:60:ec:1f:05: 19:f9:64:2c:17:a7:75:ca:69:c3:6b:6c:2b:a7:c4: b2:dd:5a:a6:70:60:15:18:99:6f:85:00:e8:2e:6c: 68:26:2e:06:0f:c1:49:c5:7e:41:30:44:b9:58:c8: 31:f4:f2:1c:b9:e0:c0:c7:2e:92:18:c9:f0:03:0d: db:f5:c6:de:ae:35:b8:1a:da:fe:dd:4d:b5:51:f0: ad:81:b5:33:77:ac:c4:88:f3:e1:89:05:53:a7:6a: a0:75:48:81:da:50:67:5c:cc:d4:a2:35:9a:72:3d: 08:e8:e7:5f:ee:48:0d:2c:13:3a:7a:6f:0f:f5:f4: 4a:39:24:1d:3c:b8:6c:09:1c:8d:83:e8:35:33:77: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C1:91:64:D2:86:E3:17:BF:EE:EC:34:F1:0C:22:5C:E9:3D:29:DD X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WMGRZNKG4xe_7uw08QwiXOk9Kd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.19.0/24 212.134.83.0/24 212.134.87.0/24 212.134.89.0/24 212.134.109.0/24 212.134.148.0/24 212.134.156.0/24 212.134.232.0/24 212.135.20.0/23 212.135.27.0/24 212.135.31.0/24 212.135.155.0/24 212.135.158.0/24 Signature Algorithm: sha256WithRSAEncryption a8:87:f1:de:f7:03:91:92:5f:3d:64:b9:9b:40:f5:29:ff:29: 14:12:6b:0d:e7:f0:4e:a2:0c:bc:e3:7d:cf:dc:16:90:c5:02: c7:99:8e:7e:03:a0:68:41:36:cc:21:92:2e:3b:f4:81:0e:00: cb:77:8a:46:b4:a3:07:2c:e6:d3:c4:dd:ff:df:86:d3:35:10: fe:ae:2a:12:a7:07:b7:94:8d:6d:12:33:80:eb:d2:ac:31:92: 94:d8:e0:54:c5:34:30:af:26:0b:2d:68:d8:99:d1:4f:75:25: 1e:47:a9:1a:37:5b:24:9a:0c:8b:b2:fd:38:7d:04:a1:a1:c6: f2:a3:3a:74:c8:f9:c3:43:93:1f:83:87:bb:98:1e:2d:3f:9f: 1a:7e:57:73:5d:56:be:f4:22:fc:52:fa:e8:cc:7d:7b:1b:90: 1c:98:b9:3c:6c:34:26:68:92:4e:a7:67:e7:eb:1e:a6:d8:f3: 09:1b:fb:c1:73:b2:13:2d:6e:18:60:c6:c4:f5:0b:12:c0:86: b4:b6:b8:76:4c:4e:7c:04:d5:70:bc:2b:a0:b3:b7:9e:36:fc: e4:11:eb:8c:e2:89:f5:fb:f9:52:5f:bc:c2:d8:af:ae:26:84: 1a:9a:e5:31:8c:b4:ee:ef:d2:4f:1e:b3:83:bb:38:03:e2:21: e0:3e:70:c4 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZreKvWYkcOeUKKrBVRM3FMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjAyMDgyNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGMxOTE2NGQyODZlMzE3YmZlZWVjMzRmMTBjMjI1Y2U5M2QyOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuXqqyI+mLVeww31scUSz5WM5F/Y SrlPoLPF6mwOqDqGY3B/VvxRyW+L1Cr4bF5LA43YvQmQdHA3W2CzyuF9Iz2Fr3hs T6nl2LcOfWpk//csN0elpiObF0W9yZqC6ZRRmJGCfayeHvardumyViJGKYMFoWDs HwUZ+WQsF6d1ymnDa2wrp8Sy3VqmcGAVGJlvhQDoLmxoJi4GD8FJxX5BMES5WMgx 9PIcueDAxy6SGMnwAw3b9cberjW4Gtr+3U21UfCtgbUzd6zEiPPhiQVTp2qgdUiB 2lBnXMzUojWacj0I6Odf7kgNLBM6em8P9fRKOSQdPLhsCRyNg+g1M3eRtQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFFjBkWTShuMXv+7sNPEMIlzpPSndMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvV01HUlpOS0c0eGVfN3V3MDhRd2lYT2s5S2QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQA1IYTAwQA 1IZTAwQA1IZXAwQA1IZZAwQA1IZtAwQA1IaUAwQA1IacAwQA1IboAwQB1IcUAwQA 1IcbAwQA1IcfAwQA1IebAwQA1IeeMA0GCSqGSIb3DQEBCwUAA4IBAQCoh/He9wOR kl89ZLmbQPUp/ykUEmsN5/BOogy8433P3BaQxQLHmY5+A6BoQTbMIZIuO/SBDgDL d4pGtKMHLObTxN3/34bTNRD+rioSpwe3lI1tEjOA69KsMZKU2OBUxTQwryYLLWjY mdFPdSUeR6kaN1skmgyLsv04fQShocbyozp0yPnDQ5Mfg4e7mB4tP58afldzXVa+ 9CL8UvrozH17G5AcmLk8bDQmaJJOp2fn6x6m2PMJG/vBc7ITLW4YYMbE9QsSwIa0 trh2TE58BNVwvCugs7eeNvzkEeuM4on1+/lSX7zC2K+uJoQamuUxjLTu79JPHrOD uzgD4iHgPnDE -----END CERTIFICATE-----Generated at Thu Dec 4 19:54:39 2025 by rpki-client