This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wc4hFAI4dfchneYJJrM0WfNCWDU.roa File: wc4hFAI4dfchneYJJrM0WfNCWDU.roa (raw, json) Hash identifier: aFj4CM8VCABdDCmgM+cLz1KOUzjY1P84XE6inIs87eM= Subject key identifier: C1:CE:21:14:02:38:75:F7:21:9D:E6:09:26:B3:34:59:F3:42:58:35 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AE559BA78C2F7CB18E616EC023D320218 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wc4hFAI4dfchneYJJrM0WfNCWDU.roa Signing time: Wed 03 Dec 2025 17:54:14 +0000 ROA not before: Wed 03 Dec 2025 17:54:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 151.242.114.0/24 maxlen: 24 151.243.30.0/24 maxlen: 24 151.243.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:59:ba:78:c2:f7:cb:18:e6:16:ec:02:3d:32:02:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 3 17:54:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1ce2114023875f7219de60926b33459f3425835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:d6:fe:b2:62:68:16:a5:9d:fa:0c:4d:ed: 5c:93:46:8e:ca:82:7d:92:4e:79:7d:9d:86:20:b8: bd:cb:f0:26:cd:1f:14:e2:59:e9:ae:6e:65:d0:5b: f7:d3:63:fc:02:71:20:11:cd:96:f1:7d:cb:f3:fe: 43:9e:7f:8d:03:62:72:4b:40:4f:21:27:f9:a1:16: 66:57:f2:b9:97:e4:da:d7:89:76:40:96:cc:67:25: 29:d9:24:bc:e7:8e:4c:5c:36:71:c2:12:47:96:fd: 4a:b2:68:6a:e9:9a:7c:07:1e:9b:df:3f:95:45:c5: a6:ed:e8:53:73:72:a2:c8:5a:76:ab:3a:b5:12:e3: bd:4a:a1:89:13:9b:bd:ab:e3:fe:3d:57:87:f7:04: 0d:43:1d:f0:65:97:9c:bf:8b:fb:b8:96:a5:da:ba: 37:6a:72:0b:53:55:f3:ed:dd:4e:87:70:50:9e:a1: 47:bf:65:0b:e9:1a:29:d6:f7:b7:4a:c8:1f:6d:67: bc:05:02:12:37:37:53:95:99:49:26:14:35:31:20: 21:e6:9b:fa:57:67:9c:5c:31:dc:8d:2a:b6:76:fb: 21:35:ab:a3:5b:9c:b6:de:93:5d:e9:4c:f1:ea:48: 52:54:06:55:17:62:eb:ad:db:0f:32:e2:6a:d9:dd: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CE:21:14:02:38:75:F7:21:9D:E6:09:26:B3:34:59:F3:42:58:35 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wc4hFAI4dfchneYJJrM0WfNCWDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.114.0/24 151.243.30.0/24 151.243.115.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:98:f7:e8:ea:3f:6d:bb:55:af:34:63:9b:49:4e:33:56:ad: 89:85:d1:8f:ea:eb:8c:a6:f2:5b:57:a7:48:5d:10:e0:9e:f6: d0:cc:7d:cf:40:72:62:69:bb:d9:04:3d:67:46:48:3b:98:d0: 87:66:50:6e:ae:a7:7e:ac:49:35:a3:f6:34:33:e6:71:3a:d8: 5a:45:cc:15:60:b8:a7:09:c9:a9:77:dd:29:05:24:3f:f8:a4: 73:7e:10:22:be:f9:f7:3c:40:85:46:1b:c2:96:67:8a:e8:3b: 3a:6d:da:2f:30:26:4b:76:f0:2b:86:26:da:60:76:a1:b4:19: f9:92:18:6f:92:6c:6d:86:7a:fb:76:5c:45:ad:11:b1:98:04: b9:cd:1e:e6:fc:b4:d4:ff:d5:40:81:a5:f8:16:d0:b6:5c:7c: 21:b5:96:b1:f9:e6:de:ff:38:7b:80:bf:79:f4:38:da:b3:87: ff:ab:cd:60:ed:10:60:a1:6d:b1:ae:45:8b:9d:92:e0:7b:2b: d7:73:08:1b:69:e9:07:66:ec:54:33:d5:d3:88:92:dc:32:26: 26:bf:ed:78:2b:08:4e:cf:68:03:23:b3:7a:a9:f7:f6:2c:32: ce:7c:ea:82:18:d4:87:60:b1:9d:b4:2e:75:bf:d2:6e:29:34: 11:2b:3f:91 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrlWbp4wvfLGOYW7AI9MgIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAzMTc1NDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWNlMjExNDAyMzg3NWY3MjE5ZGU2MDkyNmIzMzQ1OWYzNDI1ODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKrW/rJiaBalnfoMTe1ck0aOyoJ9 kk55fZ2GILi9y/AmzR8U4lnprm5l0Fv302P8AnEgEc2W8X3L8/5Dnn+NA2JyS0BP ISf5oRZmV/K5l+Ta14l2QJbMZyUp2SS8545MXDZxwhJHlv1Ksmhq6Zp8Bx6b3z+V RcWm7ehTc3KiyFp2qzq1EuO9SqGJE5u9q+P+PVeH9wQNQx3wZZecv4v7uJal2ro3 anILU1Xz7d1Oh3BQnqFHv2UL6Rop1ve3SsgfbWe8BQISNzdTlZlJJhQ1MSAh5pv6 V2ecXDHcjSq2dvshNaujW5y23pNd6Uzx6khSVAZVF2LrrdsPMuJq2d3u4QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMHOIRQCOHX3IZ3mCSazNFnzQlg1MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvd2M0aEZBSTRkZmNobmVZSkpyTTBXZk5DV0RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/JyAwQA l/MeAwQAl/NzMA0GCSqGSIb3DQEBCwUAA4IBAQCOmPfo6j9tu1WvNGObSU4zVq2J hdGP6uuMpvJbV6dIXRDgnvbQzH3PQHJiabvZBD1nRkg7mNCHZlBurqd+rEk1o/Y0 M+ZxOthaRcwVYLinCcmpd90pBSQ/+KRzfhAivvn3PECFRhvClmeK6Ds6bdovMCZL dvArhibaYHahtBn5khhvkmxthnr7dlxFrRGxmAS5zR7m/LTU/9VAgaX4FtC2XHwh tZax+ebe/zh7gL959Djas4f/q81g7RBgoW2xrkWLnZLgeyvXcwgbaekHZuxUM9XT iJLcMiYmv+14KwhOz2gDI7N6qff2LDLOfOqCGNSHYLGdtC51v9JuKTQRKz+R -----END CERTIFICATE-----Generated at Thu Dec 4 21:25:06 2025 by rpki-client