This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WgqYe5ugEeQvguNhllKxD4iuCHQ.roa File: WgqYe5ugEeQvguNhllKxD4iuCHQ.roa (raw, json) Hash identifier: UC5BgAEa1NZJJ1uDh7oWw05jcVeYG7afSFGC5IP0LU0= Subject key identifier: 5A:0A:98:7B:9B:A0:11:E4:2F:82:E3:61:96:52:B1:0F:88:AE:08:74 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A9C12F01713B7E1AD569DDF1CAD1BE5C1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WgqYe5ugEeQvguNhllKxD4iuCHQ.roa Signing time: Wed 19 Nov 2025 12:24:38 +0000 ROA not before: Wed 19 Nov 2025 12:24:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215391 IP address blocks: 31.56.214.0/24 maxlen: 24 217.60.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:12:f0:17:13:b7:e1:ad:56:9d:df:1c:ad:1b:e5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 19 12:24:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a0a987b9ba011e42f82e3619652b10f88ae0874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:fd:e6:5e:75:95:29:41:d2:61:08:6b:1e: 76:e0:1f:0c:66:eb:71:ea:43:f6:9c:93:ce:4e:57: 30:de:ce:07:35:13:7e:51:a7:4b:29:68:c3:7d:41: 11:ba:06:09:eb:82:1e:55:09:de:a5:94:02:dd:25: 3e:9b:fd:97:09:93:1f:30:cb:01:ad:07:c1:23:af: f0:b1:f3:2b:ed:73:1c:3b:c0:0f:a6:1b:fb:59:6f: f5:86:8c:e8:18:a8:cb:09:80:33:b2:dc:ab:b3:90: d5:b3:ef:1b:8b:e9:70:c8:8d:2c:5f:3c:af:23:dd: 08:d3:43:78:f1:e1:3e:bc:0e:43:a4:aa:79:6e:7d: a7:9f:71:35:65:82:75:50:f3:54:3a:17:18:bf:44: 2f:af:82:de:05:c3:34:0f:92:60:ae:4d:48:4f:67: b2:81:24:4a:7a:83:0a:3f:94:da:58:ce:a4:a6:13: 49:92:72:71:a5:b0:87:a6:44:55:2f:5b:ba:d3:fb: 28:e7:ef:9d:04:e9:76:9e:9b:88:bf:6d:31:43:a1: a7:0e:00:77:54:bd:69:cc:26:87:9b:1a:6a:63:26: 12:45:98:f7:f6:43:2e:40:e7:48:84:e6:41:c7:45: 08:2c:6f:08:e6:82:4d:d9:df:3e:78:4b:5e:4f:e3: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0A:98:7B:9B:A0:11:E4:2F:82:E3:61:96:52:B1:0F:88:AE:08:74 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WgqYe5ugEeQvguNhllKxD4iuCHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.214.0/24 217.60.254.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:c9:b1:4e:14:4d:22:7f:40:99:e3:02:81:82:6b:40:6a:6a: 6c:a4:54:78:a4:5f:b1:b7:0e:2d:1b:f3:6c:8a:ef:6f:e0:ac: 4d:88:ca:8b:8e:54:23:d9:66:b4:54:c8:67:33:64:49:be:d0: 5b:95:10:5a:cf:c9:da:9c:a4:af:ee:eb:79:00:b2:7b:88:38: 2b:e8:04:bd:15:b2:1b:22:9a:14:65:41:6e:8f:4e:98:d4:7b: 0e:59:97:9b:af:1b:ca:02:85:0d:2b:1f:de:f1:11:c0:60:af: 14:1d:d4:25:22:d0:b0:f2:da:67:df:30:78:77:d9:d5:75:68: 6c:84:99:a9:79:3d:bb:d2:a7:bb:3f:d5:fa:8c:6f:38:34:ec: d2:d7:65:df:69:d6:d0:a6:80:42:73:48:43:fd:9b:ef:a2:fb: 02:ae:81:f7:4e:c2:21:06:8b:61:c8:46:17:75:d0:a9:2e:db: 77:d2:30:1b:f8:2f:d3:79:c7:5a:8e:a4:c0:ee:4c:6a:66:3e: c8:14:1e:1e:66:b1:a1:d0:ae:73:c1:e3:b2:69:d6:ea:12:10: 4c:59:c7:4d:c1:ba:84:0e:03:f9:22:75:e7:2f:b1:ab:6a:4d: f3:aa:32:88:09:35:63:f8:db:98:29:39:9c:8f:cf:26:3e:a1: e3:21:29:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqcEvAXE7fhrVad3xytG+XBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE5MTIyNDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTBhOTg3YjliYTAxMWU0MmY4MmUzNjE5NjUyYjEwZjg4YWUwODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RH95l51lSlB0mEIax524B8MZutx 6kP2nJPOTlcw3s4HNRN+UadLKWjDfUERugYJ64IeVQnepZQC3SU+m/2XCZMfMMsB rQfBI6/wsfMr7XMcO8APphv7WW/1hozoGKjLCYAzstyrs5DVs+8bi+lwyI0sXzyv I90I00N48eE+vA5DpKp5bn2nn3E1ZYJ1UPNUOhcYv0Qvr4LeBcM0D5Jgrk1IT2ey gSRKeoMKP5TaWM6kphNJknJxpbCHpkRVL1u60/so5++dBOl2npuIv20xQ6GnDgB3 VL1pzCaHmxpqYyYSRZj39kMuQOdIhOZBx0UILG8I5oJN2d8+eEteT+OGmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFoKmHuboBHkL4LjYZZSsQ+Irgh0MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvV2dxWWU1dWdFZVF2Z3VOaGxsS3hENGl1Q0hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjWAwQA 2Tz+MA0GCSqGSIb3DQEBCwUAA4IBAQANybFOFE0if0CZ4wKBgmtAampspFR4pF+x tw4tG/Nsiu9v4KxNiMqLjlQj2Wa0VMhnM2RJvtBblRBaz8nanKSv7ut5ALJ7iDgr 6AS9FbIbIpoUZUFuj06Y1HsOWZebrxvKAoUNKx/e8RHAYK8UHdQlItCw8tpn3zB4 d9nVdWhshJmpeT270qe7P9X6jG84NOzS12XfadbQpoBCc0hD/ZvvovsCroH3TsIh BothyEYXddCpLtt30jAb+C/TecdajqTA7kxqZj7IFB4eZrGh0K5zweOyadbqEhBM WcdNwbqEDgP5InXnL7Grak3zqjKICTVj+NuYKTmcj88mPqHjISkG -----END CERTIFICATE-----Generated at Fri Nov 21 07:29:11 2025 by rpki-client