This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/wjFAe85gcJ2SfXs40DJdEDbXotE.roa File: wjFAe85gcJ2SfXs40DJdEDbXotE.roa (raw, json) Hash identifier: DSpyolAhawhBau7UeDVnlkKHfjXo0qD3j7nDhPuigrs= Subject key identifier: C2:31:40:7B:CE:60:70:9D:92:7D:7B:38:D0:32:5D:10:36:D7:A2:D1 Certificate issuer: /CN=57c1fe8083646749816ad3fa64098345fb61e9f5 Certificate serial: 019AFECDC51E5FF3D3FC722007CB1A196155 Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/wjFAe85gcJ2SfXs40DJdEDbXotE.roa Signing time: Mon 08 Dec 2025 16:31:29 +0000 ROA not before: Mon 08 Dec 2025 16:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6461 IP address blocks: 91.229.222.0/23 maxlen: 24 146.255.104.0/21 maxlen: 24 164.138.80.0/21 maxlen: 24 185.16.224.0/22 maxlen: 24 185.47.216.0/22 maxlen: 24 185.56.40.0/22 maxlen: 24 2a04:3c0::/29 maxlen: 29 2a04:d840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:cd:c5:1e:5f:f3:d3:fc:72:20:07:cb:1a:19:61:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5 Validity Not Before: Dec 8 16:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c231407bce60709d927d7b38d0325d1036d7a2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:25:04:45:5e:69:90:3b:d7:f4:37:57:46: 11:0c:fb:0a:f3:da:c3:bd:12:88:e9:b7:fb:08:f6: e2:10:99:5f:ff:6d:a4:3e:6f:a5:88:87:67:d5:bc: 8a:05:27:fd:07:05:76:6f:59:10:1c:c6:a3:77:19: eb:57:90:ed:13:c8:a3:e1:63:9e:bf:b9:8e:16:b5: cb:f7:4e:de:26:4b:c6:61:3f:c1:f2:8e:01:30:ff: eb:df:75:5b:48:21:70:22:e4:6f:c3:11:09:8a:67: 60:22:15:34:15:4e:85:02:88:42:aa:77:34:42:19: ce:31:0d:c2:b3:39:5c:65:37:07:94:a0:d8:df:93: a3:c2:0b:e7:ac:6f:9b:4a:b2:03:d0:39:dd:73:1c: b7:c3:04:d6:3f:26:8e:f6:81:37:8d:6b:f3:b3:f3: b9:8f:af:c5:7e:3c:a2:f9:c7:2c:89:6a:99:5a:8e: 37:d1:91:be:4f:77:15:9d:89:f0:93:65:3b:9b:c1: 22:51:d1:30:0d:2b:45:96:8b:29:04:2a:83:c6:0d: 0d:ed:d2:cd:57:5a:32:85:9b:d9:d5:5d:d4:bc:7c: 21:68:40:4c:c6:ad:d6:91:3a:e0:31:92:a0:8b:a4: 39:5b:16:b4:8d:4b:3e:2e:c2:33:e7:27:e1:54:f4: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:31:40:7B:CE:60:70:9D:92:7D:7B:38:D0:32:5D:10:36:D7:A2:D1 X509v3 Authority Key Identifier: keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/wjFAe85gcJ2SfXs40DJdEDbXotE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.222.0/23 146.255.104.0/21 164.138.80.0/21 185.16.224.0/22 185.47.216.0/22 185.56.40.0/22 IPv6: 2a04:3c0::/29 2a04:d840::/29 Signature Algorithm: sha256WithRSAEncryption 36:52:d9:96:e5:8e:44:e2:6d:04:64:dc:d5:b1:b4:a0:45:55: f3:d8:a4:e6:cc:b4:11:ee:9c:51:56:10:a1:52:eb:0c:f6:e7: d0:f8:dd:2a:4f:2e:8b:1c:62:10:d1:c9:03:c7:4d:a9:71:5b: 27:86:38:f5:f7:a9:14:bb:57:29:23:85:e5:25:32:cf:71:a5: 8b:d0:2a:46:cc:b5:16:13:6c:f0:58:2d:91:30:ff:7a:05:8b: 13:7c:ed:ac:36:08:b3:3d:2f:1c:b5:1e:2f:38:0a:2a:05:a0: 71:e8:1e:1b:81:b5:11:5e:67:da:82:c8:39:f8:90:ba:65:6c: 56:88:24:a9:2b:c7:a0:40:fd:2c:3b:71:46:e7:30:6b:fc:a4: 18:fe:27:91:1d:25:d5:28:c5:b2:0a:ca:9a:51:cb:90:f0:c3: a6:a1:35:0e:da:98:7a:ec:8c:b4:6a:8a:2c:e8:6a:e6:55:10: a3:b7:e1:96:15:55:e9:1a:1f:65:8a:cf:3d:43:d1:78:eb:bc: 1c:74:d7:eb:39:e0:12:4b:22:f8:40:69:57:14:1b:3d:95:e7: 09:96:f6:4c:79:07:58:03:84:b2:82:cb:86:3e:7d:37:07:10: 27:35:9e:6a:fd:4e:a8:bc:a7:8d:c4:ed:00:d9:9c:ec:f9:e8: 5a:37:90:34 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZr+zcUeX/PT/HIgB8saGWFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzFmZTgwODM2NDY3NDk4MTZhZDNmYTY0MDk4MzQ1ZmI2 MWU5ZjUwHhcNMjUxMjA4MTYzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjMxNDA3YmNlNjA3MDlkOTI3ZDdiMzhkMDMyNWQxMDM2ZDdhMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFolBEVeaZA71/Q3V0YRDPsK89rD vRKI6bf7CPbiEJlf/22kPm+liIdn1byKBSf9BwV2b1kQHMajdxnrV5DtE8ij4WOe v7mOFrXL907eJkvGYT/B8o4BMP/r33VbSCFwIuRvwxEJimdgIhU0FU6FAohCqnc0 QhnOMQ3CszlcZTcHlKDY35OjwgvnrG+bSrID0Dndcxy3wwTWPyaO9oE3jWvzs/O5 j6/Ffjyi+ccsiWqZWo430ZG+T3cVnYnwk2U7m8EiUdEwDStFlospBCqDxg0N7dLN V1oyhZvZ1V3UvHwhaEBMxq3WkTrgMZKgi6Q5Wxa0jUs+LsIz5yfhVPRiYwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFMIxQHvOYHCdkn17ONAyXRA216LRMB8GA1UdIwQY MBaAFFfB/oCDZGdJgWrT+mQJg0X7Yen1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODct ZjMyMDY5ZWM0ZWU1LzEvd2pGQWU4NWdjSjJTZlhzNDBESmRFRGJYb3RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODctZjMyMDY5ZWM0ZWU1 LzEvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQBW+XeAwQD kv9oAwQDpIpQAwQCuRDgAwQCuS/YAwQCuTgoMBQEAgACMA4DBQMqBAPAAwUDKgTY QDANBgkqhkiG9w0BAQsFAAOCAQEANlLZluWOROJtBGTc1bG0oEVV89ik5sy0Ee6c UVYQoVLrDPbn0PjdKk8uixxiENHJA8dNqXFbJ4Y49fepFLtXKSOF5SUyz3Gli9Aq Rsy1FhNs8FgtkTD/egWLE3ztrDYIsz0vHLUeLzgKKgWgcegeG4G1EV5n2oLIOfiQ umVsVogkqSvHoED9LDtxRucwa/ykGP4nkR0l1SjFsgrKmlHLkPDDpqE1DtqYeuyM tGqKLOhq5lUQo7fhlhVV6RofZYrPPUPReOu8HHTX6zngEksi+EBpVxQbPZXnCZb2 THkHWAOEsoLLhj59NwcQJzWeav1OqLynjcTtANmc7PnoWjeQNA== -----END CERTIFICATE-----Generated at Mon Dec 15 22:20:07 2025 by rpki-client