This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/Wecs21jHArlU5fW7lAY63HQJiXU.roa File: Wecs21jHArlU5fW7lAY63HQJiXU.roa (raw, json) Hash identifier: P/NNDAEFqPgDMB+EStVDjzjzqcSrltfHHyA1j1q+5I8= Subject key identifier: 59:E7:2C:DB:58:C7:02:B9:54:E5:F5:BB:94:06:3A:DC:74:09:89:75 Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37 Certificate serial: 019ADDDA62841CE2EC502A47BAD88329665B Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/Wecs21jHArlU5fW7lAY63HQJiXU.roa Signing time: Tue 02 Dec 2025 06:57:48 +0000 ROA not before: Tue 02 Dec 2025 06:57:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198068 IP address blocks: 5.45.112.0/20 maxlen: 32 5.101.112.0/20 maxlen: 32 5.101.176.0/20 maxlen: 32 5.188.16.0/21 maxlen: 32 5.188.24.0/22 maxlen: 32 45.67.128.0/22 maxlen: 32 46.36.216.0/21 maxlen: 32 159.253.16.0/21 maxlen: 32 181.114.240.0/20 maxlen: 32 185.4.72.0/22 maxlen: 32 2a03:f480::/32 maxlen: 128 2a09:8240::/32 maxlen: 32 2a09:8240:1::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:da:62:84:1c:e2:ec:50:2a:47:ba:d8:83:29:66:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37 Validity Not Before: Dec 2 06:57:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=59e72cdb58c702b954e5f5bb94063adc74098975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:a8:92:c3:37:82:d4:a2:51:44:8e:89:28: df:12:84:87:79:49:9e:27:80:69:bf:45:b8:3b:44: 62:8a:2c:55:2a:93:24:56:c6:ea:c1:ff:fa:2d:68: ae:98:ea:0b:3c:ed:c1:fc:1f:9c:9c:c7:cd:64:ac: f4:81:df:99:c5:a9:d2:17:de:46:d4:2f:1b:0d:a9: 78:38:6c:a4:83:1f:41:d8:3a:1f:e7:02:1b:7b:52: 4f:d7:f4:6d:84:d8:57:09:3a:54:8a:70:ab:e0:c9: 50:53:19:50:f2:3f:e5:09:c5:24:e5:a1:65:b4:82: a8:0f:79:2b:05:ae:82:94:0c:70:08:bd:e9:2d:94: 26:cd:91:81:ef:ef:71:fe:1a:13:a4:a9:2c:e2:61: d5:e4:73:94:59:46:b9:5a:bc:73:94:de:34:48:9a: bc:94:13:2a:65:56:73:5f:fa:17:ad:35:87:92:bd: c2:3e:96:df:6d:30:40:23:f5:4a:e8:08:51:37:e6: 3b:77:e5:d6:8f:3a:8b:02:7e:48:63:0e:f9:19:fb: fb:65:1a:4b:04:aa:7e:8f:d3:5e:53:d3:74:31:e0: 51:31:9e:74:25:ea:3e:42:d4:d3:34:1d:74:d9:33: 5b:8a:45:cb:c7:38:e8:86:ae:77:81:7f:7f:27:0c: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E7:2C:DB:58:C7:02:B9:54:E5:F5:BB:94:06:3A:DC:74:09:89:75 X509v3 Authority Key Identifier: keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/Wecs21jHArlU5fW7lAY63HQJiXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.112.0/20 5.101.112.0/20 5.101.176.0/20 5.188.16.0-5.188.27.255 45.67.128.0/22 46.36.216.0/21 159.253.16.0/21 181.114.240.0/20 185.4.72.0/22 IPv6: 2a03:f480::/32 2a09:8240::/32 Signature Algorithm: sha256WithRSAEncryption 64:3e:55:bd:2d:b9:2b:70:ad:62:08:43:bc:2c:91:14:9d:a3: eb:a7:bf:cf:e7:44:43:1a:c6:45:4e:27:87:4d:0a:4f:40:7b: 13:24:cc:90:d5:bc:36:29:86:d1:1f:5a:de:89:20:3c:8d:15: cf:ba:9f:1b:a5:9e:3f:bf:ed:4a:ed:d3:1f:77:ae:24:b5:12: e2:33:32:16:70:68:fe:61:cc:48:b2:82:23:5f:23:d6:e9:82: 78:7b:ab:d0:a0:cf:3d:16:9b:f8:8f:91:15:04:9b:30:70:ba: d7:ee:69:49:6a:8f:86:05:a0:c5:9d:60:f1:1d:d2:17:0d:78: 28:c7:6e:85:2e:a4:13:b8:ea:24:b8:02:26:41:62:30:08:4a: 20:cb:28:90:63:2b:97:f9:e1:f1:4b:7b:54:b2:d7:65:1e:d5: 40:e6:74:8f:80:d0:68:71:6c:7f:23:f0:52:75:7a:9e:d2:ce: ed:1c:49:79:3a:d6:3e:0a:49:82:c5:22:d7:70:90:ce:76:a9: a4:f9:2c:e5:73:78:d4:8e:a2:a4:69:ee:92:aa:03:60:ad:fe: 3b:75:03:7a:c6:d1:90:48:8b:7f:e0:74:69:02:59:ef:99:8a: 8d:5c:f6:e5:53:cd:e2:b0:73:f5:c8:7b:ab:90:c5:84:d6:21: a5:aa:e4:ee -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZrd2mKEHOLsUCpHutiDKWZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODQzYTFiMjBhMmRiZTNlNGVkNTNlNzU0OGQ3Njg5Njc4 ZDVhMzcwHhcNMjUxMjAyMDY1NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWU3MmNkYjU4YzcwMmI5NTRlNWY1YmI5NDA2M2FkYzc0MDk4OTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFaoksM3gtSiUUSOiSjfEoSHeUme J4Bpv0W4O0RiiixVKpMkVsbqwf/6LWiumOoLPO3B/B+cnMfNZKz0gd+ZxanSF95G 1C8bDal4OGykgx9B2Dof5wIbe1JP1/RthNhXCTpUinCr4MlQUxlQ8j/lCcUk5aFl tIKoD3krBa6ClAxwCL3pLZQmzZGB7+9x/hoTpKks4mHV5HOUWUa5WrxzlN40SJq8 lBMqZVZzX/oXrTWHkr3CPpbfbTBAI/VK6AhRN+Y7d+XWjzqLAn5IYw75Gfv7ZRpL BKp+j9NeU9N0MeBRMZ50Jeo+QtTTNB102TNbikXLxzjohq53gX9/JwzQBQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFFnnLNtYxwK5VOX1u5QGOtx0CYl1MB8GA1UdIwQY MBaAFFWEOhsgotvj5O1T51SNdolnjVo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllRNkd5Q2kyLVBrN1ZQblZJMTJpV2VOV2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNjFiMzMtYWJkZi00OTAzLWE4MmMt YjUxNzI1OTdmNzNhLzEvV2VjczIxakhBcmxVNWZXN2xBWTYzSFFKaVhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kNjFiMzMtYWJkZi00OTAzLWE4MmMtYjUxNzI1OTdmNzNh LzEvVllRNkd5Q2kyLVBrN1ZQblZJMTJpV2VOV2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwQEBS1wAwQE BWVwAwQEBWWwMAwDBAQFvBADBAIFvBgDBAItQ4ADBAMuJNgDBAOf/RADBAS1cvAD BAK5BEgwFAQCAAIwDgMFACoD9IADBQAqCYJAMA0GCSqGSIb3DQEBCwUAA4IBAQBk PlW9LbkrcK1iCEO8LJEUnaPrp7/P50RDGsZFTieHTQpPQHsTJMyQ1bw2KYbRH1re iSA8jRXPup8bpZ4/v+1K7dMfd64ktRLiMzIWcGj+YcxIsoIjXyPW6YJ4e6vQoM89 Fpv4j5EVBJswcLrX7mlJao+GBaDFnWDxHdIXDXgox26FLqQTuOokuAImQWIwCEog yyiQYyuX+eHxS3tUstdlHtVA5nSPgNBocWx/I/BSdXqe0s7tHEl5OtY+CkmCxSLX cJDOdqmk+Szlc3jUjqKkae6SqgNgrf47dQN6xtGQSIt/4HRpAlnvmYqNXPblU83i sHP1yHurkMWE1iGlquTu -----END CERTIFICATE-----Generated at Fri Dec 19 22:56:53 2025 by rpki-client