This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ww-Pr2HcrkPaiuBCakBWH4tIEHg.roa File: Ww-Pr2HcrkPaiuBCakBWH4tIEHg.roa (raw, json) Hash identifier: wiEJqybUWwqiVCYFK5MW103gx8H64XySzl2eeGmd/uQ= Subject key identifier: 5B:0F:8F:AF:61:DC:AE:43:DA:8A:E0:42:6A:40:56:1F:8B:48:10:78 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B384F740A0E84072BE943C2CA0C34AA99 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ww-Pr2HcrkPaiuBCakBWH4tIEHg.roa Signing time: Fri 19 Dec 2025 20:31:29 +0000 ROA not before: Fri 19 Dec 2025 20:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202610 IP address blocks: 144.31.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:4f:74:0a:0e:84:07:2b:e9:43:c2:ca:0c:34:aa:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 19 20:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b0f8faf61dcae43da8ae0426a40561f8b481078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:38:96:b0:fe:ba:a8:01:af:f2:b7:c6:bf:9d: a1:40:9b:f1:fd:fc:25:88:2a:7c:8e:26:f9:8f:81: 6c:fb:2f:e0:2f:c3:66:c1:7b:fc:28:14:89:23:34: 48:4f:4a:b3:d8:47:68:de:a2:62:b3:00:b8:5e:3e: fd:0c:04:7e:2a:b5:f6:99:e3:7a:2e:c2:33:1d:38: f0:ac:de:c7:0b:6e:30:e3:bc:93:e1:5a:6b:dc:78: 96:6d:ac:a2:b0:80:81:00:fb:dd:c2:0a:8c:5d:3a: c9:a2:13:1f:00:59:17:32:95:e9:c5:9a:40:21:88: 2d:f1:db:7e:52:79:1e:e2:31:ed:43:cf:f0:ed:a8: af:f0:cd:c8:9f:0a:5c:df:88:1f:99:bb:75:8c:e0: d0:db:d9:74:60:93:0f:20:8d:1e:52:e7:79:a2:9c: 8a:8d:d8:e6:18:04:de:2e:c4:13:d9:ee:95:c6:f7: 67:d1:bc:9e:22:fc:fb:cb:da:38:41:4e:2b:73:7e: ed:e3:47:df:2a:18:fe:1a:6b:a4:7e:27:ce:ad:74: f9:83:d8:37:7f:0c:fa:25:98:de:e9:51:05:ca:c8: bf:7c:83:ee:8c:e3:c4:41:70:84:49:81:87:88:3d: a5:b3:ad:9b:22:e1:a8:a0:8e:92:c5:d0:f8:94:12: 21:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0F:8F:AF:61:DC:AE:43:DA:8A:E0:42:6A:40:56:1F:8B:48:10:78 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ww-Pr2HcrkPaiuBCakBWH4tIEHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.231.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:19:83:05:fd:a8:81:47:04:cd:83:39:61:28:4b:31:ea:8d: 72:4a:25:fe:f0:d5:26:af:ce:de:d5:9d:74:55:9f:c0:2f:12: d5:8d:6d:1c:db:87:95:c4:80:0f:ab:c2:6e:67:89:9c:cc:5f: 78:64:83:0f:72:19:54:58:5a:f9:92:95:b5:79:84:e9:f8:f0: c9:8d:e8:e8:74:ba:b1:3b:e3:0a:37:3e:9b:29:69:2b:a2:d4: fc:5a:6e:15:2a:96:45:eb:03:35:88:16:5a:35:a9:2c:ac:ee: c1:9e:f4:9c:22:6e:b9:62:71:ea:08:64:7f:0c:ec:97:d4:9f: 8d:da:90:c2:af:89:17:30:9f:a9:6c:82:8d:5f:92:55:c4:04: b3:2c:f0:d9:00:c6:94:03:88:46:bd:91:6d:d0:9c:c2:b4:4a: 57:99:33:54:0f:eb:e3:4d:e5:24:d1:d2:88:26:5d:31:7c:cd: b4:22:6d:61:63:28:2c:ad:e0:50:4d:d8:5a:a9:c4:af:b5:86: 1c:05:96:d5:17:e6:4f:83:18:57:17:c2:02:3b:6c:95:1a:3c: 99:4a:d8:9f:42:29:d3:ea:c5:1c:a2:71:8f:c9:c1:b6:7e:cf: a8:b5:bc:2d:e2:8f:02:ab:3f:38:eb:b7:7d:2b:88:84:d5:de: e5:81:99:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs4T3QKDoQHK+lDwsoMNKqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE5MjAzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjBmOGZhZjYxZGNhZTQzZGE4YWUwNDI2YTQwNTYxZjhiNDgxMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TiWsP66qAGv8rfGv52hQJvx/fwl iCp8jib5j4Fs+y/gL8NmwXv8KBSJIzRIT0qz2Edo3qJiswC4Xj79DAR+KrX2meN6 LsIzHTjwrN7HC24w47yT4Vpr3HiWbayisICBAPvdwgqMXTrJohMfAFkXMpXpxZpA IYgt8dt+Unke4jHtQ8/w7aiv8M3Inwpc34gfmbt1jODQ29l0YJMPII0eUud5opyK jdjmGATeLsQT2e6Vxvdn0byeIvz7y9o4QU4rc37t40ffKhj+GmukfifOrXT5g9g3 fwz6JZje6VEFysi/fIPujOPEQXCESYGHiD2ls62bIuGooI6SxdD4lBIhRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFsPj69h3K5D2orgQmpAVh+LSBB4MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvV3ctUHIySGNya1BhaXVCQ2FrQldINHRJRUhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB/nMA0G CSqGSIb3DQEBCwUAA4IBAQCfGYMF/aiBRwTNgzlhKEsx6o1ySiX+8NUmr87e1Z10 VZ/ALxLVjW0c24eVxIAPq8JuZ4mczF94ZIMPchlUWFr5kpW1eYTp+PDJjejodLqx O+MKNz6bKWkrotT8Wm4VKpZF6wM1iBZaNaksrO7BnvScIm65YnHqCGR/DOyX1J+N 2pDCr4kXMJ+pbIKNX5JVxASzLPDZAMaUA4hGvZFt0JzCtEpXmTNUD+vjTeUk0dKI Jl0xfM20Im1hYygsreBQTdhaqcSvtYYcBZbVF+ZPgxhXF8ICO2yVGjyZStifQinT 6sUconGPycG2fs+otbwt4o8Cqz8467d9K4iE1d7lgZkm -----END CERTIFICATE-----Generated at Sat Dec 20 01:45:37 2025 by rpki-client