This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/WOHzoz9_3wsG5dPQrnQZY5iJqxA.roa File: WOHzoz9_3wsG5dPQrnQZY5iJqxA.roa (raw, json) Hash identifier: vp1azStFxo+mPInlylvmSemgZa94N6epgGUZezt+m8Q= Subject key identifier: 58:E1:F3:A3:3F:7F:DF:0B:06:E5:D3:D0:AE:74:19:63:98:89:AB:10 Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982 Certificate serial: 019B0205BE6DE7E85CC1815ACD074702D38F Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/WOHzoz9_3wsG5dPQrnQZY5iJqxA.roa Signing time: Tue 09 Dec 2025 07:31:29 +0000 ROA not before: Tue 09 Dec 2025 07:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35819 IP address blocks: 2001:3c80:4000::/48 maxlen: 48 2001:3c80:8000::/48 maxlen: 48 2001:3c80:b041::/48 maxlen: 48 2001:3c80:b042::/48 maxlen: 48 2001:3c80:b043::/48 maxlen: 48 2001:3c80:b044::/48 maxlen: 48 2001:3c80:b045::/48 maxlen: 48 2001:3c80:b046::/48 maxlen: 48 2001:3c80:b047::/48 maxlen: 48 2001:3c80:b048::/48 maxlen: 48 2001:3c80:b049::/48 maxlen: 48 2001:3c80:b04a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:05:be:6d:e7:e8:5c:c1:81:5a:cd:07:47:02:d3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982 Validity Not Before: Dec 9 07:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=58e1f3a33f7fdf0b06e5d3d0ae7419639889ab10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:f3:35:b1:3c:30:31:84:ce:fe:1f:cd:2a: 8f:45:63:05:32:20:18:f5:11:40:7a:37:f4:de:b6: ee:28:ec:b4:28:f3:39:48:4d:13:3f:86:d3:72:54: aa:aa:fd:26:d9:26:a6:cc:37:31:ca:a2:e4:52:c2: 3c:25:8c:e3:6f:d8:79:b4:4b:27:94:e7:34:fb:43: 04:69:72:e5:39:bb:38:26:a0:58:33:00:ac:77:ee: 2f:3d:49:b4:f7:86:2b:5f:06:05:d4:24:0f:ff:44: 0f:11:a3:42:81:b6:0d:a3:bc:82:ce:f8:b4:2f:88: cf:24:a7:c2:36:0d:b8:40:ce:d9:bd:de:70:97:e6: 1f:0a:90:6f:c0:75:aa:03:7e:08:17:36:ca:ae:d5: 10:09:b2:22:a4:82:ac:63:e4:c1:5c:34:7f:26:c5: e6:11:65:12:9f:2c:b6:4d:7f:9a:1f:c4:05:4f:43: fe:49:f5:0f:51:7a:81:94:b1:bd:5e:1d:bb:0e:63: d2:04:00:87:87:f6:03:5a:a1:50:1a:b6:78:15:f2: c5:dd:f8:e5:da:f3:77:1b:b4:14:32:08:b3:31:8d: 40:e0:6e:85:11:ae:55:9e:0b:2a:d8:fe:4e:30:4a: cc:cd:35:c3:3a:ec:48:3b:ba:ca:dd:d9:39:f4:f7: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E1:F3:A3:3F:7F:DF:0B:06:E5:D3:D0:AE:74:19:63:98:89:AB:10 X509v3 Authority Key Identifier: keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/WOHzoz9_3wsG5dPQrnQZY5iJqxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3c80:4000::/48 2001:3c80:8000::/48 2001:3c80:b041::-2001:3c80:b04a:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2d:5a:01:50:ac:53:76:f4:25:00:f6:00:b5:55:e6:18:f8:e3: e7:08:4c:3e:fc:6e:8e:b3:4c:a3:cc:80:cd:d3:42:51:46:ba: 11:24:c0:73:e4:4f:db:ed:1e:c9:c3:f6:c3:90:9a:bc:48:45: 72:39:de:fc:66:57:1f:0c:26:6f:1b:a7:17:1a:58:36:26:63: 22:4b:7a:f3:9e:f3:72:0f:cc:07:cc:8c:62:bf:88:bd:70:04: e2:2b:e8:f7:1a:d0:fe:a7:9a:e1:f0:fe:80:c2:8e:26:f5:e8: 77:3b:24:e0:2d:37:73:3c:e3:3f:50:d7:2b:40:d3:c1:2f:53: ba:9b:5c:83:0d:2c:c5:5e:c1:49:7d:a7:8a:40:e0:c2:8b:ae: 09:8d:95:d0:7b:b9:bb:34:f8:9a:7b:e9:c2:72:3a:3c:c6:6c: 19:26:03:92:38:e1:27:b1:39:85:13:dd:be:6c:96:1e:d1:b3: ea:4b:a4:8a:da:62:42:eb:31:11:b4:6d:de:2c:58:83:aa:7f: e4:a8:10:49:72:c5:6f:b8:db:4c:68:99:94:20:b2:85:90:f8: 63:64:36:d5:77:5b:e4:3e:a5:54:c6:90:42:ac:7c:7f:01:af: 79:f9:04:94:0d:77:18:af:a4:6e:4f:7a:b8:10:60:c5:c6:cb: c8:dd:9f:57 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZsCBb5t5+hcwYFazQdHAtOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl MjU5ODIwHhcNMjUxMjA5MDczMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGUxZjNhMzNmN2ZkZjBiMDZlNWQzZDBhZTc0MTk2Mzk4ODlhYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbnzNbE8MDGEzv4fzSqPRWMFMiAY 9RFAejf03rbuKOy0KPM5SE0TP4bTclSqqv0m2SamzDcxyqLkUsI8JYzjb9h5tEsn lOc0+0MEaXLlObs4JqBYMwCsd+4vPUm094YrXwYF1CQP/0QPEaNCgbYNo7yCzvi0 L4jPJKfCNg24QM7Zvd5wl+YfCpBvwHWqA34IFzbKrtUQCbIipIKsY+TBXDR/JsXm EWUSnyy2TX+aH8QFT0P+SfUPUXqBlLG9Xh27DmPSBACHh/YDWqFQGrZ4FfLF3fjl 2vN3G7QUMgizMY1A4G6FEa5Vngsq2P5OMErMzTXDOuxIO7rK3dk59Pd1rwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFFjh86M/f98LBuXT0K50GWOYiasQMB8GA1UdIwQY MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt YTFiMmI2YTcwMjcyLzEvV09Iem96OV8zd3NHNWRQUXJuUVpZNWlKcXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcAIAE8gEAA AwcAIAE8gIAAMBIDBwAgATyAsEEDBwAgATyAsEowDQYJKoZIhvcNAQELBQADggEB AC1aAVCsU3b0JQD2ALVV5hj44+cITD78bo6zTKPMgM3TQlFGuhEkwHPkT9vtHsnD 9sOQmrxIRXI53vxmVx8MJm8bpxcaWDYmYyJLevOe83IPzAfMjGK/iL1wBOIr6Pca 0P6nmuHw/oDCjib16Hc7JOAtN3M84z9Q1ytA08EvU7qbXIMNLMVewUl9p4pA4MKL rgmNldB7ubs0+Jp76cJyOjzGbBkmA5I44SexOYUT3b5slh7Rs+pLpIraYkLrMRG0 bd4sWIOqf+SoEElyxW+420xomZQgsoWQ+GNkNtV3W+Q+pVTGkEKsfH8Br3n5BJQN dxivpG5PergQYMXGy8jdn1c= -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:30 2025 by rpki-client