This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wXqFn09i9yfbXFnbL12mgHRCRrg.roa File: wXqFn09i9yfbXFnbL12mgHRCRrg.roa (raw, json) Hash identifier: jlOEEQKoDVWCSBu9sZcGjLGjM4xVn5YWnhjqZnj8/D4= Subject key identifier: C1:7A:85:9F:4F:62:F7:27:DB:5C:59:DB:2F:5D:A6:80:74:42:46:B8 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B1C39D1E9F11B2AF7D74C3B1CEF11E079 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wXqFn09i9yfbXFnbL12mgHRCRrg.roa Signing time: Sun 14 Dec 2025 09:38:29 +0000 ROA not before: Sun 14 Dec 2025 09:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 178.239.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:39:d1:e9:f1:1b:2a:f7:d7:4c:3b:1c:ef:11:e0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 14 09:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c17a859f4f62f727db5c59db2f5da680744246b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:44:f3:90:ab:ed:50:06:5d:49:b2:4f:48: f6:70:4d:89:9a:13:36:73:c4:54:12:7c:6d:91:f5: 14:4e:3c:6f:a5:a0:75:6a:56:2f:57:c5:d0:14:32: 07:e6:ff:00:2c:15:9e:7d:e5:86:04:5e:64:6f:a3: f6:b7:c6:48:00:f8:d3:a8:64:49:69:10:77:96:d1: 43:44:d8:4a:e5:8b:64:76:23:8e:4a:f0:b6:c4:e5: 79:8a:93:b7:af:68:64:d1:95:86:4a:27:bc:8e:4b: 8f:5b:a6:a8:68:8b:39:65:71:94:14:8e:68:fb:30: 52:35:6b:0f:b9:f2:77:99:00:0b:62:b0:58:e3:7d: 8a:32:0e:ce:7f:3a:75:a0:76:58:f0:56:c6:3d:27: 5a:cb:9d:36:5c:9b:55:f5:90:ae:a9:35:03:55:81: ac:48:81:e2:36:f9:13:51:0f:69:4f:34:2a:9c:27: 34:23:cc:7c:dd:1d:83:5c:c6:99:d1:33:9b:6d:63: b8:51:e6:e6:ab:4b:4e:2a:26:66:13:3f:27:84:7b: 3b:51:8f:88:5f:b8:fe:fd:6d:71:74:a4:90:c5:91: a7:f1:7e:2a:10:f8:5a:a7:68:d2:e9:b6:2a:47:fe: f5:8e:04:db:44:1d:83:eb:bb:7d:96:e5:eb:89:af: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7A:85:9F:4F:62:F7:27:DB:5C:59:DB:2F:5D:A6:80:74:42:46:B8 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wXqFn09i9yfbXFnbL12mgHRCRrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.112.0/24 Signature Algorithm: sha256WithRSAEncryption 06:7b:b7:85:07:86:9f:ed:bd:f7:86:f2:28:af:cd:c7:7e:fa: 3e:cb:ce:83:a2:c2:1e:66:4b:79:ed:d7:95:f0:03:5a:bd:37: 8f:9d:9a:13:55:a9:0e:29:0a:62:9f:d7:e8:db:bb:5a:91:fe: ba:f5:3c:7d:7e:fe:4f:d6:72:87:8d:87:36:a1:fd:d5:c9:8e: cf:39:93:63:5a:a2:4f:63:c3:4b:b7:bc:ae:e5:16:4b:54:93: 86:d3:a5:b9:81:7e:15:90:76:54:f5:c1:1a:36:39:f8:75:b8: 74:5c:ec:ad:6c:75:24:cd:90:e0:cc:9a:37:19:aa:62:40:39: 84:56:98:73:61:33:ca:91:48:45:89:dd:10:ae:d4:55:2c:88: d6:96:99:47:55:21:65:da:39:31:32:ca:b0:00:6b:62:85:7e: a7:d2:be:9e:2a:1a:c1:6a:d2:98:bf:8f:e0:9c:f4:96:d1:d1: b7:be:43:46:27:a6:df:1a:7e:62:fc:e2:13:2f:79:c1:83:46: 6d:d8:c2:d0:11:79:8f:37:91:48:8f:2c:19:86:a7:30:53:46: 85:21:51:66:e9:a2:17:f1:08:b8:d4:69:0a:d6:ea:ca:4e:26: a1:8c:f6:07:b3:3c:40:a2:81:e4:af:5c:00:c6:55:60:bd:07: 00:60:72:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZscOdHp8Rsq99dMOxzvEeB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjE0MDkzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTdhODU5ZjRmNjJmNzI3ZGI1YzU5ZGIyZjVkYTY4MDc0NDI0NmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rxE85Cr7VAGXUmyT0j2cE2JmhM2 c8RUEnxtkfUUTjxvpaB1alYvV8XQFDIH5v8ALBWefeWGBF5kb6P2t8ZIAPjTqGRJ aRB3ltFDRNhK5YtkdiOOSvC2xOV5ipO3r2hk0ZWGSie8jkuPW6aoaIs5ZXGUFI5o +zBSNWsPufJ3mQALYrBY432KMg7Ofzp1oHZY8FbGPSday502XJtV9ZCuqTUDVYGs SIHiNvkTUQ9pTzQqnCc0I8x83R2DXMaZ0TObbWO4Uebmq0tOKiZmEz8nhHs7UY+I X7j+/W1xdKSQxZGn8X4qEPhap2jS6bYqR/71jgTbRB2D67t9luXria/FOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMF6hZ9PYvcn21xZ2y9dpoB0Qka4MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvd1hxRm4wOWk5eWZiWEZuYkwxMm1nSFJDUnJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu9wMA0G CSqGSIb3DQEBCwUAA4IBAQAGe7eFB4af7b33hvIor83Hfvo+y86DosIeZkt57deV 8ANavTePnZoTVakOKQpin9fo27takf669Tx9fv5P1nKHjYc2of3VyY7POZNjWqJP Y8NLt7yu5RZLVJOG06W5gX4VkHZU9cEaNjn4dbh0XOytbHUkzZDgzJo3GapiQDmE VphzYTPKkUhFid0QrtRVLIjWlplHVSFl2jkxMsqwAGtihX6n0r6eKhrBatKYv4/g nPSW0dG3vkNGJ6bfGn5i/OITL3nBg0Zt2MLQEXmPN5FIjywZhqcwU0aFIVFm6aIX 8Qi41GkK1urKTiahjPYHszxAooHkr1wAxlVgvQcAYHK8 -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:56 2025 by rpki-client