This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/wDP-TxG_3tEtjtln5hp2qEYuYG0.roa File: wDP-TxG_3tEtjtln5hp2qEYuYG0.roa (raw, json) Hash identifier: 1oFgLReN4K8BSbynL9ho2Edqc+OXkSzIdfiTc3/wAyw= Subject key identifier: C0:33:FE:4F:11:BF:DE:D1:2D:8E:D9:67:E6:1A:76:A8:46:2E:60:6D Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019A7C9876CF99933D761499C52AB0DF5E3E Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/wDP-TxG_3tEtjtln5hp2qEYuYG0.roa Signing time: Thu 13 Nov 2025 09:42:37 +0000 ROA not before: Thu 13 Nov 2025 09:42:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47285 IP address blocks: 194.36.175.0/24 maxlen: 24 2a10:ab00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:98:76:cf:99:93:3d:76:14:99:c5:2a:b0:df:5e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Nov 13 09:42:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c033fe4f11bfded12d8ed967e61a76a8462e606d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:e9:79:8d:b4:07:33:ce:7d:b0:69:e6:bc: 4c:59:e9:22:8a:7a:35:d4:c4:1f:13:71:c6:3c:86: a3:65:9a:2e:66:1a:eb:e5:07:d1:5a:13:81:0c:24: b3:9f:ea:21:eb:4a:27:4b:a9:b9:cc:af:cf:c3:6b: 17:bc:e6:34:35:e2:85:b0:3d:35:70:bc:7b:40:e3: 80:a8:c4:dc:ee:b5:63:0b:b4:c7:27:e9:b0:25:e5: e4:0c:48:07:1e:38:4b:c4:80:ff:37:83:19:ce:00: 19:fb:dd:76:2e:77:2e:6a:01:3e:9b:e9:3e:3d:9a: 80:24:cf:41:b0:54:32:78:77:4f:93:b5:81:41:88: 6c:eb:bd:a2:06:3f:74:94:f2:03:c6:5f:46:a4:22: 4a:d2:5e:76:20:fa:9c:0b:ce:dc:a3:59:06:21:0b: 32:d5:a6:34:4a:2d:e5:07:a6:58:ed:a8:57:cf:2a: 97:c4:ba:0c:1d:b1:da:f6:63:5b:fb:b2:b0:db:74: da:81:21:3e:0a:ce:fa:b7:f1:9c:f6:78:40:19:9b: ba:9b:70:16:8b:9f:65:32:5a:e8:5f:3d:a8:9a:7a: 3f:70:c7:2d:cd:f4:2f:a6:4b:22:b4:5b:eb:63:74: cf:7f:a2:62:69:53:dc:5d:22:48:18:d8:54:c2:8c: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:33:FE:4F:11:BF:DE:D1:2D:8E:D9:67:E6:1A:76:A8:46:2E:60:6D X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/wDP-TxG_3tEtjtln5hp2qEYuYG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.175.0/24 IPv6: 2a10:ab00::/29 Signature Algorithm: sha256WithRSAEncryption 12:23:75:aa:96:dc:16:14:72:d9:e9:e4:bc:30:85:28:a6:4c: 95:ca:5b:ce:43:49:76:97:29:bb:26:87:ec:58:2c:7d:f8:0a: 27:9c:7c:b7:19:98:76:66:14:74:34:60:08:56:04:79:fe:a2: 4c:58:7b:28:b7:53:d2:42:42:c1:00:43:e3:71:a0:d9:99:28: 8f:b6:d9:4b:78:52:09:cf:53:88:5e:69:c5:08:cd:b6:ac:b1: cc:91:a2:6d:c4:d7:41:d7:38:cf:e9:d4:71:00:64:2b:37:b9: c3:f4:38:e9:a9:ef:55:78:7a:c7:b9:e3:22:0c:ef:9a:6b:82: 07:50:14:55:20:a2:c4:53:35:44:9f:48:43:27:00:b2:07:73: b1:5b:3d:85:0b:4e:88:7e:e3:0a:af:ab:a0:35:5a:6a:f0:7f: 82:c2:ec:81:fe:b9:24:14:ed:16:58:50:c0:a3:32:20:36:9d: d5:ca:8f:4e:d0:e5:b4:da:78:17:34:69:47:03:34:7e:e8:0b: 92:d2:ee:93:7c:9c:d9:f9:20:d3:13:2c:b2:ea:08:8e:f2:7f: 05:d1:04:cb:2e:e9:66:11:fb:3c:fd:a9:80:71:e4:d5:0b:b6: 6f:86:0f:e8:da:ba:83:26:3e:ec:cc:9c:6d:74:f1:38:01:04: 27:84:98:1e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZp8mHbPmZM9dhSZxSqw314+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUxMTEzMDk0MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDMzZmU0ZjExYmZkZWQxMmQ4ZWQ5NjdlNjFhNzZhODQ2MmU2MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xHpeY20BzPOfbBp5rxMWekiino1 1MQfE3HGPIajZZouZhrr5QfRWhOBDCSzn+oh60onS6m5zK/Pw2sXvOY0NeKFsD01 cLx7QOOAqMTc7rVjC7THJ+mwJeXkDEgHHjhLxID/N4MZzgAZ+912LncuagE+m+k+ PZqAJM9BsFQyeHdPk7WBQYhs672iBj90lPIDxl9GpCJK0l52IPqcC87co1kGIQsy 1aY0Si3lB6ZY7ahXzyqXxLoMHbHa9mNb+7Kw23TagSE+Cs76t/Gc9nhAGZu6m3AW i59lMlroXz2omno/cMctzfQvpksitFvrY3TPf6JiaVPcXSJIGNhUwoxIpwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMAz/k8Rv97RLY7ZZ+YadqhGLmBtMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvd0RQLVR4R18zdEV0anRsbjVocDJxRVl1WUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwiSvMA0E AgACMAcDBQMqEKsAMA0GCSqGSIb3DQEBCwUAA4IBAQASI3WqltwWFHLZ6eS8MIUo pkyVylvOQ0l2lym7JofsWCx9+AonnHy3GZh2ZhR0NGAIVgR5/qJMWHsot1PSQkLB AEPjcaDZmSiPttlLeFIJz1OIXmnFCM22rLHMkaJtxNdB1zjP6dRxAGQrN7nD9Djp qe9VeHrHueMiDO+aa4IHUBRVIKLEUzVEn0hDJwCyB3OxWz2FC06IfuMKr6ugNVpq 8H+CwuyB/rkkFO0WWFDAozIgNp3Vyo9O0OW02ngXNGlHAzR+6AuS0u6TfJzZ+SDT Eyyy6giO8n8F0QTLLulmEfs8/amAceTVC7Zvhg/o2rqDJj7szJxtdPE4AQQnhJge -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:10 2025 by rpki-client