This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/wPG0II4d2g-fSQAvhGZjJnFH0w4.roa File: wPG0II4d2g-fSQAvhGZjJnFH0w4.roa (raw, json) Hash identifier: i8r0ReExTg8BsIwh9RF/VmWe0Uat8WfSaN6fbhkEbHY= Subject key identifier: C0:F1:B4:20:8E:1D:DA:0F:9F:49:00:2F:84:66:63:26:71:47:D3:0E Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174 Certificate serial: 019A781E38D56593705A7A7E13A47F6F9A3A Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/wPG0II4d2g-fSQAvhGZjJnFH0w4.roa Signing time: Wed 12 Nov 2025 12:50:37 +0000 ROA not before: Wed 12 Nov 2025 12:50:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202851 IP address blocks: 185.172.124.0/22 maxlen: 22 2a0b:2300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:1e:38:d5:65:93:70:5a:7a:7e:13:a4:7f:6f:9a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174 Validity Not Before: Nov 12 12:50:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0f1b4208e1dda0f9f49002f846663267147d30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:cd:9a:97:4d:02:4e:ab:8d:ce:08:da:13: f4:02:2d:8f:2f:85:b8:26:02:0c:79:ae:6d:ec:19: 52:d9:01:5b:aa:28:69:a3:e2:1b:ec:55:13:26:45: 7f:aa:3c:a2:2e:24:9a:bf:98:50:ec:2c:80:d3:08: bf:9e:fc:8f:32:4a:71:07:f2:60:71:d5:6d:85:91: 6a:41:a6:d8:25:84:0d:c2:48:aa:c1:13:40:1e:dc: 6c:62:a7:7b:cb:e7:dc:f5:81:25:dc:f0:50:7b:4b: 17:09:f1:ea:e9:2e:58:1d:ec:ca:69:41:7c:f8:f0: 37:b9:48:f1:47:6a:70:ba:8b:8b:c0:6f:69:42:eb: b0:6f:ea:8d:51:c2:7a:9d:df:de:45:84:02:8d:48: 87:88:f2:03:64:d4:a2:08:f0:29:8d:46:67:ae:98: bd:f8:0b:ca:34:9a:ec:1d:c6:29:75:58:f0:42:18: a9:56:bf:77:0d:65:04:12:33:3d:41:1c:09:8e:4b: b6:d3:e6:c8:31:85:79:78:da:ab:64:83:bd:48:de: 52:8f:02:56:3e:39:c0:7c:bf:e8:12:e6:6d:b0:17: 31:5b:3d:3c:68:90:d1:f5:6c:17:fc:cf:91:97:a4: fe:52:17:fe:69:68:42:b5:d3:df:dd:1c:39:ec:c4: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F1:B4:20:8E:1D:DA:0F:9F:49:00:2F:84:66:63:26:71:47:D3:0E X509v3 Authority Key Identifier: keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/wPG0II4d2g-fSQAvhGZjJnFH0w4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.124.0/22 IPv6: 2a0b:2300::/32 Signature Algorithm: sha256WithRSAEncryption 6d:b5:92:22:08:d7:11:0c:c5:12:10:85:9f:31:34:37:19:2d: 3c:c4:a1:9b:8e:7a:3e:e9:02:3d:90:5c:45:1f:f4:04:eb:1f: 0a:dc:04:d8:b9:52:90:3c:ff:3e:10:e5:ff:ca:1f:93:78:e0: 02:12:ee:58:a4:3c:4e:3b:7a:e6:c6:bc:d7:5e:57:4d:b1:da: 19:c1:0b:15:9d:d3:c3:78:ab:e6:1b:76:2b:20:a0:28:f4:58: 5a:43:96:8b:40:80:18:27:7f:93:72:ee:80:d9:5d:ab:01:48: 6d:78:23:87:19:77:9f:43:b5:2b:ff:50:e6:ba:36:50:16:8e: 58:fa:39:2d:0e:75:1d:91:0f:17:0d:37:88:b3:8d:78:5b:8c: 69:8a:39:59:e0:26:c8:8c:89:d2:9d:c0:d8:e5:10:01:e7:7a: 2c:57:64:f6:f5:e7:66:d6:90:2d:16:ff:03:d2:c1:ab:42:5f: 5f:99:e5:88:0e:c8:47:60:ed:4b:c0:5a:ee:3d:33:ac:c9:da: 00:9d:f4:16:4e:48:08:24:ac:4e:67:99:72:6c:f1:43:d6:a2: 6b:88:a9:a5:7b:91:46:85:91:3c:42:30:a5:4c:c5:77:45:98: 14:3e:4a:06:22:15:8e:eb:7f:e8:11:2e:2a:49:1e:01:c7:ef: f7:93:31:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZp4HjjVZZNwWnp+E6R/b5o6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmVhZWZmMTIzY2E2NzQ0NmQwZTQ5NDAxZTQ5NTA1NzA3 OGUxNzQwHhcNMjUxMTEyMTI1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGYxYjQyMDhlMWRkYTBmOWY0OTAwMmY4NDY2NjMyNjcxNDdkMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDXNmpdNAk6rjc4I2hP0Ai2PL4W4 JgIMea5t7BlS2QFbqihpo+Ib7FUTJkV/qjyiLiSav5hQ7CyA0wi/nvyPMkpxB/Jg cdVthZFqQabYJYQNwkiqwRNAHtxsYqd7y+fc9YEl3PBQe0sXCfHq6S5YHezKaUF8 +PA3uUjxR2pwuouLwG9pQuuwb+qNUcJ6nd/eRYQCjUiHiPIDZNSiCPApjUZnrpi9 +AvKNJrsHcYpdVjwQhipVr93DWUEEjM9QRwJjku20+bIMYV5eNqrZIO9SN5SjwJW PjnAfL/oEuZtsBcxWz08aJDR9WwX/M+Rl6T+Uhf+aWhCtdPf3Rw57MSUlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMDxtCCOHdoPn0kAL4RmYyZxR9MOMB8GA1UdIwQY MBaAFK9urv8SPKZ0RtDklAHklQVweOF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUt NGVmNDdmYzRiZDdmLzEvd1BHMElJNGQyZy1mU1FBdmhHWmpKbkZIMHc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUtNGVmNDdmYzRiZDdm LzEvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuax8MA0E AgACMAcDBQAqCyMAMA0GCSqGSIb3DQEBCwUAA4IBAQBttZIiCNcRDMUSEIWfMTQ3 GS08xKGbjno+6QI9kFxFH/QE6x8K3ATYuVKQPP8+EOX/yh+TeOACEu5YpDxOO3rm xrzXXldNsdoZwQsVndPDeKvmG3YrIKAo9FhaQ5aLQIAYJ3+Tcu6A2V2rAUhteCOH GXefQ7Ur/1DmujZQFo5Y+jktDnUdkQ8XDTeIs414W4xpijlZ4CbIjInSncDY5RAB 53osV2T29edm1pAtFv8D0sGrQl9fmeWIDshHYO1LwFruPTOsydoAnfQWTkgIJKxO Z5lybPFD1qJriKmle5FGhZE8QjClTMV3RZgUPkoGIhWO63/oES4qSR4Bx+/3kzE+ -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:23 2025 by rpki-client