This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/W2igZCKEosi-mfbhRXPXIOTNq9g.roa File: W2igZCKEosi-mfbhRXPXIOTNq9g.roa (raw, json) Hash identifier: ttgFPCRGHj86SopPcwo8WI2fNU1bbHVqZycyehToXcM= Subject key identifier: 5B:68:A0:64:22:84:A2:C8:BE:99:F6:E1:45:73:D7:20:E4:CD:AB:D8 Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019A73BBC8FB4C46DAF690687CAA14AB130D Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/W2igZCKEosi-mfbhRXPXIOTNq9g.roa Signing time: Tue 11 Nov 2025 16:24:37 +0000 ROA not before: Tue 11 Nov 2025 16:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210122 IP address blocks: 45.91.13.0/24 maxlen: 24 2a06:d1c1:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:bb:c8:fb:4c:46:da:f6:90:68:7c:aa:14:ab:13:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Nov 11 16:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b68a0642284a2c8be99f6e14573d720e4cdabd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:56:5e:7a:40:de:85:28:c4:e6:c9:0c:bb: 8a:da:0d:17:6d:3d:9a:f1:91:49:6b:33:bd:85:6e: 1e:28:af:06:2e:00:2e:aa:fd:96:dd:06:09:80:f7: e5:95:bd:3a:99:32:e0:61:36:4b:94:9d:f5:14:26: ba:d6:90:49:4c:ee:fd:8a:ba:3e:a0:52:21:77:8e: e3:f0:c7:c1:94:1a:7b:78:f5:49:80:c7:50:21:19: f9:d1:ce:fc:f6:a1:fe:5b:bf:dd:81:39:d6:9a:00: 66:89:c6:64:eb:87:85:46:22:cf:0c:37:59:54:3f: e8:92:8e:7b:91:d4:78:dc:f3:c4:ac:b2:9c:15:1d: 4d:6f:24:e5:e2:8b:d4:c9:94:d3:26:fd:71:a3:d7: 41:87:52:8a:29:05:d8:b4:06:d2:d3:bd:2f:23:54: 18:f4:b5:fd:3c:a7:3f:a8:17:e6:67:4d:6f:8e:88: 4f:7f:d2:ad:41:12:ff:55:b0:f5:af:ff:f5:73:20: 08:53:c0:08:fa:cd:8f:c3:a7:6a:14:94:b9:d2:5f: e3:9e:9f:ae:33:b5:9e:d1:99:cf:42:7d:29:20:33: 8b:98:ed:38:8d:4e:3e:1b:0d:32:4a:67:fa:6d:bf: 1a:dd:c7:82:21:e1:2a:7b:fe:91:55:52:c2:fc:43: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:A0:64:22:84:A2:C8:BE:99:F6:E1:45:73:D7:20:E4:CD:AB:D8 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/W2igZCKEosi-mfbhRXPXIOTNq9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.13.0/24 IPv6: 2a06:d1c1:c0::/48 Signature Algorithm: sha256WithRSAEncryption 10:70:90:f4:2e:60:c5:02:02:0a:4e:53:1a:35:15:90:7c:3b: 60:f5:06:01:bd:01:93:72:a5:2d:2d:7a:06:12:b2:3c:c6:00: 14:50:30:9d:7b:52:46:a2:df:cf:3c:05:18:fb:fc:61:3b:14: bf:06:b7:72:36:a5:4e:eb:27:2b:b6:5f:8e:54:b5:24:9f:f6: f6:32:d5:9c:f3:ef:f1:28:e6:0e:2d:f9:a0:94:f9:00:b5:3c: c2:7f:75:1f:59:f6:8e:b8:8f:a1:31:67:0d:9f:e5:cf:83:f3: 28:5a:e6:a0:27:b8:95:fa:d1:89:98:08:82:da:5f:58:56:3e: fd:87:6e:45:a7:69:b3:14:7f:67:38:b5:9a:35:46:c2:c4:c8: dc:ae:a4:db:f9:e2:eb:9d:ca:a2:6f:8d:3c:93:c8:2f:37:d8: ac:7f:1d:1a:f5:05:4e:6d:3c:85:e3:59:69:6a:7b:99:7a:98: 3f:91:72:9f:74:8a:1e:58:9e:c8:9a:6c:87:21:0e:1f:93:d3: 29:7c:77:7a:78:62:45:87:74:b5:de:e1:52:82:7d:d6:32:11: fa:9d:6c:df:fe:1a:7e:11:a3:71:a6:d4:bd:23:7e:e4:14:42: b1:fb:c0:6f:06:27:b3:3d:75:42:5a:28:2a:56:94:44:b3:ce: 97:2b:b0:d9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZpzu8j7TEba9pBofKoUqxMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjUxMTExMTYyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjY4YTA2NDIyODRhMmM4YmU5OWY2ZTE0NTczZDcyMGU0Y2RhYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdJWXnpA3oUoxObJDLuK2g0XbT2a 8ZFJazO9hW4eKK8GLgAuqv2W3QYJgPfllb06mTLgYTZLlJ31FCa61pBJTO79iro+ oFIhd47j8MfBlBp7ePVJgMdQIRn50c789qH+W7/dgTnWmgBmicZk64eFRiLPDDdZ VD/oko57kdR43PPErLKcFR1NbyTl4ovUyZTTJv1xo9dBh1KKKQXYtAbS070vI1QY 9LX9PKc/qBfmZ01vjohPf9KtQRL/VbD1r//1cyAIU8AI+s2Pw6dqFJS50l/jnp+u M7We0ZnPQn0pIDOLmO04jU4+Gw0ySmf6bb8a3ceCIeEqe/6RVVLC/EOA+QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFtooGQihKLIvpn24UVz1yDkzavYMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEvVzJpZ1pDS0Vvc2ktbWZiaFJYUFhJT1ROcTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALVsNMA8E AgACMAkDBwAqBtHBAMAwDQYJKoZIhvcNAQELBQADggEBABBwkPQuYMUCAgpOUxo1 FZB8O2D1BgG9AZNypS0tegYSsjzGABRQMJ17Ukai3888BRj7/GE7FL8Gt3I2pU7r Jyu2X45UtSSf9vYy1Zzz7/Eo5g4t+aCU+QC1PMJ/dR9Z9o64j6ExZw2f5c+D8yha 5qAnuJX60YmYCILaX1hWPv2HbkWnabMUf2c4tZo1RsLEyNyupNv54uudyqJvjTyT yC832Kx/HRr1BU5tPIXjWWlqe5l6mD+Rcp90ih5YnsiabIchDh+T0yl8d3p4YkWH dLXe4VKCfdYyEfqdbN/+Gn4Ro3Gm1L0jfuQUQrH7wG8GJ7M9dUJaKCpWlESzzpcr sNk= -----END CERTIFICATE-----Generated at Sat Dec 6 10:49:55 2025 by rpki-client