This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WazewXHrbld4hKcxrKTdjB-rBxY.roa File: WazewXHrbld4hKcxrKTdjB-rBxY.roa (raw, json) Hash identifier: m8D+bPEE4A8Aus21181xpEVpShPcTfg9D7lBD2CP2yY= Subject key identifier: 59:AC:DE:C1:71:EB:6E:57:78:84:A7:31:AC:A4:DD:8C:1F:AB:07:16 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019A7D9E4E0C4130A3662412ACCC222CBDFC Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WazewXHrbld4hKcxrKTdjB-rBxY.roa Signing time: Thu 13 Nov 2025 14:28:37 +0000 ROA not before: Thu 13 Nov 2025 14:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211644 IP address blocks: 95.47.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:9e:4e:0c:41:30:a3:66:24:12:ac:cc:22:2c:bd:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Nov 13 14:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=59acdec171eb6e577884a731aca4dd8c1fab0716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:29:66:01:be:e7:e8:be:d0:21:8a:e0:fb: 95:e5:6e:78:21:b7:61:99:40:88:c9:29:ef:b4:c5: b0:80:85:bb:63:eb:00:1d:fc:ea:29:4a:1a:d9:08: ad:56:21:b5:0a:64:aa:e2:95:8d:73:b5:4e:78:13: 7f:94:7d:70:74:40:18:20:32:65:bc:fd:de:66:be: 60:81:3a:6b:cc:3a:76:c8:49:90:6c:5b:03:38:04: 89:e4:ab:64:5e:b8:2b:18:e3:78:11:03:4a:5c:db: 58:b4:99:d1:93:67:fb:a6:da:eb:7e:9d:d9:1c:33: 37:ce:6e:df:1e:3a:b8:5b:fe:2d:1c:92:0b:2b:34: 40:33:c5:d0:3a:6c:a0:b8:fa:58:76:79:fb:66:a6: eb:fc:30:37:7b:68:29:2f:68:0c:95:1c:17:26:8b: 62:ee:e5:1f:7f:b1:d2:e2:6a:14:20:b6:3e:8a:65: e6:ed:d9:fb:4e:bc:ba:77:49:db:80:9f:d5:41:e5: ca:df:96:75:77:a9:69:1e:f2:05:53:a5:b0:18:81: 20:24:31:6d:9e:94:7a:0e:e6:72:3c:45:88:f5:81: 60:62:64:e8:b6:88:88:a6:83:93:1a:25:ba:4d:9e: 6a:57:31:2d:09:0c:d3:fd:55:80:d1:48:66:82:09: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AC:DE:C1:71:EB:6E:57:78:84:A7:31:AC:A4:DD:8C:1F:AB:07:16 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WazewXHrbld4hKcxrKTdjB-rBxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.96.0/22 Signature Algorithm: sha256WithRSAEncryption 09:e9:2c:94:1d:9e:fd:03:67:53:d0:e3:53:8a:03:fb:df:2a: 90:ed:b3:a6:52:76:55:f8:54:93:7d:cf:46:04:ae:9d:52:4f: e1:1e:7c:b1:ae:12:bd:58:16:e1:1e:f0:34:85:7f:e3:53:0c: 1c:3b:9e:20:cb:0d:4c:b9:88:89:3e:ab:27:03:ad:7b:70:95: 7c:f2:d5:23:04:e9:2b:66:13:62:71:c1:26:bd:92:f5:45:58: 4b:ad:bd:56:cf:0d:e6:b9:e6:4d:3d:52:7e:32:5a:b8:66:1f: f1:4e:55:d5:ff:0e:3b:52:c8:66:c0:4b:b9:90:71:e7:70:85: 73:5c:43:6f:bc:bf:fd:7e:a9:19:34:77:0d:7d:85:14:85:70: 41:5d:59:da:20:46:e5:84:71:97:b1:18:f6:cc:d1:e4:d7:1c: 62:43:48:b7:26:b3:4f:15:aa:63:64:70:55:5e:2e:40:5f:03: b7:4c:89:84:72:7b:4d:6a:83:56:3f:a4:3b:77:16:da:b0:b3: 47:23:9d:91:1a:0a:30:b0:f7:83:d2:05:d2:84:fc:f3:3e:73: 9d:35:f4:b2:c4:aa:6e:e9:46:59:44:9d:66:79:79:73:62:b7: 2a:c6:76:c4:a0:60:7a:c4:f8:62:29:e9:ea:d6:19:57:e1:46: ca:28:05:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9nk4MQTCjZiQSrMwiLL38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMTEzMTQyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWFjZGVjMTcxZWI2ZTU3Nzg4NGE3MzFhY2E0ZGQ4YzFmYWIwNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUEpZgG+5+i+0CGK4PuV5W54Ibdh mUCIySnvtMWwgIW7Y+sAHfzqKUoa2QitViG1CmSq4pWNc7VOeBN/lH1wdEAYIDJl vP3eZr5ggTprzDp2yEmQbFsDOASJ5KtkXrgrGON4EQNKXNtYtJnRk2f7ptrrfp3Z HDM3zm7fHjq4W/4tHJILKzRAM8XQOmyguPpYdnn7Zqbr/DA3e2gpL2gMlRwXJoti 7uUff7HS4moUILY+imXm7dn7Try6d0nbgJ/VQeXK35Z1d6lpHvIFU6WwGIEgJDFt npR6DuZyPEWI9YFgYmTotoiIpoOTGiW6TZ5qVzEtCQzT/VWA0UhmggkLzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFms3sFx625XeISnMayk3YwfqwcWMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvV2F6ZXdYSHJibGQ0aEtjeHJLVGRqQi1yQnhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXy9gMA0G CSqGSIb3DQEBCwUAA4IBAQAJ6SyUHZ79A2dT0ONTigP73yqQ7bOmUnZV+FSTfc9G BK6dUk/hHnyxrhK9WBbhHvA0hX/jUwwcO54gyw1MuYiJPqsnA617cJV88tUjBOkr ZhNiccEmvZL1RVhLrb1Wzw3mueZNPVJ+Mlq4Zh/xTlXV/w47UshmwEu5kHHncIVz XENvvL/9fqkZNHcNfYUUhXBBXVnaIEblhHGXsRj2zNHk1xxiQ0i3JrNPFapjZHBV Xi5AXwO3TImEcntNaoNWP6Q7dxbasLNHI52RGgowsPeD0gXShPzzPnOdNfSyxKpu 6UZZRJ1meXlzYrcqxnbEoGB6xPhiKenq1hlX4UbKKAUl -----END CERTIFICATE-----Generated at Sun Dec 7 01:05:47 2025 by rpki-client