This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/8qP_rwGfS_erDEkhd__wmflr3D0.roa File: 8qP_rwGfS_erDEkhd__wmflr3D0.roa (raw, json) Hash identifier: uNhvabbwn1Xllj8TcYzhRoFxuzpR3wjSmmlIi7iHy/c= Subject key identifier: F2:A3:FF:AF:01:9F:4B:F7:AB:0C:49:21:77:FF:F0:99:F9:6B:DC:3D Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AB11ACF10BD1228F1613499DF76E2B125 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/8qP_rwGfS_erDEkhd__wmflr3D0.roa Signing time: Sun 23 Nov 2025 14:25:15 +0000 ROA not before: Sun 23 Nov 2025 14:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204108 IP address blocks: 31.133.32.0/22 maxlen: 22 185.229.232.0/22 maxlen: 24 185.253.40.0/23 maxlen: 24 185.253.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:1a:cf:10:bd:12:28:f1:61:34:99:df:76:e2:b1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 23 14:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f2a3ffaf019f4bf7ab0c492177fff099f96bdc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:cc:1a:58:66:9f:fa:6f:49:00:22:bb:68: c5:7c:29:71:e4:8c:88:4d:19:53:53:5e:18:81:37: 35:e3:8c:9c:59:d6:b0:04:94:13:21:3c:c9:56:1b: 83:ef:a2:45:02:d9:46:fa:d3:28:8d:21:44:8e:cc: 7a:d9:c0:20:ed:e8:44:79:d2:2f:72:9b:3c:44:43: 53:e5:79:96:b7:ce:08:79:dc:f0:73:8a:3a:ba:94: e7:18:11:e6:b8:43:aa:5b:92:d8:38:f0:ec:91:69: d2:b4:36:1d:e9:00:f4:88:02:75:6e:c6:a8:ef:98: fc:75:61:6c:34:3d:4d:de:b1:42:2a:42:17:49:33: 15:5b:ea:6b:00:00:c8:4f:07:cb:35:f4:41:41:41: 96:2a:1e:e4:03:a5:09:31:86:42:71:94:a7:4f:29: e7:b7:d6:cf:ba:71:25:4d:5e:37:46:c7:9f:f7:85: ce:57:97:d4:f3:77:2a:89:82:cb:b0:f5:b2:fa:4a: ea:75:65:22:4a:8f:11:f4:74:a9:89:f0:90:b5:6d: 78:eb:48:0e:d0:18:2f:f0:27:dc:30:ab:5d:cb:5f: 73:29:e9:2c:04:0d:a0:d9:70:0e:7f:f9:c0:31:76: c3:b4:24:33:09:ce:c8:0d:1c:f8:79:dd:d4:a8:fb: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A3:FF:AF:01:9F:4B:F7:AB:0C:49:21:77:FF:F0:99:F9:6B:DC:3D X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/8qP_rwGfS_erDEkhd__wmflr3D0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.32.0/22 185.229.232.0/22 185.253.40.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:8e:c7:56:68:6a:98:79:e9:fb:e2:6b:43:fb:60:0f:58:ca: 04:f4:25:4e:a0:62:d4:77:8f:16:14:63:06:7e:7d:2e:c7:2d: 04:38:5e:53:8a:07:20:b7:f1:39:8d:1b:1d:b8:9f:f2:72:4e: 1e:aa:7c:f3:96:2f:47:ec:a8:0d:fb:2e:0c:65:aa:45:51:49: 0f:7b:7d:9e:e1:b4:41:06:30:b6:3e:fe:31:0a:eb:5a:3f:0a: b4:a2:ad:8c:04:65:30:3b:e8:f9:5b:47:cf:87:a1:a8:08:d0: fc:0d:91:4e:00:93:bd:aa:60:4e:5d:e0:17:93:e7:46:ef:54: 23:6f:cb:2e:ea:29:09:71:ec:de:ae:a9:5c:ca:ad:d5:3e:aa: 63:fb:a8:ae:ed:d5:e2:4e:2b:8c:14:6a:61:46:02:3f:34:c4: 6e:52:67:83:e9:1d:59:6f:49:18:8d:10:b8:8c:ce:ba:16:cb: 16:21:72:d2:dd:33:cb:8a:3a:f7:8e:11:b3:bb:c3:17:ef:ed: f0:76:5f:9b:18:4c:54:48:b7:35:a8:00:08:34:0f:ca:b0:08: 9d:8f:06:5d:3a:83:7c:3c:0c:f5:34:e4:f9:72:a4:57:c6:71: 4b:13:e8:cc:09:4a:5c:1e:10:6d:89:73:69:71:5b:c9:cb:cf: 5c:1b:95:b2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqxGs8QvRIo8WE0md924rElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTIzMTQyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmEzZmZhZjAxOWY0YmY3YWIwYzQ5MjE3N2ZmZjA5OWY5NmJkYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLLMGlhmn/pvSQAiu2jFfClx5IyI TRlTU14YgTc144ycWdawBJQTITzJVhuD76JFAtlG+tMojSFEjsx62cAg7ehEedIv cps8RENT5XmWt84Iedzwc4o6upTnGBHmuEOqW5LYOPDskWnStDYd6QD0iAJ1bsao 75j8dWFsND1N3rFCKkIXSTMVW+prAADITwfLNfRBQUGWKh7kA6UJMYZCcZSnTynn t9bPunElTV43Rsef94XOV5fU83cqiYLLsPWy+krqdWUiSo8R9HSpifCQtW1460gO 0Bgv8CfcMKtdy19zKeksBA2g2XAOf/nAMXbDtCQzCc7IDRz4ed3UqPu+9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPKj/68Bn0v3qwxJIXf/8Jn5a9w9MB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvOHFQX3J3R2ZTX2VyREVraGRfX3dtZmxyM0QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCH4UgAwQC ueXoAwQCuf0oMA0GCSqGSIb3DQEBCwUAA4IBAQB/jsdWaGqYeen74mtD+2APWMoE 9CVOoGLUd48WFGMGfn0uxy0EOF5Tigcgt/E5jRsduJ/yck4eqnzzli9H7KgN+y4M ZapFUUkPe32e4bRBBjC2Pv4xCutaPwq0oq2MBGUwO+j5W0fPh6GoCND8DZFOAJO9 qmBOXeAXk+dG71Qjb8su6ikJcezerqlcyq3VPqpj+6iu7dXiTiuMFGphRgI/NMRu UmeD6R1Zb0kYjRC4jM66FssWIXLS3TPLijr3jhGzu8MX7+3wdl+bGExUSLc1qAAI NA/KsAidjwZdOoN8PAz1NOT5cqRXxnFLE+jMCUpcHhBtiXNpcVvJy89cG5Wy -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:36 2025 by rpki-client