This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/wdmDU1FgaGs1uyj3K-dsWGNH688.roa File: wdmDU1FgaGs1uyj3K-dsWGNH688.roa (raw, json) Hash identifier: 725uUHQDeUCWiCmMQj9675kxf7ty46STH4meZaz93cA= Subject key identifier: C1:D9:83:53:51:60:68:6B:35:BB:28:F7:2B:E7:6C:58:63:47:EB:CF Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AE3FDBF5C7C4E40CAEEE7D9C24E587890 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/wdmDU1FgaGs1uyj3K-dsWGNH688.roa Signing time: Wed 03 Dec 2025 11:34:08 +0000 ROA not before: Wed 03 Dec 2025 11:34:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210067 IP address blocks: 176.124.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:fd:bf:5c:7c:4e:40:ca:ee:e7:d9:c2:4e:58:78:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Dec 3 11:34:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1d983535160686b35bb28f72be76c586347ebcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6f:01:b5:e8:97:95:5d:8b:f4:dd:a9:fe:81: 21:06:48:27:5a:14:27:8a:1b:ae:20:fd:62:d3:d4: 05:4c:67:5f:85:a0:cb:4d:c3:50:0f:2c:90:3a:59: 96:8a:56:0d:ff:04:e7:42:a8:65:a0:43:3d:3c:7d: 9c:9f:f7:4f:02:96:11:b2:21:17:58:64:13:2b:95: ff:74:f9:91:ae:05:d0:9b:5b:4a:89:aa:5f:e9:21: 1b:00:30:8b:7b:2a:15:5b:19:a5:f0:d5:64:ca:24: d0:f3:17:9d:80:ed:5f:af:06:1f:93:92:78:c2:ca: af:1a:2f:c4:d8:8b:c7:7d:44:70:1a:61:da:ac:70: 35:c6:99:a5:68:80:30:af:c1:ca:ce:9c:19:b2:d6: ce:50:dc:bf:35:26:97:de:f2:31:7e:cc:3a:9d:50: 9c:ec:38:02:9f:1c:75:d3:b6:99:af:3e:05:51:55: be:47:29:4b:bf:e8:9d:a5:49:44:9d:20:94:03:f9: bf:40:13:e7:3b:82:c6:76:90:a2:9e:b4:5f:2c:57: 47:9f:cb:fb:03:a8:08:3a:33:95:2d:2c:20:af:6a: 93:06:1e:0e:84:d4:fc:8c:ae:e0:a9:dc:03:2a:bb: d6:40:90:d9:cd:ef:2f:6a:40:13:01:cb:29:b0:40: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D9:83:53:51:60:68:6B:35:BB:28:F7:2B:E7:6C:58:63:47:EB:CF X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/wdmDU1FgaGs1uyj3K-dsWGNH688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.31.0/24 Signature Algorithm: sha256WithRSAEncryption 68:7f:ff:9b:72:af:37:80:60:ba:46:73:42:5c:81:5a:52:4f: 01:57:26:6f:fd:70:1e:52:39:f7:d0:ae:e4:a4:1e:ad:71:49: 56:0c:a5:26:6f:35:cc:7b:e8:7a:ea:c3:36:f3:1e:bc:6f:f9: 63:50:22:f1:1d:80:52:90:20:96:3e:68:e1:75:08:71:ff:77: 0a:d4:74:18:71:3b:fe:a0:18:09:7a:74:a2:64:8d:8f:ff:da: d8:d7:69:b7:26:09:59:d1:33:0b:4f:cf:19:59:f7:30:81:a0: 8c:b7:7a:ea:11:9c:7b:76:c5:8d:ca:7e:b4:df:6a:e7:bb:d7: cd:72:59:98:67:28:26:31:15:dd:aa:3b:6e:de:0d:03:4c:53: d5:54:1f:fb:07:04:51:d4:61:49:ce:9c:58:8f:f2:8b:ed:87: 79:2f:e0:1a:fe:cb:10:fe:b8:b2:5c:fa:65:e8:eb:6d:ed:80: 1c:32:3b:47:70:45:a1:8d:b0:da:53:a4:0d:28:32:42:28:eb: 59:dd:01:71:66:ea:5d:d9:17:ba:83:07:f5:44:69:ea:cd:d8: 98:ad:11:15:e0:4f:ff:fe:25:39:ef:3d:f7:ac:fb:c9:cb:db: 9a:ae:43:4c:58:7d:4c:dd:a9:46:1c:97:f3:8c:40:a9:e8:bf: ad:5a:18:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrj/b9cfE5Ayu7n2cJOWHiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMjAzMTEzNDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWQ5ODM1MzUxNjA2ODZiMzViYjI4ZjcyYmU3NmM1ODYzNDdlYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W8BteiXlV2L9N2p/oEhBkgnWhQn ihuuIP1i09QFTGdfhaDLTcNQDyyQOlmWilYN/wTnQqhloEM9PH2cn/dPApYRsiEX WGQTK5X/dPmRrgXQm1tKiapf6SEbADCLeyoVWxml8NVkyiTQ8xedgO1frwYfk5J4 wsqvGi/E2IvHfURwGmHarHA1xpmlaIAwr8HKzpwZstbOUNy/NSaX3vIxfsw6nVCc 7DgCnxx107aZrz4FUVW+RylLv+idpUlEnSCUA/m/QBPnO4LGdpCinrRfLFdHn8v7 A6gIOjOVLSwgr2qTBh4OhNT8jK7gqdwDKrvWQJDZze8vakATAcspsECipQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMHZg1NRYGhrNbso9yvnbFhjR+vPMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvd2RtRFUxRmdhR3MxdXlqM0stZHNXR05INjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHwfMA0G CSqGSIb3DQEBCwUAA4IBAQBof/+bcq83gGC6RnNCXIFaUk8BVyZv/XAeUjn30K7k pB6tcUlWDKUmbzXMe+h66sM28x68b/ljUCLxHYBSkCCWPmjhdQhx/3cK1HQYcTv+ oBgJenSiZI2P/9rY12m3JglZ0TMLT88ZWfcwgaCMt3rqEZx7dsWNyn6032rnu9fN clmYZygmMRXdqjtu3g0DTFPVVB/7BwRR1GFJzpxYj/KL7Yd5L+Aa/ssQ/riyXPpl 6Ott7YAcMjtHcEWhjbDaU6QNKDJCKOtZ3QFxZupd2Re6gwf1RGnqzdiYrREV4E// /iU57z33rPvJy9uarkNMWH1M3alGHJfzjECp6L+tWhik -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:25 2025 by rpki-client