This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/2WzoUZPj3_8hl4GXrHBNvXiZWV4.roa File: 2WzoUZPj3_8hl4GXrHBNvXiZWV4.roa (raw, json) Hash identifier: AgHIowgNCY7vC1VGpICVeXRRZ8dGCRF8kHXXOlR6jZU= Subject key identifier: D9:6C:E8:51:93:E3:DF:FF:21:97:81:97:AC:70:4D:BD:78:99:59:5E Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Certificate serial: 019AEE556A102BCD1258995F7BAA44327818 Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/2WzoUZPj3_8hl4GXrHBNvXiZWV4.roa Signing time: Fri 05 Dec 2025 11:46:06 +0000 ROA not before: Fri 05 Dec 2025 11:46:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9092 IP address blocks: 213.156.224.0/20 maxlen: 20 213.156.240.0/21 maxlen: 21 2a00:db0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:55:6a:10:2b:cd:12:58:99:5f:7b:aa:44:32:78:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Validity Not Before: Dec 5 11:46:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d96ce85193e3dfff21978197ac704dbd7899595e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:a4:27:69:fc:81:95:c7:50:8a:e6:33:fb: c5:bd:5c:bf:99:0a:50:58:08:d3:07:6b:25:c1:5c: 0e:03:05:80:dd:db:fb:3b:b2:32:78:9e:c8:da:60: c8:14:02:c5:91:12:1b:8b:6a:8f:29:6d:b3:32:de: 64:48:94:de:a7:b5:65:9b:10:8d:43:39:d6:24:9a: 7a:45:92:dc:8e:7d:f5:20:bc:ee:2d:76:ef:9d:f4: ee:4f:33:44:7c:4e:d7:f4:95:d5:64:cd:7b:7e:d3: 4a:c0:e9:27:b4:76:3d:36:1d:b9:92:f3:f8:2b:8d: d5:60:b2:b2:ba:2b:68:d6:b9:22:a9:7f:d9:7b:27: b3:db:0e:37:dd:a0:2f:30:00:00:6e:6c:63:a6:d2: 01:23:67:5c:97:3b:42:3b:d3:93:ce:97:04:a8:0d: 52:51:90:f8:bf:01:5f:20:91:f2:53:4e:b0:34:13: 1a:0f:d5:d2:bf:2b:e4:41:19:d7:66:45:88:ee:6d: de:1f:cc:f8:8d:cf:aa:58:eb:0f:94:85:5f:b7:b8: 75:76:ab:59:a8:cc:c2:cb:db:2e:d1:4e:87:63:ce: c7:5f:44:b3:a0:42:43:5a:be:ae:ed:5d:66:3e:c6: 01:ed:69:82:c6:90:9d:db:6c:b7:83:e1:9a:7c:03: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:E8:51:93:E3:DF:FF:21:97:81:97:AC:70:4D:BD:78:99:59:5E X509v3 Authority Key Identifier: keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/2WzoUZPj3_8hl4GXrHBNvXiZWV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.156.224.0-213.156.247.255 IPv6: 2a00:db0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:2f:a1:f9:37:79:82:9f:3f:49:3e:34:e2:83:1f:1a:3c:2f: 9e:8b:10:78:fb:f2:89:4f:c2:17:77:0f:d6:9b:e0:6b:da:c4: a2:d8:82:76:79:ba:f7:d4:27:79:49:da:c0:e5:8d:98:01:f4: 1b:60:22:6a:4c:fa:38:b5:93:50:b6:14:1a:03:86:02:8b:e2: f5:48:c7:af:29:13:4f:aa:96:23:03:99:7d:9a:9c:a7:7b:32: 30:d0:5d:9f:fd:5d:ed:63:65:1f:27:bd:e3:c1:ab:a7:b0:03: 5d:30:d4:05:5e:5a:f2:54:3e:cb:8f:1c:7d:3d:72:50:58:71: cd:8c:9e:85:da:41:9d:5f:34:50:0b:9f:d6:f1:5d:08:5e:3a: 76:16:79:ba:3a:58:6e:50:4c:ac:6a:da:5d:7b:d4:fb:b5:98: 1c:1d:36:15:75:75:b9:88:b9:f3:73:3f:57:50:e4:a8:8a:78: 1d:1d:70:23:c1:4e:d0:da:a3:8d:14:1c:27:b3:e4:e9:2b:72: e2:53:d2:1d:ed:0a:ca:98:ee:29:6d:e2:68:2a:be:ad:c0:ef: 29:cd:f8:8c:48:64:03:fb:c4:d2:49:ca:ea:90:fe:c9:3c:2e: b4:ad:d5:25:f5:31:d6:9d:8b:4e:c0:e0:af:81:08:29:02:3a: 59:23:e0:4a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZruVWoQK80SWJlfe6pEMngYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw MGM0YzIwHhcNMjUxMjA1MTE0NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTZjZTg1MTkzZTNkZmZmMjE5NzgxOTdhYzcwNGRiZDc4OTk1OTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lmkJ2n8gZXHUIrmM/vFvVy/mQpQ WAjTB2slwVwOAwWA3dv7O7IyeJ7I2mDIFALFkRIbi2qPKW2zMt5kSJTep7VlmxCN QznWJJp6RZLcjn31ILzuLXbvnfTuTzNEfE7X9JXVZM17ftNKwOkntHY9Nh25kvP4 K43VYLKyuito1rkiqX/Zeyez2w433aAvMAAAbmxjptIBI2dclztCO9OTzpcEqA1S UZD4vwFfIJHyU06wNBMaD9XSvyvkQRnXZkWI7m3eH8z4jc+qWOsPlIVft7h1dqtZ qMzCy9su0U6HY87HX0SzoEJDWr6u7V1mPsYB7WmCxpCd22y3g+GafAOMbQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNls6FGT49//IZeBl6xwTb14mVleMB8GA1UdIwQY MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt MDQwNTIzNGFiM2YxLzEvMld6b1VaUGozXzhobDRHWHJIQk52WGlaV1Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAXVnOAD BAPVnPAwDQQCAAIwBwMFACoADbAwDQYJKoZIhvcNAQELBQADggEBADwvofk3eYKf P0k+NOKDHxo8L56LEHj78olPwhd3D9ab4GvaxKLYgnZ5uvfUJ3lJ2sDljZgB9Btg ImpM+ji1k1C2FBoDhgKL4vVIx68pE0+qliMDmX2anKd7MjDQXZ/9Xe1jZR8nvePB q6ewA10w1AVeWvJUPsuPHH09clBYcc2MnoXaQZ1fNFALn9bxXQheOnYWebo6WG5Q TKxq2l171Pu1mBwdNhV1dbmIufNzP1dQ5KiKeB0dcCPBTtDao40UHCez5OkrcuJT 0h3tCsqY7ilt4mgqvq3A7ynN+IxIZAP7xNJJyuqQ/sk8LrSt1SX1Mdadi07A4K+B CCkCOlkj4Eo= -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:04 2025 by rpki-client