This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/WXv2dwbVJRW9ba0pdaD2mDUFDGQ.roa File: WXv2dwbVJRW9ba0pdaD2mDUFDGQ.roa (raw, json) Hash identifier: KdjFQqVsulL+ig924wHqXhT1yZyNPpl3AA3pYy7D+Qc= Subject key identifier: 59:7B:F6:77:06:D5:25:15:BD:6D:AD:29:75:A0:F6:98:35:05:0C:64 Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Certificate serial: 019A532B61848871F7F4902F7D489ACC3740 Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/WXv2dwbVJRW9ba0pdaD2mDUFDGQ.roa Signing time: Wed 05 Nov 2025 08:39:03 +0000 ROA not before: Wed 05 Nov 2025 08:39:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211654 IP address blocks: 45.81.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:2b:61:84:88:71:f7:f4:90:2f:7d:48:9a:cc:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Validity Not Before: Nov 5 08:39:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=597bf67706d52515bd6dad2975a0f69835050c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:e8:72:26:1d:7e:a1:00:14:00:4b:ab:08: a6:d3:bd:bd:4e:b5:53:53:a1:ce:cd:77:4b:6d:7f: a6:9e:33:0a:f7:7c:17:7f:0b:ab:82:04:10:4a:41: 88:f9:e4:d5:7c:bd:56:01:da:59:ae:f0:04:0c:fc: 7a:59:98:7c:3d:47:a4:99:1d:e9:d0:1a:63:40:25: 7c:2c:9f:99:25:16:39:f2:8e:b9:87:95:b5:74:ce: a4:d5:d8:da:60:d4:05:3e:2c:50:3d:7b:b5:21:9a: 26:89:74:c2:45:51:a8:84:a5:a9:9b:d6:94:f1:56: 1a:fb:3a:69:ef:d1:c7:99:0e:d0:14:14:4f:c0:e4: c8:87:b1:ee:f7:a1:87:3c:57:41:37:ba:54:19:06: 80:00:c1:d9:90:99:4d:5c:ae:bf:ba:8b:82:d7:42: 75:85:a1:ac:67:d3:20:31:1f:68:17:da:cf:d2:ec: f8:f4:cb:29:c8:4e:88:6e:34:89:b0:81:d3:7a:cc: ee:25:66:1a:bc:8d:fa:e6:9c:4f:91:bf:f8:37:84: e7:05:a3:7b:68:95:09:a0:97:e2:f1:78:18:62:c6: c5:e2:6d:98:b8:4c:3f:bb:63:a5:de:ea:df:43:fd: 77:11:1b:ce:1c:75:4f:76:af:ae:c9:7e:6b:19:f7: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7B:F6:77:06:D5:25:15:BD:6D:AD:29:75:A0:F6:98:35:05:0C:64 X509v3 Authority Key Identifier: keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/WXv2dwbVJRW9ba0pdaD2mDUFDGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.88.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:c0:b4:da:de:2d:8a:46:9e:50:ca:c9:b7:11:3f:b3:fd:9f: d7:88:c6:b3:f0:9c:05:73:5f:9b:11:d1:af:85:7e:54:d9:cf: e0:42:fb:68:32:aa:5f:ee:22:c3:3a:4f:ef:f7:3a:fe:bd:1c: 66:4a:2e:98:7b:0a:e2:fd:6c:81:fd:91:a1:44:b8:73:18:be: 49:32:da:4c:99:83:b5:36:36:0e:87:8b:1d:06:1a:37:e8:21: ab:b6:a2:fa:08:53:ff:d5:ce:8a:af:48:3f:cf:a1:29:60:13: cb:17:a2:a1:67:f4:65:02:4f:1f:ff:eb:07:38:ca:72:f6:42: 42:5a:92:db:63:ef:c5:f6:2f:35:c1:17:cb:97:2d:65:4a:a8: fe:ad:78:c4:1a:07:f4:0b:cc:c2:56:8c:8a:e5:92:9e:b2:ff: b7:8e:61:a4:07:f5:47:8b:34:9d:46:90:40:90:2a:07:e5:d6: f0:7b:df:45:ec:fe:79:0c:08:4a:ea:6d:0e:11:64:8c:c0:d4: 13:65:2e:e6:1b:69:4c:88:38:65:31:6f:c0:d7:59:8e:f0:22: ac:4d:8f:fc:46:9a:43:53:a6:60:a8:69:cc:f7:a9:33:70:94: f7:16:9d:51:a2:56:75:a3:2c:3c:00:21:11:22:36:0f:88:0a: e9:41:86:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpTK2GEiHH39JAvfUiazDdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTYyZDMwNzNhODJkYTg2NTQyYWNmYzM2ZjZmY2I5ZTY2 YTA1YmIwHhcNMjUxMTA1MDgzOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTdiZjY3NzA2ZDUyNTE1YmQ2ZGFkMjk3NWEwZjY5ODM1MDUwYzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYXociYdfqEAFABLqwim0729TrVT U6HOzXdLbX+mnjMK93wXfwurggQQSkGI+eTVfL1WAdpZrvAEDPx6WZh8PUekmR3p 0BpjQCV8LJ+ZJRY58o65h5W1dM6k1djaYNQFPixQPXu1IZomiXTCRVGohKWpm9aU 8VYa+zpp79HHmQ7QFBRPwOTIh7Hu96GHPFdBN7pUGQaAAMHZkJlNXK6/uouC10J1 haGsZ9MgMR9oF9rP0uz49MspyE6IbjSJsIHTeszuJWYavI365pxPkb/4N4TnBaN7 aJUJoJfi8XgYYsbF4m2YuEw/u2Ol3urfQ/13ERvOHHVPdq+uyX5rGffwbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFl79ncG1SUVvW2tKXWg9pg1BQxkMB8GA1UdIwQY MBaAFJmmLTBzqC2oZUKs/Db2/LnmagW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYt MmQ5NTM2MDBmZjM3LzEvV1h2MmR3YlZKUlc5YmEwcGRhRDJtRFVGREdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYtMmQ5NTM2MDBmZjM3 LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVFYMA0G CSqGSIb3DQEBCwUAA4IBAQBswLTa3i2KRp5Qysm3ET+z/Z/XiMaz8JwFc1+bEdGv hX5U2c/gQvtoMqpf7iLDOk/v9zr+vRxmSi6Yewri/WyB/ZGhRLhzGL5JMtpMmYO1 NjYOh4sdBho36CGrtqL6CFP/1c6Kr0g/z6EpYBPLF6KhZ/RlAk8f/+sHOMpy9kJC WpLbY+/F9i81wRfLly1lSqj+rXjEGgf0C8zCVoyK5ZKesv+3jmGkB/VHizSdRpBA kCoH5dbwe99F7P55DAhK6m0OEWSMwNQTZS7mG2lMiDhlMW/A11mO8CKsTY/8RppD U6ZgqGnM96kzcJT3Fp1RolZ1oyw8ACERIjYPiArpQYa0 -----END CERTIFICATE-----Generated at Sun Dec 7 04:07:28 2025 by rpki-client