This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/wCBr-k0AtLk5d98BUTSeDnbaCIw.roa File: wCBr-k0AtLk5d98BUTSeDnbaCIw.roa (raw, json) Hash identifier: 36nmnwOgMPCPBCUdTafpIUXfmFJpoky9F6FQl9mvwM4= Subject key identifier: C0:20:6B:FA:4D:00:B4:B9:39:77:DF:01:51:34:9E:0E:76:DA:08:8C Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986 Certificate serial: 019AE53536A8CA9EE42393F86A04B143DA6B Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/wCBr-k0AtLk5d98BUTSeDnbaCIw.roa Signing time: Wed 03 Dec 2025 17:14:21 +0000 ROA not before: Wed 03 Dec 2025 17:14:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 680 IP address blocks: 136.172.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:35:36:a8:ca:9e:e4:23:93:f8:6a:04:b1:43:da:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986 Validity Not Before: Dec 3 17:14:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0206bfa4d00b4b93977df0151349e0e76da088c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:23:01:ee:59:6f:01:1a:28:28:74:e3:28: a4:a1:ed:b4:42:dc:c2:7d:5d:1a:b7:82:81:40:8e: 43:a5:a9:08:4d:de:aa:3d:46:40:38:60:70:46:86: 5c:e3:70:ae:f6:7a:d3:86:7d:09:84:41:cb:6a:ab: f3:9f:6d:98:f9:33:f4:c9:5b:5e:d9:b8:02:0c:9b: e4:4e:8e:a7:b8:a8:95:57:7e:fb:45:f6:b1:84:7f: 98:0e:ff:3f:f4:6d:f5:e3:8f:16:84:ac:38:f1:dc: 15:0c:6e:86:96:42:51:44:4a:0c:fa:0d:34:f6:ae: 55:1d:73:1b:1e:d4:01:a3:53:38:64:2e:2c:95:f3: b0:1c:85:d9:4f:a5:2d:78:f7:25:ee:68:b0:b1:4b: f9:32:f0:b5:6f:2f:b3:88:44:d2:89:23:1f:e4:91: 38:b2:67:40:83:05:13:44:2e:4e:49:fa:cc:c1:a4: 75:5a:ee:46:00:c3:15:fd:91:4f:c0:f9:41:f0:fe: 47:db:7f:0e:1f:40:c5:0f:0e:30:ca:e7:67:15:a6: b4:a4:69:68:61:86:0d:f3:ca:9d:d4:b5:ca:6a:df: c0:11:e5:36:33:24:3a:d9:0b:a3:bd:d3:1d:d4:01: e4:c1:9d:86:f8:03:55:17:dd:67:77:05:ec:21:ef: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:20:6B:FA:4D:00:B4:B9:39:77:DF:01:51:34:9E:0E:76:DA:08:8C X509v3 Authority Key Identifier: keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/wCBr-k0AtLk5d98BUTSeDnbaCIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.172.0.0/16 Signature Algorithm: sha256WithRSAEncryption 00:2b:c3:ce:9b:ef:28:d7:71:dd:b1:4c:02:b0:25:90:28:2d: 50:65:83:46:3d:88:9a:c8:6b:55:6b:d4:35:22:40:b2:fa:ed: 85:72:d5:6d:0d:12:f2:fe:f8:71:b4:18:fe:81:5e:4f:56:4e: 49:50:14:b2:72:15:8e:22:b9:d0:4e:5f:a5:98:ce:ff:56:70: 9f:89:06:af:58:ff:6d:23:f2:24:c7:06:8b:24:f0:be:67:34: 6d:36:dd:1f:bd:b2:7e:94:19:b3:21:bd:d3:21:6f:10:42:40: c5:17:7d:c3:7e:1e:a3:4e:95:58:06:8a:32:4d:34:6a:e7:f9: 81:6e:fb:1d:dd:b0:3a:e9:5c:4e:a6:a2:f2:1d:0b:e4:d8:2d: 09:c6:9e:fd:0b:be:c2:66:a2:45:c2:70:bf:1d:be:2f:d8:57: 93:47:02:ce:ae:ad:de:2e:6e:50:de:e6:fe:21:a4:f6:de:39: 36:c3:51:f3:6c:8c:fb:95:b9:e7:de:33:f8:6c:fd:ca:5c:04: 91:72:51:f7:f4:fa:9f:f1:73:3b:31:96:dd:67:dc:e2:c2:95: 0d:49:f8:04:5d:5c:7b:76:63:3f:d7:04:59:03:f3:32:13:ff: e0:7e:b1:12:92:cb:64:c1:4c:a5:b6:72:3e:34:cd:56:4b:f8: e0:d0:0d:4d -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZrlNTaoyp7kI5P4agSxQ9prMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWE3MjkwZWMyOThjMWI2NGQ5ODYzMDZmMWIyNGQzZDMz NjY5ODYwHhcNMjUxMjAzMTcxNDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDIwNmJmYTRkMDBiNGI5Mzk3N2RmMDE1MTM0OWUwZTc2ZGEwODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH8jAe5ZbwEaKCh04yikoe20QtzC fV0at4KBQI5DpakITd6qPUZAOGBwRoZc43Cu9nrThn0JhEHLaqvzn22Y+TP0yVte 2bgCDJvkTo6nuKiVV377RfaxhH+YDv8/9G31448WhKw48dwVDG6GlkJRREoM+g00 9q5VHXMbHtQBo1M4ZC4slfOwHIXZT6UtePcl7miwsUv5MvC1by+ziETSiSMf5JE4 smdAgwUTRC5OSfrMwaR1Wu5GAMMV/ZFPwPlB8P5H238OH0DFDw4wyudnFaa0pGlo YYYN88qd1LXKat/AEeU2MyQ62QujvdMd1AHkwZ2G+ANVF91ndwXsIe9tMQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMAga/pNALS5OXffAVE0ng522giMMB8GA1UdIwQY MBaAFBdacpDsKYwbZNmGMG8bJNPTNmmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzkt N2VhZmY2YjBmOGNkLzEvd0NCci1rMEF0TGs1ZDk4QlVUU2VEbmJhQ0l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzktN2VhZmY2YjBmOGNk LzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiKwwDQYJ KoZIhvcNAQELBQADggEBAAArw86b7yjXcd2xTAKwJZAoLVBlg0Y9iJrIa1Vr1DUi QLL67YVy1W0NEvL++HG0GP6BXk9WTklQFLJyFY4iudBOX6WYzv9WcJ+JBq9Y/20j 8iTHBosk8L5nNG023R+9sn6UGbMhvdMhbxBCQMUXfcN+HqNOlVgGijJNNGrn+YFu +x3dsDrpXE6movIdC+TYLQnGnv0LvsJmokXCcL8dvi/YV5NHAs6urd4ublDe5v4h pPbeOTbDUfNsjPuVuefeM/hs/cpcBJFyUff0+p/xczsxlt1n3OLClQ1J+ARdXHt2 Yz/XBFkD8zIT/+B+sRKSy2TBTKW2cj40zVZL+ODQDU0= -----END CERTIFICATE-----Generated at Sat Dec 6 09:54:49 2025 by rpki-client