This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/wgqGPrQ_-bw3hixVEwizAzoQxVg.roa File: wgqGPrQ_-bw3hixVEwizAzoQxVg.roa (raw, json) Hash identifier: OO7KjGdS9CoJvjniou0pMLR7aRYh6Lu4ZGS86Oi0yRI= Subject key identifier: C2:0A:86:3E:B4:3F:F9:BC:37:86:2C:55:13:08:B3:03:3A:10:C5:58 Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d Certificate serial: 019A95EC39C39B02690075F65EA57F8FCEBD Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/wgqGPrQ_-bw3hixVEwizAzoQxVg.roa Signing time: Tue 18 Nov 2025 07:44:37 +0000 ROA not before: Tue 18 Nov 2025 07:44:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51669 IP address blocks: 31.129.128.0/19 maxlen: 19 31.129.128.0/22 maxlen: 22 31.129.132.0/22 maxlen: 22 31.129.133.0/24 maxlen: 24 31.129.134.0/24 maxlen: 24 31.129.136.0/22 maxlen: 22 31.129.140.0/22 maxlen: 22 31.129.144.0/22 maxlen: 22 31.129.148.0/22 maxlen: 22 31.129.150.0/24 maxlen: 24 31.129.151.0/24 maxlen: 24 31.129.152.0/22 maxlen: 22 31.129.156.0/22 maxlen: 22 31.129.156.0/24 maxlen: 24 176.120.176.0/20 maxlen: 20 176.120.176.0/22 maxlen: 22 176.120.180.0/22 maxlen: 22 176.120.184.0/22 maxlen: 22 176.120.188.0/22 maxlen: 22 176.120.190.0/24 maxlen: 24 178.159.48.0/20 maxlen: 20 178.159.48.0/22 maxlen: 22 178.159.52.0/22 maxlen: 22 178.159.56.0/22 maxlen: 22 178.159.60.0/22 maxlen: 22 185.63.216.0/23 maxlen: 23 185.63.216.0/24 maxlen: 24 185.63.217.0/24 maxlen: 24 185.63.218.0/23 maxlen: 23 185.63.218.0/24 maxlen: 24 185.63.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:ec:39:c3:9b:02:69:00:75:f6:5e:a5:7f:8f:ce:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d Validity Not Before: Nov 18 07:44:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c20a863eb43ff9bc37862c551308b3033a10c558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:d2:0a:b4:b0:0d:a0:ef:fa:65:17:b5:75: 71:61:a4:09:16:41:7e:70:46:ea:ec:eb:f2:88:79: 86:da:2f:ae:75:ec:e7:41:19:98:a2:3f:56:84:66: 34:d9:2f:a6:ad:43:ed:0c:8e:d7:0e:dc:42:74:f5: ea:2a:64:88:b3:91:66:f8:4b:03:61:c1:13:92:05: 4b:f5:1c:e4:30:b7:9d:81:e9:b4:af:da:4a:c7:94: fe:82:3d:5a:d6:62:6c:b4:bf:55:dc:ff:e3:df:43: ac:61:13:b8:d0:2a:77:ba:57:6d:6a:23:ad:1c:51: cc:66:d5:4b:98:85:91:32:2a:ca:42:8a:83:d6:2f: 9b:31:a3:8f:38:37:e0:93:95:ae:86:5d:13:76:fa: 1f:1f:a7:f4:e5:47:d6:8f:2a:11:6f:b8:6d:29:37: 90:57:36:82:db:f8:74:69:77:30:3b:2d:3b:85:4d: 56:79:aa:db:3d:62:ae:f0:e6:ce:57:07:d6:bc:08: fd:e9:d4:7c:7f:35:d9:8c:0b:34:6a:b2:4e:45:8a: db:1b:a5:e1:22:45:d6:29:be:34:45:e9:ca:8f:30: 94:ff:dc:2e:f0:c5:75:55:f4:e8:a7:19:fe:65:2e: b2:c4:56:bd:c5:73:54:11:b1:2d:44:42:dc:9d:71: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0A:86:3E:B4:3F:F9:BC:37:86:2C:55:13:08:B3:03:3A:10:C5:58 X509v3 Authority Key Identifier: keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/wgqGPrQ_-bw3hixVEwizAzoQxVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.128.0/19 176.120.176.0/20 178.159.48.0/20 185.63.216.0/22 Signature Algorithm: sha256WithRSAEncryption 58:0e:b9:0d:8f:9b:ba:48:fe:16:8d:04:74:41:6d:1f:c5:bd: 1e:11:00:37:28:5e:f6:b3:80:b3:96:7a:da:06:f1:af:22:e1: 52:6e:14:46:19:33:33:ef:df:53:bf:1a:5c:43:9f:ea:4c:79: 10:6c:dd:b2:24:0f:3f:a0:76:c9:2b:31:9c:8e:06:44:46:55: 68:6a:20:21:7e:f8:b3:79:0b:28:11:12:43:8d:09:63:03:49: b7:d8:fb:01:32:c2:a5:cc:ae:11:de:ab:d5:94:96:d3:ef:4d: be:45:32:05:02:d4:63:3d:c4:36:28:1e:b4:e5:0a:eb:63:44: a5:d5:ed:3e:af:46:13:85:c4:85:93:ab:8a:da:1a:01:20:06: 50:ee:3e:35:eb:fd:26:6b:f3:29:ad:31:95:02:7e:12:dd:b0: c4:1c:48:48:4e:e7:6c:e2:80:80:38:6d:94:33:6e:bf:03:ef: 32:82:17:39:bb:7c:d6:da:1d:03:5e:a2:c5:40:eb:15:a4:36: 51:68:7c:26:4c:f6:76:fc:fa:9c:80:fd:fc:d2:67:56:32:48: 4d:24:42:0f:5c:9d:ae:4b:4c:95:aa:f8:6e:ae:09:38:d0:73: 50:6d:db:1a:c1:1b:ae:7c:a7:f1:02:be:a6:e1:1a:03:64:26: 19:95:b3:64 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqV7DnDmwJpAHX2XqV/j869MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2RkODIwNmMxZTM1MmM1MDY1ZTQ4MTc5N2VmNzdhZjBj M2RlOGQwHhcNMjUxMTE4MDc0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjBhODYzZWI0M2ZmOWJjMzc4NjJjNTUxMzA4YjMwMzNhMTBjNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8LSCrSwDaDv+mUXtXVxYaQJFkF+ cEbq7OvyiHmG2i+udeznQRmYoj9WhGY02S+mrUPtDI7XDtxCdPXqKmSIs5Fm+EsD YcETkgVL9RzkMLedgem0r9pKx5T+gj1a1mJstL9V3P/j30OsYRO40Cp3uldtaiOt HFHMZtVLmIWRMirKQoqD1i+bMaOPODfgk5Wuhl0TdvofH6f05UfWjyoRb7htKTeQ VzaC2/h0aXcwOy07hU1WearbPWKu8ObOVwfWvAj96dR8fzXZjAs0arJORYrbG6Xh IkXWKb40RenKjzCU/9wu8MV1VfTopxn+ZS6yxFa9xXNUEbEtRELcnXGSjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMIKhj60P/m8N4YsVRMIswM6EMVYMB8GA1UdIwQY MBaAFBnN2CBsHjUsUGXkgXl+93rww96NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQt N2IxNzc4ZGRmN2E5LzEvd2dxR1ByUV8tYnczaGl4VkV3aXpBem9ReFZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQtN2IxNzc4ZGRmN2E5 LzEvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFH4GAAwQE sHiwAwQEsp8wAwQCuT/YMA0GCSqGSIb3DQEBCwUAA4IBAQBYDrkNj5u6SP4WjQR0 QW0fxb0eEQA3KF72s4CzlnraBvGvIuFSbhRGGTMz799TvxpcQ5/qTHkQbN2yJA8/ oHbJKzGcjgZERlVoaiAhfvizeQsoERJDjQljA0m32PsBMsKlzK4R3qvVlJbT702+ RTIFAtRjPcQ2KB605QrrY0Sl1e0+r0YThcSFk6uK2hoBIAZQ7j416/0ma/MprTGV An4S3bDEHEhITuds4oCAOG2UM26/A+8yghc5u3zW2h0DXqLFQOsVpDZRaHwmTPZ2 /PqcgP380mdWMkhNJEIPXJ2uS0yVqvhurgk40HNQbdsawRuufKfxAr6m4RoDZCYZ lbNk -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:32 2025 by rpki-client