This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/WIlQj4DSCC5oaFzSCmlW77GXtnI.roa File: WIlQj4DSCC5oaFzSCmlW77GXtnI.roa (raw, json) Hash identifier: HCdPPDvvWdDckNvrACZfzi9089/2Se5h0bnz9yh5nCo= Subject key identifier: 58:89:50:8F:80:D2:08:2E:68:68:5C:D2:0A:69:56:EF:B1:97:B6:72 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019AD0F4FFA7DC1A6504629141BE3A465EF5 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/WIlQj4DSCC5oaFzSCmlW77GXtnI.roa Signing time: Sat 29 Nov 2025 18:51:48 +0000 ROA not before: Sat 29 Nov 2025 18:51:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32043 IP address blocks: 195.216.164.0/24 maxlen: 24 195.216.165.0/24 maxlen: 24 195.216.166.0/24 maxlen: 24 195.216.167.0/24 maxlen: 24 195.216.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:f4:ff:a7:dc:1a:65:04:62:91:41:be:3a:46:5e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Nov 29 18:51:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5889508f80d2082e68685cd20a6956efb197b672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:ad:14:b8:7e:ee:72:1b:50:50:ef:15:a2: 91:31:57:89:88:e0:12:3b:83:a1:ac:0d:aa:fd:91: a1:dc:22:68:49:30:f1:30:db:da:f9:8b:50:49:28: 71:9b:ad:e4:54:40:2f:64:b4:0d:60:65:14:c3:55: f7:07:0d:fe:44:c3:7c:3e:eb:97:be:e5:9f:40:ef: c3:44:71:92:37:ce:b0:07:80:b4:1d:4f:c7:0f:6c: e4:c8:10:10:3c:4e:da:c1:3a:a2:63:ee:1c:39:6c: 99:9d:b9:b5:2b:a3:de:15:aa:5a:f9:e8:2e:91:28: d1:e3:cb:84:72:13:3e:71:07:6c:ff:8f:11:31:70: 1e:73:92:1e:9b:fa:12:dc:55:72:4c:71:29:22:d7: 7d:57:5a:ea:50:28:10:bb:00:ee:f7:b4:87:9f:11: df:78:8f:56:ee:9a:a3:b0:27:0b:55:8c:23:86:bc: e8:ed:eb:fd:d7:fe:2b:79:c8:e1:ce:be:c4:c6:60: f0:af:6b:0e:0f:0e:5c:ac:6f:ad:02:c4:d1:ce:14: 3e:4c:8d:7e:28:1c:ff:28:97:45:ff:1d:6f:59:c1: a6:a8:ab:2c:cb:d5:c8:fd:f6:4f:3e:47:24:3d:af: e8:2e:45:8e:cf:d6:a4:2a:7c:f4:22:1d:67:23:a4: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:89:50:8F:80:D2:08:2E:68:68:5C:D2:0A:69:56:EF:B1:97:B6:72 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/WIlQj4DSCC5oaFzSCmlW77GXtnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.164.0/22 195.216.184.0/24 Signature Algorithm: sha256WithRSAEncryption 17:26:31:1b:5e:44:71:ef:88:07:36:6e:4e:7b:61:85:fa:23: e0:98:ec:a6:e2:84:d5:bd:da:cf:a4:a9:5b:d9:54:52:ab:bd: 47:a3:24:fb:9d:e1:43:e7:11:eb:25:ce:cc:28:e3:08:25:f0: 9f:e4:71:2f:a7:87:5f:8d:30:3c:0f:ac:5d:7f:64:f3:ad:7f: 39:71:f7:1c:9c:a7:1e:ce:56:2b:8e:c0:82:3c:c2:4c:fc:9c: 30:5c:8e:6c:ac:5c:29:bb:c0:a7:a4:9c:18:2e:8d:e9:ad:34: b6:b1:77:9d:46:f8:5c:a8:80:89:85:e9:dc:86:ee:fe:2e:cc: 1f:f5:ac:f8:e5:26:49:d7:f5:97:b9:d8:56:4e:30:67:55:ae: 3a:50:79:28:a8:bc:9a:ae:7c:a9:b0:af:f3:b1:ab:5c:a0:1a: f6:af:39:ec:99:d9:97:91:9d:c5:76:63:7d:15:42:0e:86:74: 82:a2:79:1b:e8:71:09:99:77:86:c4:28:e5:0f:db:40:70:83: 67:3b:fc:71:3b:b2:39:ba:a7:ab:f0:5f:6a:e6:15:ef:2e:28: 2e:c2:4d:bd:2a:29:7a:06:5c:2a:0e:35:0f:dc:6d:d8:47:56: f6:de:95:ee:ed:b2:46:c1:c7:32:71:ad:c0:3b:9d:11:39:3a: 45:02:60:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrQ9P+n3BplBGKRQb46Rl71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUxMTI5MTg1MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODg5NTA4ZjgwZDIwODJlNjg2ODVjZDIwYTY5NTZlZmIxOTdiNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5+tFLh+7nIbUFDvFaKRMVeJiOAS O4OhrA2q/ZGh3CJoSTDxMNva+YtQSShxm63kVEAvZLQNYGUUw1X3Bw3+RMN8PuuX vuWfQO/DRHGSN86wB4C0HU/HD2zkyBAQPE7awTqiY+4cOWyZnbm1K6PeFapa+egu kSjR48uEchM+cQds/48RMXAec5Iem/oS3FVyTHEpItd9V1rqUCgQuwDu97SHnxHf eI9W7pqjsCcLVYwjhrzo7ev91/4recjhzr7ExmDwr2sODw5crG+tAsTRzhQ+TI1+ KBz/KJdF/x1vWcGmqKssy9XI/fZPPkckPa/oLkWOz9akKnz0Ih1nI6TpBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFiJUI+A0gguaGhc0gppVu+xl7ZyMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvV0lsUWo0RFNDQzVvYUZ6U0NtbFc3N0dYdG5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw9ikAwQA w9i4MA0GCSqGSIb3DQEBCwUAA4IBAQAXJjEbXkRx74gHNm5Oe2GF+iPgmOym4oTV vdrPpKlb2VRSq71HoyT7neFD5xHrJc7MKOMIJfCf5HEvp4dfjTA8D6xdf2TzrX85 cfccnKcezlYrjsCCPMJM/JwwXI5srFwpu8CnpJwYLo3prTS2sXedRvhcqICJhenc hu7+Lswf9az45SZJ1/WXudhWTjBnVa46UHkoqLyarnypsK/zsatcoBr2rznsmdmX kZ3FdmN9FUIOhnSConkb6HEJmXeGxCjlD9tAcINnO/xxO7I5uqer8F9q5hXvLigu wk29Kil6BlwqDjUP3G3YR1b23pXu7bJGwccyca3AO50ROTpFAmDm -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:26 2025 by rpki-client