This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/WkNO-IeulMbn4ZJvUgtpWPeUHMA.roa File: WkNO-IeulMbn4ZJvUgtpWPeUHMA.roa (raw, json) Hash identifier: jPFVdHVWjo+CbaX7r8T+q+wkvMyetEyIe+LzWcBGU+g= Subject key identifier: 5A:43:4E:F8:87:AE:94:C6:E7:E1:92:6F:52:0B:69:58:F7:94:1C:C0 Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e Certificate serial: 019AE10B09A5EBF201995A4BF10979FAF311 Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/WkNO-IeulMbn4ZJvUgtpWPeUHMA.roa Signing time: Tue 02 Dec 2025 21:49:48 +0000 ROA not before: Tue 02 Dec 2025 21:49:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50673 IP address blocks: 84.246.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e1:0b:09:a5:eb:f2:01:99:5a:4b:f1:09:79:fa:f3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e Validity Not Before: Dec 2 21:49:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a434ef887ae94c6e7e1926f520b6958f7941cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:81:b7:8a:73:45:1a:b5:f2:21:f9:84:09: 04:fb:35:21:04:12:8e:7b:3d:24:99:b3:dc:f4:b9: c7:b5:15:8a:89:73:7e:ce:bb:cd:3b:13:45:29:1f: c1:8b:62:3d:4d:dc:d3:c4:d9:48:75:37:38:66:01: a9:92:5d:34:ce:c1:90:d2:a2:b4:45:61:22:87:bc: f1:52:0a:38:f5:6d:32:3d:a8:59:36:e6:32:4e:2c: ee:f6:c9:6a:a5:55:b5:d9:96:fe:66:68:c3:5e:61: 21:67:9b:9b:9f:01:40:5f:d5:29:ee:b5:80:d3:ca: 73:2a:31:2f:13:ef:ba:01:3b:bc:a9:a9:65:06:9d: ca:84:2c:2e:27:29:97:bd:75:6f:26:8d:40:a7:13: c9:be:93:b5:c7:05:41:ab:9d:9b:db:ea:b3:3d:94: 32:7b:80:4d:60:cb:9a:03:f3:5e:c2:54:0d:64:29: 0c:34:ce:b0:14:42:2c:45:ee:95:ef:c1:6e:68:d6: 43:b7:23:4f:af:42:e6:05:55:96:9c:79:16:d4:9a: 61:58:4d:80:0f:30:aa:68:90:3c:d4:2e:0c:f3:76: 8e:5e:26:cf:7c:a3:b7:c7:16:58:4d:7e:60:21:77: 2b:d4:ca:18:64:99:ea:00:c3:5b:d9:d7:be:f3:30: e2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:43:4E:F8:87:AE:94:C6:E7:E1:92:6F:52:0B:69:58:F7:94:1C:C0 X509v3 Authority Key Identifier: keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/WkNO-IeulMbn4ZJvUgtpWPeUHMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.80.0/24 Signature Algorithm: sha256WithRSAEncryption 54:74:6f:fc:3f:b8:a0:8f:03:49:14:e3:bd:c7:f4:9f:09:32: 44:89:53:f2:78:d3:e3:a3:ff:9e:b5:40:b7:48:2a:39:c9:4c: 96:b8:7d:dd:00:cf:f9:34:c7:5d:3d:2c:35:4f:37:8c:6e:78: 52:22:0f:28:44:7f:93:ed:ba:30:14:f1:4d:cd:27:32:61:ac: b8:fc:6e:fc:2c:d3:91:2c:70:71:b7:e8:6a:4a:4c:a7:e0:73: c6:68:f2:1c:5f:61:09:83:50:fd:d5:7e:04:55:8f:43:43:ae: a3:a8:d9:86:3e:2d:75:a6:be:8f:50:87:78:c7:37:04:b2:ea: 66:1f:4b:e7:9c:0c:6f:56:6e:54:40:b8:0d:1b:af:e3:b2:74: f0:47:78:b3:f3:c3:c3:bb:83:a4:4a:17:39:4e:9a:ef:69:a6: 9c:aa:19:63:fd:9c:4e:d1:99:5a:18:a7:8c:b8:95:34:b6:bd: 09:43:7e:52:77:b1:78:b8:06:11:9c:e6:b9:07:2e:bb:da:ea: 68:d0:b4:f6:78:3f:79:c0:10:9c:65:fc:02:86:2d:e7:70:de: 14:45:39:03:8d:a5:78:b8:6f:b3:5c:d3:3e:77:f5:95:d4:ea: 01:7c:5e:ec:d8:bf:96:b5:1b:a8:6c:7f:7b:1d:33:67:b5:10: 26:75:a0:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrhCwml6/IBmVpL8Ql5+vMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTk0NTY4NjE4ODk4YTlmYjcyMGFlMDliZWQwZWQxYmU0 Zjg1N2UwHhcNMjUxMjAyMjE0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTQzNGVmODg3YWU5NGM2ZTdlMTkyNmY1MjBiNjk1OGY3OTQxY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+eBt4pzRRq18iH5hAkE+zUhBBKO ez0kmbPc9LnHtRWKiXN+zrvNOxNFKR/Bi2I9TdzTxNlIdTc4ZgGpkl00zsGQ0qK0 RWEih7zxUgo49W0yPahZNuYyTizu9slqpVW12Zb+ZmjDXmEhZ5ubnwFAX9Up7rWA 08pzKjEvE++6ATu8qallBp3KhCwuJymXvXVvJo1ApxPJvpO1xwVBq52b2+qzPZQy e4BNYMuaA/NewlQNZCkMNM6wFEIsRe6V78FuaNZDtyNPr0LmBVWWnHkW1JphWE2A DzCqaJA81C4M83aOXibPfKO3xxZYTX5gIXcr1MoYZJnqAMNb2de+8zDijwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFpDTviHrpTG5+GSb1ILaVj3lBzAMB8GA1UdIwQY MBaAFAdZRWhhiJip+3IK4JvtDtG+T4V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgt MWVjY2JlNjdjNjYxLzEvV2tOTy1JZXVsTWJuNFpKdlVndHBXUGVVSE1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgtMWVjY2JlNjdjNjYx LzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPZQMA0G CSqGSIb3DQEBCwUAA4IBAQBUdG/8P7igjwNJFOO9x/SfCTJEiVPyeNPjo/+etUC3 SCo5yUyWuH3dAM/5NMddPSw1TzeMbnhSIg8oRH+T7bowFPFNzScyYay4/G78LNOR LHBxt+hqSkyn4HPGaPIcX2EJg1D91X4EVY9DQ66jqNmGPi11pr6PUId4xzcEsupm H0vnnAxvVm5UQLgNG6/jsnTwR3iz88PDu4OkShc5Tprvaaacqhlj/ZxO0ZlaGKeM uJU0tr0JQ35Sd7F4uAYRnOa5By672upo0LT2eD95wBCcZfwChi3ncN4URTkDjaV4 uG+zXNM+d/WV1OoBfF7s2L+WtRuobH97HTNntRAmdaA4 -----END CERTIFICATE-----Generated at Sat Dec 6 23:19:32 2025 by rpki-client