This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/wZKCbJ2UcP_9VxdeKhwaGcYfTUg.roa File: wZKCbJ2UcP_9VxdeKhwaGcYfTUg.roa (raw, json) Hash identifier: G5bxqvPtqry3wuv5+QniRzLsgEKG10sge/XqBlIP9sA= Subject key identifier: C1:92:82:6C:9D:94:70:FF:FD:57:17:5E:2A:1C:1A:19:C6:1F:4D:48 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019AE4359844C935DF4C4F16D454A80D500A Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/wZKCbJ2UcP_9VxdeKhwaGcYfTUg.roa Signing time: Wed 03 Dec 2025 12:35:08 +0000 ROA not before: Wed 03 Dec 2025 12:35:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47376 IP address blocks: 91.222.196.0/24 maxlen: 24 91.222.197.0/24 maxlen: 24 103.215.220.0/22 maxlen: 22 103.215.220.0/24 maxlen: 24 103.215.223.0/24 maxlen: 24 185.221.239.0/24 maxlen: 24 195.28.11.0/24 maxlen: 24 195.234.191.0/24 maxlen: 24 195.238.231.0/24 maxlen: 24 195.238.240.0/24 maxlen: 24 195.238.247.0/24 maxlen: 24 2a05:63c0::/29 maxlen: 29 2a05:63c0::/30 maxlen: 30 2a05:63c0::/48 maxlen: 48 2a0f:c040::/29 maxlen: 29 2a10:ef04:1001::/48 maxlen: 48 2a10:ef04:1002::/48 maxlen: 48 2a10:ef04:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:35:98:44:c9:35:df:4c:4f:16:d4:54:a8:0d:50:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Dec 3 12:35:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c192826c9d9470fffd57175e2a1c1a19c61f4d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:32:dc:16:26:f3:25:89:6d:82:63:12:54: 81:8f:57:aa:44:b7:3f:59:6e:4d:18:1d:76:9e:6c: 41:68:f0:14:a1:ea:c1:8a:1b:5d:a0:57:a1:0b:20: cd:d7:56:66:2c:45:f2:47:cc:44:2e:94:f7:9e:9f: 44:4c:d9:67:12:c3:aa:e0:2b:9c:fc:d3:6b:3c:2f: 3b:1f:c7:e4:20:a1:46:81:0b:c6:7d:f8:d6:74:ad: 41:6b:b1:18:3b:79:53:16:63:ec:9b:93:1f:d4:77: a7:38:95:bd:11:ec:8f:d4:5b:46:e0:bc:41:0e:b3: 84:4e:0c:79:20:7a:ea:95:cd:9b:98:e4:28:bb:af: c9:ff:38:07:12:50:c1:d6:c5:b2:4a:ba:32:6d:84: f3:dc:16:dc:5c:61:f3:d5:93:dd:8d:d7:79:5e:d4: f4:54:56:f0:5f:3a:90:8d:a8:46:1a:e6:cd:c9:89: 15:23:e8:9b:24:38:be:ca:28:80:b5:39:cc:7c:07: e7:c5:21:bf:d0:ba:cc:b1:a9:be:3f:1b:d7:c7:d9: c4:a6:5e:0e:9d:33:71:a1:30:fc:98:eb:2c:0a:89: 28:2b:84:34:28:b4:76:96:c3:05:bf:a9:85:52:4b: cd:28:18:af:92:27:7d:b7:55:67:8d:51:be:b3:0e: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:92:82:6C:9D:94:70:FF:FD:57:17:5E:2A:1C:1A:19:C6:1F:4D:48 X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/wZKCbJ2UcP_9VxdeKhwaGcYfTUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.196.0/23 103.215.220.0/22 185.221.239.0/24 195.28.11.0/24 195.234.191.0/24 195.238.231.0/24 195.238.240.0/24 195.238.247.0/24 IPv6: 2a05:63c0::/29 2a0f:c040::/29 2a10:ef04:1001::-2a10:ef04:1003:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 57:0f:ce:57:72:3f:9b:80:52:66:71:95:89:9f:c5:10:1d:0c: 13:03:c5:a4:8f:86:d6:33:34:f7:e4:7a:10:44:78:11:b3:4a: 71:f9:6c:5e:8a:f2:ad:8a:de:70:55:3b:76:30:9c:0f:fe:33: 4e:6a:c8:62:f7:40:6c:8e:e4:cd:5b:93:83:55:a2:f9:37:ef: 34:61:a5:16:39:6f:ab:44:8e:a1:f4:d7:27:4a:d1:ef:9f:c7: 4f:d4:3b:ed:fc:0b:2a:5b:43:3f:d2:b0:ea:84:36:57:8b:52: 0f:3a:8b:37:84:bb:df:ac:43:0f:80:66:77:cc:aa:f8:af:cf: 05:41:e4:fa:d6:fa:e5:48:3a:aa:63:bf:77:1f:a5:e9:4a:4a: 99:dd:69:e0:e9:2f:4e:3f:e0:3c:47:75:3a:d4:26:b7:88:c8: b2:53:35:e5:6f:20:7f:80:2f:11:a0:17:5b:b0:52:48:8d:5c: d4:a2:2a:02:53:de:b6:36:6f:78:e8:13:07:89:1d:e2:73:26: ba:f0:4e:94:a9:9b:d4:c5:64:7e:dd:25:68:5e:86:d9:26:2e: 59:f6:12:3f:ff:f5:25:a9:90:24:72:ff:c1:3f:64:0f:6d:1c: 58:e0:30:f4:3f:99:e2:98:47:5f:04:96:82:dd:19:00:be:3f: 88:f6:86:72 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZrkNZhEyTXfTE8W1FSoDVAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjUxMjAzMTIzNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTkyODI2YzlkOTQ3MGZmZmQ1NzE3NWUyYTFjMWExOWM2MWY0ZDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JYy3BYm8yWJbYJjElSBj1eqRLc/ WW5NGB12nmxBaPAUoerBihtdoFehCyDN11ZmLEXyR8xELpT3np9ETNlnEsOq4Cuc /NNrPC87H8fkIKFGgQvGffjWdK1Ba7EYO3lTFmPsm5Mf1HenOJW9EeyP1FtG4LxB DrOETgx5IHrqlc2bmOQou6/J/zgHElDB1sWySroybYTz3BbcXGHz1ZPdjdd5XtT0 VFbwXzqQjahGGubNyYkVI+ibJDi+yiiAtTnMfAfnxSG/0LrMsam+PxvXx9nEpl4O nTNxoTD8mOssCokoK4Q0KLR2lsMFv6mFUkvNKBivkid9t1VnjVG+sw44NwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFMGSgmydlHD//VcXXiocGhnGH01IMB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvd1pLQ2JKMlVjUF85VnhkZUtod2FHY1lmVFVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjA2BAIAATAwAwQBW97EAwQC Z9fcAwQAud3vAwQAwxwLAwQAw+q/AwQAw+7nAwQAw+7wAwQAw+73MCgEAgACMCID BQMqBWPAAwUDKg/AQDASAwcAKhDvBBABAwcCKhDvBBAAMA0GCSqGSIb3DQEBCwUA A4IBAQBXD85Xcj+bgFJmcZWJn8UQHQwTA8Wkj4bWMzT35HoQRHgRs0px+WxeivKt it5wVTt2MJwP/jNOashi90BsjuTNW5ODVaL5N+80YaUWOW+rRI6h9NcnStHvn8dP 1Dvt/AsqW0M/0rDqhDZXi1IPOos3hLvfrEMPgGZ3zKr4r88FQeT61vrlSDqqY793 H6XpSkqZ3Wng6S9OP+A8R3U61Ca3iMiyUzXlbyB/gC8RoBdbsFJIjVzUoioCU962 Nm946BMHiR3icya68E6UqZvUxWR+3SVoXobZJi5Z9hI///UlqZAkcv/BP2QPbRxY 4DD0P5nimEdfBJaC3RkAvj+I9oZy -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:23 2025 by rpki-client