This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/wflfIOo-1t3hGXMoEB24Xbfs3KU.roa File: wflfIOo-1t3hGXMoEB24Xbfs3KU.roa (raw, json) Hash identifier: CGGLqcKnUfaBtIHUEc+dqJSotohW0vSNwSlisgSNlco= Subject key identifier: C1:F9:5F:20:EA:3E:D6:DD:E1:19:73:28:10:1D:B8:5D:B7:EC:DC:A5 Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Certificate serial: 019A7ED1EB29D55237F0D1EB0EA88BD6330B Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/wflfIOo-1t3hGXMoEB24Xbfs3KU.roa Signing time: Thu 13 Nov 2025 20:04:37 +0000 ROA not before: Thu 13 Nov 2025 20:04:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208103 IP address blocks: 176.119.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:d1:eb:29:d5:52:37:f0:d1:eb:0e:a8:8b:d6:33:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Validity Not Before: Nov 13 20:04:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1f95f20ea3ed6dde1197328101db85db7ecdca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:49:cd:74:39:26:be:2d:dd:71:5d:82:94: e2:1e:93:c2:58:8c:68:ef:6a:26:75:c7:9e:23:3c: da:0e:19:d3:90:63:5f:7f:0c:37:ed:b6:d0:0f:dc: aa:51:8b:4c:bf:80:b1:03:fd:c8:99:22:3e:c1:32: cc:e7:fd:1b:51:53:bc:ab:b1:a6:88:7b:f7:b3:d8: 66:90:71:61:de:d6:55:d2:16:7e:62:3c:8c:ba:b5: 27:4c:d3:8d:84:27:3e:91:86:df:f6:65:1c:b2:84: e4:3e:70:65:ec:ad:5c:69:90:ba:e8:b9:87:d5:a5: 64:c5:48:06:87:56:03:a4:ce:db:0e:92:3e:4c:a2: 31:67:e2:f1:22:62:71:54:12:a5:f3:b1:58:61:2c: 3a:37:1c:72:a1:1f:0b:ee:cf:be:a1:eb:e2:a4:4d: d4:74:bb:52:49:b5:5a:f7:05:fb:40:ce:eb:76:dc: 09:3b:10:4f:85:58:68:8f:7b:b4:14:b4:79:f1:f1: a8:a5:f7:39:02:07:aa:8c:18:5d:2f:4a:40:05:ad: c0:66:2b:8e:6b:fe:c9:d2:8b:55:68:c1:db:2c:65: 1f:2d:a4:42:61:c3:fc:72:68:d6:63:8a:4a:c7:83: cf:86:06:20:b4:c3:40:3b:6b:15:3b:ca:3f:0f:af: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F9:5F:20:EA:3E:D6:DD:E1:19:73:28:10:1D:B8:5D:B7:EC:DC:A5 X509v3 Authority Key Identifier: keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/wflfIOo-1t3hGXMoEB24Xbfs3KU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.206.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:13:24:3f:68:c4:01:6e:1e:c7:92:c7:85:ec:2e:57:f0:ae: 95:77:80:2a:db:76:a5:8e:d5:8a:7f:02:97:63:02:2b:0c:ad: 5f:b1:f8:92:af:71:4f:af:9e:29:6d:27:6c:e2:54:46:8a:5d: 62:95:6a:21:83:19:b8:74:79:87:e9:78:71:44:8d:98:7e:0e: 50:15:cf:45:a4:9a:7d:c0:ea:ca:6f:01:38:3f:30:ac:0b:da: 4c:3b:d4:d7:b0:5a:7b:17:53:83:55:72:d8:3f:cc:99:45:7d: 2b:a7:65:07:d2:41:fc:99:a4:22:6d:ad:be:49:ab:93:bd:b3: ce:6a:4c:41:05:09:69:d0:b6:43:af:fe:ad:25:61:2a:7d:7d: 82:c5:6a:68:07:75:2f:9f:06:d3:17:06:0a:52:48:72:46:57: 8e:1f:8b:14:e7:ec:86:99:ba:11:88:6d:ef:65:cb:04:4c:91: af:6d:27:83:91:ff:85:ba:ca:f0:64:41:96:43:2e:28:a4:91: d1:0d:73:ed:f5:e6:c0:f2:b3:5e:e0:16:42:0d:67:5e:1a:2e: ab:d7:a5:18:02:7b:55:3a:5b:64:74:ba:16:b5:f7:d4:44:06: 29:9b:7f:d9:11:80:7a:da:d1:85:a3:66:4a:f7:f0:1b:9c:2b: 7a:b5:3c:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp+0esp1VI38NHrDqiL1jMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj YWY3ZWYwHhcNMjUxMTEzMjAwNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWY5NWYyMGVhM2VkNmRkZTExOTczMjgxMDFkYjg1ZGI3ZWNkY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZBJzXQ5Jr4t3XFdgpTiHpPCWIxo 72omdceeIzzaDhnTkGNffww37bbQD9yqUYtMv4CxA/3ImSI+wTLM5/0bUVO8q7Gm iHv3s9hmkHFh3tZV0hZ+YjyMurUnTNONhCc+kYbf9mUcsoTkPnBl7K1caZC66LmH 1aVkxUgGh1YDpM7bDpI+TKIxZ+LxImJxVBKl87FYYSw6NxxyoR8L7s++oevipE3U dLtSSbVa9wX7QM7rdtwJOxBPhVhoj3u0FLR58fGopfc5AgeqjBhdL0pABa3AZiuO a/7J0otVaMHbLGUfLaRCYcP8cmjWY4pKx4PPhgYgtMNAO2sVO8o/D68uNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMH5XyDqPtbd4RlzKBAduF237NylMB8GA1UdIwQY MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt MGI1YzVkOTQ0MjZhLzEvd2ZsZklPby0xdDNoR1hNb0VCMjRYYmZzM0tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfOMA0G CSqGSIb3DQEBCwUAA4IBAQAaEyQ/aMQBbh7HkseF7C5X8K6Vd4Aq23aljtWKfwKX YwIrDK1fsfiSr3FPr54pbSds4lRGil1ilWohgxm4dHmH6XhxRI2Yfg5QFc9FpJp9 wOrKbwE4PzCsC9pMO9TXsFp7F1ODVXLYP8yZRX0rp2UH0kH8maQiba2+SauTvbPO akxBBQlp0LZDr/6tJWEqfX2CxWpoB3UvnwbTFwYKUkhyRleOH4sU5+yGmboRiG3v ZcsETJGvbSeDkf+FusrwZEGWQy4opJHRDXPt9ebA8rNe4BZCDWdeGi6r16UYAntV OltkdLoWtffURAYpm3/ZEYB62tGFo2ZK9/AbnCt6tTys -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:30 2025 by rpki-client