This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/wzgPBQF88-_CiYEBssnryfMBX2w.roa File: wzgPBQF88-_CiYEBssnryfMBX2w.roa (raw, json) Hash identifier: YBjh+lwXHnu03g8De0628UnV8ZQfh0OnAO4LQ244jes= Subject key identifier: C3:38:0F:05:01:7C:F3:EF:C2:89:81:01:B2:C9:EB:C9:F3:01:5F:6C Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Certificate serial: 019AC0E30B17453AAC341B2C583A0997C220 Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/wzgPBQF88-_CiYEBssnryfMBX2w.roa Signing time: Wed 26 Nov 2025 15:58:16 +0000 ROA not before: Wed 26 Nov 2025 15:58:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34427 IP address blocks: 77.87.160.0/21 maxlen: 24 185.38.232.0/22 maxlen: 24 193.84.9.0/24 maxlen: 24 195.80.226.0/24 maxlen: 24 2a02:720::/32 maxlen: 32 2a02:720:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:e3:0b:17:45:3a:ac:34:1b:2c:58:3a:09:97:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Validity Not Before: Nov 26 15:58:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c3380f05017cf3efc2898101b2c9ebc9f3015f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:62:ee:ec:93:82:63:a0:7b:66:55:b8:62: 51:ba:ba:fe:51:50:79:ce:19:51:67:18:e5:03:03: 85:1a:61:c0:43:d7:4c:65:c4:fa:76:60:63:e0:4a: a5:25:2f:b6:07:d4:79:ad:c2:6c:64:38:0e:dd:9e: 37:5b:5e:1d:84:6b:dd:a4:2c:21:c5:24:df:80:b1: d7:df:b2:49:16:f2:3a:f1:23:30:44:14:a2:ad:e7: 79:a4:c2:ec:eb:f9:43:b3:11:dd:fa:94:22:d5:31: 07:d2:bb:5b:2b:52:54:3f:38:b8:d8:89:d2:72:7f: 08:84:4f:e3:8b:51:6e:e7:9c:ff:16:44:46:0d:fa: f7:02:b2:4a:2f:cd:0b:85:e3:9d:ff:3b:9d:79:70: 43:e9:02:4f:aa:f6:51:ae:9f:af:69:46:e3:b3:e1: 76:c5:a9:f8:04:37:2d:39:32:a0:10:88:43:23:52: b0:54:92:9f:36:31:9d:4f:f4:3f:62:be:d9:c5:27: 70:45:e4:a4:b8:0d:24:b5:dd:f5:66:96:78:34:bd: 1d:ab:3b:ea:89:da:a1:f5:40:bb:6e:10:f3:93:58: 73:ef:69:fa:62:05:ae:b4:fa:56:ff:02:3d:50:c7: 16:6b:e3:d0:ef:4e:f7:a9:ad:0d:e0:af:b7:24:d8: 05:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:38:0F:05:01:7C:F3:EF:C2:89:81:01:B2:C9:EB:C9:F3:01:5F:6C X509v3 Authority Key Identifier: keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/wzgPBQF88-_CiYEBssnryfMBX2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.160.0/21 185.38.232.0/22 193.84.9.0/24 195.80.226.0/24 IPv6: 2a02:720::/32 Signature Algorithm: sha256WithRSAEncryption 4f:21:0f:33:eb:72:20:4b:63:7e:fd:35:b3:da:54:a7:7b:10: 04:49:f0:04:82:1e:cf:78:31:e3:57:14:bc:7e:80:c9:df:da: e6:f8:d3:8e:b7:d7:ee:83:0c:e9:06:13:76:fc:59:11:3d:7f: bc:10:21:94:79:d4:01:cb:43:61:a8:52:dd:31:09:e2:96:d4: 00:a2:51:21:f9:0e:0a:a8:a5:e2:f0:22:72:68:2b:6f:c3:d6: 81:7d:38:07:95:b0:e4:4e:1f:58:b8:0e:16:78:17:60:19:8c: ec:45:db:39:22:fa:78:01:ce:bd:fe:40:31:b8:c3:b1:9c:fd: e5:77:ae:46:4c:83:58:e2:30:b1:3c:bc:94:1b:da:5c:89:6f: d3:9d:57:8b:85:34:dc:91:c5:bd:84:52:7c:16:ac:76:be:5b: 09:c9:f7:f4:81:57:d2:e7:0c:d3:bc:e7:71:60:81:32:37:d2: fe:fd:89:aa:de:a6:0a:ea:d7:1f:f1:7d:0e:c3:7d:49:7e:ba: 13:1c:89:f6:7a:ba:44:ad:4c:70:a8:f9:cb:a0:25:fa:c0:4d: 6f:dd:06:f2:a7:b6:98:a6:35:89:d4:83:11:88:e0:6b:16:ba: b6:aa:9d:66:5b:60:ab:bd:e8:86:e0:cf:74:fd:1d:20:ae:3c: 1a:cd:86:1d -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZrA4wsXRTqsNBssWDoJl8IgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJlMTg2NWY1MDc5ZTI0YjFhN2FkZmRjYTI3ZWUyZmU1 ZDFmODkwHhcNMjUxMTI2MTU1ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzM4MGYwNTAxN2NmM2VmYzI4OTgxMDFiMmM5ZWJjOWYzMDE1ZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP5i7uyTgmOge2ZVuGJRurr+UVB5 zhlRZxjlAwOFGmHAQ9dMZcT6dmBj4EqlJS+2B9R5rcJsZDgO3Z43W14dhGvdpCwh xSTfgLHX37JJFvI68SMwRBSired5pMLs6/lDsxHd+pQi1TEH0rtbK1JUPzi42InS cn8IhE/ji1Fu55z/FkRGDfr3ArJKL80LheOd/zudeXBD6QJPqvZRrp+vaUbjs+F2 xan4BDctOTKgEIhDI1KwVJKfNjGdT/Q/Yr7ZxSdwReSkuA0ktd31ZpZ4NL0dqzvq idqh9UC7bhDzk1hz72n6YgWutPpW/wI9UMcWa+PQ7073qa0N4K+3JNgFGQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMM4DwUBfPPvwomBAbLJ68nzAV9sMB8GA1UdIwQY MBaAFEcL4YZfUHniSxp639yifuL+XR+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAt MWU2OTVlZjQ5YzEwLzEvd3pnUEJRRjg4LV9DaVlFQnNzbnJ5Zk1CWDJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAtMWU2OTVlZjQ5YzEw LzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDTVegAwQC uSboAwQAwVQJAwQAw1DiMA0EAgACMAcDBQAqAgcgMA0GCSqGSIb3DQEBCwUAA4IB AQBPIQ8z63IgS2N+/TWz2lSnexAESfAEgh7PeDHjVxS8foDJ39rm+NOOt9fugwzp BhN2/FkRPX+8ECGUedQBy0NhqFLdMQniltQAolEh+Q4KqKXi8CJyaCtvw9aBfTgH lbDkTh9YuA4WeBdgGYzsRds5Ivp4Ac69/kAxuMOxnP3ld65GTINY4jCxPLyUG9pc iW/TnVeLhTTckcW9hFJ8Fqx2vlsJyff0gVfS5wzTvOdxYIEyN9L+/Ymq3qYK6tcf 8X0Ow31JfroTHIn2erpErUxwqPnLoCX6wE1v3Qbyp7aYpjWJ1IMRiOBrFrq2qp1m W2CrveiG4M90/R0grjwazYYd -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:33 2025 by rpki-client