This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/WcW1TLN1FcXWXE9VINsN3CfkGhc.roa File: WcW1TLN1FcXWXE9VINsN3CfkGhc.roa (raw, json) Hash identifier: yl9aMxUKV+0rM9piy+9fYY3ixIa7X94FbqyTuSYrSf0= Subject key identifier: 59:C5:B5:4C:B3:75:15:C5:D6:5C:4F:55:20:DB:0D:DC:27:E4:1A:17 Certificate issuer: /CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc Certificate serial: 019A7D22B3CD0EC2F7184A272E6C3986DD9D Authority key identifier: 6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/WcW1TLN1FcXWXE9VINsN3CfkGhc.roa Signing time: Thu 13 Nov 2025 12:13:37 +0000 ROA not before: Thu 13 Nov 2025 12:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56737 IP address blocks: 31.209.184.0/21 maxlen: 21 185.140.200.0/22 maxlen: 22 2a07:d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:22:b3:cd:0e:c2:f7:18:4a:27:2e:6c:39:86:dd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc Validity Not Before: Nov 13 12:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=59c5b54cb37515c5d65c4f5520db0ddc27e41a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:02:ad:6a:de:0b:4b:af:c7:27:94:9a:61: de:b3:89:25:7c:70:43:40:49:97:8b:66:16:65:f1: 9f:69:17:f6:e2:c0:50:5f:69:12:07:97:31:57:69: 4b:57:33:92:2a:83:63:ae:eb:5d:c4:67:5d:a0:a8: 42:a0:31:b0:0b:fa:bf:af:74:69:af:bd:8a:9b:6b: ee:c9:ea:7f:4c:49:fd:39:24:8f:1a:7a:73:44:09: 6d:e9:eb:fc:e6:82:99:b9:bd:1d:87:81:71:5a:84: 65:94:5f:1a:fe:dd:0f:8a:62:84:e7:66:f6:12:97: 10:a6:eb:4c:05:8f:bf:37:1e:71:b5:77:c4:84:2a: fc:25:fb:c4:e1:52:92:6f:ff:7c:74:ba:42:27:1d: 52:ea:57:26:8c:9c:f7:24:ba:8a:55:02:7a:cb:15: e0:0a:39:97:36:da:da:9e:a7:09:ec:bf:21:de:e9: b4:65:52:50:16:e7:82:9d:be:12:a0:3d:cd:d4:08: 06:6b:97:c6:10:8c:9a:a2:1f:59:fa:bb:68:1b:e9: 6b:4d:be:e4:9c:2f:a7:b1:b1:11:0c:81:f7:46:2b: 14:54:54:af:75:c0:f1:84:c4:60:63:4c:79:45:06: c2:cf:0e:20:7f:5e:02:74:12:f3:75:44:f8:c7:83: 93:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C5:B5:4C:B3:75:15:C5:D6:5C:4F:55:20:DB:0D:DC:27:E4:1A:17 X509v3 Authority Key Identifier: keyid:6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/WcW1TLN1FcXWXE9VINsN3CfkGhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.209.184.0/21 185.140.200.0/22 IPv6: 2a07:d00::/29 Signature Algorithm: sha256WithRSAEncryption 57:12:d3:34:25:54:7e:68:cf:93:85:ea:6e:57:15:5b:a8:15: 1f:9e:83:60:21:33:97:e8:39:51:37:3a:07:63:5f:15:fd:b7: af:77:42:7b:da:04:5b:bd:8a:ec:54:d0:55:ef:ad:23:2f:19: 7d:17:5b:dd:88:8b:dd:8e:1b:c7:47:08:9e:ff:a8:41:8a:1c: f7:fb:3d:0f:b1:2f:6d:d3:16:5c:64:6f:51:7f:8d:6f:d9:d3: aa:62:4b:4d:c7:d5:f2:d7:50:5c:ed:40:fc:c9:ba:3b:cd:bf: 8d:b2:69:60:47:bb:30:55:dd:27:f2:75:45:db:aa:e5:dc:44: 84:31:72:8d:23:3f:31:f7:04:c6:94:e8:c3:92:49:11:3c:a7: 63:50:64:82:87:29:86:08:ea:27:f9:7e:8d:0c:17:09:59:84: be:85:a2:39:24:dc:72:e3:cf:f5:5a:d3:be:12:aa:5c:5b:80: 1c:95:88:9c:e2:5a:ed:3f:bb:2b:cc:62:b8:ea:32:78:58:0a: 34:96:18:0a:84:f8:a1:cf:51:51:5f:3d:ab:91:81:93:3e:f4: 1a:c0:fb:50:8e:0d:58:0e:2c:60:b5:c3:dd:01:61:7c:e7:b2: ae:76:e8:96:61:a4:55:70:da:7c:f6:ab:a8:0c:20:d5:62:94: 9e:86:ae:f5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZp9IrPNDsL3GEonLmw5ht2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTc5YTYxNjdhYTNmY2JmZDQ0MDcwMTM0YzlkOTNhNmNl Mzk4YmMwHhcNMjUxMTEzMTIxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWM1YjU0Y2IzNzUxNWM1ZDY1YzRmNTUyMGRiMGRkYzI3ZTQxYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bECrWreC0uvxyeUmmHes4klfHBD QEmXi2YWZfGfaRf24sBQX2kSB5cxV2lLVzOSKoNjrutdxGddoKhCoDGwC/q/r3Rp r72Km2vuyep/TEn9OSSPGnpzRAlt6ev85oKZub0dh4FxWoRllF8a/t0PimKE52b2 EpcQputMBY+/Nx5xtXfEhCr8JfvE4VKSb/98dLpCJx1S6lcmjJz3JLqKVQJ6yxXg CjmXNtranqcJ7L8h3um0ZVJQFueCnb4SoD3N1AgGa5fGEIyaoh9Z+rtoG+lrTb7k nC+nsbERDIH3RisUVFSvdcDxhMRgY0x5RQbCzw4gf14CdBLzdUT4x4OTWQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFnFtUyzdRXF1lxPVSDbDdwn5BoXMB8GA1UdIwQY MBaAFGznmmFnqj/L/UQHATTJ2Tps45i8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9lYVlXZXFQOHY5UkFjQk5NblpPbXpqbUx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMzM3NmMtNDMxZS00ZDVkLWE3YjAt NGY0MDE4NTA0OTYwLzEvV2NXMVRMTjFGY1hXWEU5VklOc04zQ2ZrR2hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mMzM3NmMtNDMxZS00ZDVkLWE3YjAtNGY0MDE4NTA0OTYw LzEvYk9lYVlXZXFQOHY5UkFjQk5NblpPbXpqbUx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDH9G4AwQC uYzIMA0EAgACMAcDBQMqBw0AMA0GCSqGSIb3DQEBCwUAA4IBAQBXEtM0JVR+aM+T hepuVxVbqBUfnoNgITOX6DlRNzoHY18V/bevd0J72gRbvYrsVNBV760jLxl9F1vd iIvdjhvHRwie/6hBihz3+z0PsS9t0xZcZG9Rf41v2dOqYktNx9Xy11Bc7UD8ybo7 zb+NsmlgR7swVd0n8nVF26rl3ESEMXKNIz8x9wTGlOjDkkkRPKdjUGSChymGCOon +X6NDBcJWYS+haI5JNxy48/1WtO+EqpcW4AclYic4lrtP7srzGK46jJ4WAo0lhgK hPihz1FRXz2rkYGTPvQawPtQjg1YDixgtcPdAWF857KuduiWYaRVcNp89quoDCDV YpSehq71 -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:52 2025 by rpki-client