This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/WaBQatp7bxnpNTXTPfC8eRzxQ-E.roa File: WaBQatp7bxnpNTXTPfC8eRzxQ-E.roa (raw, json) Hash identifier: kMmmhH+gENIlBcbPRiM9Rm2om/0TywtTPFc2kMZZ7xc= Subject key identifier: 59:A0:50:6A:DA:7B:6F:19:E9:35:35:D3:3D:F0:BC:79:1C:F1:43:E1 Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c Certificate serial: 019ADAD86D60877E9B3F6C36C084D44377BE Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/WaBQatp7bxnpNTXTPfC8eRzxQ-E.roa Signing time: Mon 01 Dec 2025 16:56:48 +0000 ROA not before: Mon 01 Dec 2025 16:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5413 IP address blocks: 141.105.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:d8:6d:60:87:7e:9b:3f:6c:36:c0:84:d4:43:77:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c Validity Not Before: Dec 1 16:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=59a0506ada7b6f19e93535d33df0bc791cf143e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:c2:68:e2:4a:2b:b7:d4:22:29:86:27:ef: 66:c1:b3:79:9c:6c:03:9e:f4:da:e4:c0:08:44:d4: 1e:63:cf:bc:f0:71:c6:38:2a:79:8b:80:c8:f2:82: 3f:6b:e1:ea:c7:c5:f6:76:7f:1f:fb:54:15:65:b9: 63:84:8b:b3:ea:6e:4c:15:05:90:14:72:0f:35:bc: 4b:72:4c:59:da:50:1f:49:bb:a1:b6:9a:37:2b:2c: 70:92:01:d9:13:e4:01:39:83:4e:54:54:3d:e6:33: 47:f3:c4:22:52:ff:3c:a0:70:df:16:65:6b:4c:85: 7c:24:0c:a0:18:5f:07:86:10:3d:cb:ed:f7:e0:ed: 8f:b0:d0:d3:c3:e4:04:7a:a4:3b:03:12:21:38:23: 3e:aa:c0:f3:07:05:5f:bd:dd:e7:21:69:d6:d4:c7: 0d:69:06:55:25:8f:6b:01:f6:bc:95:e3:cb:65:70: d5:4b:62:6c:b2:5f:28:81:96:03:fe:e8:2d:3e:b4: 79:f5:e6:46:ef:09:9a:29:fb:3e:68:8f:84:d2:46: 9d:f7:f3:4c:6b:f0:f6:42:1f:3d:7e:96:5f:fc:a7: 02:be:d5:f7:0b:e0:99:01:cd:94:fb:98:a4:73:37: b9:e5:98:e0:ab:31:c1:12:94:66:b4:35:93:fd:60: 20:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A0:50:6A:DA:7B:6F:19:E9:35:35:D3:3D:F0:BC:79:1C:F1:43:E1 X509v3 Authority Key Identifier: keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/WaBQatp7bxnpNTXTPfC8eRzxQ-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.192.0/18 Signature Algorithm: sha256WithRSAEncryption 08:bd:24:72:57:e9:83:33:84:b8:51:84:e7:39:12:3a:e5:8c: b2:2e:16:e8:35:74:be:4d:16:1f:d8:e8:c0:34:fc:57:5e:85: 05:b5:49:13:7d:33:b0:35:2e:88:69:c1:c2:e8:04:26:74:7d: d6:e2:02:e7:72:b9:e5:20:aa:3f:d2:6e:4a:5d:84:81:50:7e: 3a:81:7b:65:22:e3:2f:f4:5d:69:96:7b:22:89:15:93:1e:bd: 90:fc:28:08:07:38:4f:a9:e2:4b:2b:92:de:1b:08:d9:56:ca: a9:80:87:61:dc:5b:0a:8f:a8:b4:53:c0:af:0e:4c:17:af:55: e9:4e:3f:5e:ab:d6:37:7b:4d:26:af:0b:be:6a:be:03:04:ef: 85:82:d8:8e:ef:63:a1:a8:bc:a4:5e:dc:25:76:bc:c3:6a:d4: 26:99:7c:7a:c4:dd:31:f3:e3:3c:a0:eb:c4:19:17:39:f9:73: a7:d0:62:f9:fa:9b:ad:a1:50:3b:01:d9:65:ea:76:76:83:97: f1:d8:14:97:18:73:55:e3:9b:11:9d:ab:99:bc:e5:93:8f:b8: 26:9b:2f:52:54:c9:06:2f:cb:78:45:fd:1d:6d:e4:bd:9b:c9: d7:ac:6d:da:2d:c5:32:2d:91:94:4a:85:ba:a2:3b:b4:8d:da: 74:8f:e8:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZra2G1gh36bP2w2wITUQ3e+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDhjNDg2ZWY1NjE3MGM0MTJmMjY2MTVkMGE0MDk0YmNh MWZiMmMwHhcNMjUxMjAxMTY1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWEwNTA2YWRhN2I2ZjE5ZTkzNTM1ZDMzZGYwYmM3OTFjZjE0M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqDCaOJKK7fUIimGJ+9mwbN5nGwD nvTa5MAIRNQeY8+88HHGOCp5i4DI8oI/a+Hqx8X2dn8f+1QVZbljhIuz6m5MFQWQ FHIPNbxLckxZ2lAfSbuhtpo3KyxwkgHZE+QBOYNOVFQ95jNH88QiUv88oHDfFmVr TIV8JAygGF8HhhA9y+334O2PsNDTw+QEeqQ7AxIhOCM+qsDzBwVfvd3nIWnW1McN aQZVJY9rAfa8lePLZXDVS2Jssl8ogZYD/ugtPrR59eZG7wmaKfs+aI+E0kad9/NM a/D2Qh89fpZf/KcCvtX3C+CZAc2U+5ikcze55ZjgqzHBEpRmtDWT/WAgcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFmgUGrae28Z6TU10z3wvHkc8UPhMB8GA1UdIwQY MBaAFEAIxIbvVhcMQS8mYV0KQJS8ofssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTct ZTkyYTI1NDkxY2VkLzEvV2FCUWF0cDdieG5wTlRYVFBmQzhlUnp4US1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTctZTkyYTI1NDkxY2Vk LzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjWnAMA0G CSqGSIb3DQEBCwUAA4IBAQAIvSRyV+mDM4S4UYTnORI65YyyLhboNXS+TRYf2OjA NPxXXoUFtUkTfTOwNS6IacHC6AQmdH3W4gLncrnlIKo/0m5KXYSBUH46gXtlIuMv 9F1plnsiiRWTHr2Q/CgIBzhPqeJLK5LeGwjZVsqpgIdh3FsKj6i0U8CvDkwXr1Xp Tj9eq9Y3e00mrwu+ar4DBO+FgtiO72OhqLykXtwldrzDatQmmXx6xN0x8+M8oOvE GRc5+XOn0GL5+putoVA7Adll6nZ2g5fx2BSXGHNV45sRnauZvOWTj7gmmy9SVMkG L8t4Rf0dbeS9m8nXrG3aLcUyLZGUSoW6oju0jdp0j+g3 -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:36 2025 by rpki-client