This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/Wfa0ovyRJ_pd_dEUKmQa9LUPn7s.roa File: Wfa0ovyRJ_pd_dEUKmQa9LUPn7s.roa (raw, json) Hash identifier: URIulXseWmtHdVMSkEKr6LgwVbHHo5nHTKefaj4mCqk= Subject key identifier: 59:F6:B4:A2:FC:91:27:FA:5D:FD:D1:14:2A:64:1A:F4:B5:0F:9F:BB Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019B0E20CEBACB69E568D30F358A90295A45 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/Wfa0ovyRJ_pd_dEUKmQa9LUPn7s.roa Signing time: Thu 11 Dec 2025 15:56:29 +0000 ROA not before: Thu 11 Dec 2025 15:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49592 IP address blocks: 83.143.119.0/24 maxlen: 24 188.137.158.0/24 maxlen: 24 2a07:cec0:4402::/48 maxlen: 48 2a07:cec0:4403::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:20:ce:ba:cb:69:e5:68:d3:0f:35:8a:90:29:5a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Dec 11 15:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=59f6b4a2fc9127fa5dfdd1142a641af4b50f9fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:e1:3d:07:2a:21:bf:b9:f4:c9:db:75:29: 91:ac:6a:3e:48:61:c0:49:fb:76:14:9f:cf:6e:69: e3:78:9a:24:49:6f:0c:9d:be:76:b2:f6:30:df:24: 68:4f:55:54:48:9e:26:44:a9:35:88:13:c8:28:9c: 8c:0a:92:1a:d4:81:0d:02:59:06:27:da:3a:36:e1: bd:7c:cd:6b:19:ee:69:b6:55:42:da:b1:a3:ac:f7: 19:27:b1:55:de:23:19:2b:0e:1e:d3:cc:ed:c6:7d: 1c:8a:e1:19:3d:ba:e3:13:17:4d:56:3a:0a:88:b6: 7a:df:c1:c8:9a:4c:af:12:5a:36:4a:de:e0:cb:cf: 7f:c3:59:cf:03:b0:00:28:75:1e:af:31:ec:5b:80: a6:f9:9a:83:bd:2a:95:07:03:08:4e:8c:cf:98:5c: a0:00:a5:d6:09:74:f3:bb:df:45:8e:0f:59:d0:67: 87:05:88:8a:2b:c3:de:9f:d1:48:71:42:65:f3:6a: 77:27:97:55:b1:db:86:c2:81:5c:a2:a6:75:95:66: 2c:11:c7:9d:c4:54:88:4e:46:20:9f:ed:8c:3a:69: b4:e9:17:a7:cd:a3:ab:dc:bc:5f:51:c8:50:e9:50: e7:7a:22:fe:14:b8:19:9f:18:2c:35:58:e3:90:3f: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F6:B4:A2:FC:91:27:FA:5D:FD:D1:14:2A:64:1A:F4:B5:0F:9F:BB X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/Wfa0ovyRJ_pd_dEUKmQa9LUPn7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.119.0/24 188.137.158.0/24 IPv6: 2a07:cec0:4402::/47 Signature Algorithm: sha256WithRSAEncryption 4e:85:83:76:72:1e:f0:e4:24:63:d6:16:a0:f1:7f:2b:c6:f1: 50:fb:18:52:76:5e:78:db:63:1b:91:59:e3:e3:e9:85:d0:5f: b0:77:52:7b:c0:3e:79:d1:dd:68:1a:20:b5:c4:7a:66:b1:b5: 32:51:88:05:d5:48:51:73:9c:d9:ae:98:06:35:43:05:ea:14: 8f:57:5e:f7:76:fc:6c:11:d1:ce:bb:15:09:8b:48:7e:5f:2f: 27:ce:eb:e4:37:96:b9:46:01:e6:f0:d7:86:4a:8a:2e:be:94: 23:44:19:8c:81:87:a6:fc:c3:ba:e2:c5:7f:0d:1d:0d:97:fe: 81:b9:a3:0b:f4:05:23:38:f9:77:d0:4c:00:54:6f:0a:24:bd: 41:85:2f:e4:b1:cb:6f:a5:b4:6e:f9:ec:9e:8c:e9:bb:36:bf: 1e:bd:d7:c4:c7:d8:e8:53:17:30:4c:8f:26:fd:05:24:63:1d: 40:f7:4f:a9:72:b4:f2:2c:bd:7f:74:c3:b5:11:4f:ed:b7:8d: d8:47:3d:39:d9:43:e0:28:f1:c6:11:7f:8f:b7:83:19:e3:15: 6b:b5:7f:c0:27:ef:c1:f4:c6:c9:aa:95:db:18:7a:3b:10:68: d4:ee:f6:37:69:3d:f8:ea:ca:eb:17:df:89:70:ab:f8:38:1d: 6d:3c:bd:8c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZsOIM66y2nlaNMPNYqQKVpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjUxMjExMTU1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWY2YjRhMmZjOTEyN2ZhNWRmZGQxMTQyYTY0MWFmNGI1MGY5ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWfhPQcqIb+59MnbdSmRrGo+SGHA Sft2FJ/PbmnjeJokSW8Mnb52svYw3yRoT1VUSJ4mRKk1iBPIKJyMCpIa1IENAlkG J9o6NuG9fM1rGe5ptlVC2rGjrPcZJ7FV3iMZKw4e08ztxn0ciuEZPbrjExdNVjoK iLZ638HImkyvElo2St7gy89/w1nPA7AAKHUerzHsW4Cm+ZqDvSqVBwMITozPmFyg AKXWCXTzu99Fjg9Z0GeHBYiKK8Pen9FIcUJl82p3J5dVsduGwoFcoqZ1lWYsEced xFSITkYgn+2MOmm06RenzaOr3LxfUchQ6VDneiL+FLgZnxgsNVjjkD+jXwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFn2tKL8kSf6Xf3RFCpkGvS1D5+7MB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvV2ZhMG92eVJKX3BkX2RFVUttUWE5TFVQbjdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAU493AwQA vImeMA8EAgACMAkDBwEqB87ARAIwDQYJKoZIhvcNAQELBQADggEBAE6Fg3ZyHvDk JGPWFqDxfyvG8VD7GFJ2XnjbYxuRWePj6YXQX7B3UnvAPnnR3WgaILXEemaxtTJR iAXVSFFznNmumAY1QwXqFI9XXvd2/GwR0c67FQmLSH5fLyfO6+Q3lrlGAebw14ZK ii6+lCNEGYyBh6b8w7rixX8NHQ2X/oG5owv0BSM4+XfQTABUbwokvUGFL+Sxy2+l tG757J6M6bs2vx6918TH2OhTFzBMjyb9BSRjHUD3T6lytPIsvX90w7URT+23jdhH PTnZQ+Ao8cYRf4+3gxnjFWu1f8An78H0xsmqldsYejsQaNTu9jdpPfjqyusX34lw q/g4HW08vYw= -----END CERTIFICATE-----Generated at Sat Dec 20 22:32:56 2025 by rpki-client