This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wdTz_L-Ns0n2oilnNWzN-qaV4wg.roa File: wdTz_L-Ns0n2oilnNWzN-qaV4wg.roa (raw, json) Hash identifier: vrfieyiP8lp9anbLqcqHzfWXXsW7ByydVU5LiPr5H6U= Subject key identifier: C1:D4:F3:FC:BF:8D:B3:49:F6:A2:29:67:35:6C:CD:FA:A6:95:E3:08 Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Certificate serial: 019B2C90C14BA1F0C492D80F0D7E99A2795F Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wdTz_L-Ns0n2oilnNWzN-qaV4wg.roa Signing time: Wed 17 Dec 2025 13:47:22 +0000 ROA not before: Wed 17 Dec 2025 13:47:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15703 IP address blocks: 80.247.208.0/20 maxlen: 24 80.247.220.0/24 maxlen: 24 87.233.0.0/16 maxlen: 24 193.28.152.0/24 maxlen: 24 213.193.192.0/21 maxlen: 24 213.193.193.0/24 maxlen: 24 213.193.208.0/21 maxlen: 24 213.193.209.0/24 maxlen: 24 213.193.210.0/24 maxlen: 24 213.193.212.0/24 maxlen: 24 213.193.232.0/21 maxlen: 24 213.193.232.0/24 maxlen: 24 213.193.240.0/21 maxlen: 24 213.239.136.0/24 maxlen: 24 213.239.154.0/24 maxlen: 24 2001:990::/32 maxlen: 32 2001:9a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:90:c1:4b:a1:f0:c4:92:d8:0f:0d:7e:99:a2:79:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Validity Not Before: Dec 17 13:47:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1d4f3fcbf8db349f6a22967356ccdfaa695e308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:60:ac:cc:0d:86:d9:af:c8:bf:fb:87:79: d5:a3:07:ef:e7:0c:ed:dc:b2:14:7d:ba:46:7c:ce: 6e:ac:e1:c9:22:f4:a0:7f:e6:90:5b:3e:2a:9a:1d: 84:52:49:d6:53:cf:0d:e8:36:bc:be:b8:8f:35:53: e2:57:ea:ef:92:a6:03:2f:df:dd:74:80:8e:db:ab: db:77:36:af:9b:93:0c:22:84:ff:21:d8:a9:56:6f: 70:5d:81:8a:70:14:1e:82:bc:b0:15:89:6d:4e:81: c3:70:22:6f:84:fc:f8:1b:ce:5b:68:0a:f6:93:d6: f8:a5:0f:ae:b0:f4:f0:85:b2:3e:82:2a:1b:11:fb: 76:03:51:24:f4:3c:cc:25:d9:9d:c4:05:49:eb:77: a3:33:7e:61:32:3d:7a:1d:20:97:20:5e:83:80:e3: e9:a2:d0:cf:b9:96:b8:f2:75:45:30:51:89:bb:04: bc:5c:23:7b:2d:16:99:c9:3f:65:7c:75:3c:e7:a8: 86:3d:19:d3:f4:4a:4e:83:49:86:6e:02:59:c1:5a: 86:92:37:36:09:e9:51:2f:ab:d2:9c:8f:ac:35:2e: fd:bb:ab:b9:5d:55:9c:98:fb:78:59:4b:b3:bd:f6: 85:df:42:8d:68:35:bd:aa:7d:0c:15:09:b4:6e:eb: 24:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D4:F3:FC:BF:8D:B3:49:F6:A2:29:67:35:6C:CD:FA:A6:95:E3:08 X509v3 Authority Key Identifier: keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wdTz_L-Ns0n2oilnNWzN-qaV4wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.208.0/20 87.233.0.0/16 193.28.152.0/24 213.193.192.0/21 213.193.208.0/21 213.193.232.0-213.193.247.255 213.239.136.0/24 213.239.154.0/24 IPv6: 2001:990::/32 2001:9a8::/32 Signature Algorithm: sha256WithRSAEncryption e7:97:fa:66:33:73:26:e6:72:85:6e:12:d2:38:05:26:29:4c: e6:de:d1:8e:ba:58:55:fa:9d:b9:81:d0:ec:db:bf:6a:77:86: d8:44:53:f3:b4:11:ad:a8:5d:58:38:4e:3a:93:f9:d9:12:c6: 6e:78:46:c2:f7:03:5a:67:b8:08:68:d2:9e:79:e0:30:d8:4c: 62:4f:42:a4:6e:2d:f0:c1:e3:49:5b:9d:aa:39:46:a5:67:2f: 93:d1:72:5e:bc:e2:d9:fa:d9:64:7c:7a:27:39:f5:a7:61:f8: e0:57:f4:b7:73:42:17:3f:0b:9f:4f:c0:f5:d1:0f:23:b7:bb: 82:b4:a4:88:9b:cc:24:ba:4e:28:e1:57:c9:5d:d8:2a:38:d0: 80:28:59:21:35:db:32:70:e8:a3:18:ea:7a:2d:56:0b:52:76: 30:62:fc:3b:73:ed:23:1b:e4:c6:98:ef:fe:d1:b0:46:a1:6a: ad:cd:af:03:8c:fb:cf:25:6a:a7:18:6a:1c:35:72:1a:38:12: 1d:8f:f2:c5:61:3c:4c:28:e0:1b:6c:58:d5:a1:cb:d4:cf:ec: 13:aa:de:47:4f:36:1e:92:e2:c4:0f:70:08:63:33:97:d8:21: aa:2d:e9:b1:96:d6:77:4f:02:67:a7:18:f7:8c:f6:f2:9c:9a: 56:49:d0:ae -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZsskMFLofDEktgPDX6ZonlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl MDk3YmIwHhcNMjUxMjE3MTM0NzIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWQ0ZjNmY2JmOGRiMzQ5ZjZhMjI5NjczNTZjY2RmYWE2OTVlMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNlgrMwNhtmvyL/7h3nVowfv5wzt 3LIUfbpGfM5urOHJIvSgf+aQWz4qmh2EUknWU88N6Da8vriPNVPiV+rvkqYDL9/d dICO26vbdzavm5MMIoT/IdipVm9wXYGKcBQegrywFYltToHDcCJvhPz4G85baAr2 k9b4pQ+usPTwhbI+giobEft2A1Ek9DzMJdmdxAVJ63ejM35hMj16HSCXIF6DgOPp otDPuZa48nVFMFGJuwS8XCN7LRaZyT9lfHU856iGPRnT9EpOg0mGbgJZwVqGkjc2 CelRL6vSnI+sNS79u6u5XVWcmPt4WUuzvfaF30KNaDW9qn0MFQm0buskBQIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFMHU8/y/jbNJ9qIpZzVszfqmleMIMB8GA1UdIwQY MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct ZTg4NDY1YzQ2MTg2LzEvd2RUel9MLU5zMG4yb2lsbk5Xek4tcWFWNHdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2 LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTA9BAIAATA3AwQEUPfQAwMA V+kDBADBHJgDBAPVwcADBAPVwdAwDAMEA9XB6AMEA9XB8AMEANXviAMEANXvmjAU BAIAAjAOAwUAIAEJkAMFACABCagwDQYJKoZIhvcNAQELBQADggEBAOeX+mYzcybm coVuEtI4BSYpTObe0Y66WFX6nbmB0Ozbv2p3hthEU/O0Ea2oXVg4TjqT+dkSxm54 RsL3A1pnuAho0p554DDYTGJPQqRuLfDB40lbnao5RqVnL5PRcl684tn62WR8eic5 9adh+OBX9LdzQhc/C59PwPXRDyO3u4K0pIibzCS6TijhV8ld2Co40IAoWSE12zJw 6KMY6notVgtSdjBi/Dtz7SMb5MaY7/7RsEahaq3NrwOM+88laqcYahw1cho4Eh2P 8sVhPEwo4BtsWNWhy9TP7BOq3kdPNh6S4sQPcAhjM5fYIaot6bGW1ndPAmenGPeM 9vKcmlZJ0K4= -----END CERTIFICATE-----Generated at Fri Dec 19 15:02:55 2025 by rpki-client