This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/WC4_lYuHTpurPHxx7xXCOV8C_8Q.roa File: WC4_lYuHTpurPHxx7xXCOV8C_8Q.roa (raw, json) Hash identifier: zkwNLP7Zeu7wTnylhn80zQ1yae5lpu3lo409yeFDOOA= Subject key identifier: 58:2E:3F:95:8B:87:4E:9B:AB:3C:7C:71:EF:15:C2:39:5F:02:FF:C4 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B26A5ABE683704DA32ECB0DA356ACAC51 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/WC4_lYuHTpurPHxx7xXCOV8C_8Q.roa Signing time: Tue 16 Dec 2025 10:12:30 +0000 ROA not before: Tue 16 Dec 2025 10:12:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 188.66.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:a5:ab:e6:83:70:4d:a3:2e:cb:0d:a3:56:ac:ac:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Dec 16 10:12:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=582e3f958b874e9bab3c7c71ef15c2395f02ffc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:92:d0:3b:3c:98:dc:0b:6e:cd:b4:bb:a3: e2:42:43:dd:3f:c2:b0:f7:2d:6d:5e:4f:56:32:99: bb:b9:15:b3:32:3c:21:a1:fe:f9:71:d9:52:4e:f4: f2:d4:2a:e9:51:92:c4:f8:1b:8d:3d:8f:0f:0e:04: 95:7a:90:cb:9a:aa:24:7e:fc:d4:f7:7b:e0:2b:ef: 8c:dd:22:6e:1e:33:4d:af:da:9d:91:3e:b4:3a:96: 00:35:a3:7f:65:a2:3f:7c:61:40:8d:bd:71:2e:71: d4:34:52:3d:58:cb:b9:b8:22:c7:f8:71:18:c7:5f: 7d:ae:84:7b:7a:d0:16:06:0c:99:1a:37:70:c3:02: b1:ac:f0:c1:f6:a0:cd:ed:af:87:a6:92:b6:a7:68: 09:28:7f:68:69:12:85:f9:0e:45:b2:74:95:51:a4: fc:33:52:41:c9:ae:be:65:52:54:b0:d4:b5:bc:26: 5e:4a:70:cc:e1:8e:d4:a8:2b:d5:80:19:0f:0f:5d: b1:86:9b:81:ec:3a:46:80:3b:f7:83:3d:bb:9f:76: c9:57:51:ac:e5:a4:1e:bb:34:6d:f9:87:40:93:a6: ec:ae:a0:d4:15:10:c0:97:58:2d:a4:f5:f6:f6:23: 73:f0:e3:0e:29:c3:0b:58:96:a6:76:51:ea:b5:44: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2E:3F:95:8B:87:4E:9B:AB:3C:7C:71:EF:15:C2:39:5F:02:FF:C4 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/WC4_lYuHTpurPHxx7xXCOV8C_8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.66.24.0/24 Signature Algorithm: sha256WithRSAEncryption 43:85:5f:05:04:92:f1:22:b0:12:51:0f:c4:f6:61:6a:f6:26: 8a:77:81:da:89:82:0f:ab:de:95:13:dc:d7:5c:5e:95:8d:ce: 1f:ab:dd:ca:d3:b6:84:31:07:1a:bc:b0:16:37:15:b9:05:a8: 13:f8:be:d5:9e:eb:bf:8d:0d:85:fc:2f:67:7f:5e:cc:3b:ba: 73:c8:15:85:28:3c:a9:fe:06:a3:3a:f2:d5:6b:26:66:cf:9e: 6f:59:9b:6c:77:de:b4:82:12:55:f8:25:91:e2:50:e9:af:1c: b6:9f:5f:40:8c:6f:59:0d:82:6d:aa:e5:35:8e:74:08:c0:38: 5b:34:29:1d:90:21:c5:0d:57:0a:a3:4d:17:56:49:af:aa:ac: 1b:41:6a:0f:2e:eb:cd:7e:95:88:7f:3f:24:17:55:64:d2:e8: b2:c6:b0:d2:9b:a7:26:14:a7:04:c6:7b:e0:a9:c9:3e:e3:d9: b2:5d:41:62:8d:b2:9c:63:b4:b8:21:8e:20:48:0a:89:c9:24: 55:4a:17:6f:d4:a7:f2:b1:2c:34:04:73:96:40:24:86:66:2e: 64:cb:2a:b2:24:54:58:6c:95:8f:4c:7b:93:4d:d5:24:d0:30: c8:1e:07:45:42:55:9e:d0:29:0e:fe:21:f5:0f:c5:67:90:57: 8d:74:4b:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsmpavmg3BNoy7LDaNWrKxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMjE2MTAxMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODJlM2Y5NThiODc0ZTliYWIzYzdjNzFlZjE1YzIzOTVmMDJmZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqneS0Ds8mNwLbs20u6PiQkPdP8Kw 9y1tXk9WMpm7uRWzMjwhof75cdlSTvTy1CrpUZLE+BuNPY8PDgSVepDLmqokfvzU 93vgK++M3SJuHjNNr9qdkT60OpYANaN/ZaI/fGFAjb1xLnHUNFI9WMu5uCLH+HEY x199roR7etAWBgyZGjdwwwKxrPDB9qDN7a+HppK2p2gJKH9oaRKF+Q5FsnSVUaT8 M1JBya6+ZVJUsNS1vCZeSnDM4Y7UqCvVgBkPD12xhpuB7DpGgDv3gz27n3bJV1Gs 5aQeuzRt+YdAk6bsrqDUFRDAl1gtpPX29iNz8OMOKcMLWJamdlHqtUTPtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFguP5WLh06bqzx8ce8VwjlfAv/EMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvV0M0X2xZdUhUcHVyUEh4eDd4WENPVjhDXzhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEIYMA0G CSqGSIb3DQEBCwUAA4IBAQBDhV8FBJLxIrASUQ/E9mFq9iaKd4HaiYIPq96VE9zX XF6Vjc4fq93K07aEMQcavLAWNxW5BagT+L7Vnuu/jQ2F/C9nf17MO7pzyBWFKDyp /gajOvLVayZmz55vWZtsd960ghJV+CWR4lDprxy2n19AjG9ZDYJtquU1jnQIwDhb NCkdkCHFDVcKo00XVkmvqqwbQWoPLuvNfpWIfz8kF1Vk0uiyxrDSm6cmFKcExnvg qck+49myXUFijbKcY7S4IY4gSAqJySRVShdv1KfysSw0BHOWQCSGZi5kyyqyJFRY bJWPTHuTTdUk0DDIHgdFQlWe0CkO/iH1D8VnkFeNdEs4 -----END CERTIFICATE-----Generated at Fri Dec 19 21:20:45 2025 by rpki-client