This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/wdPf0XMxo7EZ04CNvLNjFyanDS8.roa File: wdPf0XMxo7EZ04CNvLNjFyanDS8.roa (raw, json) Hash identifier: vby7cD5/Tq5NAXmBCnmtz9obJwGbR6dgEyTAnHaLHjI= Subject key identifier: C1:D3:DF:D1:73:31:A3:B1:19:D3:80:8D:BC:B3:63:17:26:A7:0D:2F Certificate issuer: /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Certificate serial: 019B225046F76012D8704D2C8B07DAF3F989 Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/wdPf0XMxo7EZ04CNvLNjFyanDS8.roa Signing time: Mon 15 Dec 2025 14:00:44 +0000 ROA not before: Mon 15 Dec 2025 14:00:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203135 IP address blocks: 185.45.148.0/24 maxlen: 24 193.189.89.0/24 maxlen: 24 2a13:bdc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:46:f7:60:12:d8:70:4d:2c:8b:07:da:f3:f9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Validity Not Before: Dec 15 14:00:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1d3dfd17331a3b119d3808dbcb3631726a70d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:4c:7c:28:60:45:fe:a0:81:88:87:7f:0b: 44:4f:ee:c6:80:4e:59:42:69:bc:04:41:cd:11:c9: 55:15:ff:a2:fc:54:8d:04:06:2d:3e:0d:23:ad:a1: a3:2a:a9:b4:88:d2:17:c1:d5:ac:ea:94:46:4b:0d: 50:2e:32:77:59:e5:6f:73:f5:fd:c6:d0:6c:34:83: e6:48:49:75:38:00:d5:d9:65:6b:9c:81:67:43:53: 76:9d:6b:79:e5:c0:ca:40:95:b7:db:d9:f3:a8:a7: 53:b0:6e:88:42:30:05:ca:1b:49:40:48:09:f6:cf: 07:a9:ca:b5:a2:c8:76:03:c7:f1:05:78:32:5d:b7: ed:14:09:48:ac:c6:31:67:78:97:f0:b7:3e:2c:cf: bc:12:35:1a:82:6a:cc:d7:aa:90:b3:7f:8d:51:71: bb:1c:39:07:b3:e9:fb:6a:0d:c1:df:d7:b4:95:1d: e4:3a:58:95:c2:66:aa:88:6f:ed:b3:06:e0:7e:21: 4b:dc:41:5e:5e:ba:86:b5:b9:c5:9d:96:49:db:5f: 49:a5:cb:60:41:71:29:b8:3b:2d:22:0e:54:f9:ec: 02:97:10:4f:93:21:4f:a4:fc:52:68:ec:5b:27:65: 2e:93:26:12:93:98:41:aa:74:f0:55:76:92:eb:46: 2e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D3:DF:D1:73:31:A3:B1:19:D3:80:8D:BC:B3:63:17:26:A7:0D:2F X509v3 Authority Key Identifier: keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/wdPf0XMxo7EZ04CNvLNjFyanDS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.148.0/24 193.189.89.0/24 IPv6: 2a13:bdc0::/29 Signature Algorithm: sha256WithRSAEncryption 0c:7b:e6:fa:e4:51:c1:8c:3c:88:6a:52:f8:71:5a:a6:98:f2: c5:9f:47:d1:bc:e0:ad:93:76:43:96:03:45:c2:db:35:56:e6: 54:16:25:8e:cf:16:ac:3c:0e:75:d4:c9:55:ad:be:1d:10:ad: c6:8d:76:dd:d7:89:db:fc:40:bf:fe:b3:ac:32:ea:d3:d0:0c: 75:70:ed:1a:3f:d6:ed:2e:72:9a:ff:cb:2f:05:34:60:f7:03: 63:e9:4a:d8:e6:35:50:0b:4b:38:a3:52:a5:d4:18:d8:fc:b7: 17:81:8c:79:96:fd:10:6d:32:52:ee:03:ed:84:ac:c8:85:cb: e9:ff:dc:ce:e8:02:26:d7:99:af:a6:e0:fe:17:24:24:39:11: cc:a6:d8:4a:e2:59:18:6d:3c:72:68:43:5e:91:61:9f:3a:d5: 1b:bb:d9:fd:fb:7e:d8:17:fb:d4:ca:45:dd:e2:c4:9b:f4:f7: 62:41:7a:eb:4b:1f:36:84:d8:50:b4:c7:54:2e:82:01:5c:ca: e2:8c:91:af:e7:c6:d3:a5:b3:40:1c:5c:a0:1e:ff:85:e2:c4: 7c:cb:53:d4:f7:ab:97:c5:ed:0d:e9:85:3e:52:2c:74:e6:ce: 8e:6f:48:67:0f:c7:f1:0d:ce:cb:7c:d4:8b:8d:8a:c6:df:be: d0:54:8d:ed -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZsiUEb3YBLYcE0siwfa8/mJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzgwMTU3YjU2NDI2Y2UzYTVmNDNjODlmZWIxZDQzN2M3 N2NiY2UwHhcNMjUxMjE1MTQwMDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWQzZGZkMTczMzFhM2IxMTlkMzgwOGRiY2IzNjMxNzI2YTcwZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRlMfChgRf6ggYiHfwtET+7GgE5Z Qmm8BEHNEclVFf+i/FSNBAYtPg0jraGjKqm0iNIXwdWs6pRGSw1QLjJ3WeVvc/X9 xtBsNIPmSEl1OADV2WVrnIFnQ1N2nWt55cDKQJW329nzqKdTsG6IQjAFyhtJQEgJ 9s8Hqcq1osh2A8fxBXgyXbftFAlIrMYxZ3iX8Lc+LM+8EjUagmrM16qQs3+NUXG7 HDkHs+n7ag3B39e0lR3kOliVwmaqiG/tswbgfiFL3EFeXrqGtbnFnZZJ219Jpctg QXEpuDstIg5U+ewClxBPkyFPpPxSaOxbJ2UukyYSk5hBqnTwVXaS60YuWwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMHT39FzMaOxGdOAjbyzYxcmpw0vMB8GA1UdIwQY MBaAFAPIAVe1ZCbOOl9DyJ/rHUN8d8vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEt ZjAxNGY4MTc3OTZhLzEvd2RQZjBYTXhvN0VaMDRDTnZMTmpGeWFuRFM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEtZjAxNGY4MTc3OTZh LzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuS2UAwQA wb1ZMA0EAgACMAcDBQMqE73AMA0GCSqGSIb3DQEBCwUAA4IBAQAMe+b65FHBjDyI alL4cVqmmPLFn0fRvOCtk3ZDlgNFwts1VuZUFiWOzxasPA511MlVrb4dEK3GjXbd 14nb/EC//rOsMurT0Ax1cO0aP9btLnKa/8svBTRg9wNj6UrY5jVQC0s4o1Kl1BjY /LcXgYx5lv0QbTJS7gPthKzIhcvp/9zO6AIm15mvpuD+FyQkORHMpthK4lkYbTxy aENekWGfOtUbu9n9+37YF/vUykXd4sSb9PdiQXrrSx82hNhQtMdULoIBXMrijJGv 58bTpbNAHFygHv+F4sR8y1PU96uXxe0N6YU+Uix05s6Ob0hnD8fxDc7LfNSLjYrG 377QVI3t -----END CERTIFICATE-----Generated at Tue Dec 16 12:40:16 2025 by rpki-client