This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/wliZ3Xk4a5dST5lG-0jqVyesff0.roa File: wliZ3Xk4a5dST5lG-0jqVyesff0.roa (raw, json) Hash identifier: cFQjKXKVqiif1PZ4ZLX4VRumIvFEAtMT9pBdOzRqCpI= Subject key identifier: C2:58:99:DD:79:38:6B:97:52:4F:99:46:FB:48:EA:57:27:AC:7D:FD Certificate issuer: /CN=afd598f29dd5c56298f2eb0575de27fc3ba20951 Certificate serial: 019B2772E9FA7162D2F3B7D0401AF36D8A95 Authority key identifier: AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/wliZ3Xk4a5dST5lG-0jqVyesff0.roa Signing time: Tue 16 Dec 2025 13:56:40 +0000 ROA not before: Tue 16 Dec 2025 13:56:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9121 IP address blocks: 95.133.248.0/24 maxlen: 24 95.133.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:72:e9:fa:71:62:d2:f3:b7:d0:40:1a:f3:6d:8a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd598f29dd5c56298f2eb0575de27fc3ba20951 Validity Not Before: Dec 16 13:56:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c25899dd79386b97524f9946fb48ea5727ac7dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:28:d7:06:16:fd:fb:73:c8:de:a4:7c:30: 9f:4b:7d:a7:e0:1a:c5:f9:a1:60:f5:ee:a1:84:a3: f1:66:ed:b8:62:19:6f:a9:34:dd:e9:e4:a5:5a:34: 76:7b:08:4f:0a:b4:72:ef:d1:f8:26:64:4f:d3:ef: f6:d2:29:9e:f2:ef:dc:cf:38:14:09:ef:f5:ec:7f: d9:3c:aa:8d:0d:ee:a7:bd:ab:32:e6:73:b7:19:84: f8:0d:62:3c:7a:eb:98:e8:1a:34:f2:7c:ab:c5:04: 1e:98:f2:19:88:35:91:b2:ac:77:db:9e:b2:29:f7: f7:db:9c:2c:e0:ce:77:0f:8c:f5:3d:0b:19:33:a4: 1a:72:53:6d:da:49:5d:4a:f7:84:d7:53:90:00:9c: b3:c5:a7:ac:f3:dd:4d:12:8b:74:c3:c2:b1:99:0b: 18:8b:a8:e3:b3:d9:9c:cb:b5:8f:63:2e:05:b1:c5: b1:58:27:85:62:15:ee:53:f2:ee:20:62:b2:80:57: c2:2b:3d:39:71:cc:48:23:bf:6d:1c:68:e1:f9:9f: ef:8a:24:65:ee:fb:c9:2e:69:92:f0:6f:7e:0a:a2: 01:2a:c5:36:67:55:5c:ed:cf:b3:74:21:79:0a:9f: 5f:39:7f:82:95:b9:bf:8a:05:54:ba:95:bc:74:36: 70:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:58:99:DD:79:38:6B:97:52:4F:99:46:FB:48:EA:57:27:AC:7D:FD X509v3 Authority Key Identifier: keyid:AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/wliZ3Xk4a5dST5lG-0jqVyesff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.133.248.0/23 Signature Algorithm: sha256WithRSAEncryption 23:6c:d9:25:9c:3c:ee:f1:c5:a8:c6:ce:d9:75:94:83:3c:a4: 7b:c1:84:e8:60:28:d4:c9:28:fb:e3:60:c7:75:d4:cf:f5:aa: 1a:e3:d2:1b:53:b2:24:b6:d6:68:ea:7a:18:5e:cb:b1:1c:65: f7:be:ec:62:df:8f:06:d3:86:b5:ec:7e:dd:a2:64:c7:7e:c3: ad:8e:04:6f:d9:1e:98:a3:fa:ce:97:95:35:9d:10:7b:9f:4b: 92:05:a3:b4:f0:e2:75:3e:17:45:86:d8:89:d7:a9:7a:2c:36: 1f:80:cb:36:31:b8:82:fd:bd:a5:15:51:c9:df:98:f3:a4:3c: ae:36:90:72:d3:57:a2:79:52:f5:63:0f:21:4d:15:91:e9:df: 16:48:8e:e5:12:49:cb:74:11:68:4b:3b:aa:01:62:ef:56:75: 6d:6d:6d:4a:dd:47:92:f4:b1:dd:67:b6:9b:ac:9f:5d:99:4b: ba:d3:2a:89:95:da:de:a7:dc:c5:98:ff:22:52:0c:4d:d6:b2: 68:40:b9:e8:86:08:39:92:84:ec:0e:e3:a6:71:ab:0d:0b:33: 96:35:28:5e:b1:59:09:04:4a:7a:6e:9f:6a:2f:bf:64:14:7a: 57:f2:05:67:35:0b:82:e3:98:8e:94:71:e7:d0:a7:f7:57:03: 36:c7:31:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsncun6cWLS87fQQBrzbYqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZDU5OGYyOWRkNWM1NjI5OGYyZWIwNTc1ZGUyN2ZjM2Jh MjA5NTEwHhcNMjUxMjE2MTM1NjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjU4OTlkZDc5Mzg2Yjk3NTI0Zjk5NDZmYjQ4ZWE1NzI3YWM3ZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRoo1wYW/ftzyN6kfDCfS32n4BrF +aFg9e6hhKPxZu24YhlvqTTd6eSlWjR2ewhPCrRy79H4JmRP0+/20ime8u/czzgU Ce/17H/ZPKqNDe6nvasy5nO3GYT4DWI8euuY6Bo08nyrxQQemPIZiDWRsqx3256y Kff325ws4M53D4z1PQsZM6QaclNt2kldSveE11OQAJyzxaes891NEot0w8KxmQsY i6jjs9mcy7WPYy4FscWxWCeFYhXuU/LuIGKygFfCKz05ccxII79tHGjh+Z/viiRl 7vvJLmmS8G9+CqIBKsU2Z1Vc7c+zdCF5Cp9fOX+Clbm/igVUupW8dDZwAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJYmd15OGuXUk+ZRvtI6lcnrH39MB8GA1UdIwQY MBaAFK/VmPKd1cVimPLrBXXeJ/w7oglRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlXWThwM1Z4V0tZOHVzRmRkNG5fRHVpQ1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9mZmFmZGItODE1YS00N2E4LTk3MWIt YjZhNDY4NGUyNWYwLzEvd2xpWjNYazRhNWRTVDVsRy0wanFWeWVzZmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9mZmFmZGItODE1YS00N2E4LTk3MWItYjZhNDY4NGUyNWYw LzEvcjlXWThwM1Z4V0tZOHVzRmRkNG5fRHVpQ1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX4X4MA0G CSqGSIb3DQEBCwUAA4IBAQAjbNklnDzu8cWoxs7ZdZSDPKR7wYToYCjUySj742DH ddTP9aoa49IbU7IkttZo6noYXsuxHGX3vuxi348G04a17H7domTHfsOtjgRv2R6Y o/rOl5U1nRB7n0uSBaO08OJ1PhdFhtiJ16l6LDYfgMs2MbiC/b2lFVHJ35jzpDyu NpBy01eieVL1Yw8hTRWR6d8WSI7lEknLdBFoSzuqAWLvVnVtbW1K3UeS9LHdZ7ab rJ9dmUu60yqJldrep9zFmP8iUgxN1rJoQLnohgg5koTsDuOmcasNCzOWNShesVkJ BEp6bp9qL79kFHpX8gVnNQuC45iOlHHn0Kf3VwM2xzGl -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:09 2025 by rpki-client