This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wqkA5xl09sX_A2QzH6E28BxIbIw.roa File: wqkA5xl09sX_A2QzH6E28BxIbIw.roa (raw, json) Hash identifier: gNeWlXdNWJHIdQxF/nsaFRWLN2JM1BmDIJhmldRmMN8= Subject key identifier: C2:A9:00:E7:19:74:F6:C5:FF:03:64:33:1F:A1:36:F0:1C:48:6C:8C Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B459152308DAD8065269956554225C19F Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wqkA5xl09sX_A2QzH6E28BxIbIw.roa Signing time: Mon 22 Dec 2025 10:18:30 +0000 ROA not before: Mon 22 Dec 2025 10:18:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202656 IP address blocks: 31.41.251.0/24 maxlen: 24 31.41.252.0/24 maxlen: 24 31.41.254.0/24 maxlen: 24 45.87.126.0/24 maxlen: 24 45.95.29.0/24 maxlen: 24 45.128.125.0/24 maxlen: 24 45.128.126.0/24 maxlen: 24 45.128.127.0/24 maxlen: 24 45.128.128.0/24 maxlen: 24 45.151.29.0/24 maxlen: 24 83.138.54.0/24 maxlen: 24 88.151.8.0/24 maxlen: 24 91.212.103.0/24 maxlen: 24 94.154.190.0/24 maxlen: 24 176.116.15.0/24 maxlen: 24 176.126.96.0/24 maxlen: 24 193.28.178.0/24 maxlen: 24 193.187.105.0/24 maxlen: 24 193.201.10.0/24 maxlen: 24 194.59.187.0/24 maxlen: 24 195.96.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:91:52:30:8d:ad:80:65:26:99:56:55:42:25:c1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Dec 22 10:18:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c2a900e71974f6c5ff0364331fa136f01c486c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:8a:94:69:d2:f2:22:45:8c:02:f3:07:25: bd:94:72:b0:30:dd:92:c9:1e:cb:33:6e:fe:24:0c: 2f:3e:4c:d9:83:32:a7:0e:2f:03:48:a2:d5:cf:4c: e1:f2:96:8a:a2:77:36:82:9e:95:f8:57:cb:16:80: 4f:3a:1f:2a:bb:cd:c7:97:56:06:1f:94:2a:7c:f0: da:95:e7:18:59:e7:a2:03:6b:8f:79:15:77:57:d4: f7:17:22:39:ea:75:c1:2a:ab:69:a9:12:35:c4:b2: 2d:9a:2c:d3:08:84:fa:23:97:be:24:30:ec:93:54: 3e:d0:9b:67:00:bb:2e:e3:b1:81:b6:f4:1f:52:37: 21:18:58:8e:b2:d2:85:0f:b8:d8:f7:5d:55:66:e9: ef:d4:c6:2c:db:28:de:60:8c:1d:4f:6e:db:79:83: ee:86:15:e1:d8:35:42:b8:a9:b0:ad:ce:9a:f7:2c: f8:1f:e8:d3:8f:8c:34:28:dc:c0:37:c6:d7:af:9c: 9a:22:2b:d8:53:4f:32:0f:84:95:50:f4:3d:05:d0: 5f:40:44:2d:b0:60:06:36:45:ad:1f:f1:b5:5f:01: e3:24:2c:b8:d0:0c:4e:bf:1f:ff:ac:fc:f0:e3:da: 1b:a3:69:05:30:ca:ba:bb:bf:b9:c3:db:62:0d:8f: 52:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A9:00:E7:19:74:F6:C5:FF:03:64:33:1F:A1:36:F0:1C:48:6C:8C X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wqkA5xl09sX_A2QzH6E28BxIbIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.251.0-31.41.252.255 31.41.254.0/24 45.87.126.0/24 45.95.29.0/24 45.128.125.0-45.128.128.255 45.151.29.0/24 83.138.54.0/24 88.151.8.0/24 91.212.103.0/24 94.154.190.0/24 176.116.15.0/24 176.126.96.0/24 193.28.178.0/24 193.187.105.0/24 193.201.10.0/24 194.59.187.0/24 195.96.159.0/24 Signature Algorithm: sha256WithRSAEncryption 12:66:14:2a:b2:c4:0a:1e:56:14:d0:32:76:f6:11:4a:d5:28: 86:56:d2:30:d7:d7:70:2e:01:7f:56:2e:6e:7a:5a:0d:7d:2a: 2e:7c:39:fe:53:d9:15:7e:ac:81:9e:ad:0e:fe:ad:99:b5:b3: db:b2:ae:25:5c:73:f1:16:d4:6a:3a:9b:6f:b3:d9:71:19:4c: ad:5c:c4:84:9e:5e:2e:64:2c:98:c4:3d:d3:06:ba:c4:09:5a: 78:42:88:35:5d:bd:30:fb:05:bd:ec:75:63:d1:53:2f:d1:7e: 84:da:51:f7:27:47:3f:1c:9e:89:80:d5:06:84:67:4a:98:f7: e6:aa:c2:c0:79:ce:75:5f:a1:aa:ee:82:9e:89:32:b3:0d:cc: 00:83:78:ea:8a:51:f8:ff:71:69:98:47:4e:11:c1:f1:b8:03: 38:8e:11:9b:0c:31:61:fe:ef:53:e9:d2:42:b4:c0:21:c2:56: 41:b5:75:55:fe:f1:2d:be:92:c3:58:d8:2c:91:bc:33:6e:22: 34:59:f7:3a:63:1a:4d:d3:29:18:c7:1d:15:77:86:61:21:9e: 7d:e8:03:a5:3a:97:3e:84:45:6d:f6:33:a6:20:ab:bb:bd:68: d7:e3:08:23:a7:66:e3:f2:1c:8f:b7:ed:f1:d6:b3:ba:ad:c4: af:fa:e7:2f -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZtFkVIwja2AZSaZVlVCJcGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMjIyMTAxODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmE5MDBlNzE5NzRmNmM1ZmYwMzY0MzMxZmExMzZmMDFjNDg2YzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozGKlGnS8iJFjALzByW9lHKwMN2S yR7LM27+JAwvPkzZgzKnDi8DSKLVz0zh8paKonc2gp6V+FfLFoBPOh8qu83Hl1YG H5QqfPDalecYWeeiA2uPeRV3V9T3FyI56nXBKqtpqRI1xLItmizTCIT6I5e+JDDs k1Q+0JtnALsu47GBtvQfUjchGFiOstKFD7jY911VZunv1MYs2yjeYIwdT27beYPu hhXh2DVCuKmwrc6a9yz4H+jTj4w0KNzAN8bXr5yaIivYU08yD4SVUPQ9BdBfQEQt sGAGNkWtH/G1XwHjJCy40AxOvx//rPzw49obo2kFMMq6u7+5w9tiDY9SeQIDAQAB o4ICezCCAncwHQYDVR0OBBYEFMKpAOcZdPbF/wNkMx+hNvAcSGyMMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvd3FrQTV4bDA5c1hfQTJRekg2RTI4QnhJYkl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYwDAMEAB8p +wMEAB8p/AMEAB8p/gMEAC1XfgMEAC1fHTAMAwQALYB9AwQALYCAAwQALZcdAwQA U4o2AwQAWJcIAwQAW9RnAwQAXpq+AwQAsHQPAwQAsH5gAwQAwRyyAwQAwbtpAwQA wckKAwQAwju7AwQAw2CfMA0GCSqGSIb3DQEBCwUAA4IBAQASZhQqssQKHlYU0DJ2 9hFK1SiGVtIw19dwLgF/Vi5ueloNfSoufDn+U9kVfqyBnq0O/q2ZtbPbsq4lXHPx FtRqOptvs9lxGUytXMSEnl4uZCyYxD3TBrrECVp4Qog1Xb0w+wW97HVj0VMv0X6E 2lH3J0c/HJ6JgNUGhGdKmPfmqsLAec51X6Gq7oKeiTKzDcwAg3jqilH4/3FpmEdO EcHxuAM4jhGbDDFh/u9T6dJCtMAhwlZBtXVV/vEtvpLDWNgskbwzbiI0Wfc6YxpN 0ykYxx0Vd4ZhIZ596AOlOpc+hEVt9jOmIKu7vWjX4wgjp2bj8hyPt+3x1rO6rcSv +ucv -----END CERTIFICATE-----Generated at Sat Dec 27 08:05:10 2025 by rpki-client