This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Wh74fuKqg8AhTJ7Q1zhnndEUQJQ.roa File: Wh74fuKqg8AhTJ7Q1zhnndEUQJQ.roa (raw, json) Hash identifier: Jq8+TPlorH7LGhX8tiJFGyL37KbKDTSIzZDf31vyK2Q= Subject key identifier: 5A:1E:F8:7E:E2:AA:83:C0:21:4C:9E:D0:D7:38:67:9D:D1:14:40:94 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B33599E90B7FDCADA50121EE9F390066A Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Wh74fuKqg8AhTJ7Q1zhnndEUQJQ.roa Signing time: Thu 18 Dec 2025 21:24:29 +0000 ROA not before: Thu 18 Dec 2025 21:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5650 IP address blocks: 89.125.40.0/21 maxlen: 21 89.125.141.0/24 maxlen: 24 89.125.164.0/24 maxlen: 24 89.125.184.0/24 maxlen: 24 167.17.32.0/21 maxlen: 21 167.17.41.0/24 maxlen: 24 167.17.42.0/23 maxlen: 23 167.17.44.0/23 maxlen: 23 167.17.46.0/24 maxlen: 24 206.245.136.0/21 maxlen: 21 206.245.144.0/21 maxlen: 21 208.123.184.0/24 maxlen: 24 208.123.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:59:9e:90:b7:fd:ca:da:50:12:1e:e9:f3:90:06:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 18 21:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a1ef87ee2aa83c0214c9ed0d738679dd1144094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:aa:53:2e:07:97:4d:de:e1:d3:de:49:b9: ad:4c:ca:b6:81:4a:fe:bd:30:2f:a5:db:f7:c1:a5: 5f:5f:fb:bf:b7:90:db:22:4c:a2:aa:21:2a:1e:af: 92:5d:d8:00:db:d5:63:60:7c:3a:96:c2:e1:35:8c: 93:84:04:34:00:e1:9b:ba:57:95:4a:44:87:d3:ae: 7e:ce:28:22:7f:6d:71:fe:55:c1:7c:e1:42:84:42: dc:e8:2f:71:b5:70:10:c5:ea:31:41:95:75:3d:d1: d0:f5:29:d1:09:b6:ec:47:86:29:b6:f7:6f:7e:21: 3a:ea:10:e2:c7:33:32:69:45:0e:c1:f9:a0:e0:78: df:ee:68:b9:b8:e9:35:ab:78:ec:d9:3f:c2:d7:c8: cb:ef:02:69:aa:7b:6c:8f:fc:c7:01:09:4c:58:92: 63:b3:15:21:0b:5f:13:90:37:14:03:c2:57:37:be: a9:da:f4:3a:fb:0e:55:e8:fc:b8:4d:8c:fb:55:e5: 0d:e9:d8:3e:24:64:bb:1b:1d:47:90:16:9f:5d:08: 8f:c5:9a:98:29:21:a0:af:d3:3a:ff:1b:b9:7a:f2: e1:e9:be:1a:ee:26:fc:fc:01:9e:78:92:4c:90:d1: 43:14:78:af:99:40:8f:75:73:fc:86:41:ca:64:ae: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1E:F8:7E:E2:AA:83:C0:21:4C:9E:D0:D7:38:67:9D:D1:14:40:94 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Wh74fuKqg8AhTJ7Q1zhnndEUQJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.40.0/21 89.125.141.0/24 89.125.164.0/24 89.125.184.0/24 167.17.32.0/21 167.17.41.0-167.17.46.255 206.245.136.0-206.245.151.255 208.123.184.0/24 208.123.186.0/24 Signature Algorithm: sha256WithRSAEncryption 73:b2:c7:63:4d:6f:68:db:83:e3:79:70:4f:9d:92:75:d8:a5: 98:09:3c:cf:5e:a3:c8:53:47:4f:dc:b7:3e:ff:b3:7d:03:5e: d1:d1:db:7c:58:96:ef:91:93:5b:9a:2b:23:84:a4:fd:45:82: 80:b3:0a:af:15:c2:25:7d:cf:cf:d0:67:56:60:76:5a:8f:80: 51:36:50:2a:cf:c9:3e:37:01:95:3b:14:7b:59:14:29:33:02: 77:08:74:ab:98:d2:ae:9b:8c:0a:82:1d:7b:65:92:91:af:bb: e8:b1:8f:1e:ee:1a:15:07:bf:53:c1:c1:e0:d6:cd:92:a6:f2: a4:7a:5b:2d:3a:c4:32:76:37:94:40:9b:4a:26:29:e8:65:27: 5c:60:9a:4e:f1:07:23:08:15:db:23:48:4b:d7:2d:bf:fe:24: d9:ce:64:11:60:08:b0:10:af:13:73:31:a4:3d:db:9a:e7:1e: b3:17:fe:51:ab:19:a9:49:c4:e2:8f:89:96:d6:40:2e:51:78: d1:ac:51:af:bb:33:b7:a7:92:d6:6c:bb:20:0e:f5:74:d5:fa: c7:d3:d8:91:61:59:9f:fc:26:8b:4b:d7:b3:a8:cd:06:77:e1: ce:c1:6d:b3:25:96:9f:9f:7d:e2:86:7a:2c:04:a5:3e:de:b1: e3:84:28:8c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZszWZ6Qt/3K2lASHunzkAZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjE4MjEyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTFlZjg3ZWUyYWE4M2MwMjE0YzllZDBkNzM4Njc5ZGQxMTQ0MDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBeqUy4Hl03e4dPeSbmtTMq2gUr+ vTAvpdv3waVfX/u/t5DbIkyiqiEqHq+SXdgA29VjYHw6lsLhNYyThAQ0AOGbuleV SkSH065+zigif21x/lXBfOFChELc6C9xtXAQxeoxQZV1PdHQ9SnRCbbsR4Yptvdv fiE66hDixzMyaUUOwfmg4Hjf7mi5uOk1q3js2T/C18jL7wJpqntsj/zHAQlMWJJj sxUhC18TkDcUA8JXN76p2vQ6+w5V6Py4TYz7VeUN6dg+JGS7Gx1HkBafXQiPxZqY KSGgr9M6/xu5evLh6b4a7ib8/AGeeJJMkNFDFHivmUCPdXP8hkHKZK6omQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFFoe+H7iqoPAIUye0Nc4Z53RFECUMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvV2g3NGZ1S3FnOEFoVEo3UTF6aG5uZEVVUUpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQDWX0oAwQA WX2NAwQAWX2kAwQAWX24AwQDpxEgMAwDBACnESkDBACnES4wDAMEA871iAMEA871 kAMEANB7uAMEANB7ujANBgkqhkiG9w0BAQsFAAOCAQEAc7LHY01vaNuD43lwT52S ddilmAk8z16jyFNHT9y3Pv+zfQNe0dHbfFiW75GTW5orI4Sk/UWCgLMKrxXCJX3P z9BnVmB2Wo+AUTZQKs/JPjcBlTsUe1kUKTMCdwh0q5jSrpuMCoIde2WSka+76LGP Hu4aFQe/U8HB4NbNkqbypHpbLTrEMnY3lECbSiYp6GUnXGCaTvEHIwgV2yNIS9ct v/4k2c5kEWAIsBCvE3MxpD3bmucesxf+UasZqUnE4o+JltZALlF40axRr7szt6eS 1my7IA71dNX6x9PYkWFZn/wmi0vXs6jNBnfhzsFtsyWWn5994oZ6LASlPt6x44Qo jA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:57:45 2025 by rpki-client