This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/wKwJKxu5QH_bXL0lo1jh7H-FO_c.roa File: wKwJKxu5QH_bXL0lo1jh7H-FO_c.roa (raw, json) Hash identifier: 7FAEVPZjLQc0OYqGZaTMxquqaGvqnlE9r7Jykdo0n/c= Subject key identifier: C0:AC:09:2B:1B:B9:40:7F:DB:5C:BD:25:A3:58:E1:EC:7F:85:3B:F7 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B226F2CD85676E95087176674617C1EED Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/wKwJKxu5QH_bXL0lo1jh7H-FO_c.roa Signing time: Mon 15 Dec 2025 14:34:29 +0000 ROA not before: Mon 15 Dec 2025 14:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 54339 IP address blocks: 93.89.211.0/24 maxlen: 24 93.89.217.0/24 maxlen: 24 193.109.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:6f:2c:d8:56:76:e9:50:87:17:66:74:61:7c:1e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Dec 15 14:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0ac092b1bb9407fdb5cbd25a358e1ec7f853bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d1:9d:25:2b:fd:fc:b0:54:b2:22:eb:b1:1b: cf:8a:23:42:06:75:6e:ac:f2:e1:c0:f0:c1:dc:7c: 0f:ea:17:43:5b:7d:8e:93:e8:f1:a1:b8:85:48:29: 70:15:9e:1c:d2:55:1d:d5:d9:22:b0:35:2c:ca:b2: 7c:8c:ed:27:0e:7d:b2:06:c3:9e:8c:78:0e:55:9a: 70:90:25:3b:97:08:f6:90:aa:29:30:f1:16:75:7c: 7b:3e:df:36:5e:58:f7:5b:e2:17:e3:a0:a2:63:25: db:37:87:f7:de:bf:4f:51:a9:be:0d:83:8a:60:46: f1:03:1b:29:60:67:32:6d:00:bb:77:6a:de:ae:01: d8:3e:b9:3e:98:25:f3:05:57:8c:5a:dc:9e:26:59: d9:1c:fb:aa:e5:4a:e3:ea:10:5a:8f:87:5f:3c:cf: e0:28:26:e8:02:ad:cd:2f:3d:c2:ae:6d:04:6a:0f: 8a:92:f4:f0:cb:21:ab:55:af:bf:12:cb:d8:99:41: 74:05:98:29:2b:83:15:2b:9c:a2:fd:c8:c5:8c:bc: e2:eb:a7:f8:f9:84:12:67:a8:58:66:4b:4a:dc:47: ca:42:94:38:4e:14:9d:7f:46:a5:0b:f4:96:50:25: 37:a5:9e:0d:4b:1a:7a:d2:49:a0:0f:f4:a0:be:67: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AC:09:2B:1B:B9:40:7F:DB:5C:BD:25:A3:58:E1:EC:7F:85:3B:F7 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/wKwJKxu5QH_bXL0lo1jh7H-FO_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.89.211.0/24 93.89.217.0/24 193.109.160.0/22 Signature Algorithm: sha256WithRSAEncryption 98:09:91:f4:e1:9c:b1:0e:61:53:1b:d6:ee:65:5e:04:02:7d: ae:53:64:86:fe:bb:87:77:56:3b:94:44:d4:c1:ad:5b:1e:a2: 1c:a2:f4:25:d5:cc:d5:12:c5:6e:0f:49:e8:a3:7d:7b:7c:57: eb:5e:e4:f9:ea:06:1b:70:33:26:80:d4:dd:4a:50:52:f4:35: 14:39:8c:f8:20:05:c3:1e:5a:14:4e:d8:03:57:82:0d:70:4f: 78:1f:3d:a3:3d:21:fa:f5:bd:b9:82:fb:7e:c8:f7:1d:3c:e5: 88:f5:cd:43:36:47:e2:bc:8b:36:c7:ee:aa:d4:f0:4e:9a:ab: f6:a1:73:51:ec:f3:d4:13:a3:9f:62:a6:af:1b:90:be:11:20: 54:c2:de:fb:b8:d1:81:b0:9f:e7:e3:d4:41:c0:5f:75:ab:29: 53:92:26:f0:90:6d:fc:66:4e:56:01:91:65:e6:1c:f8:fe:08: d7:53:39:41:58:af:73:db:4d:1b:d4:b9:9f:20:9d:58:bf:09: 7a:b8:65:ef:47:30:23:1c:f4:20:fc:38:11:8d:b4:a8:44:d5: 37:05:f8:be:27:2e:63:19:89:b0:52:b7:27:70:21:a3:37:99: c1:bc:b9:4d:78:d7:3d:10:d8:cb:a9:0f:5c:85:72:8d:cb:27: 8f:0b:d4:e6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsibyzYVnbpUIcXZnRhfB7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUxMjE1MTQzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGFjMDkyYjFiYjk0MDdmZGI1Y2JkMjVhMzU4ZTFlYzdmODUzYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09GdJSv9/LBUsiLrsRvPiiNCBnVu rPLhwPDB3HwP6hdDW32Ok+jxobiFSClwFZ4c0lUd1dkisDUsyrJ8jO0nDn2yBsOe jHgOVZpwkCU7lwj2kKopMPEWdXx7Pt82Xlj3W+IX46CiYyXbN4f33r9PUam+DYOK YEbxAxspYGcybQC7d2rergHYPrk+mCXzBVeMWtyeJlnZHPuq5Urj6hBaj4dfPM/g KCboAq3NLz3Crm0Eag+KkvTwyyGrVa+/EsvYmUF0BZgpK4MVK5yi/cjFjLzi66f4 +YQSZ6hYZktK3EfKQpQ4ThSdf0alC/SWUCU3pZ4NSxp60kmgD/Sgvme7ewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMCsCSsbuUB/21y9JaNY4ex/hTv3MB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvd0t3Skt4dTVRSF9iWEwwbG8xamg3SC1GT19jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXVnTAwQA XVnZAwQCwW2gMA0GCSqGSIb3DQEBCwUAA4IBAQCYCZH04ZyxDmFTG9buZV4EAn2u U2SG/ruHd1Y7lETUwa1bHqIcovQl1czVEsVuD0noo317fFfrXuT56gYbcDMmgNTd SlBS9DUUOYz4IAXDHloUTtgDV4INcE94Hz2jPSH69b25gvt+yPcdPOWI9c1DNkfi vIs2x+6q1PBOmqv2oXNR7PPUE6OfYqavG5C+ESBUwt77uNGBsJ/n49RBwF91qylT kibwkG38Zk5WAZFl5hz4/gjXUzlBWK9z200b1LmfIJ1Yvwl6uGXvRzAjHPQg/DgR jbSoRNU3Bfi+Jy5jGYmwUrcncCGjN5nBvLlNeNc9ENjLqQ9chXKNyyePC9Tm -----END CERTIFICATE-----Generated at Sat Dec 20 04:44:44 2025 by rpki-client