This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/WkbmKOyOhHHxctalIzwqKHzBJT4.roa File: WkbmKOyOhHHxctalIzwqKHzBJT4.roa (raw, json) Hash identifier: RPBwg7pSu4D2cDY0Ucro+5wA7+BcwF0jWYMllW0u0IA= Subject key identifier: 5A:46:E6:28:EC:8E:84:71:F1:72:D6:A5:23:3C:2A:28:7C:C1:25:3E Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019AF923936EE21F6D9937A5A3DCF0513BB9 Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/WkbmKOyOhHHxctalIzwqKHzBJT4.roa Signing time: Sun 07 Dec 2025 14:07:29 +0000 ROA not before: Sun 07 Dec 2025 14:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 64.255.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:23:93:6e:e2:1f:6d:99:37:a5:a3:dc:f0:51:3b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Dec 7 14:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a46e628ec8e8471f172d6a5233c2a287cc1253e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:f0:ac:57:45:d3:ec:e3:0a:ac:09:d7:a3: 08:e6:3f:6d:2b:3d:93:d5:f8:f6:47:ac:8d:38:81: 48:95:71:c1:d6:33:87:10:d5:9b:16:c5:46:55:63: 86:ac:f8:6e:d5:57:e2:50:c0:5f:6b:e7:b7:19:7b: 1e:64:db:31:77:7d:a5:c5:fa:18:b0:e9:c4:fc:47: 26:a3:64:72:2b:1f:ba:4e:85:52:29:77:f6:11:09: 51:bf:e6:40:cb:cb:9f:18:73:ae:df:ce:7e:e9:d5: 42:d2:0a:4f:21:c2:18:7d:8e:68:75:6d:88:a3:81: 1b:9a:d0:39:68:5c:ee:ac:2e:7d:7d:7d:7f:00:06: 08:9d:7f:4c:7e:d4:df:f2:01:1c:c1:d2:c3:b2:02: d4:de:a1:75:88:e3:12:f9:99:fc:ac:fc:38:3d:70: f7:ee:44:1d:40:33:52:2c:c1:77:22:dc:7f:ac:4d: da:cc:a3:3a:97:c4:46:17:96:2c:f7:0b:c9:ae:38: 39:4f:17:dc:5a:63:53:cd:50:f0:1b:fc:ed:8b:24: 37:37:32:37:54:f7:13:aa:18:07:33:dc:c1:85:8b: 6f:10:bd:bb:d7:e5:bf:99:f5:48:ca:cc:d1:95:38: f2:8c:05:fd:1c:df:b8:cc:09:30:ec:60:bd:f3:99: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:E6:28:EC:8E:84:71:F1:72:D6:A5:23:3C:2A:28:7C:C1:25:3E X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/WkbmKOyOhHHxctalIzwqKHzBJT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.255.25.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:30:c8:51:8d:f5:7e:4b:5d:d1:dc:14:6a:2e:d3:5d:17:67: 4f:9a:3f:c0:6a:fe:26:46:65:b9:4b:fe:dd:2f:b8:9c:86:28: ae:6d:7b:a9:c9:e2:99:b6:0c:e3:15:ee:a1:a3:12:39:78:d4: 02:63:5b:19:69:8f:54:6d:5f:4c:5e:a0:17:bc:ad:4b:cf:20: 86:ce:a5:4b:f5:a3:39:47:fb:74:ad:2c:ca:16:b9:1d:62:95: 67:76:e2:b2:e1:db:84:7b:87:20:7f:ba:13:55:ba:ad:19:db: ae:20:1d:67:95:17:d3:d3:ae:fc:c4:80:df:bc:d4:14:77:90: 7f:63:8d:cc:5e:ff:ec:8f:22:fd:03:41:4f:df:4d:6a:85:41: e8:5f:78:bd:b2:a6:d5:e9:4d:1d:0c:c4:a9:eb:97:13:9a:73: 74:e1:80:20:e2:5f:93:90:48:e4:0b:d1:4d:1b:6a:ab:37:e1: 45:9b:55:23:77:22:a2:8f:ea:9e:da:7d:bd:62:7f:47:f7:5f: c5:65:68:b2:13:36:e6:bb:1c:07:9e:48:82:fc:3b:f9:f7:b1: 6f:5e:7c:a4:69:78:12:07:97:4f:59:85:cc:1f:8e:82:53:6b: 04:64:57:2d:ac:d8:59:88:9b:22:94:c8:1d:2b:29:c6:90:fb: a7:41:81:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr5I5Nu4h9tmTelo9zwUTu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjUxMjA3MTQwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTQ2ZTYyOGVjOGU4NDcxZjE3MmQ2YTUyMzNjMmEyODdjYzEyNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmfwrFdF0+zjCqwJ16MI5j9tKz2T 1fj2R6yNOIFIlXHB1jOHENWbFsVGVWOGrPhu1VfiUMBfa+e3GXseZNsxd32lxfoY sOnE/Ecmo2RyKx+6ToVSKXf2EQlRv+ZAy8ufGHOu385+6dVC0gpPIcIYfY5odW2I o4EbmtA5aFzurC59fX1/AAYInX9MftTf8gEcwdLDsgLU3qF1iOMS+Zn8rPw4PXD3 7kQdQDNSLMF3Itx/rE3azKM6l8RGF5Ys9wvJrjg5TxfcWmNTzVDwG/ztiyQ3NzI3 VPcTqhgHM9zBhYtvEL271+W/mfVIyszRlTjyjAX9HN+4zAkw7GC985n7PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFpG5ijsjoRx8XLWpSM8Kih8wSU+MB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvV2tibUtPeU9oSEh4Y3RhbEl6d3FLSHpCSlQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP8ZMA0G CSqGSIb3DQEBCwUAA4IBAQALMMhRjfV+S13R3BRqLtNdF2dPmj/Aav4mRmW5S/7d L7ichiiubXupyeKZtgzjFe6hoxI5eNQCY1sZaY9UbV9MXqAXvK1LzyCGzqVL9aM5 R/t0rSzKFrkdYpVnduKy4duEe4cgf7oTVbqtGduuIB1nlRfT0678xIDfvNQUd5B/ Y43MXv/sjyL9A0FP301qhUHoX3i9sqbV6U0dDMSp65cTmnN04YAg4l+TkEjkC9FN G2qrN+FFm1UjdyKij+qe2n29Yn9H91/FZWiyEzbmuxwHnkiC/Dv597FvXnykaXgS B5dPWYXMH46CU2sEZFctrNhZiJsilMgdKynGkPunQYH+ -----END CERTIFICATE-----Generated at Fri Dec 19 19:35:03 2025 by rpki-client