This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/wtrSWFMmc-qHzEWvf9Cv1EUBcdg.roa File: wtrSWFMmc-qHzEWvf9Cv1EUBcdg.roa (raw, json) Hash identifier: NkI4eJ+m8t9g8zspdgWjN+brolZtyYl6e2q5ivq3HCY= Subject key identifier: C2:DA:D2:58:53:26:73:EA:87:CC:45:AF:7F:D0:AF:D4:45:01:71:D8 Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B2D28D65D860A62D0E7B9C1315257BBE4 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/wtrSWFMmc-qHzEWvf9Cv1EUBcdg.roa Signing time: Wed 17 Dec 2025 16:33:29 +0000 ROA not before: Wed 17 Dec 2025 16:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 62.106.83.0/24 maxlen: 24 77.246.242.0/24 maxlen: 24 146.19.142.0/24 maxlen: 24 146.19.228.0/24 maxlen: 24 185.218.184.0/24 maxlen: 24 193.109.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:28:d6:5d:86:0a:62:d0:e7:b9:c1:31:52:57:bb:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Dec 17 16:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c2dad258532673ea87cc45af7fd0afd4450171d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:7d:60:38:a2:43:3a:07:62:1d:9a:ff:67: c2:3e:31:99:f8:00:7e:ac:3e:12:4b:50:cc:7c:3d: 17:5b:b1:18:dc:85:4e:28:5c:37:10:c9:b5:83:76: 4c:e1:52:72:39:29:a5:0a:0e:4f:4b:f8:48:e2:30: df:13:4d:d5:4c:95:42:03:a4:aa:d0:ed:a1:f8:49: b1:ec:09:72:ab:ff:44:51:3b:8e:8a:27:79:4f:53: 22:ad:ac:66:82:08:b8:33:49:6b:68:94:c1:34:4a: 5b:14:b2:d2:5a:5c:5f:50:39:a6:10:cb:e7:9f:58: 4c:39:16:ad:e2:aa:1c:cd:51:b7:c8:83:99:b0:8f: 8b:e3:85:13:79:07:c9:98:8d:b0:1e:f7:e0:01:20: dd:39:43:68:90:fa:55:6f:92:38:cf:7f:b4:34:30: 06:bf:75:be:ec:86:ad:6e:bd:76:75:ef:af:04:57: 49:08:da:60:23:7f:07:3b:f6:3b:40:6a:69:41:20: 1c:17:58:f3:15:dd:8c:6a:89:4a:f4:6f:3e:49:0d: 72:92:b8:47:5f:71:c0:bd:02:65:c2:a0:85:a1:64: c4:ba:35:ca:5e:a9:31:35:10:d8:12:cf:cb:a9:68: 6e:2e:34:0d:aa:1d:e5:4a:c8:ff:28:6b:00:fb:38: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DA:D2:58:53:26:73:EA:87:CC:45:AF:7F:D0:AF:D4:45:01:71:D8 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/wtrSWFMmc-qHzEWvf9Cv1EUBcdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.83.0/24 77.246.242.0/24 146.19.142.0/24 146.19.228.0/24 185.218.184.0/24 193.109.82.0/24 Signature Algorithm: sha256WithRSAEncryption 14:57:74:ba:48:f6:ac:e1:96:56:7f:1b:9d:a5:fd:64:39:c3: 99:e3:37:f1:09:34:61:d3:4b:2e:f7:32:10:2f:40:88:bb:71: a9:5d:36:96:9f:7c:6e:d9:ac:31:62:0b:ea:ba:00:86:79:9d: 48:2d:e2:c6:f1:6b:9b:27:18:fe:f6:0c:74:13:f7:cd:41:b5: a8:c2:5c:9f:54:5d:81:04:0e:a8:e0:57:68:8f:6e:cd:28:50: 36:5b:13:ee:5a:23:d0:5e:3c:31:3c:fe:72:9e:c5:8d:98:79: 0b:6b:65:9c:b4:d3:60:cf:b8:d9:95:43:9a:fc:60:6f:ec:38: 4c:16:ae:aa:7d:55:78:99:23:53:c3:f3:bd:45:1b:21:89:16: 6f:84:69:ea:96:af:d2:03:29:f8:32:92:bc:f2:a9:bc:cd:2e: da:19:4d:86:86:91:11:25:44:b8:04:33:a0:74:35:05:76:f4: 7f:c5:64:b6:68:c2:79:81:2e:95:7d:c6:cf:d3:f9:8d:5e:6a: c3:e8:ca:01:6d:2c:ec:30:21:fc:49:e7:c5:25:fe:26:3c:59: fa:5b:5f:7b:0c:29:52:a6:9a:d4:63:fd:27:d6:e5:f4:33:9c: aa:26:a6:fa:ce:98:ee:81:2f:fc:1a:42:4a:a0:41:a3:06:fa: 4c:ed:ff:5b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZstKNZdhgpi0Oe5wTFSV7vkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUxMjE3MTYzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmRhZDI1ODUzMjY3M2VhODdjYzQ1YWY3ZmQwYWZkNDQ1MDE3MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk99YDiiQzoHYh2a/2fCPjGZ+AB+ rD4SS1DMfD0XW7EY3IVOKFw3EMm1g3ZM4VJyOSmlCg5PS/hI4jDfE03VTJVCA6Sq 0O2h+Emx7Alyq/9EUTuOiid5T1Miraxmggi4M0lraJTBNEpbFLLSWlxfUDmmEMvn n1hMORat4qoczVG3yIOZsI+L44UTeQfJmI2wHvfgASDdOUNokPpVb5I4z3+0NDAG v3W+7Iatbr12de+vBFdJCNpgI38HO/Y7QGppQSAcF1jzFd2MaolK9G8+SQ1ykrhH X3HAvQJlwqCFoWTEujXKXqkxNRDYEs/LqWhuLjQNqh3lSsj/KGsA+zidkQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMLa0lhTJnPqh8xFr3/Qr9RFAXHYMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvd3RyU1dGTW1jLXFIekVXdmY5Q3YxRVVCY2RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAPmpTAwQA TfbyAwQAkhOOAwQAkhPkAwQAudq4AwQAwW1SMA0GCSqGSIb3DQEBCwUAA4IBAQAU V3S6SPas4ZZWfxudpf1kOcOZ4zfxCTRh00su9zIQL0CIu3GpXTaWn3xu2awxYgvq ugCGeZ1ILeLG8WubJxj+9gx0E/fNQbWowlyfVF2BBA6o4Fdoj27NKFA2WxPuWiPQ XjwxPP5ynsWNmHkLa2WctNNgz7jZlUOa/GBv7DhMFq6qfVV4mSNTw/O9RRshiRZv hGnqlq/SAyn4MpK88qm8zS7aGU2GhpERJUS4BDOgdDUFdvR/xWS2aMJ5gS6VfcbP 0/mNXmrD6MoBbSzsMCH8SefFJf4mPFn6W197DClSpprUY/0n1uX0M5yqJqb6zpju gS/8GkJKoEGjBvpM7f9b -----END CERTIFICATE-----Generated at Sat Dec 20 06:11:26 2025 by rpki-client