This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/wOQLTyNlgBk7kHZo7q30HbmjjsY.roa File: wOQLTyNlgBk7kHZo7q30HbmjjsY.roa (raw, json) Hash identifier: O4xN+z+lCTMoO1c7Ks6bcLVzrUBSXozi3e98+4QxAps= Subject key identifier: C0:E4:0B:4F:23:65:80:19:3B:90:76:68:EE:AD:F4:1D:B9:A3:8E:C6 Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f Certificate serial: 019B11FCD66857CA763820EBCE0236A205D2 Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/wOQLTyNlgBk7kHZo7q30HbmjjsY.roa Signing time: Fri 12 Dec 2025 09:55:41 +0000 ROA not before: Fri 12 Dec 2025 09:55:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31317 IP address blocks: 31.209.160.0/20 maxlen: 20 46.253.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:fc:d6:68:57:ca:76:38:20:eb:ce:02:36:a2:05:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f Validity Not Before: Dec 12 09:55:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0e40b4f236580193b907668eeadf41db9a38ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:6e:b3:ca:67:ff:d9:8a:c3:1b:f1:d2:38: b0:23:7c:cf:36:49:7b:59:96:4c:09:f0:71:b3:23: b5:18:a3:4a:2f:1b:fe:a2:48:97:a6:7a:12:5f:49: 5c:8f:38:c8:56:3a:0e:be:82:e8:14:a5:85:97:93: 60:09:20:d7:34:bc:d6:1b:21:6c:66:77:31:d8:2f: 8e:9a:e0:9c:a7:04:90:99:81:91:68:14:de:88:40: d3:bc:c4:8c:b4:30:fb:b8:a8:3e:06:31:c2:b0:b4: be:36:f5:b2:27:db:c4:cf:df:0b:d9:ca:66:2d:73: 8e:5f:cd:24:d0:16:eb:5f:2a:a3:dd:c8:ff:93:3e: 69:ac:7e:ed:88:02:d9:1c:49:d8:c4:ab:cf:ee:22: c9:a8:3f:f4:f7:48:29:ee:c3:b6:06:b6:5e:cc:1c: 25:eb:48:7f:22:7b:5f:54:18:e7:d7:c5:27:8e:aa: 02:8d:1c:42:b9:95:4e:57:20:46:b0:e6:33:5c:d8: 54:f2:00:6e:11:aa:fc:3e:81:33:72:36:01:2c:bf: da:1d:62:98:19:c8:f0:b0:07:9d:cb:4b:b6:5d:f7: f3:32:ce:84:e0:41:53:ac:4b:90:ea:17:b9:55:9d: d7:67:db:00:3d:0a:87:12:8b:3f:3a:20:a4:99:3e: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E4:0B:4F:23:65:80:19:3B:90:76:68:EE:AD:F4:1D:B9:A3:8E:C6 X509v3 Authority Key Identifier: keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/wOQLTyNlgBk7kHZo7q30HbmjjsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.209.160.0/20 46.253.64.0/20 Signature Algorithm: sha256WithRSAEncryption 38:0e:79:86:e8:cd:f4:b6:f4:90:61:69:b0:ac:e8:50:07:4c: d5:47:3f:a1:35:03:98:02:c2:dd:94:09:70:07:48:61:8b:2c: 19:31:fb:f4:7f:72:97:b8:b0:9d:7a:de:83:0c:99:13:7b:32: 68:4c:21:36:cd:77:fa:46:cc:9e:67:77:2b:04:d5:40:95:bd: 07:dd:22:07:f6:e4:94:e7:73:77:95:56:97:c5:1d:c9:b9:f2: a7:7b:8d:86:12:20:9a:cc:2b:65:b3:3a:e5:c1:95:43:53:6e: f3:2b:4b:75:df:59:fe:37:39:11:fd:dd:51:f4:1d:d5:9c:81: 52:61:a3:ff:94:af:91:ba:88:7f:c3:8d:f3:81:d7:fc:67:a1: c5:bf:52:7f:3b:6d:35:77:ee:95:e5:2a:2a:43:c1:96:79:d6: af:31:6c:ec:f4:46:ff:fa:6d:ae:7f:2a:3a:d6:bb:61:bb:4b: bd:3f:14:ef:78:50:e7:a6:f0:e5:a0:b0:2d:90:3e:53:ef:5f: 05:f4:4e:01:c0:de:d1:14:c9:11:52:7b:b0:a0:f9:9d:76:22: 44:27:2c:c3:de:8b:04:26:d1:02:c3:93:ad:51:11:3f:aa:db: 34:23:d5:86:81:14:9d:2d:70:33:b4:e1:d8:53:86:de:f5:ea: 75:59:29:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsR/NZoV8p2OCDrzgI2ogXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmMyODZhOGRiNGJkMjE2YmY2NGM3NWIzMzg1MWIwMDQ1 YTE3NWYwHhcNMjUxMjEyMDk1NTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGU0MGI0ZjIzNjU4MDE5M2I5MDc2NjhlZWFkZjQxZGI5YTM4ZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUVus8pn/9mKwxvx0jiwI3zPNkl7 WZZMCfBxsyO1GKNKLxv+okiXpnoSX0lcjzjIVjoOvoLoFKWFl5NgCSDXNLzWGyFs Zncx2C+OmuCcpwSQmYGRaBTeiEDTvMSMtDD7uKg+BjHCsLS+NvWyJ9vEz98L2cpm LXOOX80k0BbrXyqj3cj/kz5prH7tiALZHEnYxKvP7iLJqD/090gp7sO2BrZezBwl 60h/IntfVBjn18UnjqoCjRxCuZVOVyBGsOYzXNhU8gBuEar8PoEzcjYBLL/aHWKY GcjwsAedy0u2XffzMs6E4EFTrEuQ6he5VZ3XZ9sAPQqHEos/OiCkmT4zQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMDkC08jZYAZO5B2aO6t9B25o47GMB8GA1UdIwQY MBaAFMVsKGqNtL0ha/ZMdbM4UbAEWhdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85YzA5MTMtMDMwMS00YWQ0LWI5Mzkt ODEzNDliMDJhMmQ5LzEvd09RTFR5TmxnQms3a0habzdxMzBIYm1qanNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85YzA5MTMtMDMwMS00YWQ0LWI5MzktODEzNDliMDJhMmQ5 LzEveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEH9GgAwQE Lv1AMA0GCSqGSIb3DQEBCwUAA4IBAQA4DnmG6M30tvSQYWmwrOhQB0zVRz+hNQOY AsLdlAlwB0hhiywZMfv0f3KXuLCdet6DDJkTezJoTCE2zXf6RsyeZ3crBNVAlb0H 3SIH9uSU53N3lVaXxR3JufKne42GEiCazCtlszrlwZVDU27zK0t131n+NzkR/d1R 9B3VnIFSYaP/lK+Ruoh/w43zgdf8Z6HFv1J/O201d+6V5SoqQ8GWedavMWzs9Eb/ +m2ufyo61rthu0u9PxTveFDnpvDloLAtkD5T718F9E4BwN7RFMkRUnuwoPmddiJE JyzD3osEJtECw5OtURE/qts0I9WGgRSdLXAztOHYU4be9ep1WSmv -----END CERTIFICATE-----Generated at Sat Dec 20 13:43:05 2025 by rpki-client