This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/WCcuNm1t7mDf70aRY_yE4DYEFqk.roa File: WCcuNm1t7mDf70aRY_yE4DYEFqk.roa (raw, json) Hash identifier: 4fPNcGaiVXP6fwRQDiv6V6Q2WCKkTwDmgre3GMTPWxg= Subject key identifier: 58:27:2E:36:6D:6D:EE:60:DF:EF:46:91:63:FC:84:E0:36:04:16:A9 Certificate issuer: /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4 Certificate serial: 019B79ED30BE6E0A9D9CF5FA55D6C270F018 Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/WCcuNm1t7mDf70aRY_yE4DYEFqk.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 31.25.12.0/24 maxlen: 24 31.25.13.0/24 maxlen: 24 31.25.14.0/24 maxlen: 24 185.197.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:30:be:6e:0a:9d:9c:f5:fa:55:d6:c2:70:f0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58272e366d6dee60dfef469163fc84e0360416a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:fb:09:50:e5:c9:40:ea:81:a0:d2:0f:82: 3a:78:8e:33:af:8f:3d:5c:5b:ae:58:83:74:d4:11: 1b:3c:bb:3e:01:2d:b6:01:80:43:88:70:73:ea:ed: b4:af:0b:ba:5a:2a:d0:bb:26:77:5b:4a:d0:f6:77: 32:13:40:f0:f4:01:36:43:ee:22:0a:8d:83:83:3e: d1:c9:21:72:a8:86:0f:51:54:60:6b:9e:37:6e:5d: f5:36:53:b7:00:ca:1b:0e:4a:7b:40:ec:0e:54:ce: a2:9c:89:fb:70:49:2f:99:2b:81:61:c3:0f:17:a5: 93:41:18:d7:fc:98:7b:03:f1:e9:52:53:54:64:c3: 4a:c5:9c:0d:14:f7:9d:01:1e:ea:e7:02:b2:20:2f: 22:47:c9:a1:57:ff:b3:a7:33:c6:d4:0c:f0:c7:34: cb:65:d6:75:a2:8b:a5:72:44:91:01:ef:97:4e:a5: a7:3e:e5:76:bb:f5:ae:cf:02:69:02:00:18:8c:4b: 71:e2:2a:b8:3c:4f:dd:d2:c5:ff:7c:64:c5:79:a6: b9:a8:ac:e0:c3:ec:36:31:00:d2:57:7c:dc:cf:c2: e1:b7:d1:c5:a5:78:0a:9e:33:29:ad:29:ab:5b:e0: 24:d6:d5:b3:ee:b9:30:90:c5:ce:51:5b:1d:6a:b3: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:27:2E:36:6D:6D:EE:60:DF:EF:46:91:63:FC:84:E0:36:04:16:A9 X509v3 Authority Key Identifier: keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/WCcuNm1t7mDf70aRY_yE4DYEFqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.12.0-31.25.14.255 185.197.148.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:9b:63:13:8a:aa:b1:f5:96:8f:2f:b2:5f:46:54:2e:52:2f: 18:5c:f0:80:8b:11:6f:76:d3:2b:fb:9a:84:48:53:eb:b2:e6: e5:aa:b7:f3:88:24:67:6f:9d:df:17:26:66:eb:61:27:e7:20: 0e:75:f4:2b:e8:d4:7f:48:75:d3:13:74:a2:c4:a8:ca:76:f5: 55:fc:f3:a3:e5:67:e4:34:ff:21:74:49:de:48:33:23:e9:7e: c2:24:42:82:08:db:88:5f:77:ea:0f:a0:f3:6d:a9:d3:dc:77: 47:a9:04:e9:4a:ec:ea:3a:01:9a:a7:b2:1f:ba:47:66:b9:2a: d1:35:4f:80:eb:0b:78:b1:6c:a6:ba:89:08:4a:85:9c:2e:73: 71:bb:9a:2c:2d:46:46:f6:aa:75:a9:7a:2d:4d:fa:9f:94:67: cf:d9:71:da:22:fc:39:67:fd:16:31:cb:40:94:69:ed:45:0b: ee:05:f8:0e:9d:8c:a5:05:cb:4e:36:43:cc:bc:34:93:e5:c5: 37:84:f9:94:c8:59:ab:aa:a0:29:1e:9c:7d:9c:68:ef:ea:04: dd:6a:e9:3b:e1:9f:52:b0:64:01:42:6d:e0:3a:96:0c:00:36: 9c:83:4d:c3:79:76:db:6d:23:34:bc:97:28:a6:8d:50:3b:52: 83:e2:b3:c1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt57TC+bgqdnPX6VdbCcPAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZWMxYTBlNjRlYTg0YjY5YTQwN2NmM2YyYTkyNTM4OGFi NGVjYjQwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODI3MmUzNjZkNmRlZTYwZGZlZjQ2OTE2M2ZjODRlMDM2MDQxNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0n7CVDlyUDqgaDSD4I6eI4zr489 XFuuWIN01BEbPLs+AS22AYBDiHBz6u20rwu6WirQuyZ3W0rQ9ncyE0Dw9AE2Q+4i Co2Dgz7RySFyqIYPUVRga543bl31NlO3AMobDkp7QOwOVM6inIn7cEkvmSuBYcMP F6WTQRjX/Jh7A/HpUlNUZMNKxZwNFPedAR7q5wKyIC8iR8mhV/+zpzPG1AzwxzTL ZdZ1ooulckSRAe+XTqWnPuV2u/WuzwJpAgAYjEtx4iq4PE/d0sX/fGTFeaa5qKzg w+w2MQDSV3zcz8Lht9HFpXgKnjMprSmrW+Ak1tWz7rkwkMXOUVsdarMq/wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFgnLjZtbe5g3+9GkWP8hOA2BBapMB8GA1UdIwQY MBaAFBHsGg5k6oS2mkB88/KpJTiKtOy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDkt ODMwMmVkODUwYzg3LzEvV0NjdU5tMXQ3bURmNzBhUllfeUU0RFlFRnFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDktODMwMmVkODUwYzg3 LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAIfGQwD BAAfGQ4DBAC5xZQwDQYJKoZIhvcNAQELBQADggEBAI+bYxOKqrH1lo8vsl9GVC5S Lxhc8ICLEW920yv7moRIU+uy5uWqt/OIJGdvnd8XJmbrYSfnIA519Cvo1H9IddMT dKLEqMp29VX886PlZ+Q0/yF0Sd5IMyPpfsIkQoII24hfd+oPoPNtqdPcd0epBOlK 7Oo6AZqnsh+6R2a5KtE1T4DrC3ixbKa6iQhKhZwuc3G7miwtRkb2qnWpei1N+p+U Z8/Zcdoi/Dln/RYxy0CUae1FC+4F+A6djKUFy042Q8y8NJPlxTeE+ZTIWauqoCke nH2caO/qBN1q6Tvhn1KwZAFCbeA6lgwANpyDTcN5dtttIzS8lyimjVA7UoPis8E= -----END CERTIFICATE-----Generated at Sat Jan 3 04:13:11 2026 by rpki-client