This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/WNJwEp62ayBRIXUeKb2lAvTZ6I4.roa File: WNJwEp62ayBRIXUeKb2lAvTZ6I4.roa (raw, json) Hash identifier: qXdS2wsprrR8ZddnnSOn1BHT93AaaWifFMzGd1dIUbg= Subject key identifier: 58:D2:70:12:9E:B6:6B:20:51:21:75:1E:29:BD:A5:02:F4:D9:E8:8E Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Certificate serial: 019B7CEE11AC074630F15B9CB567EB979C2A Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/WNJwEp62ayBRIXUeKb2lAvTZ6I4.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 31.14.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:11:ac:07:46:30:f1:5b:9c:b5:67:eb:97:9c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58d270129eb66b205121751e29bda502f4d9e88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9b:33:7a:52:61:31:89:5c:43:79:ef:89:c3: 0f:f0:5c:60:10:93:87:fe:80:04:22:a2:ec:6c:05: 09:80:c5:ed:a9:53:5a:3b:f8:04:62:60:b5:69:55: 42:be:55:12:02:53:5e:dc:05:8e:60:e5:93:d6:7d: 7d:6c:56:53:f6:04:f7:dd:ec:01:fd:e7:5b:92:87: b2:31:0c:10:f7:27:4a:ea:7e:63:ad:29:c2:aa:e7: f0:5e:bb:d2:dd:71:e8:38:f4:ba:f3:11:6e:05:74: e0:8d:db:d5:f0:1f:4b:d1:a8:4d:3f:4f:74:90:b8: e1:ff:45:db:77:83:5c:ab:2a:49:c2:a9:ff:16:43: aa:fa:38:2f:a5:45:b8:82:4f:fa:0a:e4:ac:cd:9a: 99:12:51:af:b9:ce:ab:21:d8:50:0e:8c:65:6e:7b: 25:35:df:33:be:98:98:46:fa:b6:b7:30:5e:f8:4a: 02:eb:4c:2a:cb:0d:d1:e4:f0:3d:82:b8:18:3a:0b: a0:63:b3:8d:1c:f1:f5:ff:e4:06:98:5e:77:18:2a: 20:5d:0a:d2:b9:2b:d0:ef:7d:74:9b:34:83:0e:72: dc:58:d7:3e:6f:b2:38:a8:30:26:2a:1d:41:a9:32: 2c:4f:bf:dd:f6:05:e7:5c:05:6a:42:c7:a7:64:56: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D2:70:12:9E:B6:6B:20:51:21:75:1E:29:BD:A5:02:F4:D9:E8:8E X509v3 Authority Key Identifier: keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/WNJwEp62ayBRIXUeKb2lAvTZ6I4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.75.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:58:e8:f1:03:4a:b7:87:da:7c:68:a1:8f:7c:b7:db:f3:a3: b3:77:2f:1f:bc:a8:10:e9:d4:74:0d:19:d7:55:ca:36:20:9f: 25:cc:50:13:72:13:8a:da:ed:3d:b4:86:a1:c5:3e:5e:7b:c6: 92:6e:d2:9b:4d:ed:a4:2e:ac:2f:69:f0:10:69:b5:cf:fa:6e: ae:8c:1a:d4:dd:60:d5:65:20:96:ac:f8:ff:cb:83:74:d3:3e: 55:1e:28:75:0b:68:da:61:15:71:02:54:76:38:d4:27:b6:f9: a6:a1:21:ec:8d:b4:84:55:5d:ec:09:cd:dd:e6:7b:e7:40:a2: ed:bc:a3:21:89:a0:20:92:bb:4b:77:1e:15:ba:ac:f8:f4:81: 76:41:99:0b:24:d6:ff:50:f2:5c:3f:c6:6a:bc:d4:5c:35:b0: 8e:fb:4c:65:61:11:f2:b0:d4:c3:c8:4c:6f:40:02:c4:fb:11: 7d:3c:98:70:02:28:b2:47:b0:4a:bd:4e:31:29:31:a4:b4:d2: 95:3a:31:f5:4a:f3:bd:fc:81:7f:ec:22:91:99:71:c0:5e:39: 21:68:dd:01:9f:37:c2:0b:6a:fc:4d:96:8f:02:60:ab:c7:4f: 89:18:60:4d:29:72:c8:ba:64:1a:aa:96:8f:0e:32:4c:15:42: ad:10:50:07 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87hGsB0Yw8VuctWfrl5wqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjczYzVjMGYzYTEwNmE4YmE3ZGZmM2UzNWM4MTZkMTA3 OGRjNzEwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGQyNzAxMjllYjY2YjIwNTEyMTc1MWUyOWJkYTUwMmY0ZDllODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZszelJhMYlcQ3nvicMP8FxgEJOH /oAEIqLsbAUJgMXtqVNaO/gEYmC1aVVCvlUSAlNe3AWOYOWT1n19bFZT9gT33ewB /edbkoeyMQwQ9ydK6n5jrSnCqufwXrvS3XHoOPS68xFuBXTgjdvV8B9L0ahNP090 kLjh/0Xbd4NcqypJwqn/FkOq+jgvpUW4gk/6CuSszZqZElGvuc6rIdhQDoxlbnsl Nd8zvpiYRvq2tzBe+EoC60wqyw3R5PA9grgYOgugY7ONHPH1/+QGmF53GCogXQrS uSvQ7310mzSDDnLcWNc+b7I4qDAmKh1BqTIsT7/d9gXnXAVqQsenZFYr+wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFjScBKetmsgUSF1Him9pQL02eiOMB8GA1UdIwQY MBaAFPj3PFwPOhBqi6ff8+NcgW0QeNxxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QYzhYQTg2RUdxTHA5X3o0MXlCYlJCNDNIRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhi LTZkOGZkMzMwZTlhYS8xL1dOSndFcDYyYXlCUklYVWVLYjJsQXZUWjZJNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhiLTZkOGZkMzMwZTlh YS8xLzEtUGM4WEE4NkVHcUxwOV96NDF5QmJSQjQzSEUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfDksw DQYJKoZIhvcNAQELBQADggEBAIpY6PEDSreH2nxooY98t9vzo7N3Lx+8qBDp1HQN GddVyjYgnyXMUBNyE4ra7T20hqHFPl57xpJu0ptN7aQurC9p8BBptc/6bq6MGtTd YNVlIJas+P/Lg3TTPlUeKHULaNphFXECVHY41Ce2+aahIeyNtIRVXewJzd3me+dA ou28oyGJoCCSu0t3HhW6rPj0gXZBmQsk1v9Q8lw/xmq81Fw1sI77TGVhEfKw1MPI TG9AAsT7EX08mHACKLJHsEq9TjEpMaS00pU6MfVK8738gX/sIpGZccBeOSFo3QGf N8ILavxNlo8CYKvHT4kYYE0pcsi6ZBqqlo8OMkwVQq0QUAc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:36 2026 by rpki-client