This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/wn83iLSE9WBjpaqkLj8JwBf0jfg.roa File: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (raw, json) Hash identifier: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y= Subject key identifier: C2:7F:37:88:B4:84:F5:60:63:A5:AA:A4:2E:3F:09:C0:17:F4:8D:F8 Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F8422D5306BC29B46577662E338C919 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/wn83iLSE9WBjpaqkLj8JwBf0jfg.roa Signing time: Fri 02 Jan 2026 16:22:04 +0000 ROA not before: Fri 02 Jan 2026 16:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50926 IP address blocks: 217.130.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:22:d5:30:6b:c2:9b:46:57:76:62:e3:38:c9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c27f3788b484f56063a5aaa42e3f09c017f48df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:52:26:00:8b:55:b1:13:e5:51:af:99:a9:57: 74:d9:65:98:e5:0c:b7:57:b3:c2:87:30:73:b5:62: a2:38:bf:a7:f6:69:ab:d0:8a:07:b1:6e:7a:c5:f3: c8:5e:ab:cb:06:e1:11:f2:2a:5b:01:0d:39:cc:35: 3a:9f:cf:b8:d9:3c:9e:6e:63:0d:0a:f8:d9:7c:7b: 82:a2:ad:9a:58:0f:08:94:85:74:2a:0e:08:c7:b7: 3a:13:11:49:1c:68:36:cb:aa:81:74:ab:2a:37:18: b9:80:6a:a5:ac:9e:3c:5f:14:27:93:b1:72:92:2f: bd:08:ae:03:0f:49:50:a8:33:ee:99:31:cf:59:71: d3:65:96:dd:6f:5e:41:4a:0e:01:83:b1:c1:17:4b: 6b:2a:39:34:3a:79:1b:8b:6e:90:e8:06:4f:85:e1: fa:fd:52:c8:93:6e:75:10:bc:4a:d2:9c:8d:7c:c0: 78:f3:52:b1:90:58:b9:96:92:a9:7a:91:c4:41:f0: 94:75:c3:50:db:de:15:38:67:0f:10:df:5f:e8:f9: a0:06:7c:f2:92:a9:f1:dd:91:14:a3:1f:e5:4e:47: a9:91:70:c1:e4:06:fd:25:0e:63:d0:4b:bc:f6:a4: 06:3c:f7:bb:a6:5e:f3:cd:85:bf:84:03:34:c6:6e: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7F:37:88:B4:84:F5:60:63:A5:AA:A4:2E:3F:09:C0:17:F4:8D:F8 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/wn83iLSE9WBjpaqkLj8JwBf0jfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.130.244.0/24 Signature Algorithm: sha256WithRSAEncryption 87:48:b2:14:4b:ec:c4:c6:89:87:b0:59:2b:16:83:f6:69:83: 18:be:43:62:eb:17:57:19:69:0d:22:de:99:df:8d:45:a4:99: e4:a8:9a:95:f2:e8:e1:ad:a2:02:95:d0:f1:52:9c:3b:f9:15: 6d:51:05:19:82:ee:f1:ec:cc:45:dd:10:97:28:de:08:a0:00: 36:57:83:b8:96:f7:ea:c1:23:04:28:89:e0:c6:ff:6b:30:5e: 85:69:f8:cd:57:82:8d:d7:61:69:09:fe:72:a8:0c:3a:b2:a3: 45:a2:f3:9d:50:41:7f:d7:23:7c:28:b5:da:fc:14:1e:1d:bf: 48:fd:e5:0d:60:96:e2:d4:ad:ec:85:a5:75:5a:80:95:23:59: b4:f2:78:4d:b2:d1:b1:fd:9c:f1:85:cd:6b:4d:55:33:b9:f6: 6c:55:94:2e:04:04:20:b9:fa:a4:59:c6:6b:64:40:2d:82:5d: 03:81:4a:ec:8c:2c:81:25:c6:5c:73:73:44:13:ea:b6:e1:96: 7d:be:e8:5f:c8:e4:c1:0a:b5:7b:b3:27:0b:00:5b:82:d2:5f: c5:45:62:54:c4:7c:0b:f8:b4:ae:b8:62:13:ef:93:ed:7a:7b: 4d:c2:d0:bc:6f:49:e5:69:7c:c8:7b:13:e2:31:8b:e0:78:7f: 9d:2b:1a:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hCLVMGvCm0ZXdmLjOMkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjdmMzc4OGI0ODRmNTYwNjNhNWFhYTQyZTNmMDljMDE3ZjQ4ZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VImAItVsRPlUa+ZqVd02WWY5Qy3 V7PChzBztWKiOL+n9mmr0IoHsW56xfPIXqvLBuER8ipbAQ05zDU6n8+42TyebmMN CvjZfHuCoq2aWA8IlIV0Kg4Ix7c6ExFJHGg2y6qBdKsqNxi5gGqlrJ48XxQnk7Fy ki+9CK4DD0lQqDPumTHPWXHTZZbdb15BSg4Bg7HBF0trKjk0Onkbi26Q6AZPheH6 /VLIk251ELxK0pyNfMB481KxkFi5lpKpepHEQfCUdcNQ294VOGcPEN9f6PmgBnzy kqnx3ZEUox/lTkepkXDB5Ab9JQ5j0Eu89qQGPPe7pl7zzYW/hAM0xm5O/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJ/N4i0hPVgY6WqpC4/CcAX9I34MB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvd244M2lMU0U5V0JqcGFxa0xqOEp3QmYwamZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2YL0MA0G CSqGSIb3DQEBCwUAA4IBAQCHSLIUS+zExomHsFkrFoP2aYMYvkNi6xdXGWkNIt6Z 341FpJnkqJqV8ujhraICldDxUpw7+RVtUQUZgu7x7MxF3RCXKN4IoAA2V4O4lvfq wSMEKIngxv9rMF6FafjNV4KN12FpCf5yqAw6sqNFovOdUEF/1yN8KLXa/BQeHb9I /eUNYJbi1K3shaV1WoCVI1m08nhNstGx/Zzxhc1rTVUzufZsVZQuBAQgufqkWcZr ZEAtgl0DgUrsjCyBJcZcc3NEE+q24ZZ9vuhfyOTBCrV7sycLAFuC0l/FRWJUxHwL +LSuuGIT75PtentNwtC8b0nlaXzIexPiMYvgeH+dKxp9 -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:12 2026 by rpki-client