This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/WIQ88PUyl0Wn69b9mzqB92sF45M.roa File: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (raw, json) Hash identifier: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs= Subject key identifier: 58:84:3C:F0:F5:32:97:45:A7:EB:D6:FD:9B:3A:81:F7:6B:05:E3:93 Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Certificate serial: 019B7CED9EE0951C06B93340492448DB4BCC Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/WIQ88PUyl0Wn69b9mzqB92sF45M.roa Signing time: Fri 02 Jan 2026 04:18:26 +0000 ROA not before: Fri 02 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209076 IP address blocks: 37.34.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9e:e0:95:1c:06:b9:33:40:49:24:48:db:4b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Validity Not Before: Jan 2 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58843cf0f5329745a7ebd6fd9b3a81f76b05e393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:c4:47:3f:2a:db:7a:8e:f0:32:51:d2:c5: d1:5a:e3:33:c0:9c:5d:28:1d:a3:8c:b9:8a:08:f4: 40:b7:22:61:74:4b:3c:97:cf:46:44:68:c8:b0:39: ea:45:89:b3:ff:34:3a:39:c7:a6:a2:75:cc:d5:fc: 89:f2:f0:6f:86:28:e6:82:f1:76:d4:58:2e:04:d0: f2:19:f6:11:39:e7:51:cf:10:06:85:3a:6c:fc:b9: 1a:f1:f0:24:70:2d:9c:7c:21:7a:3d:aa:d4:bf:fa: bf:9a:73:3b:3a:81:7e:34:6e:9b:55:6b:91:11:8c: fd:f4:22:8c:0e:ea:11:cb:90:e6:d1:9d:6a:90:b9: b6:fc:a0:39:32:2d:1a:66:84:1d:1d:63:49:18:54: d2:85:b2:54:99:c5:21:f2:8c:22:11:e9:72:88:b3: 01:68:56:77:75:69:09:93:83:e2:d1:21:c1:77:d4: ee:cc:65:b7:ee:15:0b:1a:4e:f3:ab:20:29:62:dc: ee:2a:4f:dd:db:80:6c:df:cd:45:4c:45:79:34:3c: 84:b1:a5:28:a9:e2:54:e6:be:91:f7:13:87:1e:95: b7:e0:07:d5:f6:6e:00:e6:50:e7:91:cd:18:12:02: 9c:72:71:e3:38:2a:7e:f5:82:c5:cf:94:27:09:64: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:84:3C:F0:F5:32:97:45:A7:EB:D6:FD:9B:3A:81:F7:6B:05:E3:93 X509v3 Authority Key Identifier: keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/WIQ88PUyl0Wn69b9mzqB92sF45M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.34.75.0/24 Signature Algorithm: sha256WithRSAEncryption 08:3b:3d:62:d3:27:b2:94:8f:66:62:7c:9e:9f:11:39:b2:be: 33:8a:ff:1e:5d:a8:75:2a:b3:c3:0a:17:99:86:4d:c1:36:87: 4b:0e:99:94:db:f0:c6:3a:1c:eb:12:63:25:b4:9b:5b:5d:51: 9b:7b:33:9c:d5:7c:fa:a4:23:88:29:27:ba:7b:d1:c1:98:07: 1e:dc:33:5a:e0:fe:cb:5c:56:69:42:e9:3e:ea:1c:9f:04:e5: 75:23:12:e3:e4:81:98:16:b5:16:59:b0:5b:2c:6e:8d:21:4a: 64:5a:2f:4a:1d:58:ae:82:97:25:76:68:1b:76:84:8d:47:36: 23:32:b7:cb:34:a4:34:c8:98:f8:8b:e5:a5:db:72:fc:78:e9: 85:05:75:c4:f0:dc:ed:db:21:3b:7a:30:e3:17:00:46:7a:aa: e8:09:45:09:c8:b4:3e:c0:cf:89:8d:c8:24:ed:1a:2f:1e:6d: 8c:21:2c:3e:bf:b8:11:a5:1e:86:37:58:7d:18:12:2a:df:44: 53:01:bc:ab:49:1d:0f:42:c8:fe:4d:6d:09:d7:87:7b:95:95: 7a:26:dc:a3:b6:6a:68:02:1c:09:bb:0d:04:ff:ee:38:f4:cb: be:60:6b:b0:31:d3:9f:a3:e7:2b:7c:ae:36:24:7f:90:60:be: 3a:24:7f:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Z7glRwGuTNASSRI20vMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDkxYmRjNjY2YjhhNTk0MzNjNjhkOTBlMGQ4Y2MzN2Fj ZGNlOTIwHhcNMjYwMTAyMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODg0M2NmMGY1MzI5NzQ1YTdlYmQ2ZmQ5YjNhODFmNzZiMDVlMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvrERz8q23qO8DJR0sXRWuMzwJxd KB2jjLmKCPRAtyJhdEs8l89GRGjIsDnqRYmz/zQ6OcemonXM1fyJ8vBvhijmgvF2 1FguBNDyGfYROedRzxAGhTps/Lka8fAkcC2cfCF6ParUv/q/mnM7OoF+NG6bVWuR EYz99CKMDuoRy5Dm0Z1qkLm2/KA5Mi0aZoQdHWNJGFTShbJUmcUh8owiEelyiLMB aFZ3dWkJk4Pi0SHBd9TuzGW37hULGk7zqyApYtzuKk/d24Bs381FTEV5NDyEsaUo qeJU5r6R9xOHHpW34AfV9m4A5lDnkc0YEgKccnHjOCp+9YLFz5QnCWRsQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFiEPPD1MpdFp+vW/Zs6gfdrBeOTMB8GA1UdIwQY MBaAFA8JG9xma4pZQzxo2Q4NjMN6zc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjkt YTM0YThiODA2ODMyLzEvV0lRODhQVXlsMFduNjliOW16cUI5MnNGNDVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjktYTM0YThiODA2ODMy LzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJSJLMA0G CSqGSIb3DQEBCwUAA4IBAQAIOz1i0yeylI9mYnyenxE5sr4ziv8eXah1KrPDCheZ hk3BNodLDpmU2/DGOhzrEmMltJtbXVGbezOc1Xz6pCOIKSe6e9HBmAce3DNa4P7L XFZpQuk+6hyfBOV1IxLj5IGYFrUWWbBbLG6NIUpkWi9KHViugpcldmgbdoSNRzYj MrfLNKQ0yJj4i+Wl23L8eOmFBXXE8Nzt2yE7ejDjFwBGeqroCUUJyLQ+wM+Jjcgk 7RovHm2MISw+v7gRpR6GN1h9GBIq30RTAbyrSR0PQsj+TW0J14d7lZV6Jtyjtmpo AhwJuw0E/+449Mu+YGuwMdOfo+crfK42JH+QYL46JH9E -----END CERTIFICATE-----Generated at Mon Jan 26 01:25:10 2026 by rpki-client