This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/WPr7hmOS_5zgQSOkKpNrOBkQjP0.roa File: WPr7hmOS_5zgQSOkKpNrOBkQjP0.roa (raw, json) Hash identifier: zY6UwlQ/GxjFTntYJPN/sGqFKcDOf8d8m1v7xUcl1jY= Subject key identifier: 58:FA:FB:86:63:92:FF:9C:E0:41:23:A4:2A:93:6B:38:19:10:8C:FD Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380 Certificate serial: 019B77593911AD0F2BA15995F60532731F6A Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/WPr7hmOS_5zgQSOkKpNrOBkQjP0.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49158 IP address blocks: 212.9.96.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:39:11:ad:0f:2b:a1:59:95:f6:05:32:73:1f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58fafb866392ff9ce04123a42a936b3819108cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:d2:8e:46:c2:0e:86:7d:6a:f1:8a:b5:28: f1:d1:97:56:b3:4d:2c:19:3f:11:62:48:77:2d:86: 5e:f3:b0:40:55:fd:8a:98:3c:03:82:4c:01:a6:fa: a1:73:04:98:cb:bb:af:6f:df:59:44:dd:5a:69:a1: 6d:fe:9f:64:f4:6a:77:69:ec:54:5a:a1:27:1d:32: a1:c1:ed:f0:c4:e1:ed:9e:bf:c3:c4:d5:f0:ac:2a: 1e:b8:e0:7c:89:c6:5b:7a:a3:25:b9:b9:b9:6c:73: 59:80:98:29:fe:5c:41:7b:5b:12:e1:82:d6:a5:23: 4d:cd:8e:e8:da:13:90:2f:cc:92:d2:e3:c9:3e:fb: be:cf:aa:7d:90:b8:0e:34:dc:fa:91:60:24:24:10: 72:8d:d0:29:29:a4:45:97:7c:c0:7e:36:67:92:6a: 62:01:61:d2:36:15:43:a4:54:a9:d7:61:76:52:b0: c8:d0:e1:ad:65:d6:d1:93:f2:08:06:4a:01:10:5e: a9:b1:b6:fd:92:7d:33:07:1e:72:2c:4e:d1:af:e8: 4f:df:c1:3f:57:b2:e1:ca:5d:27:06:50:2f:14:93: 00:ff:86:e3:36:32:5f:98:4e:1e:36:0a:ce:31:18: 56:9f:b0:ea:41:6d:a4:32:81:02:07:3f:77:d0:04: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FA:FB:86:63:92:FF:9C:E0:41:23:A4:2A:93:6B:38:19:10:8C:FD X509v3 Authority Key Identifier: keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/WPr7hmOS_5zgQSOkKpNrOBkQjP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.9.96.0/19 Signature Algorithm: sha256WithRSAEncryption 21:ca:45:8d:4c:86:12:6b:b9:30:66:ca:7f:dc:bf:24:93:af: 4f:67:1e:bb:fe:4a:e5:9f:d0:b3:d3:05:c0:d4:8f:d7:2f:df: 1c:c8:05:81:3f:76:96:46:50:37:8a:c8:bd:3e:05:5c:5f:c4: c1:c5:53:70:10:d8:2b:ed:81:96:5f:07:60:13:e0:db:4b:0d: 37:c3:4a:50:4e:25:9f:62:3f:9f:5a:4b:ea:1e:fe:cf:89:e5: 98:24:41:c9:4a:c5:7b:8b:cd:fc:d5:ed:c0:8f:a2:8e:2b:a3: a9:4f:02:21:21:43:75:4d:16:cf:cb:6c:15:b7:22:a8:61:0b: 2c:ba:9d:18:cf:92:c7:ac:d5:5e:6a:98:47:ba:a0:1e:76:ba: 28:11:24:fb:4e:64:ae:51:f6:09:94:21:f4:64:d1:0d:df:94: 52:82:e1:cf:75:c5:b4:6d:15:61:db:a3:6b:88:9d:64:a8:af: ed:35:40:b0:7e:fc:6c:9a:3d:d9:4f:0e:95:76:74:57:a6:1f: 3d:8f:46:25:5d:56:cf:da:a5:41:25:4d:fe:79:75:18:45:3c: b2:18:58:e3:62:a6:28:8d:35:28:fb:4f:bc:d7:2a:cf:3c:d8: 5a:6b:ed:b5:69:39:8e:d1:85:89:45:23:25:99:a2:db:3a:b7: 88:50:51:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTkRrQ8roVmV9gUycx9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm ZjQzODAwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGZhZmI4NjYzOTJmZjljZTA0MTIzYTQyYTkzNmIzODE5MTA4Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqvSjkbCDoZ9avGKtSjx0ZdWs00s GT8RYkh3LYZe87BAVf2KmDwDgkwBpvqhcwSYy7uvb99ZRN1aaaFt/p9k9Gp3aexU WqEnHTKhwe3wxOHtnr/DxNXwrCoeuOB8icZbeqMlubm5bHNZgJgp/lxBe1sS4YLW pSNNzY7o2hOQL8yS0uPJPvu+z6p9kLgONNz6kWAkJBByjdApKaRFl3zAfjZnkmpi AWHSNhVDpFSp12F2UrDI0OGtZdbRk/IIBkoBEF6psbb9kn0zBx5yLE7Rr+hP38E/ V7Lhyl0nBlAvFJMA/4bjNjJfmE4eNgrOMRhWn7DqQW2kMoECBz930AS4LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFj6+4Zjkv+c4EEjpCqTazgZEIz9MB8GA1UdIwQY MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt MDYzZmNkZDNhMDU3LzEvV1ByN2htT1NfNXpnUVNPa0twTnJPQmtRalAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3 LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1AlgMA0G CSqGSIb3DQEBCwUAA4IBAQAhykWNTIYSa7kwZsp/3L8kk69PZx67/krln9Cz0wXA 1I/XL98cyAWBP3aWRlA3isi9PgVcX8TBxVNwENgr7YGWXwdgE+DbSw03w0pQTiWf Yj+fWkvqHv7PieWYJEHJSsV7i8381e3Aj6KOK6OpTwIhIUN1TRbPy2wVtyKoYQss up0Yz5LHrNVeaphHuqAedrooEST7TmSuUfYJlCH0ZNEN35RSguHPdcW0bRVh26Nr iJ1kqK/tNUCwfvxsmj3ZTw6VdnRXph89j0YlXVbP2qVBJU3+eXUYRTyyGFjjYqYo jTUo+0+81yrPPNhaa+21aTmO0YWJRSMlmaLbOreIUFH/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:51 2026 by rpki-client