This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/WS24_ZfdS-p841fXys78kKEcHFE.roa File: WS24_ZfdS-p841fXys78kKEcHFE.roa (raw, json) Hash identifier: mdNWTDkBQ1LOAKpfMoKowipt1skh6RMzRxFFxzvaz1g= Subject key identifier: 59:2D:B8:FD:97:DD:4B:EA:7C:E3:57:D7:CA:CE:FC:90:A1:1C:1C:51 Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B783454CCFD13EF143594633338DF507F Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/WS24_ZfdS-p841fXys78kKEcHFE.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210513 IP address blocks: 212.126.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:54:cc:fd:13:ef:14:35:94:63:33:38:df:50:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=592db8fd97dd4bea7ce357d7cacefc90a11c1c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:e9:c2:7f:ec:6e:4b:f7:ed:61:95:13:de: 77:00:15:62:d9:58:d6:fa:84:80:85:63:bc:a6:94: b7:b1:fc:7c:51:2e:ea:fe:f7:5a:84:8f:1a:0b:32: 2a:b1:f5:5c:f8:b9:b1:36:4a:33:d0:bb:47:8b:dc: f7:9d:e4:48:be:88:76:25:26:88:1c:ec:64:28:a2: 95:9f:1b:46:8f:35:74:a7:25:88:d3:8b:ff:18:c7: 70:09:2e:59:6e:a4:5f:eb:fc:20:61:22:44:e5:75: d9:06:a1:4c:40:fc:5f:92:2e:87:5b:d0:af:94:a3: 57:46:06:52:09:24:79:0a:fa:1f:3f:56:96:a4:f6: dd:21:6a:41:1e:ac:1e:40:f1:32:87:45:6e:16:f7: ae:9d:3b:14:09:69:17:5c:82:5a:32:27:8e:85:74: bc:c4:00:28:47:f4:d3:c5:5e:87:94:75:83:28:0c: 19:d1:ca:4c:6d:dd:6b:cd:b5:79:4e:98:65:3c:91: b5:37:6e:8c:63:42:2e:1c:33:ad:62:5c:7b:71:9b: 51:f4:ce:ea:19:b0:d5:c7:14:3e:77:55:a1:0b:9f: f8:0d:2b:8c:c2:73:9e:f3:37:83:f9:b5:2e:29:75: 37:ee:e6:fd:97:b2:e8:5e:76:84:2d:fb:23:f7:a1: 5e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2D:B8:FD:97:DD:4B:EA:7C:E3:57:D7:CA:CE:FC:90:A1:1C:1C:51 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/WS24_ZfdS-p841fXys78kKEcHFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.126.115.0/24 Signature Algorithm: sha256WithRSAEncryption e1:9c:c5:97:52:1e:ea:20:3f:78:9d:1f:be:30:95:e8:2a:55: bd:55:38:32:5d:3f:d0:6b:2c:81:e1:29:d0:03:4f:f4:ba:0e: 81:9d:36:35:42:02:91:ee:a7:2e:48:fb:c1:5f:36:6d:d0:44: 59:59:8a:8e:0b:55:b8:5a:87:09:49:d7:5b:c7:be:02:a0:74: 18:0a:28:64:ee:91:88:1d:1b:1f:36:31:0e:fa:df:a3:d6:e2: 10:ca:d8:be:aa:ba:30:f4:52:eb:27:c5:0e:79:33:2d:c7:74: 3f:65:08:2e:12:09:63:c5:02:51:10:39:75:58:50:78:af:21: 6b:a5:1d:60:77:18:e2:50:e4:31:e1:ec:c6:c5:3f:5a:b9:c6: 4f:c3:9a:03:7b:0e:fc:a3:44:b3:d3:e6:6f:75:b0:86:04:c4: 7e:45:9e:e0:38:5c:99:00:81:be:11:13:4c:4e:fd:f9:63:c7: 6b:ea:df:04:11:8f:a2:e3:0d:dc:28:a6:f5:30:55:7a:53:e9: 49:04:ed:7d:7d:9f:f4:fe:32:7f:50:6b:6b:c6:d2:8c:94:f8: 0d:67:e7:88:46:39:6a:12:02:76:0f:52:db:1a:b8:52:a7:6b: 67:ef:9f:89:6f:11:fe:63:cb:5a:57:04:bf:44:e0:7c:bf:7b: 20:bf:ef:72 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4NFTM/RPvFDWUYzM431B/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTJkYjhmZDk3ZGQ0YmVhN2NlMzU3ZDdjYWNlZmM5MGExMWMxYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj7pwn/sbkv37WGVE953ABVi2VjW +oSAhWO8ppS3sfx8US7q/vdahI8aCzIqsfVc+LmxNkoz0LtHi9z3neRIvoh2JSaI HOxkKKKVnxtGjzV0pyWI04v/GMdwCS5ZbqRf6/wgYSJE5XXZBqFMQPxfki6HW9Cv lKNXRgZSCSR5CvofP1aWpPbdIWpBHqweQPEyh0VuFveunTsUCWkXXIJaMieOhXS8 xAAoR/TTxV6HlHWDKAwZ0cpMbd1rzbV5TphlPJG1N26MY0IuHDOtYlx7cZtR9M7q GbDVxxQ+d1WhC5/4DSuMwnOe8zeD+bUuKXU37ub9l7LoXnaELfsj96FeAwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFktuP2X3UvqfONX18rO/JChHBxRMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xL1dTMjRfWmZkUy1wODQxZlh5czc4a0tFY0hGRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUfnMw DQYJKoZIhvcNAQELBQADggEBAOGcxZdSHuogP3idH74wlegqVb1VODJdP9BrLIHh KdADT/S6DoGdNjVCApHupy5I+8FfNm3QRFlZio4LVbhahwlJ11vHvgKgdBgKKGTu kYgdGx82MQ7636PW4hDK2L6qujD0UusnxQ55My3HdD9lCC4SCWPFAlEQOXVYUHiv IWulHWB3GOJQ5DHh7MbFP1q5xk/DmgN7DvyjRLPT5m91sIYExH5FnuA4XJkAgb4R E0xO/fljx2vq3wQRj6LjDdwopvUwVXpT6UkE7X19n/T+Mn9Qa2vG0oyU+A1n54hG OWoSAnYPUtsauFKna2fvn4lvEf5jy1pXBL9E4Hy/eyC/73I= -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:21 2026 by rpki-client