This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/Wf0i36PV-VmyKUK20H0rdHHPRas.roa File: Wf0i36PV-VmyKUK20H0rdHHPRas.roa (raw, json) Hash identifier: 7LRImySHs+dAxi+a5eFHvvhxZ2AT2UvZ4Ch0CMlh2Ro= Subject key identifier: 59:FD:22:DF:A3:D5:F9:59:B2:29:42:B6:D0:7D:2B:74:71:CF:45:AB Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86 Certificate serial: 019B77C703EEE3554D43219F25B7450B22BB Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/Wf0i36PV-VmyKUK20H0rdHHPRas.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206388 IP address blocks: 195.88.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:03:ee:e3:55:4d:43:21:9f:25:b7:45:0b:22:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59fd22dfa3d5f959b22942b6d07d2b7471cf45ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:20:30:84:f1:06:cc:cd:85:1a:6b:35:a7: bc:91:2c:70:5b:1a:00:4a:fd:11:3c:fe:21:74:31: 0d:36:72:2a:60:53:36:73:53:a3:c1:3d:6e:ae:b1: 48:13:8c:83:88:b8:5b:4b:9d:e3:f2:3a:1f:d4:1c: 0f:d5:27:a1:a8:24:65:43:ee:ce:3b:d9:f0:05:19: d6:66:85:64:bd:46:21:5e:99:17:c1:ae:66:78:4b: 19:6c:7b:d8:d7:70:07:fb:07:a4:17:a1:88:3c:87: e1:d6:7a:85:69:b9:c4:a3:75:ec:e1:14:f9:c3:2f: 70:30:e4:4a:ff:80:d6:6b:d8:56:3f:96:a9:83:71: 3b:e3:7c:64:e6:7d:3e:fc:c6:18:40:d2:9a:3a:7b: c4:0d:fe:1e:9f:7e:12:0c:50:cc:a4:77:82:e8:ad: 8b:bb:84:be:05:bf:f8:77:00:57:8a:94:d2:6f:71: 0b:0e:fc:9e:62:e7:f7:ca:bf:a4:61:b5:65:98:8b: 80:3c:46:bb:42:17:2f:45:d3:c6:ca:53:6e:5e:4d: 7c:31:d0:b9:aa:e4:bc:ec:6d:40:a2:f6:a1:8e:41: f6:66:b2:45:fa:df:af:da:e4:6e:37:28:bc:29:ae: 04:95:4d:a0:df:ed:8d:e4:71:08:d7:5d:14:0d:2c: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FD:22:DF:A3:D5:F9:59:B2:29:42:B6:D0:7D:2B:74:71:CF:45:AB X509v3 Authority Key Identifier: keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/Wf0i36PV-VmyKUK20H0rdHHPRas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.189.0/24 Signature Algorithm: sha256WithRSAEncryption 91:71:f6:a9:aa:25:cc:b3:d9:b7:6c:b1:23:24:cd:67:17:84: 00:95:df:92:1e:65:56:11:cf:a4:9f:81:eb:32:9c:4e:5a:fe: 87:87:db:f2:a4:b3:c5:8e:be:98:34:1d:ac:44:cd:d7:31:ce: ce:27:10:b9:2a:93:54:6a:4d:41:23:82:42:24:70:96:07:3a: a6:38:17:f3:57:dc:04:f4:24:c6:77:12:f2:a5:69:c8:eb:77: 80:e1:f9:c6:4c:01:40:87:9b:32:c8:2a:f5:7a:d4:55:d8:b9: 55:10:5a:8e:59:e9:19:aa:0b:51:3e:2d:1e:bd:e9:87:f7:09: 35:dd:21:d4:32:c2:15:65:ae:95:eb:ad:8d:2b:2f:40:1f:15: 7f:53:c3:3a:d5:3f:8f:6f:16:69:51:20:6f:73:3e:47:f3:26: fe:49:76:cf:3e:85:65:05:91:af:0b:ff:19:ff:9c:80:a5:99: 1f:19:98:3b:f5:2f:ae:b4:9c:dd:52:d8:24:e3:1f:89:52:a1: 1e:9f:5d:4a:0e:1d:d3:59:30:21:fc:78:e9:b5:7a:64:8d:ff: 2e:55:24:84:d8:f3:3c:88:31:40:60:38:8b:4f:55:8a:72:0f: 61:02:d5:68:ed:97:7c:6f:c4:d3:dc:bb:18:18:87:98:d0:81: 9e:74:fd:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwPu41VNQyGfJbdFCyK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZjdjYWJhOWJkNWY5ZmFjMWUwMTQ1YTc1NjdjOWI0NTlh OTVlODYwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWZkMjJkZmEzZDVmOTU5YjIyOTQyYjZkMDdkMmI3NDcxY2Y0NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDkgMITxBszNhRprNae8kSxwWxoA Sv0RPP4hdDENNnIqYFM2c1OjwT1urrFIE4yDiLhbS53j8jof1BwP1SehqCRlQ+7O O9nwBRnWZoVkvUYhXpkXwa5meEsZbHvY13AH+wekF6GIPIfh1nqFabnEo3Xs4RT5 wy9wMORK/4DWa9hWP5apg3E743xk5n0+/MYYQNKaOnvEDf4en34SDFDMpHeC6K2L u4S+Bb/4dwBXipTSb3ELDvyeYuf3yr+kYbVlmIuAPEa7QhcvRdPGylNuXk18MdC5 quS87G1AovahjkH2ZrJF+t+v2uRuNyi8Ka4ElU2g3+2N5HEI110UDSyyJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFn9It+j1flZsilCttB9K3Rxz0WrMB8GA1UdIwQY MBaAFFX3yrqb1fn6weAUWnVnybRZqV6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMGY2ZDMtYTkwNC00MjNiLThmOTUt ZmMwN2NlNGEzN2U2LzEvV2YwaTM2UFYtVm15S1VLMjBIMHJkSEhQUmFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mMGY2ZDMtYTkwNC00MjNiLThmOTUtZmMwN2NlNGEzN2U2 LzEvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1i9MA0G CSqGSIb3DQEBCwUAA4IBAQCRcfapqiXMs9m3bLEjJM1nF4QAld+SHmVWEc+kn4Hr MpxOWv6Hh9vypLPFjr6YNB2sRM3XMc7OJxC5KpNUak1BI4JCJHCWBzqmOBfzV9wE 9CTGdxLypWnI63eA4fnGTAFAh5syyCr1etRV2LlVEFqOWekZqgtRPi0evemH9wk1 3SHUMsIVZa6V662NKy9AHxV/U8M61T+PbxZpUSBvcz5H8yb+SXbPPoVlBZGvC/8Z /5yApZkfGZg79S+utJzdUtgk4x+JUqEen11KDh3TWTAh/HjptXpkjf8uVSSE2PM8 iDFAYDiLT1WKcg9hAtVo7Zd8b8TT3LsYGIeY0IGedP2V -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:28 2026 by rpki-client