This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/wFdwl3GPZJGJpXxabTkhX-gww84.roa File: wFdwl3GPZJGJpXxabTkhX-gww84.roa (raw, json) Hash identifier: 1a0mdIaHaosCkhFYntZmxOwmIiA+NPlXeJT6rqJ3578= Subject key identifier: C0:57:70:97:71:8F:64:91:89:A5:7C:5A:6D:39:21:5F:E8:30:C3:CE Certificate issuer: /CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Certificate serial: 019B7F1558306293C44D421A32797384AE6E Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/wFdwl3GPZJGJpXxabTkhX-gww84.roa Signing time: Fri 02 Jan 2026 14:21:03 +0000 ROA not before: Fri 02 Jan 2026 14:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216472 IP address blocks: 212.108.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:58:30:62:93:c4:4d:42:1a:32:79:73:84:ae:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0577097718f649189a57c5a6d39215fe830c3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:99:85:59:2e:e6:67:84:69:d3:85:65:53: ce:c3:13:1f:7d:5f:5d:eb:e4:81:f8:46:cc:d9:09: 9d:45:94:90:17:05:6d:3a:9d:cb:b4:cd:06:c5:ee: fb:5d:4b:f4:b3:79:70:b0:4e:a0:2f:3f:20:cd:45: 1e:a0:f0:2f:0f:53:07:ce:df:d7:18:35:bb:f1:f6: 96:12:cb:0c:0f:7d:4c:01:0e:70:8b:0f:d0:a9:66: 17:b8:0c:83:a3:ea:33:ae:b4:e7:e5:ff:cc:4f:53: 7e:ee:5a:f6:28:f8:8a:80:a9:4b:59:97:62:ba:95: 7b:b8:ff:45:21:41:f3:03:05:42:89:9e:7a:fc:b1: b4:82:8d:2a:88:c0:5a:b1:89:23:33:c5:a2:18:a0: f9:76:df:f1:f7:9e:fc:f0:2f:25:88:5b:c0:3d:9f: 2f:18:87:b9:47:2e:4a:e7:69:e6:3f:a2:53:19:15: 9b:2d:91:fa:02:b6:38:3a:5a:67:ca:1f:b2:1e:03: 2e:c4:7a:1a:0d:0f:85:63:ae:3f:37:f7:d5:55:ee: c4:2c:95:61:fe:e1:a1:b2:c9:7f:c0:5a:98:53:18: a3:ee:fd:a5:c9:62:ae:b8:e3:7b:58:03:e8:6c:e1: 7e:9e:7e:dd:9b:a7:05:b9:59:58:2d:9f:4c:14:86: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:57:70:97:71:8F:64:91:89:A5:7C:5A:6D:39:21:5F:E8:30:C3:CE X509v3 Authority Key Identifier: keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/wFdwl3GPZJGJpXxabTkhX-gww84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.115.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:b2:2e:d9:e8:7d:60:28:84:ac:6f:f5:c2:93:e6:c0:12:29: d7:f5:c8:b9:7c:bf:65:41:8d:d8:ef:f9:df:34:7d:1f:66:cc: 27:ca:d9:48:a5:ba:df:9f:69:c1:3b:fd:11:fe:3d:71:5b:44: 29:ff:f9:66:a5:cc:7f:df:73:98:d5:11:30:a6:11:eb:31:bd: b7:30:6f:43:3d:f7:3d:a1:66:ab:71:d8:ba:39:47:7d:72:e5: e8:7e:5a:b7:85:27:04:22:80:3b:aa:d4:26:13:ed:b4:92:53: f2:48:ea:fc:6d:b1:10:2a:52:75:85:33:33:93:1d:bb:31:10: ff:7b:13:98:01:80:fb:4c:29:d6:c0:dc:3a:f7:1e:0c:1a:81: 0e:dc:8e:b0:9b:e7:97:72:6f:d2:73:fc:73:7f:b9:25:db:21: 6f:39:fb:a1:7f:8b:38:7c:ff:52:c4:ae:90:64:63:3e:d1:01: 5e:22:38:d7:b1:9a:d0:04:b7:66:84:55:75:fd:6c:cf:42:74: 34:c6:5e:18:7c:ee:a0:d5:cc:79:4b:e4:75:6b:68:f6:1b:32: 73:07:20:18:cd:49:60:e4:6b:5b:5c:6f:2f:87:f2:33:5b:41: 16:ef:fd:74:db:f0:3b:a0:cd:c5:82:ce:c4:b9:86:33:67:1b: 3c:ac:54:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVgwYpPETUIaMnlzhK5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTcxZWMwNTU5NmRjNDk5NDEwNjcwZmYyMTkzZjMwOTRm YWE2YTcwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDU3NzA5NzcxOGY2NDkxODlhNTdjNWE2ZDM5MjE1ZmU4MzBjM2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstuZhVku5meEadOFZVPOwxMffV9d 6+SB+EbM2QmdRZSQFwVtOp3LtM0Gxe77XUv0s3lwsE6gLz8gzUUeoPAvD1MHzt/X GDW78faWEssMD31MAQ5wiw/QqWYXuAyDo+ozrrTn5f/MT1N+7lr2KPiKgKlLWZdi upV7uP9FIUHzAwVCiZ56/LG0go0qiMBasYkjM8WiGKD5dt/x95788C8liFvAPZ8v GIe5Ry5K52nmP6JTGRWbLZH6ArY4Olpnyh+yHgMuxHoaDQ+FY64/N/fVVe7ELJVh /uGhssl/wFqYUxij7v2lyWKuuON7WAPobOF+nn7dm6cFuVlYLZ9MFIaWkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMBXcJdxj2SRiaV8Wm05IV/oMMPOMB8GA1UdIwQY MBaAFLbnHsBVltxJlBBnD/IZPzCU+qanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEt ZDViY2YyOGY3NDhiLzEvd0Zkd2wzR1BaSkdKcFh4YWJUa2hYLWd3dzg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEtZDViY2YyOGY3NDhi LzEvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GxzMA0G CSqGSIb3DQEBCwUAA4IBAQBssi7Z6H1gKISsb/XCk+bAEinX9ci5fL9lQY3Y7/nf NH0fZswnytlIpbrfn2nBO/0R/j1xW0Qp//lmpcx/33OY1REwphHrMb23MG9DPfc9 oWarcdi6OUd9cuXoflq3hScEIoA7qtQmE+20klPySOr8bbEQKlJ1hTMzkx27MRD/ exOYAYD7TCnWwNw69x4MGoEO3I6wm+eXcm/Sc/xzf7kl2yFvOfuhf4s4fP9SxK6Q ZGM+0QFeIjjXsZrQBLdmhFV1/WzPQnQ0xl4YfO6g1cx5S+R1a2j2GzJzByAYzUlg 5GtbXG8vh/IzW0EW7/102/A7oM3Fgs7EuYYzZxs8rFRp -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:16 2026 by rpki-client