This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/WRCnuaJzRXm83oAAxB0GzCKosjw.roa File: WRCnuaJzRXm83oAAxB0GzCKosjw.roa (raw, json) Hash identifier: Zlyy/Icbe5M8aCeFBu4UmwH/OngNWuHDogd3Lscyms4= Subject key identifier: 59:10:A7:B9:A2:73:45:79:BC:DE:80:00:C4:1D:06:CC:22:A8:B2:3C Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B64379847CCBAF123FBA36F88E71A Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/WRCnuaJzRXm83oAAxB0GzCKosjw.roa Signing time: Thu 01 Jan 2026 16:19:28 +0000 ROA not before: Thu 01 Jan 2026 16:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214210 IP address blocks: 31.41.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:64:37:98:47:cc:ba:f1:23:fb:a3:6f:88:e7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5910a7b9a2734579bcde8000c41d06cc22a8b23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:29:14:c4:c5:66:3f:fe:b9:ef:a3:31:47: 55:7a:70:ec:cf:1c:47:c3:cb:9f:84:2f:2b:64:bb: 14:50:2a:91:f7:33:e2:db:6d:2d:66:d4:f2:bc:a2: 0e:50:a8:12:58:87:50:54:d3:aa:da:33:40:c2:c3: 81:21:60:ef:dc:d9:6d:84:6f:56:d0:3d:b4:ea:b9: ef:e9:7d:c1:ae:55:76:df:ce:39:c7:1c:d0:fa:84: b6:d5:fe:6e:f0:cc:2a:38:74:24:b1:8e:69:df:ff: a0:d9:cf:44:01:f6:35:3c:a0:c2:39:a4:06:dc:0b: 89:b1:24:52:c1:c3:2f:e0:2c:83:bb:65:ec:8e:96: 3b:98:18:27:79:4a:ca:48:f3:8c:fe:d8:ad:bb:b4: 9c:44:54:65:c3:04:d5:b0:82:56:61:76:f6:e1:3f: c0:69:b3:bd:18:66:b2:6d:5c:3c:ef:01:70:f0:ae: f6:cb:59:af:cd:6a:55:cd:b5:c5:62:3a:09:91:f2: d6:fa:04:b8:93:17:cd:d0:db:55:0e:11:3f:f2:c4: ab:50:a1:71:ae:de:d3:18:63:a4:1c:06:c9:d1:6c: 94:18:23:59:97:66:dc:56:b4:d1:be:a3:c6:7e:48: 48:a5:bc:41:e4:3a:11:ca:0f:26:5d:43:14:4d:83: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:10:A7:B9:A2:73:45:79:BC:DE:80:00:C4:1D:06:CC:22:A8:B2:3C X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/WRCnuaJzRXm83oAAxB0GzCKosjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.15.0/24 Signature Algorithm: sha256WithRSAEncryption 02:20:42:7e:ab:af:22:4d:9b:bc:bb:9c:4a:7d:e4:8a:68:2e: 9f:11:bc:ef:03:0f:0b:da:5f:b9:56:20:88:ce:f1:ad:12:b7: c5:ec:1f:f3:6e:c6:69:b8:81:ea:e3:66:86:09:89:88:6c:5c: 83:90:ed:f4:28:5c:c5:90:eb:9d:d4:7c:77:67:ea:01:a6:a4: c6:8e:e6:2d:64:87:61:8d:d6:ed:2c:6c:06:38:2c:15:7d:2c: 4b:0e:6c:c4:0a:2b:64:c2:15:27:a0:e1:8b:bf:8c:a3:5e:3a: cc:26:a5:fb:e5:41:39:d4:27:d6:45:45:1c:bf:ca:a4:26:b6: 8c:14:da:95:13:f7:cb:a1:c8:98:cf:b6:31:95:63:62:6c:2d: 0d:9e:36:18:7a:04:5b:7f:8e:a2:e0:1d:b5:c0:00:dc:b4:7d: a2:bf:7e:6a:1f:69:9c:dd:77:3f:9b:6f:16:18:1b:9d:b8:af: a6:e2:47:27:ab:26:5f:84:6c:c4:28:b5:e2:22:0a:ca:ae:39: f8:d8:cc:f6:79:29:90:3a:9b:39:b9:70:16:40:6d:b1:26:04: 3e:07:34:5c:2b:7d:04:ac:8a:da:05:8b:81:7d:99:7e:5d:41: 7a:45:09:7a:3c:46:79:1c:fd:67:38:28:de:e8:75:9b:16:f2: b4:39:b4:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2Q3mEfMuvEj+6NviOcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTEwYTdiOWEyNzM0NTc5YmNkZTgwMDBjNDFkMDZjYzIyYThiMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX4pFMTFZj/+ue+jMUdVenDszxxH w8ufhC8rZLsUUCqR9zPi220tZtTyvKIOUKgSWIdQVNOq2jNAwsOBIWDv3NlthG9W 0D206rnv6X3BrlV23845xxzQ+oS21f5u8MwqOHQksY5p3/+g2c9EAfY1PKDCOaQG 3AuJsSRSwcMv4CyDu2XsjpY7mBgneUrKSPOM/titu7ScRFRlwwTVsIJWYXb24T/A abO9GGaybVw87wFw8K72y1mvzWpVzbXFYjoJkfLW+gS4kxfN0NtVDhE/8sSrUKFx rt7TGGOkHAbJ0WyUGCNZl2bcVrTRvqPGfkhIpbxB5DoRyg8mXUMUTYPTGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFkQp7mic0V5vN6AAMQdBswiqLI8MB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvV1JDbnVhSnpSWG04M29BQXhCMEd6Q0tvc2p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHykPMA0G CSqGSIb3DQEBCwUAA4IBAQACIEJ+q68iTZu8u5xKfeSKaC6fEbzvAw8L2l+5ViCI zvGtErfF7B/zbsZpuIHq42aGCYmIbFyDkO30KFzFkOud1Hx3Z+oBpqTGjuYtZIdh jdbtLGwGOCwVfSxLDmzECitkwhUnoOGLv4yjXjrMJqX75UE51CfWRUUcv8qkJraM FNqVE/fLociYz7YxlWNibC0NnjYYegRbf46i4B21wADctH2iv35qH2mc3Xc/m28W GBuduK+m4kcnqyZfhGzEKLXiIgrKrjn42Mz2eSmQOps5uXAWQG2xJgQ+BzRcK30E rIraBYuBfZl+XUF6RQl6PEZ5HP1nOCje6HWbFvK0ObQZ -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:15 2026 by rpki-client