This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Wd3IJ2mnCy8622nnbG4dF5xSf0U.roa File: Wd3IJ2mnCy8622nnbG4dF5xSf0U.roa (raw, json) Hash identifier: H/W7yFSmCdTH06SHHhm3JHAdRs0UDqsBRN0Ui4lvvo8= Subject key identifier: 59:DD:C8:27:69:A7:0B:2F:3A:DB:69:E7:6C:6E:1D:17:9C:52:7F:45 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77594961C40FB95DE97E5661FE73E4CE Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Wd3IJ2mnCy8622nnbG4dF5xSf0U.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39543 IP address blocks: 31.14.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:49:61:c4:0f:b9:5d:e9:7e:56:61:fe:73:e4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59ddc82769a70b2f3adb69e76c6e1d179c527f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:2a:05:fa:41:3e:7f:b5:30:ec:f9:de:c5: 9b:be:2f:31:e7:ab:95:03:20:d6:cd:b4:a9:8a:94: f0:1a:28:cd:e6:b3:69:68:20:ba:f8:36:bb:8e:62: e4:44:25:48:d6:4d:5d:15:1d:8c:44:0e:56:c0:12: 9c:95:46:9c:fe:f9:1f:c3:0a:d0:fc:07:43:1b:3a: b6:ba:1b:29:ae:a4:9b:26:77:a2:cc:7c:8c:55:4a: 85:2a:f0:7e:79:31:43:f3:64:65:b2:0f:bb:84:25: 2d:0d:de:7b:76:37:c7:d9:0f:0e:2f:cd:b1:b8:6d: d5:01:f9:27:70:26:15:53:5a:64:f4:f5:d9:03:7b: b4:05:cf:25:c5:cb:cc:07:55:57:5d:f0:dd:92:d2: d1:2b:41:9e:5b:a5:dc:79:08:d6:72:83:ae:02:43: db:7a:0d:07:e0:a6:e1:41:31:ab:91:65:ad:2f:84: 28:e1:af:90:75:27:9d:fe:89:08:ac:ac:b2:e5:f3: 9e:61:a3:07:b2:5d:1c:56:fd:d3:1e:31:c4:0f:b4: c8:23:54:ad:30:d7:9f:04:da:69:43:71:ab:67:24: 14:d5:a3:d9:c1:f6:8f:f5:56:a8:0b:da:8e:09:14: 4b:cd:19:d4:ff:69:97:71:2c:d5:6f:2c:a8:5d:19: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DD:C8:27:69:A7:0B:2F:3A:DB:69:E7:6C:6E:1D:17:9C:52:7F:45 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Wd3IJ2mnCy8622nnbG4dF5xSf0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.49.0/24 Signature Algorithm: sha256WithRSAEncryption 23:b0:65:20:c9:8b:47:df:19:a2:da:51:90:80:4d:bf:07:b2: 2a:0d:4f:a5:d1:64:f0:68:77:6e:3d:4c:47:e2:7c:a9:56:32: 00:4a:ed:b0:c4:60:1f:ea:54:5e:67:59:5e:a7:dc:1e:99:a1: b5:e6:f9:5a:33:10:4b:84:cc:83:8d:d9:05:9b:a2:36:ae:eb: 72:51:e3:77:e9:74:77:eb:3f:ce:b1:f6:82:f0:00:a6:bf:34: 38:9b:c8:48:de:2d:15:26:84:d5:14:bb:5b:79:91:d6:72:a2: 50:58:30:4b:e8:23:b2:6b:3e:8f:09:1b:a0:b5:e9:c4:69:89: 11:78:d0:94:f9:9c:62:0e:af:dd:f2:5e:d0:37:8e:11:44:d2: 1c:8e:e4:dc:30:fc:50:44:cd:09:d3:7e:f5:0e:ab:25:e0:3b: 17:56:07:17:f5:16:c6:66:5f:73:42:9f:c6:9d:f1:7c:3a:d6: 4c:83:0c:5c:14:13:76:ae:41:04:38:39:6b:32:01:b2:48:0c: b4:4c:52:e9:dc:dd:cf:4d:9b:29:b5:67:f1:51:47:a3:2d:4b: dd:4c:5c:5e:8a:ad:d1:a0:0d:45:c4:fb:e0:85:0c:59:15:30: 9e:f5:a7:0e:4e:5d:58:97:b9:2d:87:75:91:25:80:b5:0d:d3: 72:17:40:51 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUlhxA+5Xel+VmH+c+TOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWRkYzgyNzY5YTcwYjJmM2FkYjY5ZTc2YzZlMWQxNzljNTI3ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv28qBfpBPn+1MOz53sWbvi8x56uV AyDWzbSpipTwGijN5rNpaCC6+Da7jmLkRCVI1k1dFR2MRA5WwBKclUac/vkfwwrQ /AdDGzq2uhsprqSbJneizHyMVUqFKvB+eTFD82Rlsg+7hCUtDd57djfH2Q8OL82x uG3VAfkncCYVU1pk9PXZA3u0Bc8lxcvMB1VXXfDdktLRK0GeW6XceQjWcoOuAkPb eg0H4KbhQTGrkWWtL4Qo4a+QdSed/okIrKyy5fOeYaMHsl0cVv3THjHED7TII1St MNefBNppQ3GrZyQU1aPZwfaP9VaoC9qOCRRLzRnU/2mXcSzVbyyoXRmS8QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFndyCdppwsvOttp52xuHRecUn9FMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1dkM0lKMm1uQ3k4NjIybm5iRzRkRjV4U2YwVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfDjEw DQYJKoZIhvcNAQELBQADggEBACOwZSDJi0ffGaLaUZCATb8HsioNT6XRZPBod249 TEfifKlWMgBK7bDEYB/qVF5nWV6n3B6ZobXm+VozEEuEzION2QWbojau63JR43fp dHfrP86x9oLwAKa/NDibyEjeLRUmhNUUu1t5kdZyolBYMEvoI7JrPo8JG6C16cRp iRF40JT5nGIOr93yXtA3jhFE0hyO5Nww/FBEzQnTfvUOqyXgOxdWBxf1FsZmX3NC n8ad8Xw61kyDDFwUE3auQQQ4OWsyAbJIDLRMUunc3c9Nmym1Z/FRR6MtS91MXF6K rdGgDUXE++CFDFkVMJ71pw5OXViXuS2HdZElgLUN03IXQFE= -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:36 2026 by rpki-client