This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/wFX4ltKD_gZlOj3Qf_Lnn0NhN4U.roa File: wFX4ltKD_gZlOj3Qf_Lnn0NhN4U.roa (raw, json) Hash identifier: pjVKRqlOO9z+7mcPGp3goRgbyLNPwv20Ps3g73hf4MM= Subject key identifier: C0:55:F8:96:D2:83:FE:06:65:3A:3D:D0:7F:F2:E7:9F:43:61:37:85 Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b Certificate serial: 019B7A5AE6FFF10E626081B1B726CB378E5D Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/wFX4ltKD_gZlOj3Qf_Lnn0NhN4U.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21183 IP address blocks: 193.254.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e6:ff:f1:0e:62:60:81:b1:b7:26:cb:37:8e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c055f896d283fe06653a3dd07ff2e79f43613785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:ce:79:32:86:8f:89:17:c2:c4:e6:19:d4: eb:16:2e:63:93:b9:b2:06:a6:ad:59:c4:3f:e7:b5: 90:1d:b9:82:1e:e7:24:f8:a1:53:f2:0a:22:7c:fa: 2c:28:4b:dc:04:5e:cd:89:3e:0d:8c:e9:e4:fe:a0: b1:ff:a2:80:6b:a8:3b:3e:9a:3b:1f:2a:10:dd:30: e3:94:4a:f3:ac:f7:67:ee:a5:64:68:6e:7b:d6:8b: cc:c2:15:a6:d9:10:97:9f:4b:15:e1:c9:e5:76:6b: 58:ed:54:18:d9:70:a3:cc:1c:88:1d:a6:5a:47:fa: 71:24:6b:7a:85:8f:79:35:b1:2f:bb:d3:ea:9f:3a: 1a:36:d0:48:68:39:5d:79:c0:7e:6e:6e:b2:b2:97: 99:3f:aa:f4:e3:16:73:5d:f2:c2:da:39:c2:7d:c0: 1d:61:fe:ab:78:e8:47:42:43:a9:f2:42:bf:96:bc: 43:39:ad:4a:f9:50:2c:82:99:98:22:cb:c0:4f:b4: b0:e0:53:61:5e:c0:ae:27:40:4f:9b:bd:bf:7f:94: 8b:72:b7:e1:73:a3:b9:b1:55:7d:78:4b:80:2b:eb: b4:b3:a6:52:1d:27:ca:ca:35:8a:21:17:a5:53:f1: f8:74:d3:75:53:a3:fb:5c:4a:e9:11:6f:06:13:96: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:55:F8:96:D2:83:FE:06:65:3A:3D:D0:7F:F2:E7:9F:43:61:37:85 X509v3 Authority Key Identifier: keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/wFX4ltKD_gZlOj3Qf_Lnn0NhN4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.254.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:02:10:78:56:75:08:e4:74:cb:86:f4:82:80:21:ea:93:b1: 40:b5:5e:cc:be:ab:2a:55:40:70:51:b4:2c:28:36:b7:37:9d: 9a:00:c2:9c:7b:82:b8:26:1e:8d:e0:5e:b2:dd:65:a6:c1:48: a9:34:d7:e1:ba:16:cb:a2:c9:b2:fd:c6:02:cd:2e:c8:5f:9d: 90:ae:52:e5:c4:7c:53:fa:27:b9:50:5b:50:4e:16:38:03:b6: 7b:3d:3e:ee:8b:6f:6d:00:b7:67:af:ef:0a:3d:1e:7f:0e:1a: 68:d7:31:aa:0f:0d:eb:23:1f:c0:1d:83:1c:df:7e:43:13:59: bc:0f:74:4d:ff:8a:33:a9:a5:a5:5b:78:de:c1:33:2b:ed:12: 7f:96:e3:78:68:cd:b1:0a:c5:4c:c0:0e:2a:96:cf:56:48:f5: 97:23:5b:db:e0:e5:9b:59:08:0e:18:75:7c:c0:1c:f6:f8:4f: 6e:7e:0b:8a:e8:1a:f3:57:9a:d4:3c:ec:b3:31:62:1b:50:d8: 61:d6:9b:f3:b5:7c:4a:17:57:0a:d3:d5:76:7d:2e:db:cb:67: 94:12:fa:89:25:04:c9:14:60:22:04:3b:c4:81:da:9b:db:68: 9e:fa:28:53:5b:c6:c9:ed:04:4d:0c:e6:d5:bd:52:3e:1e:78: 44:5b:08:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wub/8Q5iYIGxtybLN45dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzdlNTZmNDY4N2VhMWIyZDc3NjNkMDg4OGQxMDUwMjM1 YjU3NGIwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDU1Zjg5NmQyODNmZTA2NjUzYTNkZDA3ZmYyZTc5ZjQzNjEzNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufDOeTKGj4kXwsTmGdTrFi5jk7my BqatWcQ/57WQHbmCHuck+KFT8goifPosKEvcBF7NiT4NjOnk/qCx/6KAa6g7Ppo7 HyoQ3TDjlErzrPdn7qVkaG571ovMwhWm2RCXn0sV4cnldmtY7VQY2XCjzByIHaZa R/pxJGt6hY95NbEvu9PqnzoaNtBIaDldecB+bm6yspeZP6r04xZzXfLC2jnCfcAd Yf6reOhHQkOp8kK/lrxDOa1K+VAsgpmYIsvAT7Sw4FNhXsCuJ0BPm72/f5SLcrfh c6O5sVV9eEuAK+u0s6ZSHSfKyjWKIRelU/H4dNN1U6P7XErpEW8GE5YelQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMBV+JbSg/4GZTo90H/y559DYTeFMB8GA1UdIwQY MBaAFLTH5W9Gh+obLXdj0IiNEFAjW1dLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTIt MDU5OWYwYjJiMDlhLzEvd0ZYNGx0S0RfZ1psT2ozUWZfTG5uME5oTjRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTItMDU5OWYwYjJiMDlh LzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwf4BMA0G CSqGSIb3DQEBCwUAA4IBAQA/AhB4VnUI5HTLhvSCgCHqk7FAtV7MvqsqVUBwUbQs KDa3N52aAMKce4K4Jh6N4F6y3WWmwUipNNfhuhbLosmy/cYCzS7IX52QrlLlxHxT +ie5UFtQThY4A7Z7PT7ui29tALdnr+8KPR5/Dhpo1zGqDw3rIx/AHYMc335DE1m8 D3RN/4ozqaWlW3jewTMr7RJ/luN4aM2xCsVMwA4qls9WSPWXI1vb4OWbWQgOGHV8 wBz2+E9ufguK6BrzV5rUPOyzMWIbUNhh1pvztXxKF1cK09V2fS7by2eUEvqJJQTJ FGAiBDvEgdqb22ie+ihTW8bJ7QRNDObVvVI+HnhEWwjV -----END CERTIFICATE-----Generated at Mon Jan 26 14:53:53 2026 by rpki-client