This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/wuu34kfch8KkTT895X4xf1I7R74.roa File: wuu34kfch8KkTT895X4xf1I7R74.roa (raw, json) Hash identifier: Bvnpt4GgpFd/ohLwSF/sF3kAtb+rm2/9b3nvHW+cTLo= Subject key identifier: C2:EB:B7:E2:47:DC:87:C2:A4:4D:3F:3D:E5:7E:31:7F:52:3B:47:BE Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Certificate serial: 019B7EA6758A5FB3243F005598A552DA1DAD Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/wuu34kfch8KkTT895X4xf1I7R74.roa Signing time: Fri 02 Jan 2026 12:19:56 +0000 ROA not before: Fri 02 Jan 2026 12:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7979 IP address blocks: 205.147.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:75:8a:5f:b3:24:3f:00:55:98:a5:52:da:1d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Validity Not Before: Jan 2 12:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2ebb7e247dc87c2a44d3f3de57e317f523b47be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:8f:de:7e:73:51:c8:7b:30:39:2e:1f:9b: f7:4c:d6:6a:7b:86:9f:29:c5:5a:59:73:c0:ae:d3: cb:47:e4:91:73:01:f8:58:f8:f7:d6:08:47:c9:4f: a7:65:ee:cc:85:86:93:f0:d3:3d:6c:61:ac:28:84: 0e:18:c3:d0:39:0f:d6:3e:fb:42:94:70:db:da:e2: b2:39:6c:43:00:68:bf:ca:11:8c:8c:71:ba:73:61: e6:02:89:1d:b2:51:0c:31:0d:07:cf:a5:59:b7:3e: b4:89:8a:96:2b:b5:0f:55:8c:b0:7c:7d:17:31:cb: dc:73:6d:9d:ff:ac:28:5d:43:6b:35:f1:6b:81:7b: 78:b2:37:6d:23:a1:ef:1d:72:95:05:22:b5:5d:79: cb:66:57:84:b3:9d:00:cb:e3:7c:2f:96:1f:e2:2f: f8:21:0f:25:42:e5:5a:49:3a:f6:c6:33:7a:ed:45: 92:a0:35:84:7c:f3:58:c4:33:ad:cc:3d:73:49:98: a6:a5:08:68:0b:f9:35:7e:6e:6b:e8:82:a3:1b:61: 65:a3:30:bc:ff:ae:39:0f:fd:d7:37:e5:91:1f:d5: 86:d6:22:05:f6:ed:86:f8:04:5b:29:bc:09:a2:1e: 7c:3c:14:7f:ea:b8:0e:78:98:06:d0:5e:18:74:e6: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EB:B7:E2:47:DC:87:C2:A4:4D:3F:3D:E5:7E:31:7F:52:3B:47:BE X509v3 Authority Key Identifier: keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/wuu34kfch8KkTT895X4xf1I7R74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.147.26.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:d0:70:ac:06:75:41:9b:d2:43:d6:f1:84:20:52:19:8d:a4: 9f:3c:40:86:4f:0f:8f:76:dd:99:f2:04:5f:44:da:9e:be:46: c0:ac:d9:00:97:1b:f5:de:1b:df:ec:1e:cd:3b:0c:06:8c:dc: 53:3b:b8:d9:e9:17:c2:ba:25:50:ef:98:d6:83:4f:19:99:60: 23:7a:d5:e8:0a:93:25:db:6c:dd:ef:1f:32:2f:17:59:fe:ba: 1a:c9:5c:1f:f8:45:46:c5:fa:57:c6:1d:c2:91:9c:6b:c5:94: d7:7e:85:ef:92:1d:e3:ab:34:f1:a8:1b:45:df:15:e0:d7:8f: 2a:55:31:ad:b6:84:e0:55:b9:93:b7:c3:32:ea:cd:7c:db:32: 61:f4:e2:f5:d5:d6:82:a8:23:18:b4:75:d9:94:23:aa:e2:c9: b8:f2:e6:27:71:f1:d6:74:4a:98:b8:82:76:79:a7:dc:10:6e: 20:73:a7:c2:8a:76:a9:3c:41:0f:12:7c:a0:ca:ec:4b:75:18: b9:4c:3a:ee:51:a9:31:50:e0:b7:61:11:e9:d3:a6:d2:b9:41: 98:21:cb:99:6b:99:ae:3a:74:14:cf:18:ab:41:8a:cc:20:cc: 9b:02:3c:42:75:a5:33:5c:53:72:2b:b8:df:eb:08:be:57:8a: f2:cb:29:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pnWKX7MkPwBVmKVS2h2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz NWUyMmIwHhcNMjYwMTAyMTIxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmViYjdlMjQ3ZGM4N2MyYTQ0ZDNmM2RlNTdlMzE3ZjUyM2I0N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/mP3n5zUch7MDkuH5v3TNZqe4af KcVaWXPArtPLR+SRcwH4WPj31ghHyU+nZe7MhYaT8NM9bGGsKIQOGMPQOQ/WPvtC lHDb2uKyOWxDAGi/yhGMjHG6c2HmAokdslEMMQ0Hz6VZtz60iYqWK7UPVYywfH0X Mcvcc22d/6woXUNrNfFrgXt4sjdtI6HvHXKVBSK1XXnLZleEs50Ay+N8L5Yf4i/4 IQ8lQuVaSTr2xjN67UWSoDWEfPNYxDOtzD1zSZimpQhoC/k1fm5r6IKjG2FlozC8 /645D/3XN+WRH9WG1iIF9u2G+ARbKbwJoh58PBR/6rgOeJgG0F4YdObQ+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLrt+JH3IfCpE0/PeV+MX9SO0e+MB8GA1UdIwQY MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt MWE4MGEyZjdkN2VhLzEvd3V1MzRrZmNoOEtrVFQ4OTVYNHhmMUk3Ujc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZMaMA0G CSqGSIb3DQEBCwUAA4IBAQBa0HCsBnVBm9JD1vGEIFIZjaSfPECGTw+Pdt2Z8gRf RNqevkbArNkAlxv13hvf7B7NOwwGjNxTO7jZ6RfCuiVQ75jWg08ZmWAjetXoCpMl 22zd7x8yLxdZ/roayVwf+EVGxfpXxh3CkZxrxZTXfoXvkh3jqzTxqBtF3xXg148q VTGttoTgVbmTt8My6s182zJh9OL11daCqCMYtHXZlCOq4sm48uYncfHWdEqYuIJ2 eafcEG4gc6fCinapPEEPEnygyuxLdRi5TDruUakxUOC3YRHp06bSuUGYIcuZa5mu OnQUzxirQYrMIMybAjxCdaUzXFNyK7jf6wi+V4ryyynn -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:22 2026 by rpki-client