This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/wj6F-GbnlJ5PgQSNTpZExJxm390.roa File: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (raw, json) Hash identifier: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk= Subject key identifier: C2:3E:85:F8:66:E7:94:9E:4F:81:04:8D:4E:96:44:C4:9C:66:DF:DD Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019B7C80D52DBE7C016E31E3492D7F6B52D0 Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/wj6F-GbnlJ5PgQSNTpZExJxm390.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47721 IP address blocks: 167.160.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d5:2d:be:7c:01:6e:31:e3:49:2d:7f:6b:52:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c23e85f866e7949e4f81048d4e9644c49c66dfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:1f:81:09:90:d5:46:0f:d1:a8:de:5f:06: 76:c3:c6:45:47:d0:12:8b:8c:b9:22:11:91:84:3f: e1:81:7c:6a:19:25:f9:80:a1:ae:c0:a2:89:92:5b: 8b:8c:e9:91:00:98:a4:1d:cc:fb:b8:b6:40:dd:5b: ac:64:d9:d1:9f:60:ba:ed:26:8c:de:70:d9:af:9a: 53:ab:2f:f4:6e:12:1d:01:7c:e7:52:16:5d:cb:0e: 9e:84:b5:a4:35:6c:3f:48:9c:94:9c:53:fc:ba:9d: 0f:53:c6:da:02:23:90:63:03:fb:2a:b9:90:39:ce: e9:72:c7:15:1d:55:47:84:38:e2:75:69:7b:e2:87: f1:37:40:1e:79:64:62:4f:a1:31:f6:90:b8:28:74: 8d:7a:f5:71:68:fa:4b:c5:21:c0:4d:38:18:aa:ec: a4:c6:a3:18:ad:dc:dc:f4:4c:c3:c1:da:0f:15:e0: a4:de:77:e2:94:b4:8b:66:2c:34:9b:ac:17:66:5b: f6:44:f6:f2:29:a0:e0:fb:3e:98:d4:89:f6:a3:e1: ed:ba:6e:7d:cb:10:a5:b3:11:80:d0:2f:5a:8d:aa: 5a:4e:15:f7:7f:f2:a0:7d:12:10:14:55:e6:ad:39: cd:22:ee:ef:50:ac:12:9a:7b:55:47:a9:34:f7:bf: e7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3E:85:F8:66:E7:94:9E:4F:81:04:8D:4E:96:44:C4:9C:66:DF:DD X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/wj6F-GbnlJ5PgQSNTpZExJxm390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.160.10.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:0e:ff:d5:90:bf:5d:5f:d4:a1:45:51:ca:a1:5d:ac:13:08: f6:d0:91:3f:80:66:04:69:5d:d7:04:6e:04:bc:15:49:80:6c: 06:3b:e6:1c:87:e1:df:8c:c3:9b:ac:2c:e9:b7:20:0e:5f:75: 87:00:8b:55:97:e5:4c:9a:e3:03:d6:00:ea:2f:67:bd:1f:e0: cf:47:1f:fa:41:d2:be:09:cd:51:53:4c:b7:e8:f5:3e:94:cc: ed:b9:71:e7:86:70:85:15:6b:5e:b6:1a:73:97:47:1f:25:48: 3f:87:94:39:70:a3:22:a0:62:d7:0e:89:98:eb:b8:2a:cf:df: 4a:7f:33:18:f7:97:58:2e:55:95:c1:58:e1:da:63:8b:b2:fc: 28:fc:88:dd:a1:24:cc:6e:b7:4e:51:9f:db:52:b7:6a:ed:54: c3:d9:97:c5:c7:0a:e5:22:c5:cc:e9:1e:00:4f:0e:7d:9d:4d: 24:d1:a2:60:54:2f:c0:01:8d:b9:85:5e:b9:53:14:e3:31:ba: a2:f9:54:0d:4e:ed:a8:01:30:06:cb:80:64:42:69:07:ad:0f: 49:67:1e:bc:d0:98:fc:48:ea:46:c4:49:80:43:ae:38:ad:56: 87:f4:b6:99:0a:b3:24:41:c1:68:b4:4f:d7:17:3d:16:d7:df: 13:b7:91:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNUtvnwBbjHjSS1/a1LQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjNlODVmODY2ZTc5NDllNGY4MTA0OGQ0ZTk2NDRjNDljNjZkZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqofgQmQ1UYP0ajeXwZ2w8ZFR9AS i4y5IhGRhD/hgXxqGSX5gKGuwKKJkluLjOmRAJikHcz7uLZA3VusZNnRn2C67SaM 3nDZr5pTqy/0bhIdAXznUhZdyw6ehLWkNWw/SJyUnFP8up0PU8baAiOQYwP7KrmQ Oc7pcscVHVVHhDjidWl74ofxN0AeeWRiT6Ex9pC4KHSNevVxaPpLxSHATTgYquyk xqMYrdzc9EzDwdoPFeCk3nfilLSLZiw0m6wXZlv2RPbyKaDg+z6Y1In2o+Htum59 yxClsxGA0C9ajapaThX3f/KgfRIQFFXmrTnNIu7vUKwSmntVR6k097/nzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMI+hfhm55SeT4EEjU6WRMScZt/dMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvd2o2Ri1HYm5sSjVQZ1FTTlRwWkV4SnhtMzkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp6AKMA0G CSqGSIb3DQEBCwUAA4IBAQA7Dv/VkL9dX9ShRVHKoV2sEwj20JE/gGYEaV3XBG4E vBVJgGwGO+Ych+HfjMObrCzptyAOX3WHAItVl+VMmuMD1gDqL2e9H+DPRx/6QdK+ Cc1RU0y36PU+lMztuXHnhnCFFWtethpzl0cfJUg/h5Q5cKMioGLXDomY67gqz99K fzMY95dYLlWVwVjh2mOLsvwo/IjdoSTMbrdOUZ/bUrdq7VTD2ZfFxwrlIsXM6R4A Tw59nU0k0aJgVC/AAY25hV65UxTjMbqi+VQNTu2oATAGy4BkQmkHrQ9JZx680Jj8 SOpGxEmAQ644rVaH9LaZCrMkQcFotE/XFz0W198Tt5Gp -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:15 2026 by rpki-client