This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/dWJfR3O78mdmRump4LfvKR4bPhk.roa File: dWJfR3O78mdmRump4LfvKR4bPhk.roa (raw, json) Hash identifier: QZkZflIPeyZVp29E1JD/NyFaBd5cvPYJz27bWSVn1CI= Subject key identifier: 75:62:5F:47:73:BB:F2:67:66:46:E9:A9:E0:B7:EF:29:1E:1B:3E:19 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019B7910D475F780CC9669E68D41FBE84BFA Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/dWJfR3O78mdmRump4LfvKR4bPhk.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39205 IP address blocks: 84.247.127.0/24 maxlen: 24 188.240.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d4:75:f7:80:cc:96:69:e6:8d:41:fb:e8:4b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75625f4773bbf2676646e9a9e0b7ef291e1b3e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:9c:37:49:c8:b0:20:e3:35:f6:ae:cb:b0: 51:05:22:d2:dd:3a:82:fe:da:54:2b:e8:58:a4:7d: 4b:be:67:94:df:b9:4e:49:18:b1:ab:3b:b8:b2:b2: 7e:38:db:10:63:e0:5b:9e:0b:d1:51:d6:c8:1f:12: 94:bf:ae:a0:0b:e0:9b:a6:67:ad:fe:5a:8e:1c:22: a7:a0:84:e9:48:49:02:3e:e1:16:31:96:26:c4:b1: b0:c5:16:50:d1:fe:75:67:dd:92:b2:a9:e2:a6:64: 3a:f5:c4:3d:2a:80:16:9c:b6:b7:d7:47:ed:6c:1f: 8a:c7:8f:08:85:ac:6a:27:6b:94:5a:4c:33:69:f3: b8:30:4d:41:ef:d4:59:27:2b:b8:2e:bf:3a:e1:80: 05:51:3e:46:25:ec:2a:42:cf:b8:73:3a:06:76:5d: b3:ef:4d:d6:9b:1c:4b:02:ce:b9:26:e5:6a:8e:95: a4:18:36:dc:4a:f0:70:96:74:37:3e:9d:b4:85:48: 08:1b:bc:08:4e:10:4b:b1:7c:5d:ee:cf:07:fc:20: 1d:d5:5c:e5:c5:03:6d:52:22:f4:6d:03:cc:0b:e9: cb:1f:2e:10:36:8a:8c:48:1c:d6:bc:53:56:bf:67: 0d:9c:f6:9a:62:34:6e:ad:36:25:b0:0d:fe:de:3c: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:62:5F:47:73:BB:F2:67:66:46:E9:A9:E0:B7:EF:29:1E:1B:3E:19 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/dWJfR3O78mdmRump4LfvKR4bPhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.127.0/24 188.240.8.0/23 Signature Algorithm: sha256WithRSAEncryption 37:b2:45:67:8c:34:4d:e6:99:88:f8:8c:8b:f4:63:c7:57:11: 77:fd:5e:37:7e:56:54:6e:f7:21:0c:69:cc:1c:7e:66:45:44: 4b:aa:f5:b9:56:b7:c4:7b:36:9b:1c:34:59:e1:1d:91:9f:75: 5e:8f:b1:4d:4a:47:d4:a6:02:53:f3:7b:04:ce:f0:47:db:f9: b7:bb:1c:c5:17:93:0f:37:47:ad:28:46:cc:ea:42:79:9d:1a: 12:57:8c:68:0c:d4:0e:5d:95:82:dc:60:e3:75:a5:87:57:bf: 46:af:bf:72:52:96:bc:78:0a:04:72:07:6d:2c:6c:71:91:3a: fa:b8:bc:19:2c:b2:d8:9a:fe:20:b0:a5:cb:cc:99:eb:b9:e1: 4f:fa:cc:10:25:42:02:f6:a3:e4:4f:ea:3d:6c:b1:66:51:95: 58:65:d2:b9:52:38:14:d3:31:54:e7:29:ec:3a:6e:2e:f7:3a: 37:a7:dd:bc:60:8f:88:54:05:4b:3d:73:5a:9d:ad:0b:48:38: df:54:c8:f0:ff:2c:94:a0:53:92:cd:be:c8:0d:90:89:0b:4c: 13:e9:06:df:90:8a:09:d2:b3:09:93:d2:d8:45:78:0c:a1:0b: f2:f2:2b:57:8f:64:0b:39:f1:b8:92:78:ca:22:82:41:b4:8f: c5:a4:ee:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ENR194DMlmnmjUH76Ev6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTYyNWY0NzczYmJmMjY3NjY0NmU5YTllMGI3ZWYyOTFlMWIzZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVCcN0nIsCDjNfauy7BRBSLS3TqC /tpUK+hYpH1LvmeU37lOSRixqzu4srJ+ONsQY+BbngvRUdbIHxKUv66gC+Cbpmet /lqOHCKnoITpSEkCPuEWMZYmxLGwxRZQ0f51Z92SsqnipmQ69cQ9KoAWnLa310ft bB+Kx48IhaxqJ2uUWkwzafO4ME1B79RZJyu4Lr864YAFUT5GJewqQs+4czoGdl2z 703WmxxLAs65JuVqjpWkGDbcSvBwlnQ3Pp20hUgIG7wIThBLsXxd7s8H/CAd1Vzl xQNtUiL0bQPMC+nLHy4QNoqMSBzWvFNWv2cNnPaaYjRurTYlsA3+3jx6GwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHViX0dzu/JnZkbpqeC37ykeGz4ZMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvZFdKZlIzTzc4bWRtUnVtcDRMZnZLUjRiUGhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVPd/AwQB vPAIMA0GCSqGSIb3DQEBCwUAA4IBAQA3skVnjDRN5pmI+IyL9GPHVxF3/V43flZU bvchDGnMHH5mRURLqvW5VrfEezabHDRZ4R2Rn3Vej7FNSkfUpgJT83sEzvBH2/m3 uxzFF5MPN0etKEbM6kJ5nRoSV4xoDNQOXZWC3GDjdaWHV79Gr79yUpa8eAoEcgdt LGxxkTr6uLwZLLLYmv4gsKXLzJnrueFP+swQJUIC9qPkT+o9bLFmUZVYZdK5UjgU 0zFU5ynsOm4u9zo3p928YI+IVAVLPXNana0LSDjfVMjw/yyUoFOSzb7IDZCJC0wT 6QbfkIoJ0rMJk9LYRXgMoQvy8itXj2QLOfG4knjKIoJBtI/FpO5t -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:40 2026 by rpki-client