This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/WfRMYNgnDvdxhv_OgYStuN6FqCQ.roa File: WfRMYNgnDvdxhv_OgYStuN6FqCQ.roa (raw, json) Hash identifier: uHLuQi8KJbVs5VqNtZkcp+fIJy6HLJbaJ1btjtIY4cM= Subject key identifier: 59:F4:4C:60:D8:27:0E:F7:71:86:FF:CE:81:84:AD:B8:DE:85:A8:24 Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17 Certificate serial: 019B775889202E5B9F8737C3EEB156CDFB85 Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/WfRMYNgnDvdxhv_OgYStuN6FqCQ.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61986 IP address blocks: 193.164.94.0/24 maxlen: 24 193.164.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:89:20:2e:5b:9f:87:37:c3:ee:b1:56:cd:fb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59f44c60d8270ef77186ffce8184adb8de85a824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a1:3c:4b:58:8f:a1:be:06:af:99:09:34:ab: c1:fd:61:9b:46:ee:c2:5b:7f:e7:77:86:33:61:28: a8:bf:6a:7a:ca:70:79:ee:57:78:f3:7f:ef:5a:ab: 21:be:a7:c4:09:80:ab:b7:ae:0e:62:96:30:77:b6: fb:47:ba:58:75:4a:62:b1:03:99:21:c7:8e:4c:35: 24:db:d8:37:a1:0b:e4:bd:6d:98:bd:dc:40:d2:e0: 75:dd:ae:27:5c:52:a4:ca:80:22:8d:b5:13:d1:ab: 3b:1f:6d:18:ee:05:25:66:aa:a2:f2:77:c9:e2:5a: 9d:f1:16:a2:d9:b3:d9:be:cd:4e:67:04:48:a6:22: a8:ea:2d:59:73:12:a3:23:ed:e9:1e:5e:1d:6f:57: d0:19:83:a4:e9:f0:fd:05:44:c4:29:23:8c:a7:95: a0:21:af:e8:1f:16:4a:dc:32:c2:34:fa:32:4b:21: 74:07:f1:d2:1f:b9:73:3e:b6:c5:2f:b1:ed:1d:08: 90:47:55:6a:58:32:11:df:2c:d7:c8:30:1e:1b:d5: 34:74:53:4b:e6:69:60:76:12:52:90:ab:98:ab:7d: f3:cd:4f:e2:96:28:61:f6:11:db:9c:15:2e:81:a1: ea:8c:06:25:f2:37:8d:39:15:71:16:10:3c:29:2d: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F4:4C:60:D8:27:0E:F7:71:86:FF:CE:81:84:AD:B8:DE:85:A8:24 X509v3 Authority Key Identifier: keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/WfRMYNgnDvdxhv_OgYStuN6FqCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.94.0/23 Signature Algorithm: sha256WithRSAEncryption ba:35:7c:a8:39:8a:0a:80:8f:cb:1c:b1:d6:3c:60:31:12:32: f7:0f:28:51:da:18:59:83:0b:aa:c8:a7:e3:c9:04:f0:0d:b2: 66:fb:b1:26:41:1a:ed:9f:83:f6:28:d0:b9:8a:e5:db:40:4d: 1b:e6:44:91:1b:68:0c:7f:09:a3:31:b0:aa:a6:d6:c3:0b:70: f7:ee:d5:49:45:c5:74:61:fa:69:c5:15:ee:7d:7d:9f:d4:96: b4:30:c6:2b:4a:92:39:bd:34:e6:d0:34:0a:c7:6d:c7:cb:40: b8:cf:f2:dc:54:e0:34:b9:02:fe:89:7d:9e:0a:a3:67:dd:fa: f7:87:52:d3:2e:98:02:2c:63:47:73:4f:b5:ef:a1:68:01:15: dd:d2:ab:2f:68:2d:ea:c3:e4:60:6a:30:57:72:ab:b1:2e:2f: d7:cb:8a:c4:4c:f2:0e:80:37:f6:46:da:4b:cd:97:79:42:70: 95:7f:7d:c6:23:c0:44:cc:73:e2:a5:aa:97:be:d7:d5:ac:b0: f1:d7:d7:25:52:fb:a1:13:a1:67:c1:bf:10:7e:e3:17:c8:43: d7:91:be:0b:9f:34:0c:ed:9f:1f:53:ab:67:65:f0:3f:20:85: 6c:e3:a6:a9:37:5f:2d:af:f2:da:84:b9:3d:ed:0a:3d:83:82: 5f:49:e5:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIkgLlufhzfD7rFWzfuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj MDJmMTcwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWY0NGM2MGQ4MjcwZWY3NzE4NmZmY2U4MTg0YWRiOGRlODVhODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaE8S1iPob4Gr5kJNKvB/WGbRu7C W3/nd4YzYSiov2p6ynB57ld483/vWqshvqfECYCrt64OYpYwd7b7R7pYdUpisQOZ IceOTDUk29g3oQvkvW2YvdxA0uB13a4nXFKkyoAijbUT0as7H20Y7gUlZqqi8nfJ 4lqd8Rai2bPZvs1OZwRIpiKo6i1ZcxKjI+3pHl4db1fQGYOk6fD9BUTEKSOMp5Wg Ia/oHxZK3DLCNPoySyF0B/HSH7lzPrbFL7HtHQiQR1VqWDIR3yzXyDAeG9U0dFNL 5mlgdhJSkKuYq33zzU/ilihh9hHbnBUugaHqjAYl8jeNORVxFhA8KS2qOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFn0TGDYJw73cYb/zoGErbjehagkMB8GA1UdIwQY MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt OTM3ZTI3ZWUxYjViLzEvV2ZSTVlOZ25EdmR4aHZfT2dZU3R1TjZGcUNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwaReMA0G CSqGSIb3DQEBCwUAA4IBAQC6NXyoOYoKgI/LHLHWPGAxEjL3DyhR2hhZgwuqyKfj yQTwDbJm+7EmQRrtn4P2KNC5iuXbQE0b5kSRG2gMfwmjMbCqptbDC3D37tVJRcV0 YfppxRXufX2f1Ja0MMYrSpI5vTTm0DQKx23Hy0C4z/LcVOA0uQL+iX2eCqNn3fr3 h1LTLpgCLGNHc0+176FoARXd0qsvaC3qw+RgajBXcquxLi/Xy4rETPIOgDf2RtpL zZd5QnCVf33GI8BEzHPipaqXvtfVrLDx19clUvuhE6Fnwb8QfuMXyEPXkb4LnzQM 7Z8fU6tnZfA/IIVs46apN18tr/LahLk97Qo9g4JfSeUU -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:33 2026 by rpki-client