This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/WnqftNCyGGgmMJGMeYqSXlYQgzY.roa File: WnqftNCyGGgmMJGMeYqSXlYQgzY.roa (raw, json) Hash identifier: 3YPIPkErWf+MSDNSaPD3rVTW2gHMw+9WcKSvT6PGvpc= Subject key identifier: 5A:7A:9F:B4:D0:B2:18:68:26:30:91:8C:79:8A:92:5E:56:10:83:36 Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Certificate serial: 019B77C6CE9DCDCFD81837CA4F1F12A0B711 Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/WnqftNCyGGgmMJGMeYqSXlYQgzY.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.73.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ce:9d:cd:cf:d8:18:37:ca:4f:1f:12:a0:b7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a7a9fb4d0b218682630918c798a925e56108336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:16:7d:16:dc:bf:84:34:24:dc:f6:04:00: 27:eb:6c:7c:c4:68:6b:02:95:1d:25:8e:26:b3:22: e7:7d:c4:e0:84:6e:3d:07:8e:e0:1f:71:4d:3a:96: 41:c5:33:a8:a4:39:d8:b8:cd:56:43:4c:6e:29:87: 25:b3:a7:0d:7a:27:92:6b:b0:ff:fd:06:c0:ac:ce: 18:a4:3d:bd:67:a2:42:7f:b2:8a:03:61:77:00:96: 5f:50:52:7c:16:b0:d9:0d:fd:56:fb:0e:c5:67:88: da:b4:60:24:69:6a:6a:44:80:f3:fb:2c:52:68:de: eb:19:f7:ab:74:cf:58:4d:43:1d:46:e7:f3:3d:c7: 43:31:77:86:b7:bf:51:c7:d2:db:a3:c7:0a:ec:f8: 47:15:c9:79:0b:df:3f:28:24:73:8b:4a:e9:be:d2: 07:a2:ef:a9:7f:24:c3:c6:7f:a0:a3:4f:d7:c9:22: b1:7b:e0:d3:e2:ee:ec:eb:23:2e:f6:19:ce:ce:f5: a9:ca:e1:02:90:23:e0:00:3c:bd:b6:52:8a:b1:b9: c0:d2:43:e8:ab:2b:a8:73:91:07:ee:a1:10:43:ab: ce:23:92:52:c6:33:60:ff:b9:62:ce:85:21:bd:83: 76:93:eb:82:63:37:fb:85:75:e5:63:48:81:e6:1d: fd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7A:9F:B4:D0:B2:18:68:26:30:91:8C:79:8A:92:5E:56:10:83:36 X509v3 Authority Key Identifier: keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/WnqftNCyGGgmMJGMeYqSXlYQgzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.73.251.0/24 Signature Algorithm: sha256WithRSAEncryption 68:cc:3f:f9:6f:16:0d:cc:11:fa:4d:4d:67:12:bc:d9:04:c8: 2d:c5:52:2d:3e:89:cf:2e:2e:c4:e3:be:1c:47:7a:46:53:07: c8:ad:eb:af:a1:25:ad:ef:29:91:97:9e:31:70:29:ca:cf:c4: b6:5e:15:50:57:0f:ae:2f:b6:fc:7f:25:de:bf:7d:5a:62:99: db:82:a4:0a:d3:2d:03:d5:2e:5c:b5:18:9d:ee:54:6a:64:ac: 92:ba:fc:ff:53:5c:63:4b:79:9d:e5:1d:ca:42:56:f1:a9:11: c6:97:cb:ff:4d:da:e1:86:59:61:a9:f1:99:d5:0a:6f:d5:88: 21:42:b4:4b:c9:b0:e9:ab:a0:ab:a1:94:1a:9a:14:ad:b9:66: d2:23:58:2f:b7:7e:30:04:52:b2:dc:44:34:30:84:4d:ee:29: ee:f5:6d:26:ee:f6:1c:91:45:c8:d4:5d:a0:d7:65:62:04:b5: 13:53:94:61:07:d4:9f:c6:d4:b9:69:1b:db:d3:fc:70:cd:05: 01:e9:2b:86:cb:56:eb:d5:72:b5:25:41:b8:96:bb:13:8b:23: 7c:75:42:fe:bd:65:64:15:15:34:8f:5d:cc:8b:b4:0f:f5:9e: 0b:d3:76:fe:15:be:4c:2a:32:9b:ed:a9:06:00:fd:6d:85:4a: 0e:ef:71:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xs6dzc/YGDfKTx8SoLcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZjNmYzk2NzhjZTViMDI3MzUzOGM3OGIwYjk2YTEzZWIw ODYyZDkwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTdhOWZiNGQwYjIxODY4MjYzMDkxOGM3OThhOTI1ZTU2MTA4MzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPIWfRbcv4Q0JNz2BAAn62x8xGhr ApUdJY4msyLnfcTghG49B47gH3FNOpZBxTOopDnYuM1WQ0xuKYcls6cNeieSa7D/ /QbArM4YpD29Z6JCf7KKA2F3AJZfUFJ8FrDZDf1W+w7FZ4jatGAkaWpqRIDz+yxS aN7rGferdM9YTUMdRufzPcdDMXeGt79Rx9Lbo8cK7PhHFcl5C98/KCRzi0rpvtIH ou+pfyTDxn+go0/XySKxe+DT4u7s6yMu9hnOzvWpyuECkCPgADy9tlKKsbnA0kPo qyuoc5EH7qEQQ6vOI5JSxjNg/7lizoUhvYN2k+uCYzf7hXXlY0iB5h39iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFp6n7TQshhoJjCRjHmKkl5WEIM2MB8GA1UdIwQY MBaAFJPz/JZ4zlsCc1OMeLC5ahPrCGLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYt YmEwZDNiMmQzNmUwLzEvV25xZnROQ3lHR2dtTUpHTWVZcVNYbFlRZ3pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYtYmEwZDNiMmQzNmUw LzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUn7MA0G CSqGSIb3DQEBCwUAA4IBAQBozD/5bxYNzBH6TU1nErzZBMgtxVItPonPLi7E474c R3pGUwfIreuvoSWt7ymRl54xcCnKz8S2XhVQVw+uL7b8fyXev31aYpnbgqQK0y0D 1S5ctRid7lRqZKySuvz/U1xjS3md5R3KQlbxqRHGl8v/TdrhhllhqfGZ1Qpv1Ygh QrRLybDpq6CroZQamhStuWbSI1gvt34wBFKy3EQ0MIRN7inu9W0m7vYckUXI1F2g 12ViBLUTU5RhB9SfxtS5aRvb0/xwzQUB6SuGy1br1XK1JUG4lrsTiyN8dUL+vWVk FRU0j13Mi7QP9Z4L03b+Fb5MKjKb7akGAP1thUoO73Ht -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:13 2026 by rpki-client