This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/WAj8AC6cZrbept-Nm9z-z_zHUD4.roa File: WAj8AC6cZrbept-Nm9z-z_zHUD4.roa (raw, json) Hash identifier: P3ihNDztpQFazGFe+CWzMgjczagukwmAc6Qo3EggvCQ= Subject key identifier: 58:08:FC:00:2E:9C:66:B6:DE:A6:DF:8D:9B:DC:FE:CF:FC:C7:50:3E Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Certificate serial: 019B78A3091E4A9781DB48E881EDEF91D0F8 Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/WAj8AC6cZrbept-Nm9z-z_zHUD4.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48076 IP address blocks: 217.199.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:09:1e:4a:97:81:db:48:e8:81:ed:ef:91:d0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5808fc002e9c66b6dea6df8d9bdcfecffcc7503e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:72:d1:dc:04:1d:be:da:9e:9f:21:c1:e6: 32:4e:23:c1:b6:98:ff:9f:d6:4c:64:fc:86:8b:76: d9:c3:4d:c2:d1:31:8b:1c:fc:5e:bc:ea:41:6d:12: b1:66:b3:c0:f5:b3:b3:30:3f:3c:14:61:63:19:4a: f6:a1:7b:e3:43:7d:32:54:6b:b6:66:52:2b:26:0e: 71:76:fd:04:28:13:15:1a:9c:8b:d1:57:31:61:f0: 35:b9:a3:34:eb:2a:6f:2a:a9:b5:03:29:d7:8c:c0: d7:cf:74:03:a8:e6:36:90:bb:30:02:87:a6:92:cb: d3:3c:32:77:08:62:3c:64:d8:11:60:e1:4c:7b:43: 14:1d:93:3f:eb:20:fc:ff:2c:7d:0b:08:f6:31:f7: ad:9b:6d:19:eb:57:bd:bb:12:79:5a:56:6a:50:85: 96:09:93:ce:42:62:22:47:d5:39:1d:a9:07:b3:c5: 00:fa:db:6d:21:6d:ab:7f:93:b6:f7:a0:cd:d7:7c: ac:e9:b5:b9:89:60:b8:f8:18:64:88:84:5b:de:b8: fa:62:39:76:96:fd:62:1b:3a:08:50:e5:aa:4a:7c: af:a9:c4:ee:be:4e:71:74:9c:1c:99:6d:45:27:7a: 46:a7:4f:d8:b8:a4:1e:f6:6b:d4:75:64:d5:aa:1a: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:FC:00:2E:9C:66:B6:DE:A6:DF:8D:9B:DC:FE:CF:FC:C7:50:3E X509v3 Authority Key Identifier: keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/WAj8AC6cZrbept-Nm9z-z_zHUD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.199.211.0/24 Signature Algorithm: sha256WithRSAEncryption 29:a5:bd:8f:e6:8f:ae:01:1a:30:06:3a:7f:76:c1:96:d0:c5: 41:a9:7f:7c:ef:bb:73:be:b8:53:dd:c1:dd:6b:7c:4a:8c:7a: 85:0a:96:d4:4f:b7:65:13:21:4d:e1:c0:c3:5f:2c:06:3c:47: 3a:17:30:dd:22:5e:dc:2b:1e:8c:2b:3a:9a:77:1f:00:ea:55: 6d:6e:74:82:9c:e0:a0:c7:31:91:ac:b6:60:d9:5c:0b:73:66: 64:86:15:f4:21:15:ee:50:f8:93:50:76:4d:4c:e3:5a:d0:76: 6d:f9:f0:f8:ef:5d:c3:d2:e1:13:b4:90:f1:27:c1:bd:08:9b: 52:4f:77:17:f4:7e:44:4e:8a:84:fc:8a:d3:8a:bf:db:bf:2e: 9d:8e:6a:7e:19:85:33:fb:90:0e:b1:45:0d:21:e6:07:1f:af: ae:c5:b9:9a:d0:00:90:42:0f:99:fa:88:1e:bd:73:e6:36:d2: 44:92:43:41:93:41:4e:8a:19:37:f7:99:b0:92:2c:79:5f:80: 43:6d:79:ff:06:f3:86:31:1b:90:11:f1:f1:f7:a2:1a:2c:94: 9c:e1:e2:67:bd:f9:7e:89:d9:65:4b:ec:a2:ce:f8:70:46:66: 09:c6:9d:b9:9a:0e:2c:a6:70:37:b6:f6:8d:35:a0:23:f7:f7: 03:70:e7:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owkeSpeB20joge3vkdD4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm OGMxY2UwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODA4ZmMwMDJlOWM2NmI2ZGVhNmRmOGQ5YmRjZmVjZmZjYzc1MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro9y0dwEHb7anp8hweYyTiPBtpj/ n9ZMZPyGi3bZw03C0TGLHPxevOpBbRKxZrPA9bOzMD88FGFjGUr2oXvjQ30yVGu2 ZlIrJg5xdv0EKBMVGpyL0VcxYfA1uaM06ypvKqm1AynXjMDXz3QDqOY2kLswAoem ksvTPDJ3CGI8ZNgRYOFMe0MUHZM/6yD8/yx9Cwj2Mfetm20Z61e9uxJ5WlZqUIWW CZPOQmIiR9U5HakHs8UA+tttIW2rf5O296DN13ys6bW5iWC4+BhkiIRb3rj6Yjl2 lv1iGzoIUOWqSnyvqcTuvk5xdJwcmW1FJ3pGp0/YuKQe9mvUdWTVqhpX4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgI/AAunGa23qbfjZvc/s/8x1A+MB8GA1UdIwQY MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt YzQ3ZTE4ZGYwMzcxLzEvV0FqOEFDNmNacmJlcHQtTm05ei16X3pIVUQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cfTMA0G CSqGSIb3DQEBCwUAA4IBAQAppb2P5o+uARowBjp/dsGW0MVBqX9877tzvrhT3cHd a3xKjHqFCpbUT7dlEyFN4cDDXywGPEc6FzDdIl7cKx6MKzqadx8A6lVtbnSCnOCg xzGRrLZg2VwLc2ZkhhX0IRXuUPiTUHZNTONa0HZt+fD4713D0uETtJDxJ8G9CJtS T3cX9H5EToqE/IrTir/bvy6djmp+GYUz+5AOsUUNIeYHH6+uxbma0ACQQg+Z+oge vXPmNtJEkkNBk0FOihk395mwkix5X4BDbXn/BvOGMRuQEfHx96IaLJSc4eJnvfl+ idllS+yizvhwRmYJxp25mg4spnA3tvaNNaAj9/cDcOd8 -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:04 2026 by rpki-client