This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/WubjxHCSaP4QHue8QiWJLn9wu24.roa File: WubjxHCSaP4QHue8QiWJLn9wu24.roa (raw, json) Hash identifier: gOCleJwqwii3IPAc/S3k490GMZ5rkPiOH6rY9OCeZlc= Subject key identifier: 5A:E6:E3:C4:70:92:68:FE:10:1E:E7:BC:42:25:89:2E:7F:70:BB:6E Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac Certificate serial: 019B7834B73EFBAF99D15948A8A4630AC806 Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/WubjxHCSaP4QHue8QiWJLn9wu24.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35916 IP address blocks: 188.208.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b7:3e:fb:af:99:d1:59:48:a8:a4:63:0a:c8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ae6e3c4709268fe101ee7bc4225892e7f70bb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:d3:f1:ff:64:07:dc:76:fa:9e:52:87:d5: ae:43:77:19:4b:e6:e1:2d:9d:9c:6c:17:de:20:5b: d9:99:07:c4:89:0c:f7:3e:8f:74:42:b6:87:4d:95: 5f:ee:c9:68:ae:a7:fc:5b:a3:f3:af:5e:e4:e4:7a: c5:45:12:72:66:40:0c:c1:e8:12:0f:37:21:d2:78: 7b:8c:4a:83:fa:df:c6:61:e5:77:ba:7a:46:5c:70: bc:a8:f3:10:c8:0a:89:7a:61:ef:c1:9c:69:02:d6: d7:e0:fb:c2:fe:58:2a:e9:2c:5b:c3:02:92:db:6e: 3c:e0:8b:8a:c1:01:4c:1e:1b:c6:a3:6f:76:b4:b9: f4:ee:7b:d1:be:65:63:93:8d:e7:62:04:54:d0:1b: 35:4d:dc:d2:2d:0e:0e:db:4f:53:cd:90:50:d1:4e: 8e:fd:2f:b9:82:e2:f1:8d:9d:16:5a:71:a2:4a:f7: 12:16:08:93:db:96:fe:76:67:8c:9d:82:02:57:a0: 23:29:16:0d:76:a3:13:7c:db:80:44:55:6a:47:58: 08:02:bf:fc:24:5a:d3:82:16:fa:29:54:2d:84:f8: 71:f6:17:15:fd:42:92:bf:6f:d2:80:63:4c:52:10: fe:c0:7a:86:f6:ed:09:87:d4:dd:58:d9:1a:0d:2e: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E6:E3:C4:70:92:68:FE:10:1E:E7:BC:42:25:89:2E:7F:70:BB:6E X509v3 Authority Key Identifier: keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/WubjxHCSaP4QHue8QiWJLn9wu24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.208.142.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:70:93:51:9a:9a:02:28:1b:b7:14:64:f3:c1:d4:8c:57:94: 1a:e4:c0:40:f8:70:ba:72:8d:5e:e2:37:9c:a4:df:27:c3:ca: cd:92:32:6a:89:6a:f8:34:b0:5b:00:c0:9e:24:66:21:ca:be: 62:d9:cc:a1:e8:24:45:32:90:8c:70:f2:31:e1:99:84:cc:27: 39:3e:37:e2:36:89:e7:ce:4a:24:08:7d:46:ee:58:44:f0:26: b3:5b:8c:20:e3:5f:b1:0c:9c:7a:b5:e6:13:95:41:58:a3:3d: 7b:8a:35:d8:ee:0c:09:e1:3a:a2:9e:85:9e:07:89:e8:ba:f4: f3:fb:b4:76:6a:cd:91:f8:c8:4c:63:48:e6:3b:f5:a9:15:ea: f9:15:58:a4:11:0a:fc:59:5b:de:49:13:85:74:62:7a:c5:31: f5:65:66:a0:fa:46:0d:2b:f6:70:79:a4:39:35:22:89:56:13: c3:f0:7e:6c:6e:8f:6e:6a:f7:8c:d5:b3:f0:1b:0f:dc:36:e4: bc:f5:33:b3:3a:a8:c2:30:96:08:cf:41:25:df:62:a0:fd:37: a6:76:8f:1a:0e:d9:e5:c0:24:47:3f:63:4c:c7:b4:e8:b8:0b: 20:ae:d1:a0:b9:fb:94:16:a8:14:0a:12:12:39:58:1b:cd:db: 9d:8f:47:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLc++6+Z0VlIqKRjCsgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk MTdiYWMwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWU2ZTNjNDcwOTI2OGZlMTAxZWU3YmM0MjI1ODkyZTdmNzBiYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4TT8f9kB9x2+p5Sh9WuQ3cZS+bh LZ2cbBfeIFvZmQfEiQz3Po90QraHTZVf7slorqf8W6Pzr17k5HrFRRJyZkAMwegS Dzch0nh7jEqD+t/GYeV3unpGXHC8qPMQyAqJemHvwZxpAtbX4PvC/lgq6SxbwwKS 22484IuKwQFMHhvGo292tLn07nvRvmVjk43nYgRU0Bs1TdzSLQ4O209TzZBQ0U6O /S+5guLxjZ0WWnGiSvcSFgiT25b+dmeMnYICV6AjKRYNdqMTfNuARFVqR1gIAr/8 JFrTghb6KVQthPhx9hcV/UKSv2/SgGNMUhD+wHqG9u0Jh9TdWNkaDS53OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrm48Rwkmj+EB7nvEIliS5/cLtuMB8GA1UdIwQY MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt N2Y0MzViZjU1MDFjLzEvV3VianhIQ1NhUDRRSHVlOFFpV0pMbjl3dTI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNCOMA0G CSqGSIb3DQEBCwUAA4IBAQCecJNRmpoCKBu3FGTzwdSMV5Qa5MBA+HC6co1e4jec pN8nw8rNkjJqiWr4NLBbAMCeJGYhyr5i2cyh6CRFMpCMcPIx4ZmEzCc5PjfiNonn zkokCH1G7lhE8CazW4wg41+xDJx6teYTlUFYoz17ijXY7gwJ4TqinoWeB4nouvTz +7R2as2R+MhMY0jmO/WpFer5FVikEQr8WVveSROFdGJ6xTH1ZWag+kYNK/ZweaQ5 NSKJVhPD8H5sbo9uaveM1bPwGw/cNuS89TOzOqjCMJYIz0El32Kg/Temdo8aDtnl wCRHP2NMx7TouAsgrtGgufuUFqgUChISOVgbzdudj0fY -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:34 2026 by rpki-client