This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/W9Cit6LkL_9xY708no6eldK9_jM.roa File: W9Cit6LkL_9xY708no6eldK9_jM.roa (raw, json) Hash identifier: xffjMvZ1DYRGx1/oav0AgtKcHwsZj1OKHUORpBxzvbE= Subject key identifier: 5B:D0:A2:B7:A2:E4:2F:FF:71:63:BD:3C:9E:8E:9E:95:D2:BD:FE:33 Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Certificate serial: 019B78A22F079373BD2250826DEE26B3E1FE Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/W9Cit6LkL_9xY708no6eldK9_jM.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201874 IP address blocks: 194.104.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2f:07:93:73:bd:22:50:82:6d:ee:26:b3:e1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bd0a2b7a2e42fff7163bd3c9e8e9e95d2bdfe33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:be:2d:a9:b3:58:c0:c8:f2:af:82:7a:a1: 15:9b:8f:67:8f:65:3c:90:3e:f9:ec:15:d8:69:20: c1:50:ea:ee:85:e8:2d:9f:1b:73:19:b4:f8:f9:02: 1e:6d:6f:08:7a:0d:3e:b2:f9:b9:6b:a9:dc:ce:a3: 1f:2b:4e:d1:b3:60:f2:40:63:1f:ac:0a:b3:98:54: ea:31:4a:09:bc:70:61:04:d7:ec:da:2a:d7:f3:02: 59:68:1d:ac:63:0e:bc:d6:e8:92:29:b5:04:00:b0: b7:db:32:ad:a1:89:b0:b8:3f:5e:06:34:10:1c:71: f7:ea:0c:f1:db:4e:f2:38:84:1c:79:3a:ce:27:a3: 28:f3:fe:b7:ae:7d:82:e5:b9:52:d7:5e:06:5e:e3: 37:ce:91:24:ff:36:9e:4d:bb:8b:8a:4d:b1:4e:38: 3f:a1:73:20:d2:e5:e0:44:89:9e:5d:80:08:6e:c1: 3b:e3:c1:69:4f:e7:2c:8d:fb:26:9a:02:c1:42:72: 54:02:18:fb:d5:b4:3d:46:13:d3:e7:e9:a9:c4:16: 09:03:63:50:ae:3f:e6:17:e5:68:cc:f5:89:8c:82: 14:f6:9f:b7:0e:96:da:21:42:b5:94:bc:7f:72:86: 5a:91:b6:38:9e:cc:9b:65:98:14:57:62:91:e9:7b: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D0:A2:B7:A2:E4:2F:FF:71:63:BD:3C:9E:8E:9E:95:D2:BD:FE:33 X509v3 Authority Key Identifier: keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/W9Cit6LkL_9xY708no6eldK9_jM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.191.0/24 Signature Algorithm: sha256WithRSAEncryption 63:7d:d6:a1:16:df:f3:df:7d:a4:1c:8d:b6:43:b6:50:df:bd: f9:b8:88:21:e1:0a:03:77:94:aa:6d:8d:28:25:4d:e1:62:c2: 82:74:41:30:05:dc:74:4d:c4:93:fa:5a:86:9e:91:8e:b4:bf: 2e:6f:c1:fc:13:d1:3d:fe:74:f0:17:3c:c3:bd:50:0a:2e:00: 41:65:41:27:7f:88:c5:a3:9d:29:7a:44:31:66:b8:29:21:ea: 3d:81:21:ba:92:40:8c:2b:7c:1c:9a:17:49:0e:72:ec:84:ff: 55:f1:b8:5c:a7:7b:4c:d0:c4:a4:89:7e:59:ff:36:47:ad:b1: cf:79:88:be:f7:71:b4:6b:83:e7:8f:01:e4:aa:02:4a:13:1d: e9:bd:11:e6:a4:2f:1d:70:ed:79:c0:92:8e:55:82:b9:d0:14: 02:2f:f1:7f:7a:69:4e:88:7d:c9:b4:78:3f:99:96:6d:43:a4: 5a:15:32:ee:a3:fc:8f:15:ac:5d:c5:f4:ea:08:a6:43:6d:a5: e2:4c:39:d9:f1:0d:d3:93:11:83:01:fe:8a:94:d5:6a:ca:18: 14:8b:6e:76:2c:8a:62:c4:39:24:59:5b:e5:93:d3:e4:f6:4f: 4d:01:9b:d3:18:cf:e7:80:da:a4:d5:a8:51:d7:a5:eb:23:b9: 05:65:96:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi8Hk3O9IlCCbe4ms+H+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm MGViN2IwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQwYTJiN2EyZTQyZmZmNzE2M2JkM2M5ZThlOWU5NWQyYmRmZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMS+LamzWMDI8q+CeqEVm49nj2U8 kD757BXYaSDBUOruhegtnxtzGbT4+QIebW8Ieg0+svm5a6nczqMfK07Rs2DyQGMf rAqzmFTqMUoJvHBhBNfs2irX8wJZaB2sYw681uiSKbUEALC32zKtoYmwuD9eBjQQ HHH36gzx207yOIQceTrOJ6Mo8/63rn2C5blS114GXuM3zpEk/zaeTbuLik2xTjg/ oXMg0uXgRImeXYAIbsE748FpT+csjfsmmgLBQnJUAhj71bQ9RhPT5+mpxBYJA2NQ rj/mF+VozPWJjIIU9p+3DpbaIUK1lLx/coZakbY4nsybZZgUV2KR6Xui2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvQorei5C//cWO9PJ6OnpXSvf4zMB8GA1UdIwQY MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt MzE4MGFlNDI3NGYzLzEvVzlDaXQ2TGtMXzl4WTcwOG5vNmVsZEs5X2pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmi/MA0G CSqGSIb3DQEBCwUAA4IBAQBjfdahFt/z332kHI22Q7ZQ3735uIgh4QoDd5SqbY0o JU3hYsKCdEEwBdx0TcST+lqGnpGOtL8ub8H8E9E9/nTwFzzDvVAKLgBBZUEnf4jF o50pekQxZrgpIeo9gSG6kkCMK3wcmhdJDnLshP9V8bhcp3tM0MSkiX5Z/zZHrbHP eYi+93G0a4PnjwHkqgJKEx3pvRHmpC8dcO15wJKOVYK50BQCL/F/emlOiH3JtHg/ mZZtQ6RaFTLuo/yPFaxdxfTqCKZDbaXiTDnZ8Q3TkxGDAf6KlNVqyhgUi252LIpi xDkkWVvlk9Pk9k9NAZvTGM/ngNqk1ahR16XrI7kFZZan -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:31 2026 by rpki-client