This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/WPjlp9q2_irNOFHbvH1KxHiPhtg.roa File: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (raw, json) Hash identifier: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk= Subject key identifier: 58:F8:E5:A7:DA:B6:FE:2A:CD:38:51:DB:BC:7D:4A:C4:78:8F:86:D8 Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F83620E52AA27618E41A4BA3B628EFB Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/WPjlp9q2_irNOFHbvH1KxHiPhtg.roa Signing time: Fri 02 Jan 2026 16:21:15 +0000 ROA not before: Fri 02 Jan 2026 16:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207429 IP address blocks: 95.173.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:62:0e:52:aa:27:61:8e:41:a4:ba:3b:62:8e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58f8e5a7dab6fe2acd3851dbbc7d4ac4788f86d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:8f:3d:84:90:90:32:53:15:45:bf:ff:4d: b4:f8:43:3e:a9:ef:79:91:46:b7:17:86:d4:1a:a4: e3:9d:4b:4d:03:74:d3:2e:c1:6d:85:d1:dc:09:79: 62:80:09:96:0f:b4:a5:83:79:b6:f6:9d:99:d5:15: 4f:5a:31:97:9c:cd:ad:8b:4c:49:9f:17:13:45:e1: 39:79:11:fd:40:ef:99:71:de:39:18:0e:aa:aa:0b: ae:5a:0b:6b:58:3e:7a:ef:a8:ae:7a:48:4f:6f:ac: b7:2d:02:93:10:c3:2e:c3:ba:2d:76:ca:ba:05:30: 2a:1e:fc:d2:f8:f2:40:15:a7:71:15:aa:cd:41:9b: 47:1c:88:59:36:c9:94:a1:73:54:c7:b9:54:11:dc: 72:d7:c8:51:af:52:21:b8:a0:55:5b:ca:7c:2f:5e: 3c:c9:dc:de:65:a2:cb:08:b0:fa:bd:77:34:96:8d: 0b:4d:ea:e0:e6:aa:36:71:81:53:c5:fb:91:9d:5c: 53:d7:7b:45:b3:6b:b6:71:b0:2b:da:21:bf:bb:3f: 7d:29:c7:94:3a:da:f2:b3:71:f8:35:a1:9c:cc:b5: 2a:1b:28:c9:48:98:bd:02:38:fb:4c:d3:a0:3e:86: 77:b6:3d:c2:cf:15:f3:13:06:24:da:2d:8f:dc:91: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F8:E5:A7:DA:B6:FE:2A:CD:38:51:DB:BC:7D:4A:C4:78:8F:86:D8 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/WPjlp9q2_irNOFHbvH1KxHiPhtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.173.182.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:fa:b9:cf:02:26:32:84:5e:d0:ef:96:4f:aa:1a:8a:48:4f: a3:06:79:85:0d:d6:14:15:2a:4d:00:57:5d:10:4d:63:7c:90: c6:b8:c4:8b:a3:f0:74:05:a4:19:f6:58:62:b0:0c:c9:56:61: ab:0d:81:08:9c:f3:04:71:bb:13:23:17:80:30:ac:55:bd:34: 3b:d7:05:96:b9:b2:6f:c0:81:44:63:63:91:98:b4:22:8e:38: ca:1e:db:60:f0:d4:7a:ce:9e:2d:f5:c9:c4:e2:2f:fe:37:6b: 4d:9b:a2:dc:21:70:6d:86:bc:58:fe:57:ad:cf:c0:d2:aa:24: 6e:ae:54:6c:a5:73:87:2f:88:37:2b:a3:0c:a7:c3:7d:2d:aa: bb:9d:b8:45:19:ff:21:d1:7d:83:84:7d:b6:1f:8a:05:22:20: 6e:7e:8d:ce:92:7c:bd:8c:53:e8:57:d4:44:20:f4:38:f1:b9: fe:9d:61:4a:7b:7b:d8:8e:3f:38:03:7e:5d:2b:e9:54:67:9c: a5:58:da:3c:40:ac:cd:87:1c:b7:f5:bd:83:51:76:70:ed:89: 2b:bc:b6:17:44:ce:df:f9:95:38:24:14:96:a4:99:52:9c:44: a3:45:89:03:19:7a:ae:df:a7:fd:b1:c5:76:e0:fa:36:71:8b: ae:fc:6f:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2IOUqonYY5BpLo7Yo77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGY4ZTVhN2RhYjZmZTJhY2QzODUxZGJiYzdkNGFjNDc4OGY4NmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzamPPYSQkDJTFUW//020+EM+qe95 kUa3F4bUGqTjnUtNA3TTLsFthdHcCXligAmWD7Slg3m29p2Z1RVPWjGXnM2ti0xJ nxcTReE5eRH9QO+Zcd45GA6qqguuWgtrWD5676iuekhPb6y3LQKTEMMuw7otdsq6 BTAqHvzS+PJAFadxFarNQZtHHIhZNsmUoXNUx7lUEdxy18hRr1IhuKBVW8p8L148 ydzeZaLLCLD6vXc0lo0LTerg5qo2cYFTxfuRnVxT13tFs2u2cbAr2iG/uz99KceU Otrys3H4NaGczLUqGyjJSJi9Ajj7TNOgPoZ3tj3CzxXzEwYk2i2P3JHKWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFj45afatv4qzThR27x9SsR4j4bYMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvV1BqbHA5cTJfaXJOT0ZIYnZIMUt4SGlQaHRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX622MA0G CSqGSIb3DQEBCwUAA4IBAQAc+rnPAiYyhF7Q75ZPqhqKSE+jBnmFDdYUFSpNAFdd EE1jfJDGuMSLo/B0BaQZ9lhisAzJVmGrDYEInPMEcbsTIxeAMKxVvTQ71wWWubJv wIFEY2ORmLQijjjKHttg8NR6zp4t9cnE4i/+N2tNm6LcIXBthrxY/letz8DSqiRu rlRspXOHL4g3K6MMp8N9Laq7nbhFGf8h0X2DhH22H4oFIiBufo3Okny9jFPoV9RE IPQ48bn+nWFKe3vYjj84A35dK+lUZ5ylWNo8QKzNhxy39b2DUXZw7YkrvLYXRM7f +ZU4JBSWpJlSnESjRYkDGXqu36f9scV24Po2cYuu/G/V -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:37 2026 by rpki-client