This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/WDCEfBOgZu0IS0tXVscqDchFouE.roa File: WDCEfBOgZu0IS0tXVscqDchFouE.roa (raw, json) Hash identifier: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU= Subject key identifier: 58:30:84:7C:13:A0:66:ED:08:4B:4B:57:56:C7:2A:0D:C8:45:A2:E1 Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7 Certificate serial: 019B7B355DE1E9864F474257B438C47F8CD4 Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/WDCEfBOgZu0IS0tXVscqDchFouE.roa Signing time: Thu 01 Jan 2026 20:17:33 +0000 ROA not before: Thu 01 Jan 2026 20:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41509 IP address blocks: 194.145.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:5d:e1:e9:86:4f:47:42:57:b4:38:c4:7f:8c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7 Validity Not Before: Jan 1 20:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5830847c13a066ed084b4b5756c72a0dc845a2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:20:7c:85:98:1f:fc:49:84:92:d5:31:fa:cf: 69:93:95:d9:29:6b:87:98:ea:19:52:14:3d:d6:0c: 07:e5:35:97:60:23:d2:c9:32:3b:bb:dd:38:fa:95: 48:f6:98:ee:5f:12:3f:81:51:b5:5b:c8:d0:6b:fc: ea:88:61:2a:de:f7:b3:99:ce:93:2f:dd:63:d9:35: 93:77:ad:e6:23:fa:39:53:f6:38:a3:f0:c8:c4:72: 71:3d:3e:c5:d9:7a:59:02:d0:23:d2:4d:56:89:08: 1c:ff:f2:54:aa:9c:cc:8e:d4:ac:98:27:02:15:93: aa:85:e0:13:37:c1:07:7d:14:e6:46:27:15:db:88: 4e:23:bb:d8:d6:80:76:c2:b4:33:37:2c:78:f0:70: 23:40:2f:94:8c:67:7e:0b:8f:3b:a4:2f:9c:fc:dc: 6e:e1:21:98:e5:80:05:7a:54:88:0e:df:1f:f3:dc: 75:e6:91:2a:0d:b2:43:3e:14:14:53:d6:44:02:5e: ca:b9:b6:db:b6:1f:a7:66:b2:24:e9:58:1a:b3:97: b4:8a:78:6b:3c:3e:83:c4:5f:4c:0e:a4:18:e4:41: ca:82:7c:62:85:bb:40:6a:cf:1e:9f:e0:2c:c7:40: 04:86:25:fb:2a:2d:40:bc:f0:3b:86:4a:25:1c:73: d0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:30:84:7C:13:A0:66:ED:08:4B:4B:57:56:C7:2A:0D:C8:45:A2:E1 X509v3 Authority Key Identifier: keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/WDCEfBOgZu0IS0tXVscqDchFouE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.156.0/24 Signature Algorithm: sha256WithRSAEncryption 67:20:8d:e5:a5:ee:9c:93:74:72:14:ae:28:33:e8:a2:11:1f: 98:79:a8:09:f3:22:38:64:b9:4b:3f:bc:10:d3:db:b8:02:88: c7:ab:f2:c7:24:85:69:10:48:74:c4:4c:ba:b2:c6:16:0f:5f: b4:67:e3:4f:dc:4e:12:4d:e9:04:d6:44:0d:ce:64:ec:22:bb: 85:89:b5:7a:66:4d:d2:3f:2c:a3:bd:d8:87:e7:04:1a:6f:e8: f5:c7:20:6d:c0:0f:60:83:0e:f0:f8:e8:e5:6a:e4:80:f3:36: 22:65:49:48:d0:4c:fb:9f:04:f2:ed:86:b8:08:37:80:85:e1: e8:75:85:9e:f9:18:97:08:aa:46:62:cf:8e:84:eb:47:55:19: e1:9b:c3:f3:11:bc:0b:f3:c0:09:ff:59:e0:dc:b7:02:11:13: a8:11:31:3f:a5:4d:2a:06:b3:e3:8f:e1:4c:c2:c7:e1:69:8c: 48:90:45:89:1f:79:af:17:71:5f:ec:ff:41:2c:14:b0:b8:11: 4b:c7:db:d8:9a:c7:4d:83:5d:1b:65:d0:72:a6:17:90:27:b2: 73:1b:52:1a:4c:71:3f:ba:84:03:f4:30:bc:01:ea:89:55:b1: 7c:3f:cf:4a:02:c1:14:2f:3c:16:cc:c6:23:ef:14:31:28:a7: ab:fc:db:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NV3h6YZPR0JXtDjEf4zUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmY0ZWU2MjNkOGZhYjczYzkwMWQwY2JkYzkzYTMyMWU5 Y2NmYjcwHhcNMjYwMTAxMjAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODMwODQ3YzEzYTA2NmVkMDg0YjRiNTc1NmM3MmEwZGM4NDVhMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSB8hZgf/EmEktUx+s9pk5XZKWuH mOoZUhQ91gwH5TWXYCPSyTI7u904+pVI9pjuXxI/gVG1W8jQa/zqiGEq3vezmc6T L91j2TWTd63mI/o5U/Y4o/DIxHJxPT7F2XpZAtAj0k1WiQgc//JUqpzMjtSsmCcC FZOqheATN8EHfRTmRicV24hOI7vY1oB2wrQzNyx48HAjQC+UjGd+C487pC+c/Nxu 4SGY5YAFelSIDt8f89x15pEqDbJDPhQUU9ZEAl7Kubbbth+nZrIk6Vgas5e0inhr PD6DxF9MDqQY5EHKgnxihbtAas8en+Asx0AEhiX7Ki1AvPA7hkolHHPQ2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgwhHwToGbtCEtLV1bHKg3IRaLhMB8GA1UdIwQY MBaAFIj/TuYj2Pq3PJAdDL3JOjIenM+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgt MjUwN2RiMzJjMWM0LzEvV0RDRWZCT2dadTBJUzB0WFZzY3FEY2hGb3VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgtMjUwN2RiMzJjMWM0 LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpGcMA0G CSqGSIb3DQEBCwUAA4IBAQBnII3lpe6ck3RyFK4oM+iiER+YeagJ8yI4ZLlLP7wQ 09u4AojHq/LHJIVpEEh0xEy6ssYWD1+0Z+NP3E4STekE1kQNzmTsIruFibV6Zk3S PyyjvdiH5wQab+j1xyBtwA9ggw7w+OjlauSA8zYiZUlI0Ez7nwTy7Ya4CDeAheHo dYWe+RiXCKpGYs+OhOtHVRnhm8PzEbwL88AJ/1ng3LcCEROoETE/pU0qBrPjj+FM wsfhaYxIkEWJH3mvF3Ff7P9BLBSwuBFLx9vYmsdNg10bZdBypheQJ7JzG1IaTHE/ uoQD9DC8AeqJVbF8P89KAsEULzwWzMYj7xQxKKer/Nuo -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:06 2026 by rpki-client