This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/WSkrs1ltbglcOvmgNNdKDlpJVJo.roa File: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (raw, json) Hash identifier: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU= Subject key identifier: 59:29:2B:B3:59:6D:6E:09:5C:3A:F9:A0:34:D7:4A:0E:5A:49:54:9A Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019B7EA613FCF7CBA4B7500C28ACBD867E9D Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/WSkrs1ltbglcOvmgNNdKDlpJVJo.roa Signing time: Fri 02 Jan 2026 12:19:31 +0000 ROA not before: Fri 02 Jan 2026 12:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208324 IP address blocks: 194.127.108.0/24 maxlen: 24 194.127.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:13:fc:f7:cb:a4:b7:50:0c:28:ac:bd:86:7e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Jan 2 12:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59292bb3596d6e095c3af9a034d74a0e5a49549a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:f9:a5:b4:9d:8b:c6:33:24:90:d4:31:08: 92:e4:3c:62:2a:93:db:61:ef:00:24:1a:47:09:46: 6f:8d:05:f7:6c:f1:3d:ca:a5:41:4d:5b:2b:bf:26: 27:5f:0b:b5:3d:ac:df:bc:63:ac:9d:57:2f:0b:8f: 62:f9:47:2d:79:72:93:6e:59:91:5a:b8:e1:64:a5: b5:4f:e6:47:0e:42:a9:77:b7:01:41:de:b0:98:fa: c3:9f:40:f3:3c:97:7f:96:52:a5:41:d7:4b:fc:9b: e8:52:22:91:ac:a6:9a:c5:ec:40:84:5c:8a:dc:c1: 85:02:db:ab:c2:fe:c6:da:4d:56:d6:b7:e7:bb:fe: 4e:83:84:99:10:e4:ee:8f:ee:89:1d:49:d4:e2:26: 32:c2:e3:e1:b1:49:b9:23:5e:9d:3e:6a:0c:cf:b7: 55:b7:75:0e:64:a9:79:9a:d4:a8:85:90:d0:99:7c: e6:ac:7e:1c:44:cb:14:89:c1:35:d8:27:33:f5:c9: 71:57:93:fd:20:9a:28:7a:13:59:a6:5f:7e:d6:ad: 13:8c:06:4b:c0:18:51:10:2e:e5:6b:fc:13:6d:b3: 7c:9b:1e:80:79:41:24:7c:d4:f4:2b:7f:22:c1:28: e2:2f:7d:37:75:bf:53:91:c2:b4:d9:c4:78:1a:4e: fd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:29:2B:B3:59:6D:6E:09:5C:3A:F9:A0:34:D7:4A:0E:5A:49:54:9A X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/WSkrs1ltbglcOvmgNNdKDlpJVJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.108.0/24 194.127.110.0/24 Signature Algorithm: sha256WithRSAEncryption 04:db:f9:ee:5d:ab:ef:27:a2:2a:91:4c:ae:4d:93:fc:a9:f0: 2f:68:0b:7d:48:e7:5e:d5:21:55:05:c6:da:b5:9b:7f:66:27: ff:da:6c:bf:4b:56:a8:81:ce:b3:76:1b:fe:bd:0c:af:36:8a: 02:9b:4b:df:80:f3:fb:58:fd:43:89:dd:7c:f0:e9:37:24:02: b2:e7:40:99:5c:d4:31:79:18:a7:3d:2f:53:74:22:43:8a:2a: 9e:8c:5f:84:5e:c1:2f:b8:ca:57:16:a3:22:5a:eb:7d:f1:e0: 1f:da:64:9e:62:cd:83:43:52:ba:1e:4f:b7:3b:47:54:ba:4e: 70:91:72:b3:d8:eb:c6:7b:ed:61:01:95:3f:be:8d:be:69:60: 08:95:b6:37:30:3f:78:1e:27:9e:b0:42:e4:b0:b2:09:c7:6e: 2d:4f:89:1f:32:41:2b:dd:6a:c1:56:a3:30:54:59:4f:c8:1c: ef:47:e3:d0:0e:01:9a:2c:9e:65:1e:11:a7:f7:c7:6f:12:f6: 74:cb:c0:ea:fe:b7:e1:fd:71:d4:35:be:47:f3:7c:33:79:9c: 21:ee:db:71:30:6e:b1:ca:30:68:ef:f1:45:4b:60:47:81:a6: f6:5a:ab:43:67:0a:89:57:4d:81:68:c0:cb:d7:9a:89:a3:74: f1:e0:0d:e7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+phP898ukt1AMKKy9hn6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjYwMTAyMTIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTI5MmJiMzU5NmQ2ZTA5NWMzYWY5YTAzNGQ3NGEwZTVhNDk1NDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKb5pbSdi8YzJJDUMQiS5DxiKpPb Ye8AJBpHCUZvjQX3bPE9yqVBTVsrvyYnXwu1PazfvGOsnVcvC49i+UcteXKTblmR WrjhZKW1T+ZHDkKpd7cBQd6wmPrDn0DzPJd/llKlQddL/JvoUiKRrKaaxexAhFyK 3MGFAturwv7G2k1W1rfnu/5Og4SZEOTuj+6JHUnU4iYywuPhsUm5I16dPmoMz7dV t3UOZKl5mtSohZDQmXzmrH4cRMsUicE12Ccz9clxV5P9IJooehNZpl9+1q0TjAZL wBhREC7la/wTbbN8mx6AeUEkfNT0K38iwSjiL303db9TkcK02cR4Gk79ewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFkpK7NZbW4JXDr5oDTXSg5aSVSaMB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvV1NrcnMxbHRiZ2xjT3ZtZ05OZEtEbHBKVkpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwn9sAwQA wn9uMA0GCSqGSIb3DQEBCwUAA4IBAQAE2/nuXavvJ6IqkUyuTZP8qfAvaAt9SOde 1SFVBcbatZt/Zif/2my/S1aogc6zdhv+vQyvNooCm0vfgPP7WP1Did188Ok3JAKy 50CZXNQxeRinPS9TdCJDiiqejF+EXsEvuMpXFqMiWut98eAf2mSeYs2DQ1K6Hk+3 O0dUuk5wkXKz2OvGe+1hAZU/vo2+aWAIlbY3MD94HieesELksLIJx24tT4kfMkEr 3WrBVqMwVFlPyBzvR+PQDgGaLJ5lHhGn98dvEvZ0y8Dq/rfh/XHUNb5H83wzeZwh 7ttxMG6xyjBo7/FFS2BHgab2WqtDZwqJV02BaMDL15qJo3Tx4A3n -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:59 2026 by rpki-client