This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/WCwVS32yfEcbN2t7Mkn04jWo3yw.roa File: WCwVS32yfEcbN2t7Mkn04jWo3yw.roa (raw, json) Hash identifier: tUEpiayS06Kl5jVQDSn5LTrN0f1T2b7gMrtuhq3r7OA= Subject key identifier: 58:2C:15:4B:7D:B2:7C:47:1B:37:6B:7B:32:49:F4:E2:35:A8:DF:2C Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Certificate serial: 019B7E38736E5C9DB3835F1E6BAF3C44DCB4 Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/WCwVS32yfEcbN2t7Mkn04jWo3yw.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3169 IP address blocks: 37.140.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:73:6e:5c:9d:b3:83:5f:1e:6b:af:3c:44:dc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=582c154b7db27c471b376b7b3249f4e235a8df2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:3e:fa:bb:ee:e8:22:7c:73:23:31:42:c7: b9:e0:d3:8c:f7:36:d7:d4:0d:c4:82:49:e0:f6:17: cb:09:fc:50:37:b7:1b:1b:44:00:9a:3b:47:45:98: 9c:c3:8f:c5:dc:78:86:b8:4d:b9:3f:a7:82:b5:25: c0:95:4a:3a:00:07:96:99:7d:24:3c:6a:be:0d:66: 7c:79:8e:ec:20:bc:fb:c5:52:89:50:1c:2d:be:c9: 4f:88:e7:77:41:61:36:28:f9:10:7d:65:12:9f:53: ba:fc:ef:d6:de:34:86:fe:c7:b7:cb:cc:24:7a:62: 8c:26:79:00:ab:e2:49:ba:65:31:1e:16:e8:f6:ce: ec:03:67:71:5e:50:70:8c:46:57:86:c7:5e:65:c2: 19:b5:09:d2:1f:30:35:b4:42:18:fd:81:9a:83:64: e1:82:21:1c:7e:22:19:3a:27:23:54:6b:14:35:62: d4:68:91:36:50:ca:ab:5d:23:36:c6:ec:f1:6b:54: 7b:35:92:c7:b7:d8:f6:82:3f:a9:f9:a3:72:c8:7f: dd:9d:67:c5:d2:d1:b1:b3:c0:09:e2:1d:65:88:13: eb:1c:82:f2:78:dd:8a:a3:c1:1d:aa:63:9c:0d:c9: 9a:76:1c:20:c8:eb:ef:63:8b:42:3b:5a:8c:a2:8d: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2C:15:4B:7D:B2:7C:47:1B:37:6B:7B:32:49:F4:E2:35:A8:DF:2C X509v3 Authority Key Identifier: keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/WCwVS32yfEcbN2t7Mkn04jWo3yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.217.0/24 Signature Algorithm: sha256WithRSAEncryption 78:0a:f6:5b:53:22:32:9c:21:b1:47:df:93:cb:fe:e1:29:f5: 3e:30:5a:47:f3:51:77:65:d3:7c:7e:05:94:9b:fb:43:d4:37: e9:e1:5c:4a:08:ad:d9:13:77:bd:c0:0b:07:a5:15:ab:a9:db: 1a:82:0f:d0:1e:6e:5b:6b:7e:9e:ee:4a:aa:19:c0:02:7d:f7: 31:11:3a:5c:ec:85:ae:0f:03:5e:33:ee:df:cd:d3:e8:b5:94: cf:b6:4a:8a:b1:55:d7:0d:17:bf:ea:90:30:e0:f9:4d:57:c8: 3d:76:78:43:d1:47:a4:9b:73:76:23:86:f4:6f:77:d6:fa:90: ac:61:7a:4d:e1:02:cc:d3:3c:f0:2f:4c:b1:3a:f2:63:01:e2: df:d8:17:a8:39:a3:b3:cb:3c:8d:9a:f3:30:19:12:dc:5e:7d: f1:72:3f:fe:9c:6e:b1:25:15:91:dd:fe:1b:d5:28:4c:03:0e: 18:43:03:8e:ff:f8:6b:1a:7c:16:f7:2c:41:08:54:79:8b:77: e4:0f:a6:c7:8c:5e:65:47:c9:19:72:59:fb:49:40:21:a6:83: 50:12:da:1f:94:88:68:63:2e:80:ec:0d:e6:46:12:9c:e8:ee: 92:4a:1b:fd:ac:39:3b:17:77:17:97:57:e4:eb:1f:4e:02:55: 6b:9a:3a:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHNuXJ2zg18ea688RNy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk NjNhYjgwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODJjMTU0YjdkYjI3YzQ3MWIzNzZiN2IzMjQ5ZjRlMjM1YThkZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSo++rvu6CJ8cyMxQse54NOM9zbX 1A3Egkng9hfLCfxQN7cbG0QAmjtHRZicw4/F3HiGuE25P6eCtSXAlUo6AAeWmX0k PGq+DWZ8eY7sILz7xVKJUBwtvslPiOd3QWE2KPkQfWUSn1O6/O/W3jSG/se3y8wk emKMJnkAq+JJumUxHhbo9s7sA2dxXlBwjEZXhsdeZcIZtQnSHzA1tEIY/YGag2Th giEcfiIZOicjVGsUNWLUaJE2UMqrXSM2xuzxa1R7NZLHt9j2gj+p+aNyyH/dnWfF 0tGxs8AJ4h1liBPrHILyeN2Ko8EdqmOcDcmadhwgyOvvY4tCO1qMoo2PQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgsFUt9snxHGzdrezJJ9OI1qN8sMB8GA1UdIwQY MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt YzRhY2I4OTY5YzQ5LzEvV0N3VlMzMnlmRWNiTjJ0N01rbjA0aldvM3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5 LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYzZMA0G CSqGSIb3DQEBCwUAA4IBAQB4CvZbUyIynCGxR9+Ty/7hKfU+MFpH81F3ZdN8fgWU m/tD1Dfp4VxKCK3ZE3e9wAsHpRWrqdsagg/QHm5ba36e7kqqGcACffcxETpc7IWu DwNeM+7fzdPotZTPtkqKsVXXDRe/6pAw4PlNV8g9dnhD0Uekm3N2I4b0b3fW+pCs YXpN4QLM0zzwL0yxOvJjAeLf2BeoOaOzyzyNmvMwGRLcXn3xcj/+nG6xJRWR3f4b 1ShMAw4YQwOO//hrGnwW9yxBCFR5i3fkD6bHjF5lR8kZcln7SUAhpoNQEtoflIho Yy6A7A3mRhKc6O6SShv9rDk7F3cXl1fk6x9OAlVrmjp2 -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:56 2026 by rpki-client