This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wnUflu0ltIJsBnWnFkratT7Oos0.roa File: wnUflu0ltIJsBnWnFkratT7Oos0.roa (raw, json) Hash identifier: l75v5zPkUctxHK/F38YYwAQT27FmARXk0NXPQb73RLo= Subject key identifier: C2:75:1F:96:ED:25:B4:82:6C:06:75:A7:16:4A:DA:B5:3E:CE:A2:CD Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37B4ADB7C5D7ECFE2D9EA0A65BB4BE Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wnUflu0ltIJsBnWnFkratT7Oos0.roa Signing time: Fri 02 Jan 2026 10:18:58 +0000 ROA not before: Fri 02 Jan 2026 10:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28022 IP address blocks: 190.106.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b4:ad:b7:c5:d7:ec:fe:2d:9e:a0:a6:5b:b4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2751f96ed25b4826c0675a7164adab53ecea2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:3f:a6:14:a7:51:40:af:4e:58:c1:f1:1c: 82:6d:a2:75:bd:d3:c8:9e:18:9c:5c:cf:cc:99:44: 74:5f:b7:33:13:0a:a5:79:01:ca:24:47:61:2f:c0: b8:01:f6:b8:ba:6d:76:13:7e:c5:f1:a0:25:02:26: be:dc:01:79:f1:2a:56:ad:7a:0e:82:37:e8:c9:b7: 9e:ef:e6:29:78:f5:fa:8a:e5:20:09:1e:84:14:81: e1:8d:f2:31:8d:3a:e0:a2:73:80:86:49:25:7d:d9: 81:c8:db:45:b1:1e:bf:af:c8:18:15:57:bb:2f:f3: c2:cb:b2:11:6a:13:9d:7e:79:b4:fd:a3:82:15:cf: 1a:11:71:0c:df:71:c1:28:9e:a2:c5:26:04:fc:36: a7:c1:cd:08:0e:13:11:55:77:d3:47:db:17:5d:91: 13:10:ac:64:c8:3a:eb:c0:dc:85:38:b4:e3:69:98: 77:75:83:98:ff:84:d8:44:be:69:9b:5a:aa:cb:10: 44:68:60:86:68:cf:19:d4:ea:27:48:80:55:8f:6f: 83:e6:1f:28:5f:98:b4:a0:cd:c2:c3:74:43:fb:6c: 75:c0:96:58:ea:3b:45:fe:04:9f:34:7b:e2:b5:68: f5:40:50:4f:5f:cf:67:e0:4d:42:ba:c4:1a:0b:40: af:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:75:1F:96:ED:25:B4:82:6C:06:75:A7:16:4A:DA:B5:3E:CE:A2:CD X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wnUflu0ltIJsBnWnFkratT7Oos0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.106.64.0/20 Signature Algorithm: sha256WithRSAEncryption 88:ec:b7:20:ba:76:c6:53:3b:e2:91:0d:53:79:b1:dd:b7:58: b7:78:dd:51:69:d6:7d:7a:a1:8f:4d:38:23:ba:23:fe:73:ac: 54:00:ac:4f:c0:5a:c6:5d:8f:90:3d:3f:76:07:e0:2d:64:e9: e4:ad:c8:c5:1b:48:bf:b8:ed:b3:20:6c:e6:13:0b:11:e8:eb: cf:45:0d:80:0e:8d:0f:56:f7:4f:11:21:6b:1e:8c:87:d4:6a: 1c:ce:64:24:c7:e3:b4:4d:96:1f:f0:02:dc:c3:4e:25:11:5e: 02:3c:e0:de:74:b9:95:05:0f:db:02:8d:87:62:74:97:7a:77: 6d:5d:e4:17:5d:3a:c5:53:7e:fe:4b:4d:9f:33:24:3e:dd:28: 81:6e:74:ae:5a:4f:41:9a:63:de:cc:41:41:1e:22:ad:8c:21: de:73:46:9a:d8:ee:65:e0:3c:58:d1:0b:e4:7e:ff:4e:e3:a1: f5:95:49:a6:1a:59:8b:fe:c5:07:a0:24:e5:fe:72:2d:cd:4a: 1b:7a:5d:3a:1b:52:55:1b:c4:9c:7c:d7:0e:55:bb:06:a5:70: bb:0a:87:6d:1f:5f:f6:65:12:db:e3:ac:7a:1e:87:05:21:c9: 65:1b:75:73:b2:3c:f0:7f:00:ca:78:9b:eb:5a:17:92:5e:ed: 97:61:cb:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7Stt8XX7P4tnqCmW7S+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjc1MWY5NmVkMjViNDgyNmMwNjc1YTcxNjRhZGFiNTNlY2VhMmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygI/phSnUUCvTljB8RyCbaJ1vdPI nhicXM/MmUR0X7czEwqleQHKJEdhL8C4Afa4um12E37F8aAlAia+3AF58SpWrXoO gjfoybee7+YpePX6iuUgCR6EFIHhjfIxjTrgonOAhkklfdmByNtFsR6/r8gYFVe7 L/PCy7IRahOdfnm0/aOCFc8aEXEM33HBKJ6ixSYE/Danwc0IDhMRVXfTR9sXXZET EKxkyDrrwNyFOLTjaZh3dYOY/4TYRL5pm1qqyxBEaGCGaM8Z1OonSIBVj2+D5h8o X5i0oM3Cw3RD+2x1wJZY6jtF/gSfNHvitWj1QFBPX89n4E1CusQaC0CvTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJ1H5btJbSCbAZ1pxZK2rU+zqLNMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvd25VZmx1MGx0SUpzQm5XbkZrcmF0VDdPb3MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvmpAMA0G CSqGSIb3DQEBCwUAA4IBAQCI7LcgunbGUzvikQ1TebHdt1i3eN1RadZ9eqGPTTgj uiP+c6xUAKxPwFrGXY+QPT92B+AtZOnkrcjFG0i/uO2zIGzmEwsR6OvPRQ2ADo0P VvdPESFrHoyH1GoczmQkx+O0TZYf8ALcw04lEV4CPODedLmVBQ/bAo2HYnSXendt XeQXXTrFU37+S02fMyQ+3SiBbnSuWk9BmmPezEFBHiKtjCHec0aa2O5l4DxY0Qvk fv9O46H1lUmmGlmL/sUHoCTl/nItzUobel06G1JVG8ScfNcOVbsGpXC7CodtH1/2 ZRLb46x6HocFIcllG3VzsjzwfwDKeJvrWheSXu2XYcsZ -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:25 2026 by rpki-client