This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wGc2VDtvem_11pDToYek7vdXsn4.roa File: wGc2VDtvem_11pDToYek7vdXsn4.roa (raw, json) Hash identifier: RfWDOsXHJbbbsSsuRX9oKmEFT+q/FY3zPjiUbLu532k= Subject key identifier: C0:67:36:54:3B:6F:7A:6F:F5:D6:90:D3:A1:87:A4:EE:F7:57:B2:7E Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8554305B5935A617BE5962CAA163A7 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wGc2VDtvem_11pDToYek7vdXsn4.roa Signing time: Fri 02 Jan 2026 16:23:22 +0000 ROA not before: Fri 02 Jan 2026 16:23:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 194.87.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:54:30:5b:59:35:a6:17:be:59:62:ca:a1:63:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c06736543b6f7a6ff5d690d3a187a4eef757b27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:cf:5c:06:9f:d4:77:2f:9c:1d:81:90:2c: 58:e5:cb:7d:d2:4c:6d:87:54:23:83:e7:a6:3d:3e: 2a:d5:49:96:b8:f5:f9:c1:ef:71:47:3f:1d:47:ad: 97:5e:18:3d:52:34:bd:3b:7c:3d:0a:69:67:24:9e: dd:b7:fd:fa:25:14:26:d2:04:3a:e4:c9:f2:95:b0: f6:36:29:70:3a:ce:53:3e:6e:78:d9:b9:84:7f:30: 4d:cd:a1:88:e7:ca:32:2c:d4:d1:d4:24:5a:36:40: 0e:c5:2d:1a:ec:1d:83:60:4f:b3:55:cb:0f:31:f8: 58:86:8f:2a:74:43:9a:e3:1d:c3:dd:d6:a9:75:c2: f4:21:fe:eb:c2:ab:fe:5e:6a:a1:f1:6b:84:88:94: 61:70:5a:8d:5f:2c:a1:3c:02:46:04:6f:3c:34:6d: df:7b:92:d3:ef:e2:e5:c2:20:07:78:aa:6a:71:75: 62:36:65:fc:a8:f5:90:b7:d0:d2:d7:08:47:df:35: d6:da:05:e7:c6:1a:47:c5:d0:72:fd:47:a4:62:b1: ea:d3:ef:1f:9a:78:b9:ff:67:fa:23:fe:33:53:c1: f0:a5:9e:cf:ec:f1:1a:22:c3:85:a9:8b:4f:6b:78: 20:ca:0a:39:73:f3:71:90:99:8d:26:16:31:ab:d4: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:67:36:54:3B:6F:7A:6F:F5:D6:90:D3:A1:87:A4:EE:F7:57:B2:7E X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wGc2VDtvem_11pDToYek7vdXsn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.148.0/24 Signature Algorithm: sha256WithRSAEncryption 97:2c:47:5a:ad:54:c0:e7:0f:23:28:81:a7:cf:b0:d3:2b:b8: 99:8d:fa:7a:35:5c:4f:c3:c6:97:d5:ab:a0:6e:6f:e5:e0:7d: 70:dd:2c:c2:ed:5c:19:8a:91:51:56:eb:88:59:b0:f0:80:6e: 12:8d:f7:05:b1:90:d8:2b:78:23:88:1f:d7:a8:f7:97:7a:8a: 9b:90:15:50:e3:6b:ff:11:cf:2b:3c:8c:a5:20:65:64:e9:f0: 74:fa:f3:4c:67:e1:5d:cf:af:c0:8b:c9:f6:0a:57:80:49:57: 57:44:b8:a6:4d:03:93:64:89:5a:c5:fe:aa:3a:85:5e:65:d1: 06:3a:d9:a3:ee:24:af:ba:6f:70:29:89:3a:fb:94:ac:9b:d7: 4a:3c:af:ec:7b:75:1a:45:0a:25:43:fe:26:ba:71:df:1b:e5: 16:65:87:39:09:21:06:7f:af:af:31:ac:78:0d:94:9c:02:4b: d7:f5:14:09:4b:7b:13:d9:f4:27:9e:92:a3:04:14:45:c9:c7: a5:9e:bf:ef:53:2d:ae:40:57:af:2d:57:c9:f2:f0:a9:50:02: 37:e9:da:2d:63:d8:9b:d8:9f:8d:d3:ba:74:fa:b3:b5:aa:0b: 87:72:f1:ee:28:22:2a:e6:89:da:fc:12:77:9d:dd:8e:d5:9c: 46:35:7f:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hVQwW1k1phe+WWLKoWOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDY3MzY1NDNiNmY3YTZmZjVkNjkwZDNhMTg3YTRlZWY3NTdiMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXvPXAaf1HcvnB2BkCxY5ct90kxt h1Qjg+emPT4q1UmWuPX5we9xRz8dR62XXhg9UjS9O3w9CmlnJJ7dt/36JRQm0gQ6 5MnylbD2NilwOs5TPm542bmEfzBNzaGI58oyLNTR1CRaNkAOxS0a7B2DYE+zVcsP MfhYho8qdEOa4x3D3dapdcL0If7rwqv+Xmqh8WuEiJRhcFqNXyyhPAJGBG88NG3f e5LT7+LlwiAHeKpqcXViNmX8qPWQt9DS1whH3zXW2gXnxhpHxdBy/UekYrHq0+8f mni5/2f6I/4zU8HwpZ7P7PEaIsOFqYtPa3ggygo5c/NxkJmNJhYxq9S8lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMBnNlQ7b3pv9daQ06GHpO73V7J+MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvd0djMlZEdHZlbV8xMXBEVG9ZZWs3dmRYc240LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwleUMA0G CSqGSIb3DQEBCwUAA4IBAQCXLEdarVTA5w8jKIGnz7DTK7iZjfp6NVxPw8aX1aug bm/l4H1w3SzC7VwZipFRVuuIWbDwgG4SjfcFsZDYK3gjiB/XqPeXeoqbkBVQ42v/ Ec8rPIylIGVk6fB0+vNMZ+Fdz6/Ai8n2CleASVdXRLimTQOTZIlaxf6qOoVeZdEG Otmj7iSvum9wKYk6+5Ssm9dKPK/se3UaRQolQ/4munHfG+UWZYc5CSEGf6+vMax4 DZScAkvX9RQJS3sT2fQnnpKjBBRFycelnr/vUy2uQFevLVfJ8vCpUAI36dotY9ib 2J+N07p0+rO1qguHcvHuKCIq5ona/BJ3nd2O1ZxGNX8I -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:32 2026 by rpki-client