This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/WnoEZcRKFsEIGDrcD6eNi-NlUKc.roa File: WnoEZcRKFsEIGDrcD6eNi-NlUKc.roa (raw, json) Hash identifier: 8G8cCnlz9tk6XzMq2zPRRygvIM2OH91XUUZ803rheUU= Subject key identifier: 5A:7A:04:65:C4:4A:16:C1:08:18:3A:DC:0F:A7:8D:8B:E3:65:50:A7 Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Certificate serial: 019B78348399D0B0C7CEC8B2E341F5E98BF0 Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/WnoEZcRKFsEIGDrcD6eNi-NlUKc.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34083 IP address blocks: 178.219.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:83:99:d0:b0:c7:ce:c8:b2:e3:41:f5:e9:8b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a7a0465c44a16c108183adc0fa78d8be36550a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:72:16:ca:7a:8d:65:e2:4b:ee:c0:a8:f4: ae:8d:e1:fe:4c:69:4e:96:fe:ae:ec:d1:e2:47:0e: 14:27:c5:62:5a:28:c6:1d:a6:1e:53:72:da:f8:aa: 7d:b8:c3:e8:45:e2:47:c3:4a:be:8d:08:d6:7b:23: 41:90:c3:c3:bf:a3:48:de:4f:47:75:cd:5d:1c:eb: 35:35:65:a9:9b:cc:60:bf:bd:99:35:b2:1a:08:7a: 5e:2e:09:fb:35:a7:32:90:b1:c2:6c:03:36:b8:90: 14:4b:eb:9a:a1:45:31:79:9d:74:0d:49:82:ae:5d: d2:95:d3:93:65:53:0f:0b:e9:a8:97:62:b1:3a:6d: 35:96:fa:6a:7f:43:96:db:71:5d:1e:6c:82:a4:48: 25:b5:90:8e:c2:5b:9a:ab:a4:83:16:0c:bf:e7:76: 39:c8:75:98:eb:3c:1a:79:73:81:7d:67:f0:9c:97: dd:1d:3e:4e:5b:ec:5b:22:c8:9c:6d:d4:ff:5b:16: 44:4f:d5:9b:ed:12:58:bc:6d:a4:f8:c9:66:b9:79: e1:72:af:63:0d:22:47:c9:6d:f3:d5:fd:b3:2d:94: 84:bd:0b:98:b1:68:f3:1b:17:05:c3:74:ff:2c:5e: 97:57:0c:41:e1:08:dd:b5:f9:04:7b:30:88:fa:d9: 28:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7A:04:65:C4:4A:16:C1:08:18:3A:DC:0F:A7:8D:8B:E3:65:50:A7 X509v3 Authority Key Identifier: keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/WnoEZcRKFsEIGDrcD6eNi-NlUKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.219.48.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:25:eb:18:25:1e:a9:b3:5f:48:1e:ad:aa:b4:16:11:70:8f: 8e:d2:c4:af:21:fc:fb:e4:f5:d6:7a:07:9b:6b:76:de:a1:fa: f2:8d:de:c1:d0:5d:9f:f3:2b:e9:4e:50:59:a1:1c:c0:ec:85: 7b:3f:5d:36:f8:9d:d8:85:4f:72:75:64:b4:16:37:15:b9:8b: b6:68:93:62:e3:88:08:1f:5e:14:8f:20:01:01:7d:84:c4:41: 42:27:2e:b0:e3:2e:aa:1e:2f:c4:7e:e1:97:a5:bd:96:52:5c: 5a:56:33:fa:f3:ab:86:47:52:d3:7e:ee:b3:1b:e2:bb:4a:96: 2c:ad:67:93:f3:4b:64:06:a2:bc:a9:db:d8:24:c5:e8:55:00: b5:c9:52:a4:e5:38:fe:15:af:58:a3:8a:fe:57:09:41:4e:b4: 2c:c2:5e:17:24:4f:ae:e5:9c:1b:fb:14:15:3d:65:9e:1a:eb: d5:ef:ca:85:cd:cd:47:79:3c:92:d8:f3:eb:fc:0c:65:57:3b: 77:3a:e6:c5:60:6f:53:d0:07:dd:b6:09:46:eb:5e:5c:08:08: f4:5f:6a:4f:26:17:1e:83:4a:24:e1:25:14:f4:eb:40:d1:f2: 8c:35:f9:37:69:fe:87:d2:55:3d:1e:e0:37:ca:e7:6f:95:e0: 5d:06:29:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NIOZ0LDHzsiy40H16YvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl YmY5MzQwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTdhMDQ2NWM0NGExNmMxMDgxODNhZGMwZmE3OGQ4YmUzNjU1MGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRByFsp6jWXiS+7AqPSujeH+TGlO lv6u7NHiRw4UJ8ViWijGHaYeU3La+Kp9uMPoReJHw0q+jQjWeyNBkMPDv6NI3k9H dc1dHOs1NWWpm8xgv72ZNbIaCHpeLgn7NacykLHCbAM2uJAUS+uaoUUxeZ10DUmC rl3SldOTZVMPC+mol2KxOm01lvpqf0OW23FdHmyCpEgltZCOwluaq6SDFgy/53Y5 yHWY6zwaeXOBfWfwnJfdHT5OW+xbIsicbdT/WxZET9Wb7RJYvG2k+MlmuXnhcq9j DSJHyW3z1f2zLZSEvQuYsWjzGxcFw3T/LF6XVwxB4QjdtfkEezCI+tkoMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFp6BGXEShbBCBg63A+njYvjZVCnMB8GA1UdIwQY MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt YjdjMjY5NmJhZTUwLzEvV25vRVpjUktGc0VJR0RyY0Q2ZU5pLU5sVUtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstswMA0G CSqGSIb3DQEBCwUAA4IBAQBOJesYJR6ps19IHq2qtBYRcI+O0sSvIfz75PXWegeb a3beofryjd7B0F2f8yvpTlBZoRzA7IV7P102+J3YhU9ydWS0FjcVuYu2aJNi44gI H14UjyABAX2ExEFCJy6w4y6qHi/EfuGXpb2WUlxaVjP686uGR1LTfu6zG+K7SpYs rWeT80tkBqK8qdvYJMXoVQC1yVKk5Tj+Fa9Yo4r+VwlBTrQswl4XJE+u5Zwb+xQV PWWeGuvV78qFzc1HeTyS2PPr/AxlVzt3OubFYG9T0AfdtglG615cCAj0X2pPJhce g0ok4SUU9OtA0fKMNfk3af6H0lU9HuA3yudvleBdBil1 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:23 2026 by rpki-client