This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8whTZ0l1N4rEXlfVl9icSsrt_uw.roa File: 8whTZ0l1N4rEXlfVl9icSsrt_uw.roa (raw, json) Hash identifier: PBWCh7FFUOI0gBB+AvC/9J22z0d7F6lgcJ+Q3qZaGeE= Subject key identifier: F3:08:53:67:49:75:37:8A:C4:5E:57:D5:97:D8:9C:4A:CA:ED:FE:EC Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82CABFB5EB448BB0ACA600909D5087 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8whTZ0l1N4rEXlfVl9icSsrt_uw.roa Signing time: Fri 02 Jan 2026 16:20:36 +0000 ROA not before: Fri 02 Jan 2026 16:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205203 IP address blocks: 194.56.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ca:bf:b5:eb:44:8b:b0:ac:a6:00:90:9d:50:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f30853674975378ac45e57d597d89c4acaedfeec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:94:cc:f0:4a:5f:26:f3:b9:ae:91:c8:d7:79: 52:d0:ae:0d:55:79:e9:46:9b:d4:1f:9b:f9:83:07: 52:2d:45:0a:f3:82:4b:bb:a3:52:65:65:81:42:f7: 47:fd:4c:95:5f:61:72:56:96:cf:83:9c:11:cc:2d: ca:0d:11:7c:ef:ed:2d:6c:29:77:f6:18:5b:dc:fc: 29:af:2d:de:f0:e4:5d:47:40:19:3c:50:f6:25:8f: 18:d9:5d:f6:60:33:1f:8a:c8:a5:fd:e0:f7:fe:8e: 0f:ea:a2:af:cd:7b:1b:00:50:b0:43:6e:69:4c:5a: 17:c9:0c:24:a7:65:53:da:2a:c3:5b:c6:0f:4b:33: bc:e9:6f:49:e6:af:2f:89:0f:e7:8d:58:d1:85:5f: bb:4d:4c:f4:41:6b:ba:6c:73:94:e1:ed:a7:ee:de: 64:05:f3:cf:f5:e3:6e:83:93:f0:aa:f7:b8:bd:be: 26:06:83:1e:eb:d5:40:1a:40:1b:f8:8a:d9:02:09: bd:1b:b0:0b:13:9c:c3:c8:76:c4:07:3b:cc:db:bf: 56:16:55:7b:44:a2:71:40:01:29:ed:f5:5c:b5:4c: 02:9d:38:96:b8:cf:bd:dd:62:50:af:0c:b0:99:d8: b2:04:65:fa:35:2a:fe:72:db:7b:df:00:15:5e:b3: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:08:53:67:49:75:37:8A:C4:5E:57:D5:97:D8:9C:4A:CA:ED:FE:EC X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8whTZ0l1N4rEXlfVl9icSsrt_uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.227.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:51:b7:ee:0f:cc:30:7c:5c:a9:73:0e:12:1c:62:f4:d9:c9: a8:25:a0:93:8c:0e:39:d0:45:1b:7b:16:2b:ed:7c:32:b0:d6: f1:9c:4f:19:e0:32:60:7c:07:cc:b2:46:f6:52:98:95:02:51: f9:40:62:34:0a:42:15:97:cf:13:d3:ac:70:ef:41:c9:c3:1e: 79:6c:81:6d:8f:4d:21:60:9b:57:71:98:4a:83:ed:e1:e7:46: b2:64:a2:a7:64:dd:4a:45:03:b6:3d:14:a3:fa:0a:4b:bf:21: 90:db:37:6f:e5:65:cd:e4:f6:a6:7a:1a:c5:df:5c:59:1c:e3: 9c:49:25:c9:34:92:7f:2f:f7:a8:85:57:93:f5:a4:ff:ec:5a: 9d:dd:00:cc:00:dd:96:2e:04:1a:c0:c8:e2:13:1e:db:7f:91: dd:c4:21:e0:1c:dd:0c:74:2f:4c:d1:42:6d:20:b4:e3:76:df: c5:f4:be:89:21:f2:64:63:04:86:94:a5:41:4b:60:1b:f4:1d: bf:95:b5:32:d9:88:4e:2c:07:ab:ec:ac:8a:08:f6:f7:50:fb: 56:ef:80:60:86:9c:88:1f:32:1e:c4:9a:76:45:0c:7b:4c:58: 92:3d:ba:86:53:5d:d0:b2:22:c7:27:63:7e:b6:0c:a1:b0:57: fd:fc:62:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gsq/tetEi7CspgCQnVCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzA4NTM2NzQ5NzUzNzhhYzQ1ZTU3ZDU5N2Q4OWM0YWNhZWRmZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZTM8EpfJvO5rpHI13lS0K4NVXnp RpvUH5v5gwdSLUUK84JLu6NSZWWBQvdH/UyVX2FyVpbPg5wRzC3KDRF87+0tbCl3 9hhb3Pwpry3e8ORdR0AZPFD2JY8Y2V32YDMfisil/eD3/o4P6qKvzXsbAFCwQ25p TFoXyQwkp2VT2irDW8YPSzO86W9J5q8viQ/njVjRhV+7TUz0QWu6bHOU4e2n7t5k BfPP9eNug5Pwqve4vb4mBoMe69VAGkAb+IrZAgm9G7ALE5zDyHbEBzvM279WFlV7 RKJxQAEp7fVctUwCnTiWuM+93WJQrwywmdiyBGX6NSr+ctt73wAVXrPkgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMIU2dJdTeKxF5X1ZfYnErK7f7sMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvOHdoVFowbDFONHJFWGxmVmw5aWNTc3J0X3V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjjjMA0G CSqGSIb3DQEBCwUAA4IBAQAfUbfuD8wwfFypcw4SHGL02cmoJaCTjA450EUbexYr 7XwysNbxnE8Z4DJgfAfMskb2UpiVAlH5QGI0CkIVl88T06xw70HJwx55bIFtj00h YJtXcZhKg+3h50ayZKKnZN1KRQO2PRSj+gpLvyGQ2zdv5WXN5PamehrF31xZHOOc SSXJNJJ/L/eohVeT9aT/7Fqd3QDMAN2WLgQawMjiEx7bf5HdxCHgHN0MdC9M0UJt ILTjdt/F9L6JIfJkYwSGlKVBS2Ab9B2/lbUy2YhOLAer7KyKCPb3UPtW74BghpyI HzIexJp2RQx7TFiSPbqGU13QsiLHJ2N+tgyhsFf9/GLV -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:42 2026 by rpki-client