This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WI8JgSCZLHCL652joWkrWjzQORs.roa File: WI8JgSCZLHCL652joWkrWjzQORs.roa (raw, json) Hash identifier: /BTJz8XvNdCruB8rGDg2zdl17z7E5xGPXsbQYwwUZjk= Subject key identifier: 58:8F:09:81:20:99:2C:70:8B:EB:9D:A3:A1:69:2B:5A:3C:D0:39:1B Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA76082DA209EA55E900F693C01810D Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WI8JgSCZLHCL652joWkrWjzQORs.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212416 IP address blocks: 194.104.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:60:82:da:20:9e:a5:5e:90:0f:69:3c:01:81:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=588f098120992c708beb9da3a1692b5a3cd0391b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:2f:01:82:9c:d2:e7:36:f0:e0:4e:e8:f2: 1d:cb:2f:7c:96:10:56:ae:b4:c3:f6:48:29:83:0f: c2:c5:36:b3:ed:a9:18:6e:8a:28:0a:08:60:ee:86: 15:4a:9a:31:43:8a:b1:28:42:fb:fa:a0:d2:98:5d: 31:8e:a1:58:b9:c0:bc:63:e1:78:d3:83:96:79:b9: 70:f0:2c:8a:14:e0:dc:87:a5:5e:ae:dc:54:cf:76: 82:06:d5:b6:6d:62:12:93:e9:30:0c:df:79:8c:05: b9:da:7d:d4:40:9d:82:6d:de:ac:a0:ad:4b:b9:c7: b0:0e:fc:1d:06:4d:32:6a:63:39:91:2b:55:37:64: 4f:76:89:f9:f0:dd:93:37:eb:15:52:64:68:09:04: 82:a2:4a:a1:0d:8f:b2:74:38:3f:06:83:02:1e:29: d6:47:ce:2c:a8:12:3f:e4:a3:11:bf:6b:54:22:41: 8e:77:9b:25:c8:90:40:bc:e9:eb:ff:4f:5e:99:41: f4:d0:09:c9:c9:ea:a2:88:51:49:a7:79:5f:df:b2: c4:82:82:ae:d5:87:04:20:43:d6:e9:18:72:e9:52: 9a:35:6c:4c:c3:e1:6d:1f:1b:d2:e7:27:99:64:13: 9d:88:5d:54:1d:e3:82:19:2f:08:2f:b9:86:a6:60: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:09:81:20:99:2C:70:8B:EB:9D:A3:A1:69:2B:5A:3C:D0:39:1B X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WI8JgSCZLHCL652joWkrWjzQORs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.131.0/24 Signature Algorithm: sha256WithRSAEncryption c2:58:ef:08:54:e0:f8:b9:d0:11:3b:72:de:db:f0:c4:c1:33: 69:61:a1:6a:f8:2c:f4:7e:08:76:9e:42:15:b9:27:21:ca:f8: b7:35:42:43:84:54:d6:b3:be:2a:3b:23:16:ba:d1:f0:67:f4: 93:04:8c:ee:25:f8:65:eb:4b:78:28:18:cc:03:bf:a7:4d:e8: a4:a1:f4:87:bd:20:db:63:d1:c5:23:71:eb:3a:86:e2:82:29: 37:15:15:1d:29:5f:ab:ed:94:e5:11:c0:a2:d4:5e:4d:6b:a6: bc:9a:73:df:aa:9b:94:54:21:79:53:7d:80:13:a7:4a:7e:a1: c7:75:23:0c:0c:36:ed:ad:23:f6:e1:9d:0b:38:40:da:52:e7: 1b:27:c4:f9:71:8f:1a:c2:52:54:aa:7d:97:3b:c4:94:2e:c1: c2:c2:49:9e:d5:1c:fa:31:19:84:46:34:2d:e8:b1:e5:2b:54: 02:3f:19:25:ad:aa:61:ad:b4:d0:76:ab:d9:bc:30:e5:f6:dd: e8:14:9d:bf:c2:ec:95:d2:d4:7d:8a:78:1d:5e:36:40:45:7c: 2a:c3:bf:08:d3:3e:43:bf:74:2f:14:ee:9a:f7:a9:ce:37:d5: 09:0e:32:97:6b:a2:9f:4c:d8:3c:f3:7b:b2:e7:34:cf:7d:9c: 87:ef:2c:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p2CC2iCepV6QD2k8AYENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODhmMDk4MTIwOTkyYzcwOGJlYjlkYTNhMTY5MmI1YTNjZDAzOTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIEvAYKc0uc28OBO6PIdyy98lhBW rrTD9kgpgw/CxTaz7akYboooCghg7oYVSpoxQ4qxKEL7+qDSmF0xjqFYucC8Y+F4 04OWeblw8CyKFODch6VertxUz3aCBtW2bWISk+kwDN95jAW52n3UQJ2Cbd6soK1L ucewDvwdBk0yamM5kStVN2RPdon58N2TN+sVUmRoCQSCokqhDY+ydDg/BoMCHinW R84sqBI/5KMRv2tUIkGOd5slyJBAvOnr/09emUH00AnJyeqiiFFJp3lf37LEgoKu 1YcEIEPW6Rhy6VKaNWxMw+FtHxvS5yeZZBOdiF1UHeOCGS8IL7mGpmD29QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFiPCYEgmSxwi+udo6FpK1o80DkbMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvV0k4SmdTQ1pMSENMNjUyam9Xa3JXanpRT1JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiDMA0G CSqGSIb3DQEBCwUAA4IBAQDCWO8IVOD4udARO3Le2/DEwTNpYaFq+Cz0fgh2nkIV uSchyvi3NUJDhFTWs74qOyMWutHwZ/STBIzuJfhl60t4KBjMA7+nTeikofSHvSDb Y9HFI3HrOobigik3FRUdKV+r7ZTlEcCi1F5Na6a8mnPfqpuUVCF5U32AE6dKfqHH dSMMDDbtrSP24Z0LOEDaUucbJ8T5cY8awlJUqn2XO8SULsHCwkme1Rz6MRmERjQt 6LHlK1QCPxklraphrbTQdqvZvDDl9t3oFJ2/wuyV0tR9ingdXjZARXwqw78I0z5D v3QvFO6a96nON9UJDjKXa6KfTNg883uy5zTPfZyH7yx4 -----END CERTIFICATE-----Generated at Sat Jan 3 18:57:53 2026 by rpki-client