This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wPJoX9mg9Rx23I8rtqbOPCLPc8I.roa File: wPJoX9mg9Rx23I8rtqbOPCLPc8I.roa (raw, json) Hash identifier: l3l2Mdm57FIasg7/uh5sV1g7I+HzMew/LcAZyRbJPd4= Subject key identifier: C0:F2:68:5F:D9:A0:F5:1C:76:DC:8F:2B:B6:A6:CE:3C:22:CF:73:C2 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA759C99FEB80144D60FC7E53861B85 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wPJoX9mg9Rx23I8rtqbOPCLPc8I.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 176.116.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:59:c9:9f:eb:80:14:4d:60:fc:7e:53:86:1b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0f2685fd9a0f51c76dc8f2bb6a6ce3c22cf73c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:74:6d:8e:07:b5:c1:1c:91:96:0b:16:58: ae:45:3b:00:c9:b4:66:21:b1:37:7a:17:f1:b8:0a: 5f:3e:2a:19:59:18:78:af:ff:53:4c:85:cc:67:5b: 4f:bc:8b:d5:ce:4e:51:57:2d:29:eb:e0:4d:dd:89: 75:45:9d:3c:f6:dd:07:a3:82:4d:5e:bc:9b:30:df: c3:13:bf:5d:50:66:72:7a:b0:bb:7a:b5:5f:1b:95: f5:c2:7e:ab:6d:bc:89:5b:b0:05:85:70:04:15:9f: 44:8b:81:28:cd:92:12:d6:42:ce:44:2e:11:ae:8d: 3c:53:26:34:1f:5a:15:60:55:6e:d3:92:b3:85:6f: 63:12:26:59:80:db:aa:16:a1:44:93:b0:07:de:f3: 5d:9a:b2:3d:d7:d2:91:3d:a9:27:f5:86:bf:a9:8b: 2b:51:c9:dc:f4:74:0c:07:73:9b:8e:9b:6f:39:bd: 5e:9c:79:65:77:ac:d8:6e:90:41:36:18:8a:e9:47: 0b:40:d8:d6:21:c4:14:35:34:1f:6c:77:21:a8:2c: a8:fe:9f:4c:d2:6c:a3:8a:c7:4e:56:4e:0d:18:de: 79:ab:7c:2a:1e:9a:e9:f8:ea:b8:99:be:d1:d1:c7: f0:82:c9:81:b8:6b:f7:c7:23:1b:2a:a5:69:cf:b0: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F2:68:5F:D9:A0:F5:1C:76:DC:8F:2B:B6:A6:CE:3C:22:CF:73:C2 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wPJoX9mg9Rx23I8rtqbOPCLPc8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.31.0/24 Signature Algorithm: sha256WithRSAEncryption 17:9a:99:3d:b0:a1:da:b0:48:62:1c:59:a1:7f:79:9c:ef:ca: d7:db:50:63:10:dd:78:6a:da:3e:6d:96:19:1b:a9:03:36:fa: 32:cb:68:81:2e:40:6d:56:ab:6d:c9:b2:44:d1:d4:80:66:12: 16:9f:c5:f0:39:7a:f7:20:65:07:a3:30:26:5b:d7:e7:df:28: 5b:59:54:d1:69:de:65:73:b2:7d:4b:28:1a:27:1f:b4:12:a1: 46:7e:5b:02:cf:c4:0a:c8:1e:ad:a3:89:02:eb:3a:5d:16:09: 38:3b:a8:18:43:a7:61:d3:87:ed:56:6f:e4:2f:f0:3d:d9:03: e8:20:40:36:49:cf:f0:68:fa:e6:40:3f:83:1c:5e:cd:49:98: a4:03:a6:99:74:34:ba:12:f4:10:cd:31:af:29:8d:3c:d6:10: c0:f3:15:5c:97:70:f1:8a:61:39:05:eb:07:2d:88:b1:0a:f1: 75:eb:54:97:3b:49:9b:fa:b2:5f:ed:9b:dc:b0:5c:c3:22:8e: 0c:43:0b:b2:0f:bd:30:3d:96:53:e3:b0:a1:58:d7:e9:6b:41: d1:9c:c7:94:b8:71:a0:51:5f:db:4b:54:33:af:4d:8c:6d:d8: ec:d9:13:26:5e:86:92:27:1b:d0:7b:9e:4b:b4:f6:76:4b:21: b6:3c:09:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1nJn+uAFE1g/H5ThhuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGYyNjg1ZmQ5YTBmNTFjNzZkYzhmMmJiNmE2Y2UzYzIyY2Y3M2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQR0bY4HtcEckZYLFliuRTsAybRm IbE3ehfxuApfPioZWRh4r/9TTIXMZ1tPvIvVzk5RVy0p6+BN3Yl1RZ089t0Ho4JN XrybMN/DE79dUGZyerC7erVfG5X1wn6rbbyJW7AFhXAEFZ9Ei4EozZIS1kLORC4R ro08UyY0H1oVYFVu05KzhW9jEiZZgNuqFqFEk7AH3vNdmrI919KRPakn9Ya/qYsr Ucnc9HQMB3ObjptvOb1enHlld6zYbpBBNhiK6UcLQNjWIcQUNTQfbHchqCyo/p9M 0myjisdOVk4NGN55q3wqHprp+Oq4mb7R0cfwgsmBuGv3xyMbKqVpz7DWFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMDyaF/ZoPUcdtyPK7amzjwiz3PCMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvd1BKb1g5bWc5UngyM0k4cnRxYk9QQ0xQYzhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQfMA0G CSqGSIb3DQEBCwUAA4IBAQAXmpk9sKHasEhiHFmhf3mc78rX21BjEN14ato+bZYZ G6kDNvoyy2iBLkBtVqttybJE0dSAZhIWn8XwOXr3IGUHozAmW9fn3yhbWVTRad5l c7J9SygaJx+0EqFGflsCz8QKyB6to4kC6zpdFgk4O6gYQ6dh04ftVm/kL/A92QPo IEA2Sc/waPrmQD+DHF7NSZikA6aZdDS6EvQQzTGvKY081hDA8xVcl3DximE5BesH LYixCvF161SXO0mb+rJf7ZvcsFzDIo4MQwuyD70wPZZT47ChWNfpa0HRnMeUuHGg UV/bS1Qzr02Mbdjs2RMmXoaSJxvQe55LtPZ2SyG2PAnZ -----END CERTIFICATE-----Generated at Sat Jan 3 18:57:50 2026 by rpki-client