This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/WJgbjZB87tJLoahMumVDjucLblI.roa File: WJgbjZB87tJLoahMumVDjucLblI.roa (raw, json) Hash identifier: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI= Subject key identifier: 58:98:1B:8D:90:7C:EE:D2:4B:A1:A8:4C:BA:65:43:8E:E7:0B:6E:52 Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Certificate serial: 019B77590BB83D47DDC8B3219D1BE9F04D5A Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/WJgbjZB87tJLoahMumVDjucLblI.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 194.56.216.0/23 maxlen: 23 194.56.222.0/23 maxlen: 23 2a0f:13c0::/31 maxlen: 31 2a0f:13c2::/31 maxlen: 31 2a0f:13c4::/31 maxlen: 31 2a0f:13c6::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0b:b8:3d:47:dd:c8:b3:21:9d:1b:e9:f0:4d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58981b8d907ceed24ba1a84cba65438ee70b6e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:11:d8:33:96:d5:04:b0:7e:75:a5:2f:1b: 15:e2:1f:64:7b:1e:7d:a7:27:ca:97:49:a2:b2:e8: 62:35:c5:5e:44:59:28:19:ac:0b:09:51:8f:49:88: 8f:c4:a9:6f:9a:ab:8e:06:f7:09:c3:48:a9:3e:14: 10:fc:3f:56:a7:60:3c:d5:1e:9c:10:be:10:4f:6a: e4:d4:ae:4f:61:68:75:46:79:50:dd:e2:14:19:67: e3:f1:c8:f0:b5:c8:34:d9:a0:30:dc:7f:1e:f4:98: c0:2c:dc:49:42:e8:6b:c3:b3:9f:11:38:ee:ca:3f: f6:9f:3e:3f:3f:19:e8:35:8a:a8:0f:07:01:ed:99: 0c:82:34:67:17:69:00:87:5b:54:a2:04:d9:fd:13: e1:d3:fe:38:22:c1:79:df:7e:d6:48:a8:01:eb:b1: 62:bf:18:bf:8c:2d:a2:df:37:ae:47:bc:23:cd:a0: 86:7b:f6:36:0b:53:60:4f:49:bd:a2:82:2f:99:94: c1:0f:43:4c:cf:31:9a:45:8b:3f:fb:8c:76:39:ca: 04:0d:a1:6c:32:43:cd:22:a0:8d:98:d6:e3:88:6c: ca:b3:36:8f:58:7d:f0:c9:33:be:66:cc:e7:7a:17: c8:b7:f7:61:a3:34:e5:ac:49:11:74:14:7c:ce:6e: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:98:1B:8D:90:7C:EE:D2:4B:A1:A8:4C:BA:65:43:8E:E7:0B:6E:52 X509v3 Authority Key Identifier: keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/WJgbjZB87tJLoahMumVDjucLblI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.216.0/23 194.56.222.0/23 IPv6: 2a0f:13c0::/29 Signature Algorithm: sha256WithRSAEncryption 28:e9:20:2d:ba:cd:4b:aa:ce:61:fd:a0:a2:07:31:74:e3:7c: 16:95:24:8c:6c:9f:ad:f7:f8:5b:60:99:84:75:1b:a1:00:70: 41:88:a5:df:dc:6d:92:98:33:fc:15:66:75:91:31:b3:c3:f9: f5:5c:50:70:e2:a0:8d:7a:4e:24:42:64:1e:3d:05:54:1d:8e: c0:a7:27:06:5f:f6:1b:56:a0:a0:1e:4a:95:2d:e5:e5:b4:3a: 84:c8:34:0d:16:db:4d:f4:68:00:62:c3:a6:85:af:49:71:96: 64:ab:51:5e:b9:2e:19:5d:13:3b:4c:72:8d:50:7e:ba:42:f9: 38:3e:a5:73:6b:55:37:e2:3d:96:58:0b:eb:bb:86:a0:48:2c: 01:12:8a:88:3a:cc:35:7c:d3:60:96:8a:c2:eb:c1:cb:cd:bf: 54:7d:b9:b5:f6:47:dc:ed:18:22:da:34:2c:06:8a:c3:1a:6c: 5a:3a:4c:80:ed:17:6e:00:4a:9b:82:fb:1f:6b:44:ac:cf:61: b2:f6:3d:08:4c:f1:dc:79:d3:6b:30:14:51:54:f3:a5:63:c1: 7e:80:16:5c:c2:87:89:d8:e5:cb:55:ae:fe:eb:4c:80:da:b7: 20:61:7d:a2:95:66:38:56:51:e6:57:18:41:f9:f8:8e:72:93: f2:82:cf:ab -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WQu4PUfdyLMhnRvp8E1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz ODM5YjEwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODk4MWI4ZDkwN2NlZWQyNGJhMWE4NGNiYTY1NDM4ZWU3MGI2ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw0R2DOW1QSwfnWlLxsV4h9kex59 pyfKl0misuhiNcVeRFkoGawLCVGPSYiPxKlvmquOBvcJw0ipPhQQ/D9Wp2A81R6c EL4QT2rk1K5PYWh1RnlQ3eIUGWfj8cjwtcg02aAw3H8e9JjALNxJQuhrw7OfETju yj/2nz4/PxnoNYqoDwcB7ZkMgjRnF2kAh1tUogTZ/RPh0/44IsF5337WSKgB67Fi vxi/jC2i3zeuR7wjzaCGe/Y2C1NgT0m9ooIvmZTBD0NMzzGaRYs/+4x2OcoEDaFs MkPNIqCNmNbjiGzKszaPWH3wyTO+ZsznehfIt/dhozTlrEkRdBR8zm4rPQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFiYG42QfO7SS6GoTLplQ47nC25SMB8GA1UdIwQY MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt YjdmNjM0MjNmMTkyLzEvV0pnYmpaQjg3dEpMb2FoTXVtVkRqdWNMYmxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwjjYAwQB wjjeMA0EAgACMAcDBQMqDxPAMA0GCSqGSIb3DQEBCwUAA4IBAQAo6SAtus1Lqs5h /aCiBzF043wWlSSMbJ+t9/hbYJmEdRuhAHBBiKXf3G2SmDP8FWZ1kTGzw/n1XFBw 4qCNek4kQmQePQVUHY7ApycGX/YbVqCgHkqVLeXltDqEyDQNFttN9GgAYsOmha9J cZZkq1FeuS4ZXRM7THKNUH66Qvk4PqVza1U34j2WWAvru4agSCwBEoqIOsw1fNNg lorC68HLzb9Ufbm19kfc7Rgi2jQsBorDGmxaOkyA7RduAEqbgvsfa0Ssz2Gy9j0I TPHcedNrMBRRVPOlY8F+gBZcwoeJ2OXLVa7+60yA2rcgYX2ilWY4VlHmVxhB+fiO cpPygs+r -----END CERTIFICATE-----Generated at Tue Jan 27 04:24:22 2026 by rpki-client