This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/WCLNk0S6vqORmgKeJDM818dTu1M.roa File: WCLNk0S6vqORmgKeJDM818dTu1M.roa (raw, json) Hash identifier: HJRa6AXqmXv+IfwldfcU/sZdG7aCPiXsQWHwTHBII2s= Subject key identifier: 58:22:CD:93:44:BA:BE:A3:91:9A:02:9E:24:33:3C:D7:C7:53:BB:53 Certificate issuer: /CN=6eb213b5b844576a8b48fc5c2eaad5a8ccdd1cc0 Certificate serial: 019B7F1481C1E9CF0C7C9DBDE5407F1AC798 Authority key identifier: 6E:B2:13:B5:B8:44:57:6A:8B:48:FC:5C:2E:AA:D5:A8:CC:DD:1C:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/WCLNk0S6vqORmgKeJDM818dTu1M.roa Signing time: Fri 02 Jan 2026 14:20:08 +0000 ROA not before: Fri 02 Jan 2026 14:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209940 IP address blocks: 212.108.118.0/24 maxlen: 24 2a10:9980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:81:c1:e9:cf:0c:7c:9d:bd:e5:40:7f:1a:c7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb213b5b844576a8b48fc5c2eaad5a8ccdd1cc0 Validity Not Before: Jan 2 14:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5822cd9344babea3919a029e24333cd7c753bb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:03:54:28:06:23:9f:62:d0:6d:f8:f7:23: de:d4:00:25:11:5d:ce:03:71:b2:76:51:81:89:e3: d0:7c:fe:8b:8f:ea:bc:15:af:ec:d8:f1:71:2a:ab: ed:bf:02:9f:aa:8e:fc:67:70:be:fc:bb:af:54:bc: 9e:08:ab:fd:af:f9:0c:83:5a:38:fe:4c:e1:8c:df: 41:b0:8f:2d:5b:5d:23:11:ea:f4:ee:ef:ba:8e:1e: 6d:3f:44:e1:c5:5a:89:ea:eb:71:a8:fd:cf:42:95: c6:5f:fe:f9:9e:d9:5a:d7:d0:23:e5:e2:c7:59:a7: b7:23:9c:41:ed:61:60:fd:ac:ef:a7:f1:66:12:32: ad:6b:92:97:96:19:70:7a:49:22:8b:b7:2f:b4:05: 88:4e:ea:47:3d:b3:b5:69:6d:c8:f4:8a:c7:bc:bf: 3b:48:95:2a:ac:02:de:55:e7:1e:e4:c7:3c:df:d0: 5f:87:f0:66:ec:4e:6f:e1:c1:2d:4e:b2:9a:71:11: 85:12:8c:70:d2:ca:22:19:e2:76:c3:fb:b2:3d:6a: 26:3b:05:5d:96:ca:0a:56:ed:a8:00:73:a8:1d:d7: 2b:a8:40:e6:3c:7b:ab:84:e4:0c:3e:2e:ee:42:8a: c6:4b:41:b6:4c:26:21:72:31:a3:57:ef:4c:9f:18: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:22:CD:93:44:BA:BE:A3:91:9A:02:9E:24:33:3C:D7:C7:53:BB:53 X509v3 Authority Key Identifier: keyid:6E:B2:13:B5:B8:44:57:6A:8B:48:FC:5C:2E:AA:D5:A8:CC:DD:1C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/WCLNk0S6vqORmgKeJDM818dTu1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.118.0/24 IPv6: 2a10:9980::/32 Signature Algorithm: sha256WithRSAEncryption 0a:b5:b7:89:1c:db:4d:91:91:48:f2:f6:3b:ab:be:89:45:e5: 79:17:1a:98:6a:29:b8:f5:77:9c:63:3c:78:bf:75:de:69:ab: 93:40:a9:cd:c9:0f:a6:0a:65:2e:64:fb:49:7c:cd:b7:78:37: 11:b8:84:8b:32:bc:2e:fc:dc:3a:aa:d7:23:30:16:0c:74:b4: bd:8a:e7:28:4a:aa:fa:a8:00:d9:e0:a4:ad:c2:35:8d:65:fb: ee:e6:47:de:52:89:b2:b5:9b:59:4f:70:37:42:28:76:b2:6f: e5:6c:6c:14:34:83:10:a8:b4:a0:7c:45:8f:ca:37:1e:d1:3b: 4f:c6:95:5c:6b:12:ac:ed:ac:33:1d:e9:dc:1e:86:27:20:0c: db:b7:cf:ab:1e:46:41:c0:53:6a:09:cf:12:5f:4d:52:55:13: 1b:1d:4e:49:3f:c0:ba:d7:b1:95:ca:54:69:eb:02:ba:bb:27: fa:32:d1:4a:60:89:8c:af:1f:fd:83:23:4f:11:91:7e:8a:38: a4:b3:48:f4:e0:9a:52:52:d1:81:d9:b1:52:e5:8b:97:5c:12: 1d:a8:5c:1b:60:43:24:f6:4f:c7:72:64:43:d2:e2:e0:5a:11: 4c:55:83:2b:ba:21:bb:46:45:1f:3d:80:53:69:dd:0b:aa:06: 76:c3:64:94 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FIHB6c8MfJ295UB/GseYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjIxM2I1Yjg0NDU3NmE4YjQ4ZmM1YzJlYWFkNWE4Y2Nk ZDFjYzAwHhcNMjYwMTAyMTQyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODIyY2Q5MzQ0YmFiZWEzOTE5YTAyOWUyNDMzM2NkN2M3NTNiYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy8DVCgGI59i0G349yPe1AAlEV3O A3GydlGBiePQfP6Lj+q8Fa/s2PFxKqvtvwKfqo78Z3C+/LuvVLyeCKv9r/kMg1o4 /kzhjN9BsI8tW10jEer07u+6jh5tP0ThxVqJ6utxqP3PQpXGX/75ntla19Aj5eLH Wae3I5xB7WFg/azvp/FmEjKta5KXlhlwekkii7cvtAWITupHPbO1aW3I9IrHvL87 SJUqrALeVece5Mc839Bfh/Bm7E5v4cEtTrKacRGFEoxw0soiGeJ2w/uyPWomOwVd lsoKVu2oAHOoHdcrqEDmPHurhOQMPi7uQorGS0G2TCYhcjGjV+9Mnxh54wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFgizZNEur6jkZoCniQzPNfHU7tTMB8GA1UdIwQY MBaAFG6yE7W4RFdqi0j8XC6q1ajM3RzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJJVHRiaEVWMnFMU1B4Y0xxclZxTXpkSE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jNWZmNDItYmJkOS00N2Y2LThlOWUt YmVjMjE5NWIwMTlkLzEvV0NMTmswUzZ2cU9SbWdLZUpETTgxOGRUdTFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9jNWZmNDItYmJkOS00N2Y2LThlOWUtYmVjMjE5NWIwMTlk LzEvYnJJVHRiaEVWMnFMU1B4Y0xxclZxTXpkSE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1Gx2MA0E AgACMAcDBQAqEJmAMA0GCSqGSIb3DQEBCwUAA4IBAQAKtbeJHNtNkZFI8vY7q76J ReV5FxqYaim49XecYzx4v3XeaauTQKnNyQ+mCmUuZPtJfM23eDcRuISLMrwu/Nw6 qtcjMBYMdLS9iucoSqr6qADZ4KStwjWNZfvu5kfeUomytZtZT3A3Qih2sm/lbGwU NIMQqLSgfEWPyjce0TtPxpVcaxKs7awzHencHoYnIAzbt8+rHkZBwFNqCc8SX01S VRMbHU5JP8C617GVylRp6wK6uyf6MtFKYImMrx/9gyNPEZF+ijiks0j04JpSUtGB 2bFS5YuXXBIdqFwbYEMk9k/HcmRD0uLgWhFMVYMruiG7RkUfPYBTad0LqgZ2w2SU -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:07 2026 by rpki-client