This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/WMgmsEayGnr1pZe3H9NN2CHd77g.roa File: WMgmsEayGnr1pZe3H9NN2CHd77g.roa (raw, json) Hash identifier: zGw2D4YXZ0KjnW8TfKgDO8pHI8zwt8QjHq3ulqRfwEg= Subject key identifier: 58:C8:26:B0:46:B2:1A:7A:F5:A5:97:B7:1F:D3:4D:D8:21:DD:EF:B8 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019C1AEA077B6576F0BE95376B0DFCA92C8B Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/WMgmsEayGnr1pZe3H9NN2CHd77g.roa Signing time: Sun 01 Feb 2026 20:34:30 +0000 ROA not before: Sun 01 Feb 2026 20:34:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137331 IP address blocks: 103.216.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1a:ea:07:7b:65:76:f0:be:95:37:6b:0d:fc:a9:2c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Feb 1 20:34:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58c826b046b21a7af5a597b71fd34dd821ddefb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:40:02:7e:e7:00:44:70:a2:eb:19:0d:16: 7d:17:f2:a7:2e:2b:0e:2f:16:e1:fd:4b:11:ad:a9: 2d:1d:ea:5a:d6:42:f2:00:c3:01:71:4c:7d:3a:2f: d1:51:79:f5:af:c7:c5:6a:f2:96:b4:cb:30:83:1f: 42:b1:4b:d9:b5:e3:36:d3:fb:94:c6:c2:47:42:54: ac:bc:54:d2:26:e4:51:23:28:12:69:1b:6a:74:0d: f1:72:08:d9:07:46:cc:7c:2b:f1:02:e0:da:8b:d7: e0:95:64:47:35:f4:44:f2:34:a5:d2:58:60:d7:42: be:31:da:c6:2e:77:0e:4c:ae:5b:e8:d5:94:fa:d1: eb:87:21:46:3d:f1:a3:67:a7:45:51:25:d3:aa:fa: 0e:61:e6:6f:ba:39:c4:85:0e:df:54:c4:20:93:2e: 3d:9a:28:31:ac:d3:8c:50:d4:c4:b8:4c:fa:39:9e: 2a:0d:63:d6:63:80:8d:78:dc:55:59:4a:51:4d:89: 93:ed:3a:7e:da:67:94:e6:58:b3:b9:a8:24:2d:90: be:a1:80:a8:3f:b5:48:a4:ec:08:62:7b:a5:d0:69: 2b:08:b8:42:de:86:ff:43:a7:db:16:4b:0e:06:d1: 13:6a:a5:35:b9:fc:94:34:26:71:b5:e0:65:13:0e: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C8:26:B0:46:B2:1A:7A:F5:A5:97:B7:1F:D3:4D:D8:21:DD:EF:B8 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/WMgmsEayGnr1pZe3H9NN2CHd77g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.174.0/24 Signature Algorithm: sha256WithRSAEncryption 78:b3:d5:6f:23:a1:b2:db:20:2e:b9:91:70:6d:06:1d:68:c9: 3a:4c:1e:e8:64:a5:e0:0c:fb:93:74:de:b1:4f:8a:47:b1:20: cc:60:de:69:5d:68:40:7f:1d:47:0c:90:4d:d5:ee:aa:e0:da: cc:0f:19:90:0c:e9:a8:93:9f:1e:54:28:a2:ac:27:ef:c7:e3: 1e:8b:3a:7d:c8:a6:a7:87:af:91:a1:8d:74:63:df:9c:55:ea: 6a:78:57:f8:99:42:4c:b2:14:4b:2f:94:0e:64:68:19:32:a7: d0:14:c2:a8:17:12:a4:1c:c3:8c:87:c7:ce:d5:a7:4e:3c:5d: d9:fa:d9:25:0a:ce:83:06:66:67:8f:a0:8c:04:ed:12:b4:29: 99:b8:df:b1:ba:9e:84:e6:0b:09:f1:b9:56:46:0b:52:25:7c: 39:1e:3b:88:08:0a:9a:52:be:86:df:8f:5e:71:c8:88:91:fd: 4f:33:8e:b4:08:77:77:12:2d:97:3c:52:14:f1:f9:38:aa:dd: 5d:b8:cd:99:c1:95:8e:aa:d1:0f:84:22:a4:ee:cf:04:b0:d8: 36:d9:31:16:07:31:35:c5:80:97:02:e9:0c:62:59:13:71:1c: 49:9c:e5:64:30:ef:57:8a:13:f8:76:25:42:9c:f0:fd:9f:e4: 84:ae:c3:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwa6gd7ZXbwvpU3aw38qSyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMjAxMjAzNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGM4MjZiMDQ2YjIxYTdhZjVhNTk3YjcxZmQzNGRkODIxZGRlZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1NAAn7nAERwousZDRZ9F/KnLisO Lxbh/UsRraktHepa1kLyAMMBcUx9Oi/RUXn1r8fFavKWtMswgx9CsUvZteM20/uU xsJHQlSsvFTSJuRRIygSaRtqdA3xcgjZB0bMfCvxAuDai9fglWRHNfRE8jSl0lhg 10K+MdrGLncOTK5b6NWU+tHrhyFGPfGjZ6dFUSXTqvoOYeZvujnEhQ7fVMQgky49 migxrNOMUNTEuEz6OZ4qDWPWY4CNeNxVWUpRTYmT7Tp+2meU5lizuagkLZC+oYCo P7VIpOwIYnul0GkrCLhC3ob/Q6fbFksOBtETaqU1ufyUNCZxteBlEw7hXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjIJrBGshp69aWXtx/TTdgh3e+4MB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvV01nbXNFYXlHbnIxcFplM0g5Tk4yQ0hkNzdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9iuMA0G CSqGSIb3DQEBCwUAA4IBAQB4s9VvI6Gy2yAuuZFwbQYdaMk6TB7oZKXgDPuTdN6x T4pHsSDMYN5pXWhAfx1HDJBN1e6q4NrMDxmQDOmok58eVCiirCfvx+Meizp9yKan h6+RoY10Y9+cVepqeFf4mUJMshRLL5QOZGgZMqfQFMKoFxKkHMOMh8fO1adOPF3Z +tklCs6DBmZnj6CMBO0StCmZuN+xup6E5gsJ8blWRgtSJXw5HjuICAqaUr6G349e cciIkf1PM460CHd3Ei2XPFIU8fk4qt1duM2ZwZWOqtEPhCKk7s8EsNg22TEWBzE1 xYCXAukMYlkTcRxJnOVkMO9XihP4diVCnPD9n+SErsP5 -----END CERTIFICATE-----Generated at Mon Feb 2 17:17:22 2026 by rpki-client