This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wFqns_ovBXtHHSL3hhesXHfdOR4.roa File: wFqns_ovBXtHHSL3hhesXHfdOR4.roa (raw, json) Hash identifier: Lx0nQ30XqQOHtzx4npLK3qWQZhqovu9AWNctEcNfy70= Subject key identifier: C0:5A:A7:B3:FA:2F:05:7B:47:1D:22:F7:86:17:AC:5C:77:DD:39:1E Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106FDB54402B13887583B072E177A2 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wFqns_ovBXtHHSL3hhesXHfdOR4.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213657 IP address blocks: 31.210.43.0/24 maxlen: 24 188.132.215.0/24 maxlen: 24 188.132.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6f:db:54:40:2b:13:88:75:83:b0:72:e1:77:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c05aa7b3fa2f057b471d22f78617ac5c77dd391e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:bd:1d:41:be:f8:75:45:27:c4:dc:cd:87: c6:08:1c:b2:36:28:25:ef:2d:17:2c:a0:dc:65:cf: 2d:d2:a7:64:93:42:2b:cd:8a:42:de:7d:59:42:81: b3:ef:f3:0f:f4:1c:18:a7:e4:60:6b:50:69:99:a1: 9d:f4:7e:b1:87:f5:86:da:5d:a5:1b:3a:78:a3:72: 49:3e:88:ff:0e:89:1b:14:e9:8a:9d:57:ee:35:0d: 0e:ab:f7:c0:ce:49:2d:03:15:93:31:26:ca:ce:8e: 78:20:8f:0e:77:13:b1:9e:72:7d:b7:96:7c:4a:90: d7:8a:16:d2:ff:15:97:95:eb:a9:cf:ec:25:90:26: bb:89:32:31:f4:87:bb:1c:76:2f:69:ad:8a:78:8b: 8c:9a:d0:17:d2:1f:26:22:a0:40:1a:50:c9:4a:a4: 12:ee:44:fe:71:ce:b6:b5:28:bf:26:a0:44:46:63: 2b:6b:46:b8:73:2f:59:bf:ce:e8:f6:1e:aa:52:87: 6e:61:38:f6:3a:69:78:ea:f1:7f:40:24:2e:45:03: f0:05:8d:b3:df:07:10:67:c9:54:3d:01:3b:9c:63: e8:ce:bc:c0:f9:b5:3b:94:ac:ce:7e:2a:96:6b:a9: af:8f:05:cd:d7:40:1b:ea:7d:55:e4:18:20:fc:e8: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5A:A7:B3:FA:2F:05:7B:47:1D:22:F7:86:17:AC:5C:77:DD:39:1E X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wFqns_ovBXtHHSL3hhesXHfdOR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.43.0/24 188.132.215.0/24 188.132.237.0/24 Signature Algorithm: sha256WithRSAEncryption 74:5c:b2:e4:a9:76:a6:a8:5f:b4:12:ab:2d:51:97:b8:35:40: 87:2c:99:d1:80:40:c4:20:20:01:44:3d:89:e6:c7:c4:00:23: 64:6b:ad:39:00:a4:de:06:0f:22:5a:84:db:7c:78:38:82:46: d1:11:d6:8f:dc:cb:a1:a2:56:5e:cd:21:1c:c2:ea:bd:85:6f: ff:d8:c8:aa:a4:8e:6b:e8:70:7e:38:77:10:b7:a5:ea:76:1e: 11:b8:a4:32:83:eb:88:0f:cf:8f:79:48:91:02:c9:ee:a6:12: b9:c6:a7:6a:a8:ca:f8:9b:2e:5f:30:6d:c4:c8:eb:06:73:4a: 1c:97:23:5c:0e:cc:e6:d0:d9:fb:d4:5d:3d:37:ab:13:74:81: 99:bb:dc:91:b1:63:7d:35:5d:f7:71:da:b2:9c:07:e1:d1:dd: d3:6e:72:91:25:85:b5:b4:69:91:2c:e0:e0:c4:a4:51:d2:da: 39:57:27:1f:3d:45:f3:9d:05:b7:d9:2c:03:6c:36:01:4a:9e: ad:ce:ca:48:68:ea:81:a2:11:7a:56:16:a9:c9:f4:42:73:f5: 9b:0d:77:1a:80:d7:10:1f:c2:80:1e:25:b4:81:72:b6:76:29: fe:d8:4c:c2:a0:ec:f6:ad:9b:cd:9a:6b:76:e2:e9:de:96:d8: f2:0d:65:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EG/bVEArE4h1g7By4XeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDVhYTdiM2ZhMmYwNTdiNDcxZDIyZjc4NjE3YWM1Yzc3ZGQzOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cO9HUG++HVFJ8TczYfGCByyNigl 7y0XLKDcZc8t0qdkk0IrzYpC3n1ZQoGz7/MP9BwYp+Rga1BpmaGd9H6xh/WG2l2l Gzp4o3JJPoj/DokbFOmKnVfuNQ0Oq/fAzkktAxWTMSbKzo54II8OdxOxnnJ9t5Z8 SpDXihbS/xWXleupz+wlkCa7iTIx9Ie7HHYvaa2KeIuMmtAX0h8mIqBAGlDJSqQS 7kT+cc62tSi/JqBERmMra0a4cy9Zv87o9h6qUoduYTj2Oml46vF/QCQuRQPwBY2z 3wcQZ8lUPQE7nGPozrzA+bU7lKzOfiqWa6mvjwXN10Ab6n1V5Bgg/OizlwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMBap7P6LwV7Rx0i94YXrFx33TkeMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvd0ZxbnNfb3ZCWHRISFNMM2hoZXNYSGZkT1I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH9IrAwQA vITXAwQAvITtMA0GCSqGSIb3DQEBCwUAA4IBAQB0XLLkqXamqF+0EqstUZe4NUCH LJnRgEDEICABRD2J5sfEACNka605AKTeBg8iWoTbfHg4gkbREdaP3MuholZezSEc wuq9hW//2MiqpI5r6HB+OHcQt6Xqdh4RuKQyg+uID8+PeUiRAsnuphK5xqdqqMr4 my5fMG3EyOsGc0oclyNcDszm0Nn71F09N6sTdIGZu9yRsWN9NV33cdqynAfh0d3T bnKRJYW1tGmRLODgxKRR0to5VycfPUXznQW32SwDbDYBSp6tzspIaOqBohF6Vhap yfRCc/WbDXcagNcQH8KAHiW0gXK2din+2EzCoOz2rZvNmmt24uneltjyDWWb -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:57 2026 by rpki-client