This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/wcKXCZWW_WrMj-H0vskgHgbK58g.roa File: wcKXCZWW_WrMj-H0vskgHgbK58g.roa (raw, json) Hash identifier: TD379ppG8Ut76tU11pZP2K3s8S4pqHUKncAJlr7fy8Q= Subject key identifier: C1:C2:97:09:95:96:FD:6A:CC:8F:E1:F4:BE:C9:20:1E:06:CA:E7:C8 Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019B7F8132033B71E9D30BD69FFD2BDBD3B2 Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/wcKXCZWW_WrMj-H0vskgHgbK58g.roa Signing time: Fri 02 Jan 2026 16:18:51 +0000 ROA not before: Fri 02 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197106 IP address blocks: 94.31.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:32:03:3b:71:e9:d3:0b:d6:9f:fd:2b:db:d3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 2 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1c297099596fd6acc8fe1f4bec9201e06cae7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:48:52:0d:38:b8:3e:b6:3b:08:00:6c:26:2c: ae:c3:d8:32:08:04:00:a5:cc:9f:ec:93:c7:08:ae: 56:eb:83:44:bd:c8:1f:0e:1f:21:aa:bb:4f:4e:2a: 44:d3:90:60:cc:b7:aa:6b:44:9e:0a:16:68:bb:37: de:68:f3:64:b8:9f:ae:01:27:c2:27:4a:53:9b:8c: d1:8f:cf:05:3e:4f:49:9c:9d:dc:c3:82:67:02:70: 27:02:fa:91:66:ee:78:bd:37:fe:e0:62:e3:c8:6c: 99:1c:f2:e2:4b:36:b9:a7:03:fb:e5:d8:c9:43:4f: 64:5e:a0:64:a6:fb:ba:d0:dd:41:b5:5a:ee:a1:86: dc:48:8c:89:f2:74:9f:43:78:92:29:20:92:06:8b: 74:f3:fe:a8:e9:2e:c8:47:1c:d8:9d:18:ae:c1:a7: 0e:7a:ba:35:33:e7:84:63:d3:ae:f3:42:d1:fc:05: 3b:91:bd:29:0c:d9:f3:b2:0c:8d:3f:d5:15:7b:70: 92:df:66:56:c7:60:e1:8c:fa:43:87:da:1e:3b:ca: 29:e5:69:96:b5:60:42:32:a2:de:b1:cd:37:ed:7e: 19:d3:4e:a8:5c:c0:00:4f:ae:43:eb:ec:fa:e6:6f: d1:ee:48:da:50:1b:c0:96:c0:bb:c4:4b:d8:56:46: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C2:97:09:95:96:FD:6A:CC:8F:E1:F4:BE:C9:20:1E:06:CA:E7:C8 X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/wcKXCZWW_WrMj-H0vskgHgbK58g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.31.3.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:65:95:49:ed:ec:7d:41:a1:46:0a:ec:40:58:e5:ed:34:64: 3d:6b:15:08:a4:5e:81:c7:0e:e7:29:0b:ad:bc:4a:80:fe:98: 6a:6f:cf:86:a4:1a:83:b0:bf:ca:e7:e3:1a:08:8d:70:93:a1: 0e:cb:45:5b:08:71:7d:c4:f5:60:89:9b:9a:e5:eb:2f:5c:cd: 45:d6:17:66:06:a1:25:15:a4:01:72:fe:27:c3:a8:b9:33:5c: d4:71:52:be:d2:17:55:d7:93:3e:4a:5f:9a:4e:31:9e:fe:1e: cd:6f:a3:91:1f:79:94:46:60:8b:69:e7:14:91:ab:f8:93:6a: b4:f7:b2:05:05:9e:96:e8:62:15:af:a2:23:72:86:3c:db:bf: eb:72:68:1e:14:cf:1d:79:5e:34:4f:ff:13:1b:ef:c5:24:4a: bc:da:a0:b1:09:ec:f0:ec:e0:df:07:cd:c7:06:0a:19:06:76: e7:41:0d:9f:59:33:60:80:e2:81:49:e3:e3:f0:a5:8c:ab:a6: ea:72:9e:1e:f9:5c:30:53:93:e3:2e:9c:e0:2b:04:55:08:76: 9a:1e:0a:cc:d3:5d:db:04:42:ae:c9:cc:1f:90:e3:3a:6e:94: ce:46:30:cc:f2:e9:32:d5:c7:9e:a9:65:d6:b3:8e:db:bd:08: 8a:cf:cf:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gTIDO3Hp0wvWn/0r29OyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTAyMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWMyOTcwOTk1OTZmZDZhY2M4ZmUxZjRiZWM5MjAxZTA2Y2FlN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUhSDTi4PrY7CABsJiyuw9gyCAQA pcyf7JPHCK5W64NEvcgfDh8hqrtPTipE05BgzLeqa0SeChZouzfeaPNkuJ+uASfC J0pTm4zRj88FPk9JnJ3cw4JnAnAnAvqRZu54vTf+4GLjyGyZHPLiSza5pwP75djJ Q09kXqBkpvu60N1BtVruoYbcSIyJ8nSfQ3iSKSCSBot08/6o6S7IRxzYnRiuwacO ero1M+eEY9Ou80LR/AU7kb0pDNnzsgyNP9UVe3CS32ZWx2DhjPpDh9oeO8op5WmW tWBCMqLesc037X4Z006oXMAAT65D6+z65m/R7kjaUBvAlsC7xEvYVkZESwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMHClwmVlv1qzI/h9L7JIB4GyufIMB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvd2NLWENaV1dfV3JNai1IMHZza2dIZ2JLNThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXh8DMA0G CSqGSIb3DQEBCwUAA4IBAQBtZZVJ7ex9QaFGCuxAWOXtNGQ9axUIpF6Bxw7nKQut vEqA/phqb8+GpBqDsL/K5+MaCI1wk6EOy0VbCHF9xPVgiZua5esvXM1F1hdmBqEl FaQBcv4nw6i5M1zUcVK+0hdV15M+Sl+aTjGe/h7Nb6ORH3mURmCLaecUkav4k2q0 97IFBZ6W6GIVr6IjcoY827/rcmgeFM8deV40T/8TG+/FJEq82qCxCezw7ODfB83H BgoZBnbnQQ2fWTNggOKBSePj8KWMq6bqcp4e+VwwU5PjLpzgKwRVCHaaHgrM013b BEKuycwfkOM6bpTORjDM8uky1ceeqWXWs47bvQiKz8/T -----END CERTIFICATE-----Generated at Wed Jan 21 03:48:58 2026 by rpki-client