This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/wl8tu_weubNfXZ1raiwB59IrcEQ.roa File: wl8tu_weubNfXZ1raiwB59IrcEQ.roa (raw, json) Hash identifier: /fuDNkfWdHCDDOTyXjSm0MpspTRxJW6ZGeRcO5DS8Io= Subject key identifier: C2:5F:2D:BB:FC:1E:B9:B3:5F:5D:9D:6B:6A:2C:01:E7:D2:2B:70:44 Certificate issuer: /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea Certificate serial: 019B7DCA992B12662493CD5B896A53124284 Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/wl8tu_weubNfXZ1raiwB59IrcEQ.roa Signing time: Fri 02 Jan 2026 08:19:47 +0000 ROA not before: Fri 02 Jan 2026 08:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34372 IP address blocks: 185.192.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:99:2b:12:66:24:93:cd:5b:89:6a:53:12:42:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea Validity Not Before: Jan 2 08:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c25f2dbbfc1eb9b35f5d9d6b6a2c01e7d22b7044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:1d:89:d9:fc:f8:ae:1e:90:15:86:e1:e7: 9e:ec:e5:0c:14:70:68:e5:f0:21:78:c0:40:7c:5b: 40:22:fb:fb:0b:fe:de:1d:c4:97:b8:97:97:f5:6d: b7:cd:b1:6d:0f:5d:3e:9d:af:28:f0:59:a5:44:0f: 25:89:f4:60:e2:8a:dc:03:0d:cf:fb:b7:fc:6e:01: be:39:60:59:fb:8a:94:af:4d:b3:ee:e0:21:66:f1: 2c:ea:c9:64:02:cd:e1:6e:e6:52:0a:bb:c5:fa:36: 08:fe:0f:dc:23:e6:62:0c:bb:fe:73:a3:e8:48:b8: 68:e5:86:79:e8:e1:3c:fd:85:6b:f5:79:73:61:78: cc:49:a6:a9:1d:85:3f:d0:7d:9e:cc:a2:0b:61:53: 11:8d:9f:19:01:7f:76:14:fe:f6:18:f2:f5:2f:fb: 34:4f:bf:1b:c3:5d:80:65:0a:4e:37:d0:f6:e2:b7: 56:d4:fa:16:22:b4:56:cf:d4:dd:01:42:4d:d7:47: a4:0a:5c:47:5f:18:04:a6:45:11:9b:57:fe:05:12: f8:b5:5c:ef:ea:db:35:32:7e:c9:12:1a:50:de:ef: 6c:e9:14:58:1a:83:ad:f3:b9:d8:ae:31:29:0a:a9: e8:59:03:e5:87:49:89:89:61:99:82:c4:0f:b7:a3: b6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5F:2D:BB:FC:1E:B9:B3:5F:5D:9D:6B:6A:2C:01:E7:D2:2B:70:44 X509v3 Authority Key Identifier: keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/wl8tu_weubNfXZ1raiwB59IrcEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.76.0/24 Signature Algorithm: sha256WithRSAEncryption 11:76:ea:69:df:e2:0b:af:36:6a:fb:92:63:e5:dc:5c:49:82: 07:37:16:63:8b:dc:14:76:2a:1c:0b:ea:3b:14:a6:7c:13:5a: 65:97:6f:4d:40:8d:5c:87:38:ea:cb:ad:1c:5c:e3:0d:2b:1a: 51:0f:26:0d:b1:f7:2f:26:a2:ad:1c:a3:bf:5d:59:e6:03:b5: a4:ec:53:6a:38:73:50:b8:8b:2e:34:17:c6:be:ff:12:d5:54: 19:80:40:41:ed:14:73:41:b1:53:39:d6:95:b1:ea:02:98:e8: 89:2c:ac:d9:5d:b5:09:34:78:c1:7d:00:23:28:2c:ef:39:3a: a5:05:29:de:ee:85:ce:8b:04:e1:ae:78:fd:4d:ff:0e:81:28: d4:69:ed:d2:f0:7e:9f:be:88:11:ac:6f:d4:af:f2:7f:a0:ae: 88:ee:dd:85:4d:b5:19:a6:f9:ca:9c:df:05:91:67:34:e4:fa: 3f:f6:47:86:b4:0f:46:bf:72:85:a3:7e:0d:3d:83:16:cd:4c: ac:68:fc:a8:97:63:69:14:5e:d0:7b:93:6c:18:1e:af:f1:47: 31:89:28:f3:64:76:db:0d:8a:e6:1d:55:bd:be:a5:99:b4:69: e7:1b:a9:68:61:4d:e3:31:30:09:da:c4:b4:cc:f0:c1:33:f1: 57:88:1d:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ypkrEmYkk81biWpTEkKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2JiMTNhZTE3YzllNTU0ZTljZWFmY2ZlYjQ4YjQxNDE3 ZGE3ZWEwHhcNMjYwMTAyMDgxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjVmMmRiYmZjMWViOWIzNWY1ZDlkNmI2YTJjMDFlN2QyMmI3MDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozodidn8+K4ekBWG4eee7OUMFHBo 5fAheMBAfFtAIvv7C/7eHcSXuJeX9W23zbFtD10+na8o8FmlRA8lifRg4orcAw3P +7f8bgG+OWBZ+4qUr02z7uAhZvEs6slkAs3hbuZSCrvF+jYI/g/cI+ZiDLv+c6Po SLho5YZ56OE8/YVr9XlzYXjMSaapHYU/0H2ezKILYVMRjZ8ZAX92FP72GPL1L/s0 T78bw12AZQpON9D24rdW1PoWIrRWz9TdAUJN10ekClxHXxgEpkURm1f+BRL4tVzv 6ts1Mn7JEhpQ3u9s6RRYGoOt87nYrjEpCqnoWQPlh0mJiWGZgsQPt6O2bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJfLbv8HrmzX12da2osAefSK3BEMB8GA1UdIwQY MBaAFF47sTrhfJ5VTpzq/P60i0FBfafqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2Yt MzUyMDA0YmMyMjgyLzEvd2w4dHVfd2V1Yk5mWFoxcmFpd0I1OUlyY0VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2YtMzUyMDA0YmMyMjgy LzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucBMMA0G CSqGSIb3DQEBCwUAA4IBAQARdupp3+ILrzZq+5Jj5dxcSYIHNxZji9wUdiocC+o7 FKZ8E1pll29NQI1chzjqy60cXOMNKxpRDyYNsfcvJqKtHKO/XVnmA7Wk7FNqOHNQ uIsuNBfGvv8S1VQZgEBB7RRzQbFTOdaVseoCmOiJLKzZXbUJNHjBfQAjKCzvOTql BSne7oXOiwThrnj9Tf8OgSjUae3S8H6fvogRrG/Ur/J/oK6I7t2FTbUZpvnKnN8F kWc05Po/9keGtA9Gv3KFo34NPYMWzUysaPyol2NpFF7Qe5NsGB6v8UcxiSjzZHbb DYrmHVW9vqWZtGnnG6loYU3jMTAJ2sS0zPDBM/FXiB1M -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:26 2026 by rpki-client