This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/WrpclcdTDXj2H0fbVyleIflIf0w.roa File: WrpclcdTDXj2H0fbVyleIflIf0w.roa (raw, json) Hash identifier: OzQ8zLG538UaOB3Uu2S2SJS87lc4ZJhev8tTq2GsqcE= Subject key identifier: 5A:BA:5C:95:C7:53:0D:78:F6:1F:47:DB:57:29:5E:21:F9:48:7F:4C Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79113DB08B2AE11567913B0B3A7703FD Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/WrpclcdTDXj2H0fbVyleIflIf0w.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13768 IP address blocks: 104.249.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3d:b0:8b:2a:e1:15:67:91:3b:0b:3a:77:03:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aba5c95c7530d78f61f47db57295e21f9487f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:22:6b:f6:44:1e:b9:41:d9:97:a2:6f:a8: 22:99:5f:7c:11:64:80:56:5f:24:1e:b1:52:e0:09: 08:64:38:10:db:a0:07:ef:36:6a:3a:29:74:b7:27: 53:8f:68:cf:e5:ad:74:ba:6b:ae:7b:23:7b:cd:8a: 5b:1f:fe:23:3d:6d:c5:8f:45:81:34:29:24:91:1f: b2:fe:e0:1f:f9:3e:bd:b8:15:69:92:cc:db:5c:1c: 7c:33:94:4f:5c:33:e8:4d:13:8b:34:6a:07:cc:ff: 04:19:f7:9f:2f:5d:58:4f:8b:09:d5:a6:2d:9a:ee: 0b:8f:3f:78:06:0e:fd:9c:44:a4:d6:e3:ce:5b:c0: f6:12:c5:82:43:e8:99:03:31:3b:a5:f8:04:0e:77: bd:e9:f0:36:a5:e1:e3:87:44:43:0e:f8:12:f4:e4: 67:8e:56:a6:20:d3:54:ba:bb:af:98:73:ca:84:1a: 12:fd:cd:56:d5:25:98:77:c5:22:6d:ba:3e:14:78: 87:3d:34:6c:e0:e7:40:93:5b:8e:82:06:2b:72:82: 10:40:ad:36:90:2d:4a:27:91:9d:e8:c1:cf:6a:6d: d0:8a:1b:25:a5:bc:06:4c:6d:ee:60:09:47:e2:c5: d7:87:03:9d:ac:48:25:4a:72:5a:e4:03:da:f4:b7: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:5C:95:C7:53:0D:78:F6:1F:47:DB:57:29:5E:21:F9:48:7F:4C X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/WrpclcdTDXj2H0fbVyleIflIf0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.249.24.0/24 Signature Algorithm: sha256WithRSAEncryption 75:7b:78:8e:18:1c:a6:d3:14:44:ed:47:95:f3:9b:8c:b7:75: 96:c3:fb:96:93:87:a5:79:64:87:b6:76:70:5e:a3:e8:bf:7f: 7b:50:3e:32:29:e5:30:2a:7e:c2:c5:c1:0c:9e:0b:71:ac:cb: df:5c:75:86:0c:de:cd:7c:dc:90:16:5f:41:75:1c:6c:62:39: ab:43:78:72:f7:91:d8:74:26:95:2b:74:ca:17:0e:10:1e:73: 90:c9:8a:e3:9d:9c:34:a3:58:5b:3c:ad:53:86:ab:35:89:67: 83:58:18:12:4e:bf:d5:bf:25:ea:8d:b3:7f:c1:f1:86:b8:9d: 19:2d:49:81:11:0f:4f:f9:02:ed:13:fd:4e:22:55:53:23:1a: d5:e8:f8:af:1f:27:15:ed:cb:2d:a3:1a:a1:ca:55:5a:ce:d2: 96:6b:e6:74:11:da:31:8c:73:f8:12:0e:51:00:e0:79:8d:b3: 91:93:1d:45:9a:f6:c1:1a:ab:e4:59:54:02:fb:b4:47:a8:23: 7e:55:08:b7:d5:e1:4f:e8:d9:eb:3d:13:18:ed:0d:d3:9f:4b: ba:65:1c:2a:ec:fe:93:23:a4:4e:7d:85:51:21:b5:50:69:a6: aa:3c:9e:87:77:8e:01:29:e0:aa:f2:24:66:48:6d:e8:86:37: f0:27:ac:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ET2wiyrhFWeROws6dwP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWJhNWM5NWM3NTMwZDc4ZjYxZjQ3ZGI1NzI5NWUyMWY5NDg3ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA0ia/ZEHrlB2Zeib6gimV98EWSA Vl8kHrFS4AkIZDgQ26AH7zZqOil0tydTj2jP5a10umuueyN7zYpbH/4jPW3Fj0WB NCkkkR+y/uAf+T69uBVpkszbXBx8M5RPXDPoTROLNGoHzP8EGfefL11YT4sJ1aYt mu4Ljz94Bg79nESk1uPOW8D2EsWCQ+iZAzE7pfgEDne96fA2peHjh0RDDvgS9ORn jlamINNUuruvmHPKhBoS/c1W1SWYd8Uibbo+FHiHPTRs4OdAk1uOggYrcoIQQK02 kC1KJ5Gd6MHPam3QihslpbwGTG3uYAlH4sXXhwOdrEglSnJa5APa9LdhMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFq6XJXHUw149h9H21cpXiH5SH9MMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvV3JwY2xjZFREWGoySDBmYlZ5bGVJZmxJZjB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPkYMA0G CSqGSIb3DQEBCwUAA4IBAQB1e3iOGBym0xRE7UeV85uMt3WWw/uWk4eleWSHtnZw XqPov397UD4yKeUwKn7CxcEMngtxrMvfXHWGDN7NfNyQFl9BdRxsYjmrQ3hy95HY dCaVK3TKFw4QHnOQyYrjnZw0o1hbPK1Thqs1iWeDWBgSTr/VvyXqjbN/wfGGuJ0Z LUmBEQ9P+QLtE/1OIlVTIxrV6PivHycV7cstoxqhylVaztKWa+Z0EdoxjHP4Eg5R AOB5jbORkx1FmvbBGqvkWVQC+7RHqCN+VQi31eFP6NnrPRMY7Q3Tn0u6ZRwq7P6T I6ROfYVRIbVQaaaqPJ6Hd44BKeCq8iRmSG3ohjfwJ6xT -----END CERTIFICATE-----Generated at Fri Jan 2 02:36:37 2026 by rpki-client