This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WtsKrmPFRt5DFhrVkuuK_elmw4U.roa File: WtsKrmPFRt5DFhrVkuuK_elmw4U.roa (raw, json) Hash identifier: f+Al6eegQ0g9zugs+iZ1zawbN6ZO5pM1LmyG7g+70nM= Subject key identifier: 5A:DB:0A:AE:63:C5:46:DE:43:16:1A:D5:92:EB:8A:FD:E9:66:C3:85 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A333917B90E12449EEAC61CFAC20 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WtsKrmPFRt5DFhrVkuuK_elmw4U.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57304 IP address blocks: 109.248.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a3:33:91:7b:90:e1:24:49:ee:ac:61:cf:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5adb0aae63c546de43161ad592eb8afde966c385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:c7:bf:f1:57:0b:79:88:ea:01:b7:d5:df: 09:d8:31:55:d9:d1:c1:f8:7e:6b:2b:8e:52:60:8d: a2:d5:29:7a:ac:fb:f0:3f:36:49:13:d0:9b:45:b2: a5:2f:b8:f9:b9:94:95:5a:f3:53:2c:48:4d:5a:ae: 0f:84:e7:2b:29:25:3d:8a:0e:00:73:b4:7b:94:66: 4a:e1:6c:89:ac:8e:63:f5:b4:69:aa:b5:c9:01:38: 4c:d9:cb:38:db:0a:0f:b3:7d:0d:43:72:60:e5:63: 68:f2:7a:a6:85:6b:20:fb:a4:d2:21:24:13:a2:d9: 83:25:b0:ac:24:c4:8b:d7:c9:82:1f:16:b5:14:4f: 86:d4:a7:37:72:98:c8:52:1a:1d:de:29:9d:91:e9: c9:8d:31:df:8a:fc:31:07:ef:fb:9e:c6:35:0c:40: ba:4c:f5:5c:75:6e:4a:2c:49:6b:5f:36:ff:e8:03: 43:9b:2f:91:fd:f8:05:70:17:ae:81:33:f8:15:fa: 17:02:e1:ca:78:56:16:36:72:44:99:8d:5b:9b:1f: a7:9a:1c:bb:f6:29:9c:dd:dc:7a:f6:3d:a1:e2:aa: d9:1e:de:5f:3b:0d:c9:7b:a5:30:d0:e0:cb:22:f5: 17:64:22:5e:1e:db:00:53:b2:83:81:75:cc:14:8f: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DB:0A:AE:63:C5:46:DE:43:16:1A:D5:92:EB:8A:FD:E9:66:C3:85 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WtsKrmPFRt5DFhrVkuuK_elmw4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.248.196.0/24 Signature Algorithm: sha256WithRSAEncryption 83:08:66:90:ab:8e:28:66:5e:44:93:01:74:3e:c8:5f:27:64: 9b:32:c2:c5:cf:92:80:ff:4a:e1:16:3f:ed:b3:c0:2f:e4:3e: d6:e4:e2:46:f7:16:5b:74:7c:a7:3d:8b:83:a2:d8:34:70:6c: 2d:ac:2d:e7:5d:37:c5:b7:cb:bd:10:08:a4:1e:d9:f5:f4:33: c1:b5:af:ea:3f:b7:7c:53:78:01:d1:7b:bf:db:80:ed:7d:7d: 23:d2:1f:ec:be:46:fc:8d:72:0b:7c:5a:33:86:02:b8:cd:97: e8:d1:19:c4:d6:1d:7c:61:35:13:d0:1b:89:c8:ce:fa:40:1c: 0f:a6:59:57:aa:9c:db:2c:ce:36:26:40:52:3f:e4:df:71:80: 7f:17:a2:80:73:53:aa:47:73:d3:73:1c:37:e2:78:8c:9d:99: 80:19:2a:b3:ae:ee:ed:af:58:d7:db:f5:07:11:fa:3c:f5:ab: 6d:97:9a:f1:50:a0:a5:ce:6d:4f:0f:c4:1a:4f:60:c9:3b:46: ed:51:64:26:29:0f:d7:3c:f4:d9:e2:3e:f6:14:9f:3e:55:93: 70:27:ad:1d:48:d7:04:3a:3d:45:0a:5d:a2:ae:9e:56:cb:81: 78:fd:2e:28:23:fe:a1:73:b2:99:d5:6c:44:e0:5b:76:e3:bf: bb:9e:f6:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqMzkXuQ4SRJ7qxhz6wgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWRiMGFhZTYzYzU0NmRlNDMxNjFhZDU5MmViOGFmZGU5NjZjMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnfHv/FXC3mI6gG31d8J2DFV2dHB +H5rK45SYI2i1Sl6rPvwPzZJE9CbRbKlL7j5uZSVWvNTLEhNWq4PhOcrKSU9ig4A c7R7lGZK4WyJrI5j9bRpqrXJAThM2cs42woPs30NQ3Jg5WNo8nqmhWsg+6TSISQT otmDJbCsJMSL18mCHxa1FE+G1Kc3cpjIUhod3imdkenJjTHfivwxB+/7nsY1DEC6 TPVcdW5KLElrXzb/6ANDmy+R/fgFcBeugTP4FfoXAuHKeFYWNnJEmY1bmx+nmhy7 9imc3dx69j2h4qrZHt5fOw3Je6Uw0ODLIvUXZCJeHtsAU7KDgXXMFI/mqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrbCq5jxUbeQxYa1ZLriv3pZsOFMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvV3RzS3JtUEZSdDVERmhyVmt1dUtfZWxtdzRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfjEMA0G CSqGSIb3DQEBCwUAA4IBAQCDCGaQq44oZl5EkwF0PshfJ2SbMsLFz5KA/0rhFj/t s8Av5D7W5OJG9xZbdHynPYuDotg0cGwtrC3nXTfFt8u9EAikHtn19DPBta/qP7d8 U3gB0Xu/24DtfX0j0h/svkb8jXILfFozhgK4zZfo0RnE1h18YTUT0BuJyM76QBwP pllXqpzbLM42JkBSP+TfcYB/F6KAc1OqR3PTcxw34niMnZmAGSqzru7tr1jX2/UH Efo89attl5rxUKClzm1PD8QaT2DJO0btUWQmKQ/XPPTZ4j72FJ8+VZNwJ60dSNcE Oj1FCl2irp5Wy4F4/S4oI/6hc7KZ1WxE4Ft247+7nvb5 -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:42 2026 by rpki-client