This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/biFYfGEt_Sg8rijjxJ6DqtLWVZk.roa File: biFYfGEt_Sg8rijjxJ6DqtLWVZk.roa (raw, json) Hash identifier: ddjvzrJ1e/qRb2wbsjCppOUHOPYeJ/wiL1J9mlqJh5g= Subject key identifier: 6E:21:58:7C:61:2D:FD:28:3C:AE:28:E3:C4:9E:83:AA:D2:D6:55:99 Certificate issuer: /CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2 Certificate serial: 019B76EB7629FF9B924283BC7BD3748DB876 Authority key identifier: 58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/biFYfGEt_Sg8rijjxJ6DqtLWVZk.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 193.24.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:76:29:ff:9b:92:42:83:bc:7b:d3:74:8d:b8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e21587c612dfd283cae28e3c49e83aad2d65599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:84:fb:11:06:5f:7b:d8:31:14:a8:83:8f: 70:50:bc:02:b4:d5:fd:e5:3a:88:fd:35:e2:ee:df: 27:32:4d:52:52:e0:44:8a:d8:5c:11:20:72:75:31: 79:8b:9a:48:e5:d2:c7:d7:58:21:9f:18:bb:61:a8: 54:c6:5a:7d:cb:90:b1:e1:73:74:5d:ab:26:df:6e: a9:3a:5b:c3:78:a5:5d:ee:92:d6:be:ec:14:bf:87: 9d:89:c3:97:6d:e0:63:8d:a0:d4:99:b5:99:8c:83: cc:35:f4:4b:f2:7e:d8:d2:3e:b5:26:f0:53:df:df: 1d:98:28:c9:3a:5e:fe:3e:a6:ee:ba:b4:bd:97:1b: 77:ac:42:e5:2a:30:00:bf:91:9d:4c:06:df:f5:15: 68:ce:5e:b5:78:23:5a:5f:b6:9a:d5:80:37:fd:38: 5c:39:5d:2d:91:05:76:16:f6:d4:54:06:89:e1:53: 6a:e8:1a:b7:b3:c0:9d:e0:97:a3:b0:41:d5:79:b5: 8b:07:d2:bb:f6:14:bf:8f:69:15:9d:22:e1:82:c8: 22:61:6f:f9:57:92:0d:e3:31:8b:3d:6a:4c:9d:d8: f8:ff:b5:e9:a7:8b:11:98:ba:8f:5f:9e:78:6a:8a: 77:b0:55:50:a7:4a:5c:17:1d:fc:19:88:97:e7:9e: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:21:58:7C:61:2D:FD:28:3C:AE:28:E3:C4:9E:83:AA:D2:D6:55:99 X509v3 Authority Key Identifier: keyid:58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/biFYfGEt_Sg8rijjxJ6DqtLWVZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.127.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:e1:35:04:f6:4c:e2:c1:a3:5e:f3:32:d4:fe:d6:ae:9e:e7: 44:6b:28:5e:5b:90:04:e6:2c:3c:3f:1d:f7:db:4c:f4:1c:53: b6:a2:e5:53:ea:38:72:9e:21:90:62:7d:20:09:02:0d:bb:9a: 36:a1:94:bf:84:d4:a0:ae:15:ec:e1:f6:0d:80:e2:7e:eb:ba: c5:5c:c6:af:2a:0f:8a:d0:78:51:bc:36:b0:1b:15:44:4a:e7: 9c:52:9e:7d:41:6c:ed:13:19:0f:f1:b9:c0:03:08:e0:67:02: 99:71:41:c0:4f:3d:ed:58:2c:15:48:5d:b5:31:43:ca:e9:36: c2:95:99:3a:2d:33:f7:c1:b0:5b:f0:ca:38:4b:a8:6d:97:77: 7c:e1:02:a2:56:10:9d:b8:69:25:1f:48:3a:95:95:2d:8b:0c: 89:22:fc:e4:48:da:45:2e:91:3a:72:11:a8:2a:43:ae:fa:42: a3:86:46:32:95:b5:22:fa:c7:c8:46:f6:e4:a5:4c:ef:aa:79: 34:0f:12:f9:d5:44:ec:a5:26:80:57:20:73:b1:d9:87:db:8c: 44:1c:c8:1c:61:67:e0:42:93:fa:93:40:24:7b:0c:ab:74:d8: 52:fd:09:40:81:25:cf:d0:55:39:46:08:c1:aa:d1:64:4c:19: 30:a3:65:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263Yp/5uSQoO8e9N0jbh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MTUzZmIyMGI5YzhmOGNjZjZjMzk4ZjRkNjFiMjE3MDdl MWJiZTIwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTIxNTg3YzYxMmRmZDI4M2NhZTI4ZTNjNDllODNhYWQyZDY1NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppKE+xEGX3vYMRSog49wULwCtNX9 5TqI/TXi7t8nMk1SUuBEithcESBydTF5i5pI5dLH11ghnxi7YahUxlp9y5Cx4XN0 Xasm326pOlvDeKVd7pLWvuwUv4edicOXbeBjjaDUmbWZjIPMNfRL8n7Y0j61JvBT 398dmCjJOl7+PqbuurS9lxt3rELlKjAAv5GdTAbf9RVozl61eCNaX7aa1YA3/Thc OV0tkQV2FvbUVAaJ4VNq6Bq3s8Cd4JejsEHVebWLB9K79hS/j2kVnSLhgsgiYW/5 V5IN4zGLPWpMndj4/7Xpp4sRmLqPX554aop3sFVQp0pcFx38GYiX5553bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG4hWHxhLf0oPK4o48Seg6rS1lWZMB8GA1UdIwQY MBaAFFgVP7ILnI+Mz2w5j01hshcH4bviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0JVX3NndWNqNHpQYkRtUFRXR3lGd2ZodS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80OTAxZjMtODkzNC00ZTkwLWFhZjct Njc2MWQyNzg0ZDhkLzEvYmlGWWZHRXRfU2c4cmlqanhKNkRxdExXVlprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny80OTAxZjMtODkzNC00ZTkwLWFhZjctNjc2MWQyNzg0ZDhk LzEvV0JVX3NndWNqNHpQYkRtUFRXR3lGd2ZodS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRh/MA0G CSqGSIb3DQEBCwUAA4IBAQCK4TUE9kziwaNe8zLU/taunudEayheW5AE5iw8Px33 20z0HFO2ouVT6jhyniGQYn0gCQINu5o2oZS/hNSgrhXs4fYNgOJ+67rFXMavKg+K 0HhRvDawGxVESuecUp59QWztExkP8bnAAwjgZwKZcUHATz3tWCwVSF21MUPK6TbC lZk6LTP3wbBb8Mo4S6htl3d84QKiVhCduGklH0g6lZUtiwyJIvzkSNpFLpE6chGo KkOu+kKjhkYylbUi+sfIRvbkpUzvqnk0DxL51UTspSaAVyBzsdmH24xEHMgcYWfg QpP6k0AkewyrdNhS/QlAgSXP0FU5RgjBqtFkTBkwo2UJ -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:27 2026 by rpki-client