This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/WF-zTcv0SSwFqssAuBLS2p_bL9I.roa File: WF-zTcv0SSwFqssAuBLS2p_bL9I.roa (raw, json) Hash identifier: l4mNR1FXgT0HOl3cKSL3WOvdMxH31IZ3vfxu50tZ0OU= Subject key identifier: 58:5F:B3:4D:CB:F4:49:2C:05:AA:CB:00:B8:12:D2:DA:9F:DB:2F:D2 Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a Certificate serial: 019B79ED14895604DEAD54C5104FA6E2846D Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/WF-zTcv0SSwFqssAuBLS2p_bL9I.roa Signing time: Thu 01 Jan 2026 14:18:59 +0000 ROA not before: Thu 01 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.3.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:14:89:56:04:de:ad:54:c5:10:4f:a6:e2:84:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=585fb34dcbf4492c05aacb00b812d2da9fdb2fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:cf:b4:af:38:8a:ec:ad:b7:9a:f0:f1:4d: e9:87:03:34:6e:b6:dd:30:05:27:87:30:0f:2d:57: c3:0e:a7:a1:bf:a4:26:da:05:1b:4d:66:9a:66:1c: 3b:15:9b:eb:e8:22:35:be:3f:6a:b2:7d:a8:81:6a: 15:6b:9e:8e:e0:08:ec:93:64:10:a3:68:60:36:df: 1a:bd:42:40:af:a6:ef:50:87:2e:49:47:b4:dd:2d: 8d:15:8f:43:d6:15:5d:00:8a:89:82:fd:b2:a6:35: e2:4f:44:bc:fc:e7:92:31:ad:d8:b5:1c:50:10:d5: 07:44:0b:db:fd:db:41:ba:da:8d:0e:2a:b0:e3:62: 31:9b:53:f0:ab:79:30:ea:4a:df:d1:db:84:1d:8e: e7:4e:5b:16:cc:1c:14:91:0e:d4:8d:47:eb:0e:87: 38:88:fc:6d:76:46:d2:cb:17:2f:c4:25:15:f8:00: 20:9d:72:be:57:aa:8e:42:e6:e7:7a:68:63:71:75: 04:f2:76:03:9a:32:33:49:49:08:4c:61:b3:4f:b4: 7f:12:7b:c8:93:c3:39:13:22:f8:80:bc:b2:54:18: 4a:32:b7:03:5e:9c:87:5c:94:7d:96:ee:93:5a:89: 38:7f:5f:7e:da:f4:5b:9b:59:21:f2:4b:62:1c:bc: dc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5F:B3:4D:CB:F4:49:2C:05:AA:CB:00:B8:12:D2:DA:9F:DB:2F:D2 X509v3 Authority Key Identifier: keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/WF-zTcv0SSwFqssAuBLS2p_bL9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.160.0/24 Signature Algorithm: sha256WithRSAEncryption 24:ea:dd:44:a4:54:8b:b6:1c:10:d2:c0:6d:80:33:d0:d0:70: 0e:0a:e0:47:9e:8a:84:5e:37:d5:20:f5:ed:3d:dc:53:51:99: 7c:b5:74:e8:12:b8:85:e8:25:5d:4c:fc:ff:53:86:f1:63:83: 51:fc:d9:2d:5c:82:68:ec:99:d7:44:40:5a:8c:f1:73:68:d0: 91:c3:73:3f:1b:7c:ab:67:7b:e0:91:95:d1:29:dd:30:41:d0: 09:1f:8d:2e:42:26:37:8b:9f:aa:5e:29:53:70:63:65:f8:b9: 2e:58:f8:b0:b0:18:1c:7a:2d:98:9e:7c:4b:c7:56:00:17:10: 7d:76:8d:85:1c:e4:9a:7c:79:2e:00:72:36:89:98:6e:29:d1: 84:ac:84:98:ff:40:dc:dd:9c:54:c1:d8:e2:35:96:c0:5f:49: 48:17:e2:e4:f5:4a:19:4c:65:9e:db:8d:a8:a2:10:27:c7:53: c8:57:a8:e1:99:66:67:a9:38:bc:da:00:0b:14:c3:15:27:57: df:70:20:11:81:63:77:a0:84:8a:d7:e2:50:58:70:48:9c:12: a5:78:1c:32:f4:74:99:47:60:07:90:20:8c:84:64:82:4b:e5: aa:3f:57:83:cb:52:48:15:d3:e3:62:44:aa:66:7d:db:13:22: 15:be:9d:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RSJVgTerVTFEE+m4oRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTVhZjRjNzI4NjkyMDk1MzliMTE5NDU5N2IwM2ZhM2E0 YTU1NGEwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODVmYjM0ZGNiZjQ0OTJjMDVhYWNiMDBiODEyZDJkYTlmZGIyZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCDPtK84iuytt5rw8U3phwM0brbd MAUnhzAPLVfDDqehv6Qm2gUbTWaaZhw7FZvr6CI1vj9qsn2ogWoVa56O4Ajsk2QQ o2hgNt8avUJAr6bvUIcuSUe03S2NFY9D1hVdAIqJgv2ypjXiT0S8/OeSMa3YtRxQ ENUHRAvb/dtButqNDiqw42Ixm1Pwq3kw6krf0duEHY7nTlsWzBwUkQ7UjUfrDoc4 iPxtdkbSyxcvxCUV+AAgnXK+V6qOQubnemhjcXUE8nYDmjIzSUkITGGzT7R/EnvI k8M5EyL4gLyyVBhKMrcDXpyHXJR9lu6TWok4f19+2vRbm1kh8ktiHLzcZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhfs03L9EksBarLALgS0tqf2y/SMB8GA1UdIwQY MBaAFBHlr0xyhpIJU5sRlFl7A/o6SlVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEt ZjQyOGI5OTU0YWIyLzEvV0YtelRjdjBTU3dGcXNzQXVCTFMycF9iTDlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEtZjQyOGI5OTU0YWIy LzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQOgMA0G CSqGSIb3DQEBCwUAA4IBAQAk6t1EpFSLthwQ0sBtgDPQ0HAOCuBHnoqEXjfVIPXt PdxTUZl8tXToEriF6CVdTPz/U4bxY4NR/NktXIJo7JnXREBajPFzaNCRw3M/G3yr Z3vgkZXRKd0wQdAJH40uQiY3i5+qXilTcGNl+LkuWPiwsBgcei2YnnxLx1YAFxB9 do2FHOSafHkuAHI2iZhuKdGErISY/0Dc3ZxUwdjiNZbAX0lIF+Lk9UoZTGWe242o ohAnx1PIV6jhmWZnqTi82gALFMMVJ1ffcCARgWN3oISK1+JQWHBInBKleBwy9HSZ R2AHkCCMhGSCS+WqP1eDy1JIFdPjYkSqZn3bEyIVvp2K -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:01 2026 by rpki-client