This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/WSRqZgm-1EQjpD2Z0iwnVHu9-KI.roa File: WSRqZgm-1EQjpD2Z0iwnVHu9-KI.roa (raw, json) Hash identifier: vaSwxp0zpLMK2TP7PC86d2QeKmyhSzZL++9S55/WavA= Subject key identifier: 59:24:6A:66:09:BE:D4:44:23:A4:3D:99:D2:2C:27:54:7B:BD:F8:A2 Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0 Certificate serial: 019B7F15504AEF72563CBA61C74DDC14904F Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/WSRqZgm-1EQjpD2Z0iwnVHu9-KI.roa Signing time: Fri 02 Jan 2026 14:21:01 +0000 ROA not before: Fri 02 Jan 2026 14:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204167 IP address blocks: 178.170.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:50:4a:ef:72:56:3c:ba:61:c7:4d:dc:14:90:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0 Validity Not Before: Jan 2 14:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59246a6609bed44423a43d99d22c27547bbdf8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:ce:35:80:80:f1:57:8e:85:75:0c:ef:cf: a0:c4:71:a0:44:cc:20:d1:d5:c1:04:41:ca:1e:31: 0f:37:37:bb:d4:9f:79:76:be:c4:84:af:88:dc:a1: 21:de:7f:8a:29:08:e2:df:db:3f:59:60:ce:78:7d: ed:f9:d1:c1:9c:a1:a2:6a:f0:4b:53:d3:6e:10:75: b1:19:26:24:2b:87:a2:5f:02:97:40:46:76:6d:ed: 41:2d:8d:1a:08:87:d8:d5:78:e1:aa:88:32:cb:fc: 2d:ea:40:bb:df:38:4a:35:64:70:fe:a4:7a:d5:9c: b2:6d:82:71:9e:4c:94:1d:76:85:fa:c5:26:ea:6f: 63:7a:d0:cc:cb:9e:5a:b1:82:84:f5:33:76:9e:6c: b4:01:9d:e6:2f:48:d2:8d:c9:da:9f:a1:49:1e:b1: 36:97:ec:63:c1:c1:79:d2:8b:9f:7b:db:d6:91:dd: 04:f3:a7:43:a0:0f:d5:01:a6:97:dc:2d:a1:d9:c9: f8:de:00:a2:f9:a8:ec:60:3e:25:6f:ce:79:2c:2a: d5:1a:9b:57:ad:f8:4b:a7:58:b6:bc:37:fa:74:87: ca:69:39:d5:b6:0e:66:59:35:4c:aa:37:86:0a:13: 44:00:b1:0a:3b:ba:e1:81:0a:a0:92:0d:3f:68:c8: d5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:24:6A:66:09:BE:D4:44:23:A4:3D:99:D2:2C:27:54:7B:BD:F8:A2 X509v3 Authority Key Identifier: keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/WSRqZgm-1EQjpD2Z0iwnVHu9-KI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.170.128.0/23 Signature Algorithm: sha256WithRSAEncryption 73:56:f8:0f:d0:66:08:f8:76:8f:0c:8b:4a:ae:21:b9:65:ff: e7:32:21:74:96:b7:55:d7:e1:81:64:8f:b9:5f:8c:4f:f6:82: 7c:0f:26:99:65:df:a4:e5:a9:7e:49:c7:0e:18:6e:fa:ee:63: 77:6b:b3:d3:7f:b6:6e:ac:0f:d3:a8:97:b3:5c:36:e1:40:d5: 54:b8:cf:e6:f0:a7:87:0c:01:6c:71:bf:ae:73:63:f5:59:e5: db:17:ed:d8:c3:20:be:f3:6d:6e:79:86:ed:0a:5b:41:5c:29: fa:38:be:e2:36:40:89:a5:20:ba:ec:ee:28:10:d5:29:96:6e: bb:a6:b3:a4:4a:27:23:bc:2a:aa:bf:9d:98:9b:3f:f1:45:bc: 1c:fc:e3:c1:34:63:19:f1:2a:47:ab:51:ea:2a:fe:c1:d7:5d: 55:6b:d6:99:48:b7:32:ba:59:45:0c:bd:f4:f3:ce:80:5c:67: 47:ce:a6:a3:4f:bd:4d:d6:af:84:54:a5:00:53:9c:17:59:f5: 57:c1:bf:dd:e4:c7:8b:d6:ae:90:9c:53:c0:67:92:f9:6a:28: c3:4e:94:99:c3:fe:9a:1c:34:a0:d1:67:48:d9:aa:5f:e9:2f: 1a:89:f9:3b:2f:a1:d3:c4:7f:a0:a0:bd:3e:94:0d:43:aa:62: 11:34:98:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVBK73JWPLphx03cFJBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2RkNjU5NjY3MzdjZThmNjVlNDBlZjJmZWExY2ZmYWZi MTYyYjAwHhcNMjYwMTAyMTQyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTI0NmE2NjA5YmVkNDQ0MjNhNDNkOTlkMjJjMjc1NDdiYmRmOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx7ONYCA8VeOhXUM78+gxHGgRMwg 0dXBBEHKHjEPNze71J95dr7EhK+I3KEh3n+KKQji39s/WWDOeH3t+dHBnKGiavBL U9NuEHWxGSYkK4eiXwKXQEZ2be1BLY0aCIfY1Xjhqogyy/wt6kC73zhKNWRw/qR6 1ZyybYJxnkyUHXaF+sUm6m9jetDMy55asYKE9TN2nmy0AZ3mL0jSjcnan6FJHrE2 l+xjwcF50oufe9vWkd0E86dDoA/VAaaX3C2h2cn43gCi+ajsYD4lb855LCrVGptX rfhLp1i2vDf6dIfKaTnVtg5mWTVMqjeGChNEALEKO7rhgQqgkg0/aMjVZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFkkamYJvtREI6Q9mdIsJ1R7vfiiMB8GA1UdIwQY MBaAFN991llmc3zo9l5A7y/qHP+vsWKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMt OGFjODk2NTcwOGJjLzEvV1NScVpnbS0xRVFqcEQyWjBpd25WSHU5LUtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMtOGFjODk2NTcwOGJj LzEvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsqqAMA0G CSqGSIb3DQEBCwUAA4IBAQBzVvgP0GYI+HaPDItKriG5Zf/nMiF0lrdV1+GBZI+5 X4xP9oJ8DyaZZd+k5al+SccOGG767mN3a7PTf7ZurA/TqJezXDbhQNVUuM/m8KeH DAFscb+uc2P1WeXbF+3YwyC+821ueYbtCltBXCn6OL7iNkCJpSC67O4oENUplm67 prOkSicjvCqqv52Ymz/xRbwc/OPBNGMZ8SpHq1HqKv7B111Va9aZSLcyullFDL30 886AXGdHzqajT71N1q+EVKUAU5wXWfVXwb/d5MeL1q6QnFPAZ5L5aijDTpSZw/6a HDSg0WdI2apf6S8aifk7L6HTxH+goL0+lA1DqmIRNJgL -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:53 2026 by rpki-client