This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/WssIiJPoFY7lcNnyGVymIImcWDA.roa File: WssIiJPoFY7lcNnyGVymIImcWDA.roa (raw, json) Hash identifier: k9Vj39pdgub01PhKYMQsaWQH2pHY+R5nnRnCmdZFUMM= Subject key identifier: 5A:CB:08:88:93:E8:15:8E:E5:70:D9:F2:19:5C:A6:20:89:9C:58:30 Certificate issuer: /CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28 Certificate serial: 019B7DCAF197AA6304AD3FFDBDA883BEFD1F Authority key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/WssIiJPoFY7lcNnyGVymIImcWDA.roa Signing time: Fri 02 Jan 2026 08:20:10 +0000 ROA not before: Fri 02 Jan 2026 08:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8270 IP address blocks: 193.34.142.0/23 maxlen: 23 193.34.142.0/24 maxlen: 24 193.34.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f1:97:aa:63:04:ad:3f:fd:bd:a8:83:be:fd:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28 Validity Not Before: Jan 2 08:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5acb088893e8158ee570d9f2195ca620899c5830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:3c:a7:ae:db:68:d0:b5:da:f9:a6:5c:04: 40:22:e2:7b:77:51:da:d8:0d:72:91:a8:7a:e0:2f: 1a:00:70:3a:18:ec:ca:64:76:05:a5:41:db:0a:e0: 19:72:ac:4d:f7:98:43:5b:5e:60:75:b9:60:41:b0: e2:4b:1e:a9:16:d1:9c:07:96:f3:c6:e8:27:89:8c: d8:f7:23:6f:15:6f:fc:68:75:bc:28:34:09:ba:cf: e0:23:cf:dc:22:25:d7:a6:8d:f0:58:78:b4:75:36: bb:ad:67:3a:cd:c7:46:f0:21:17:a9:f7:c2:d6:23: 70:b1:97:2e:55:cc:02:ab:be:4d:44:74:03:44:b9: 9e:bb:87:19:37:d0:b0:00:f6:ae:9d:18:27:bb:42: cc:5a:7d:e5:68:a9:49:0b:14:d4:86:96:ed:e3:de: 0d:76:d2:79:ac:cd:8c:15:3f:54:f7:67:83:9b:37: fb:74:31:19:7a:fe:ce:48:4a:8a:df:3f:a0:d3:0e: d2:4a:51:12:5e:b7:a3:23:ea:c4:36:ff:1b:97:ad: 8a:40:3a:ab:b2:ba:57:c8:4e:59:79:53:7b:43:ce: d6:d2:27:cb:54:33:e7:2c:7f:9d:f8:9f:a2:db:47: 49:58:5a:25:95:ae:44:d1:07:a6:99:ed:0d:46:f8: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:08:88:93:E8:15:8E:E5:70:D9:F2:19:5C:A6:20:89:9C:58:30 X509v3 Authority Key Identifier: keyid:47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/WssIiJPoFY7lcNnyGVymIImcWDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.142.0/23 Signature Algorithm: sha256WithRSAEncryption 25:63:57:91:c3:04:1f:ac:c8:0e:94:53:32:28:d1:af:92:7d: 8e:08:2d:b4:23:c2:df:a0:5d:28:48:90:0a:9a:cf:80:35:f4: 3c:61:db:0f:94:15:2d:0a:98:8f:df:28:69:a7:61:a7:5e:32: 48:56:2c:ff:ae:cd:2c:50:4e:ed:f8:90:70:7f:6b:b3:01:37: 16:c6:3d:44:57:b1:15:f3:4a:31:16:72:9c:90:34:f6:de:40: 54:f8:15:fb:8c:71:ee:71:2b:04:01:4d:e9:c2:24:e9:a9:32: 5e:f0:9e:dc:23:60:93:d7:0b:67:07:86:ef:8f:28:e2:12:8a: 83:08:3e:14:9c:77:8d:c9:0a:dc:03:58:37:c1:2b:49:ad:23: b2:1b:85:ac:3b:66:53:17:86:a5:dc:56:b1:36:39:df:d3:d3: 12:19:c2:b5:c6:45:60:11:1b:98:4c:8d:7e:84:35:e4:14:83: 76:ab:b3:a8:59:ff:40:8c:cf:65:55:2f:f9:2d:bf:e6:0d:80: 02:04:19:7e:82:76:2d:b2:4d:a3:3a:7e:40:bd:42:ed:b6:ba: ee:a8:ee:e1:8e:b0:b9:a0:82:81:49:0c:05:34:1b:5d:57:a4: 6f:cb:ac:1d:86:d0:22:d4:70:f1:89:ef:96:09:78:ff:97:ef: 6c:c1:0e:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvGXqmMErT/9vaiDvv0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NWEwNmNhZDdiZDBjM2RiOWY4YTM4MWYxZWI5Y2Q2Yzc1 YWFiMjgwHhcNMjYwMTAyMDgyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWNiMDg4ODkzZTgxNThlZTU3MGQ5ZjIxOTVjYTYyMDg5OWM1ODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFM8p67baNC12vmmXARAIuJ7d1Ha 2A1ykah64C8aAHA6GOzKZHYFpUHbCuAZcqxN95hDW15gdblgQbDiSx6pFtGcB5bz xugniYzY9yNvFW/8aHW8KDQJus/gI8/cIiXXpo3wWHi0dTa7rWc6zcdG8CEXqffC 1iNwsZcuVcwCq75NRHQDRLmeu4cZN9CwAPaunRgnu0LMWn3laKlJCxTUhpbt494N dtJ5rM2MFT9U92eDmzf7dDEZev7OSEqK3z+g0w7SSlESXrejI+rENv8bl62KQDqr srpXyE5ZeVN7Q87W0ifLVDPnLH+d+J+i20dJWFolla5E0Qemme0NRvg7DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrLCIiT6BWO5XDZ8hlcpiCJnFgwMB8GA1UdIwQY MBaAFEdaBsrXvQw9ufijgfHrnNbHWqsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjFvR3l0ZTlERDI1LUtPQjhldWMxc2RhcXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZGZkNzAtMzA2Ny00NzNkLThmNjUt YjU1MzIyMDI4YmI4LzEvV3NzSWlKUG9GWTdsY05ueUdWeW1JSW1jV0RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iZGZkNzAtMzA2Ny00NzNkLThmNjUtYjU1MzIyMDI4YmI4 LzEvUjFvR3l0ZTlERDI1LUtPQjhldWMxc2RhcXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSKOMA0G CSqGSIb3DQEBCwUAA4IBAQAlY1eRwwQfrMgOlFMyKNGvkn2OCC20I8LfoF0oSJAK ms+ANfQ8YdsPlBUtCpiP3yhpp2GnXjJIViz/rs0sUE7t+JBwf2uzATcWxj1EV7EV 80oxFnKckDT23kBU+BX7jHHucSsEAU3pwiTpqTJe8J7cI2CT1wtnB4bvjyjiEoqD CD4UnHeNyQrcA1g3wStJrSOyG4WsO2ZTF4al3FaxNjnf09MSGcK1xkVgERuYTI1+ hDXkFIN2q7OoWf9AjM9lVS/5Lb/mDYACBBl+gnYtsk2jOn5AvULttrruqO7hjrC5 oIKBSQwFNBtdV6Rvy6wdhtAi1HDxie+WCXj/l+9swQ6O -----END CERTIFICATE-----Generated at Tue Feb 10 07:25:46 2026 by rpki-client