This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/Wsump-ruMTHeCIUMQYq9YHizRHM.roa File: Wsump-ruMTHeCIUMQYq9YHizRHM.roa (raw, json) Hash identifier: PRDR807Wy2QehMf95nyisTATR9YQb1obROcnB9juLnA= Subject key identifier: 5A:CB:A6:A7:EA:EE:31:31:DE:08:85:0C:41:8A:BD:60:78:B3:44:73 Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b Certificate serial: 019B797E272B0D59C1A81DA4AB8F9122227B Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/Wsump-ruMTHeCIUMQYq9YHizRHM.roa Signing time: Thu 01 Jan 2026 12:17:49 +0000 ROA not before: Thu 01 Jan 2026 12:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210172 IP address blocks: 185.218.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:27:2b:0d:59:c1:a8:1d:a4:ab:8f:91:22:22:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5acba6a7eaee3131de08850c418abd6078b34473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:3c:7d:2b:14:2f:5e:63:15:7c:1a:b8:bf: 89:d5:2d:d5:03:c8:2d:2e:60:75:de:d3:25:11:cc: 9c:f6:30:11:25:05:a9:36:d9:b6:a1:7c:42:a3:31: 15:de:bc:03:3a:82:02:1f:b3:89:7e:07:66:93:62: 7b:a0:cd:bc:7f:25:7c:d2:49:cc:8e:61:82:58:be: c5:7c:47:f3:e6:73:b9:d1:50:fe:b8:11:d0:5e:3f: b8:65:af:38:b5:af:5a:48:a0:58:7f:35:b9:87:67: c9:14:98:8a:92:34:eb:2b:48:56:e5:7f:20:cb:c2: a4:e7:85:4f:90:4a:8f:01:63:86:b5:44:13:08:ef: 32:e1:d9:de:38:a5:1f:2c:db:70:a3:a2:17:29:2d: d7:73:85:14:55:06:90:33:c8:b6:28:d4:ee:89:d7: 95:6f:9c:81:48:25:ef:c3:f6:b6:d3:b0:ef:31:4c: 12:e0:60:66:5c:5a:41:2e:69:ab:ec:d9:ad:ec:f1: 89:d6:91:cb:06:d4:9a:00:48:1e:26:73:e6:85:7d: d1:ee:c7:66:b1:54:d3:1a:f5:0b:7f:81:9d:cf:c5: 13:0f:66:0d:e9:7b:3c:ba:1c:20:ba:90:5e:0e:61: d1:6f:75:e5:ce:2b:87:ce:dc:68:2c:07:18:64:3c: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:A6:A7:EA:EE:31:31:DE:08:85:0C:41:8A:BD:60:78:B3:44:73 X509v3 Authority Key Identifier: keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/Wsump-ruMTHeCIUMQYq9YHizRHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.104.0/24 Signature Algorithm: sha256WithRSAEncryption 76:f3:04:06:e9:e8:da:87:76:1a:74:04:34:bf:33:be:13:76: 9e:9a:e5:4e:4e:40:cf:a2:8b:77:4f:34:66:77:ea:d8:0c:a9: 76:07:2b:c0:63:18:e1:d3:05:ab:c5:d5:f0:58:59:a1:b7:19: 2b:5a:2d:db:43:c1:76:10:85:3e:38:ad:38:0c:19:dc:13:95: 26:7b:c7:f0:9d:bd:3a:c4:19:08:5a:b0:08:3c:b5:d6:8a:d8: 60:f7:23:b8:45:32:ab:ec:87:8a:3d:de:60:6e:aa:5e:4a:9f: 29:05:02:92:b9:36:7e:9d:37:93:b8:74:2b:c8:03:bf:24:31: e2:b8:c1:6a:a0:f3:ba:08:ba:36:d3:5e:26:6d:db:36:b8:c2: 11:b3:86:c8:94:ab:d2:2e:f7:22:e2:6b:bb:ba:cd:0f:e3:e6: 91:f1:41:8d:77:dd:36:d3:90:97:4d:bb:ea:19:02:04:5a:3f: ea:b6:18:94:39:f8:8f:37:65:0f:ab:9f:2f:f6:00:30:34:8d: 9b:53:a5:b8:d2:be:91:3f:1a:52:93:da:8d:16:a7:97:27:7a: b0:55:82:c5:10:56:f3:b3:40:e4:bf:f5:7b:07:69:72:4f:9b: 14:0a:10:c6:ab:6e:74:1a:19:a4:3f:b6:be:ed:58:a2:89:76: 03:aa:34:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ficrDVnBqB2kq4+RIiJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5N2Q5ZjNkYmZjMzY1MzMyZTI4MmJkMTc2YTY4MDc1NDQ2 ZDFkMWIwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWNiYTZhN2VhZWUzMTMxZGUwODg1MGM0MThhYmQ2MDc4YjM0NDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu48fSsUL15jFXwauL+J1S3VA8gt LmB13tMlEcyc9jARJQWpNtm2oXxCozEV3rwDOoICH7OJfgdmk2J7oM28fyV80knM jmGCWL7FfEfz5nO50VD+uBHQXj+4Za84ta9aSKBYfzW5h2fJFJiKkjTrK0hW5X8g y8Kk54VPkEqPAWOGtUQTCO8y4dneOKUfLNtwo6IXKS3Xc4UUVQaQM8i2KNTuideV b5yBSCXvw/a207DvMUwS4GBmXFpBLmmr7Nmt7PGJ1pHLBtSaAEgeJnPmhX3R7sdm sVTTGvULf4Gdz8UTD2YN6Xs8uhwgupBeDmHRb3XlziuHztxoLAcYZDzhowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrLpqfq7jEx3giFDEGKvWB4s0RzMB8GA1UdIwQY MBaAFDl9nz2/w2UzLigr0XamgHVEbR0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMt ZDg2YWIyZmU3NjQ4LzEvV3N1bXAtcnVNVEhlQ0lVTVFZcTlZSGl6UkhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMtZDg2YWIyZmU3NjQ4 LzEvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudpoMA0G CSqGSIb3DQEBCwUAA4IBAQB28wQG6ejah3YadAQ0vzO+E3aemuVOTkDPoot3TzRm d+rYDKl2ByvAYxjh0wWrxdXwWFmhtxkrWi3bQ8F2EIU+OK04DBncE5Ume8fwnb06 xBkIWrAIPLXWithg9yO4RTKr7IeKPd5gbqpeSp8pBQKSuTZ+nTeTuHQryAO/JDHi uMFqoPO6CLo2014mbds2uMIRs4bIlKvSLvci4mu7us0P4+aR8UGNd90205CXTbvq GQIEWj/qthiUOfiPN2UPq58v9gAwNI2bU6W40r6RPxpSk9qNFqeXJ3qwVYLFEFbz s0Dkv/V7B2lyT5sUChDGq250GhmkP7a+7ViiiXYDqjQ6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:59 2026 by rpki-client