This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/WsrGl1B3tO_3zGDPwgytq9BV2ls.roa File: WsrGl1B3tO_3zGDPwgytq9BV2ls.roa (raw, json) Hash identifier: B0lMFZCDA7Fu94HSAjMOJTkk6H8QhRKhpFxC3F7YKps= Subject key identifier: 5A:CA:C6:97:50:77:B4:EF:F7:CC:60:CF:C2:0C:AD:AB:D0:55:DA:5B Certificate issuer: /CN=4c8343edc843542f529fbc3e650cb6578c9206c3 Certificate serial: 019B7CECE78059342EF3D7928D5BAABDC1B2 Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/WsrGl1B3tO_3zGDPwgytq9BV2ls.roa Signing time: Fri 02 Jan 2026 04:17:39 +0000 ROA not before: Fri 02 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50296 IP address blocks: 193.104.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e7:80:59:34:2e:f3:d7:92:8d:5b:aa:bd:c1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3 Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5acac6975077b4eff7cc60cfc20cadabd055da5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:56:aa:e9:72:59:8d:54:89:17:72:b8:e9: bc:d9:4f:c1:03:ef:19:62:2c:7b:ad:e2:80:23:8e: 2e:df:ae:51:ac:bc:5b:eb:11:ed:d0:d8:9a:53:d5: 07:4f:e6:1b:ec:8b:80:74:9a:7d:50:2e:34:e5:d3: 10:1d:3d:97:89:f4:96:8f:20:ed:10:f5:82:94:03: 3e:10:5e:08:95:66:de:72:1a:63:58:9c:2b:bd:58: 29:e7:f9:90:c8:96:c6:46:38:c5:18:5a:77:be:49: d7:89:3d:0e:ae:22:99:f5:4c:0b:e5:ca:e5:1d:89: f8:32:4f:ac:99:ce:06:1e:4e:cd:6f:5d:ac:9f:bb: 11:36:b6:01:23:29:6f:e4:ae:83:ca:fb:bf:36:ad: aa:74:d4:79:0f:b3:4f:d6:1a:6d:8e:c2:ef:47:80: ae:84:27:f0:a9:64:ad:cb:0e:dc:13:a7:82:5b:3d: d7:02:d6:64:c3:28:05:fe:ad:63:09:83:d6:f3:09: 44:a8:f9:c4:75:5c:a4:5d:7a:c1:36:f9:85:78:7d: 1d:aa:6d:04:28:10:93:e2:2e:36:45:f8:73:42:af: 1e:64:ca:0a:84:72:7b:b2:fe:5b:d3:e9:3c:bc:28: b8:8b:d9:36:4f:6a:3b:3d:a7:75:f3:45:5c:cc:85: c4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CA:C6:97:50:77:B4:EF:F7:CC:60:CF:C2:0C:AD:AB:D0:55:DA:5B X509v3 Authority Key Identifier: keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/WsrGl1B3tO_3zGDPwgytq9BV2ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.196.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d6:e4:ad:1c:50:70:0d:af:dc:d7:bc:ce:25:ea:f8:65:19: 3f:55:61:7b:a4:76:b2:7b:ca:08:8e:f7:a1:b8:17:a1:9a:33: 02:d3:56:e6:9b:4c:f5:7d:b1:a4:18:de:e3:e4:ef:17:43:5b: 3b:64:4d:fa:82:9d:34:71:4e:d2:b4:90:a1:95:d1:af:e0:ef: 2f:41:36:e1:d8:02:8e:50:f6:92:c5:bf:83:d5:55:e6:43:39: 24:c8:db:87:16:0b:ac:92:7b:6d:2c:70:b2:2e:2f:2b:2a:31: a6:5c:62:6f:bd:f6:29:e6:66:26:03:a5:4a:21:02:46:7f:b3: 77:ef:3b:de:e6:db:7a:23:39:38:b0:88:5f:f4:c8:4b:0f:d2: 57:65:ea:1b:cd:7a:3e:95:51:40:a1:92:8d:c3:b6:ea:a1:21: 62:82:b5:8b:7e:2f:52:b7:6b:bc:4b:11:67:b7:ca:48:8e:6a: 0c:f2:ec:b3:ba:68:ce:87:45:ad:31:92:d6:89:27:f6:c3:36: 5f:31:a7:01:01:21:29:67:9f:05:5a:98:62:98:80:81:6f:97: c6:03:3b:4a:db:37:c9:04:ea:6a:c5:02:f5:50:16:fe:5a:7f: d9:3e:d0:05:15:df:bc:ae:69:8f:6f:12:ad:00:56:ed:3a:6c: f7:c2:f7:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87OeAWTQu89eSjVuqvcGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODM0M2VkYzg0MzU0MmY1MjlmYmMzZTY1MGNiNjU3OGM5 MjA2YzMwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWNhYzY5NzUwNzdiNGVmZjdjYzYwY2ZjMjBjYWRhYmQwNTVkYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomNWqulyWY1UiRdyuOm82U/BA+8Z Yix7reKAI44u365RrLxb6xHt0NiaU9UHT+Yb7IuAdJp9UC405dMQHT2XifSWjyDt EPWClAM+EF4IlWbechpjWJwrvVgp5/mQyJbGRjjFGFp3vknXiT0OriKZ9UwL5crl HYn4Mk+smc4GHk7Nb12sn7sRNrYBIylv5K6Dyvu/Nq2qdNR5D7NP1hptjsLvR4Cu hCfwqWStyw7cE6eCWz3XAtZkwygF/q1jCYPW8wlEqPnEdVykXXrBNvmFeH0dqm0E KBCT4i42RfhzQq8eZMoKhHJ7sv5b0+k8vCi4i9k2T2o7Pad180VczIXEjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrKxpdQd7Tv98xgz8IMravQVdpbMB8GA1UdIwQY MBaAFEyDQ+3IQ1QvUp+8PmUMtleMkgbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYt ZTljZTI5MWQyMThmLzEvV3NyR2wxQjN0T18zekdEUHdneXRxOUJWMmxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYtZTljZTI5MWQyMThm LzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWjEMA0G CSqGSIb3DQEBCwUAA4IBAQBt1uStHFBwDa/c17zOJer4ZRk/VWF7pHaye8oIjveh uBehmjMC01bmm0z1fbGkGN7j5O8XQ1s7ZE36gp00cU7StJChldGv4O8vQTbh2AKO UPaSxb+D1VXmQzkkyNuHFgusknttLHCyLi8rKjGmXGJvvfYp5mYmA6VKIQJGf7N3 7zve5tt6Izk4sIhf9MhLD9JXZeobzXo+lVFAoZKNw7bqoSFigrWLfi9St2u8SxFn t8pIjmoM8uyzumjOh0WtMZLWiSf2wzZfMacBASEpZ58FWphimICBb5fGAztK2zfJ BOpqxQL1UBb+Wn/ZPtAFFd+8rmmPbxKtAFbtOmz3wvdu -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:15 2026 by rpki-client