This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wgtA42wWepDn-f0LTedMQ0JSqhk.roa File: wgtA42wWepDn-f0LTedMQ0JSqhk.roa (raw, json) Hash identifier: rTyZ/QpQV+5x3aaNm6cYWjHu1q+s2ArTwbztZSbVVh4= Subject key identifier: C2:0B:40:E3:6C:16:7A:90:E7:F9:FD:0B:4D:E7:4C:43:42:52:AA:19 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BFF10D639D31848A5763947071D1B6D32 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wgtA42wWepDn-f0LTedMQ0JSqhk.roa Signing time: Tue 27 Jan 2026 10:47:32 +0000 ROA not before: Tue 27 Jan 2026 10:47:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203997 IP address blocks: 151.244.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 07:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:10:d6:39:d3:18:48:a5:76:39:47:07:1d:1b:6d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 27 10:47:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20b40e36c167a90e7f9fd0b4de74c434252aa19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:ec:a6:fe:f4:95:d2:55:61:86:61:14:ca: 22:4e:4e:7a:08:ca:63:8d:f6:2f:39:d3:8e:2a:07: 64:ae:54:d7:6e:27:26:81:7b:0e:59:8c:9d:f1:eb: b2:73:e1:4e:e8:db:4d:fc:93:9b:53:9d:cc:2f:1b: 82:70:b5:94:5d:f0:f5:9d:08:b4:0e:75:a0:cd:80: 89:31:a0:06:40:d5:67:3e:02:da:1a:91:ea:60:1c: fc:cf:3e:86:79:80:ca:21:41:b0:e7:d6:ad:de:92: e5:d5:10:b6:06:fc:9f:33:87:c6:d7:a8:85:2c:cc: 28:1b:93:64:38:c3:2a:06:af:02:0e:1d:e1:c8:6b: ab:cd:59:5e:62:86:33:25:84:a4:4d:c2:87:f6:00: 5f:59:e0:6b:c5:ce:e1:35:9e:90:a7:c4:d0:ea:ee: bb:a7:96:ca:18:f8:9a:35:0b:a6:f0:a3:e6:b7:d0: 41:5f:ff:c7:01:52:b7:df:23:94:8b:f5:1c:ff:b3: 9c:33:68:b9:f4:be:d1:51:5a:27:a3:6e:6a:3f:4e: 56:7a:d2:1e:ca:3a:24:4b:94:ca:0a:95:be:77:12: 18:3b:8b:65:96:e0:42:c6:58:42:7c:40:42:b6:d5: d3:53:5a:ca:77:50:25:13:fa:39:0b:bd:a1:a1:7f: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0B:40:E3:6C:16:7A:90:E7:F9:FD:0B:4D:E7:4C:43:42:52:AA:19 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wgtA42wWepDn-f0LTedMQ0JSqhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.252.0/24 Signature Algorithm: sha256WithRSAEncryption a5:49:c8:6b:62:f4:7f:dd:7b:5a:93:76:74:7e:0c:25:a3:71: 12:98:39:a7:3f:68:4c:37:6b:81:ea:bb:57:54:b7:5a:ee:78: ff:9e:d8:e3:ec:fb:4f:70:6e:63:15:0d:5c:71:26:41:2f:34: c4:70:5f:19:c4:67:94:22:3b:80:7f:1c:ad:a4:9b:d6:29:70: 51:ee:b3:3f:57:8b:97:de:fc:d0:cc:a4:d5:be:c0:83:f4:78: 8e:13:4e:4f:68:95:87:2e:e0:64:af:ec:26:33:72:30:0d:79: fd:65:98:cb:84:05:ca:ef:e7:f4:fe:00:44:88:c8:c1:d0:39: 92:7e:ac:b5:6f:63:ed:c0:50:59:7c:fd:9c:7c:3f:b3:05:d0: 0b:90:08:48:50:ea:f9:77:94:0a:66:be:c2:45:bf:1a:e0:a1: c0:b3:40:17:4e:44:7e:7b:86:d5:1e:74:00:c0:2b:bf:5e:cc: 76:de:5c:1c:0b:96:f5:7b:d9:eb:95:0c:24:06:0f:82:55:99: f3:95:d0:a7:e9:dc:95:7e:bc:5f:1f:7e:42:6c:1d:ec:9c:33: 38:59:22:13:b8:c3:2e:8c:8c:4c:a4:2c:a7:2b:a8:ff:49:8c: d2:72:63:29:99:3b:d1:f5:cc:42:ef:39:8a:96:f6:08:84:8d: bc:50:63:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv/ENY50xhIpXY5RwcdG20yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTI3MTA0NzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjBiNDBlMzZjMTY3YTkwZTdmOWZkMGI0ZGU3NGM0MzQyNTJhYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC3spv70ldJVYYZhFMoiTk56CMpj jfYvOdOOKgdkrlTXbicmgXsOWYyd8euyc+FO6NtN/JObU53MLxuCcLWUXfD1nQi0 DnWgzYCJMaAGQNVnPgLaGpHqYBz8zz6GeYDKIUGw59at3pLl1RC2BvyfM4fG16iF LMwoG5NkOMMqBq8CDh3hyGurzVleYoYzJYSkTcKH9gBfWeBrxc7hNZ6Qp8TQ6u67 p5bKGPiaNQum8KPmt9BBX//HAVK33yOUi/Uc/7OcM2i59L7RUVono25qP05WetIe yjokS5TKCpW+dxIYO4tlluBCxlhCfEBCttXTU1rKd1AlE/o5C72hoX+eAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMILQONsFnqQ5/n9C03nTENCUqoZMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvd2d0QTQyd1dlcERuLWYwTFRlZE1RMEpTcWhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/T8MA0G CSqGSIb3DQEBCwUAA4IBAQClSchrYvR/3Xtak3Z0fgwlo3ESmDmnP2hMN2uB6rtX VLda7nj/ntjj7PtPcG5jFQ1ccSZBLzTEcF8ZxGeUIjuAfxytpJvWKXBR7rM/V4uX 3vzQzKTVvsCD9HiOE05PaJWHLuBkr+wmM3IwDXn9ZZjLhAXK7+f0/gBEiMjB0DmS fqy1b2PtwFBZfP2cfD+zBdALkAhIUOr5d5QKZr7CRb8a4KHAs0AXTkR+e4bVHnQA wCu/Xsx23lwcC5b1e9nrlQwkBg+CVZnzldCn6dyVfrxfH35CbB3snDM4WSITuMMu jIxMpCynK6j/SYzScmMpmTvR9cxC7zmKlvYIhI28UGMS -----END CERTIFICATE-----Generated at Tue Feb 3 12:59:43 2026 by rpki-client