This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/wx17y-l3HkSd9N9CZPeZR_8bXnw.roa File: wx17y-l3HkSd9N9CZPeZR_8bXnw.roa (raw, json) Hash identifier: yiL1AQyzbftZhvbhGblm6UfDIK9AiqPEBKJPPMrVRRI= Subject key identifier: C3:1D:7B:CB:E9:77:1E:44:9D:F4:DF:42:64:F7:99:47:FF:1B:5E:7C Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4 Certificate serial: 019B77C75D02FC14A207D53FAFC81551DD8E Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/wx17y-l3HkSd9N9CZPeZR_8bXnw.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198421 IP address blocks: 109.206.96.0/19 maxlen: 24 109.207.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5d:02:fc:14:a2:07:d5:3f:af:c8:15:51:dd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c31d7bcbe9771e449df4df4264f79947ff1b5e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:6a:1d:42:48:e2:6a:a3:cf:45:79:61:cc: c1:44:ff:41:5f:07:5e:bb:2b:0f:bc:5b:05:3e:9b: 96:b6:c1:7c:1f:79:0d:e3:0a:3c:08:2e:e5:ec:a1: 79:a3:fb:63:96:73:0e:6b:e2:fc:68:a3:68:40:30: 8d:87:ca:c6:6e:03:cd:99:e6:7f:f3:be:99:5c:27: cd:1b:0e:d2:a0:c7:fc:1c:35:6a:ca:55:e0:c1:fd: 58:32:cb:aa:ec:57:ff:49:dc:31:9b:03:26:5c:73: a1:85:a6:0a:93:2a:af:a4:f0:a6:6f:c8:7c:ee:fb: f6:72:7a:cc:ac:40:8a:c7:3d:da:e6:14:8e:23:c6: ff:58:b0:fe:3f:30:92:90:e4:be:c3:12:7b:a0:17: ed:6c:31:0f:af:37:6c:79:26:28:5b:d5:be:fb:34: c2:c4:6c:4f:04:6c:d7:cb:a5:5a:1f:7f:9d:ff:55: bb:ef:aa:63:12:03:ca:82:d4:14:2f:30:89:a2:26: 4e:44:90:0b:30:be:dd:ee:7f:8f:f0:5e:70:a4:c5: cd:48:e1:69:1b:99:b7:84:79:c5:a0:f3:1b:89:2d: 48:cd:9c:2f:8d:d0:d0:7d:0d:03:4f:e7:fd:00:e5: 54:d4:1a:71:f7:74:1a:5a:66:bc:a8:43:e8:10:aa: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1D:7B:CB:E9:77:1E:44:9D:F4:DF:42:64:F7:99:47:FF:1B:5E:7C X509v3 Authority Key Identifier: keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/wx17y-l3HkSd9N9CZPeZR_8bXnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.206.96.0/19 109.207.32.0/20 Signature Algorithm: sha256WithRSAEncryption 5b:8c:58:1b:0c:58:f3:f5:e8:64:08:95:3a:53:dc:cc:9f:35: af:5b:fc:a6:6c:68:38:2e:e8:6f:36:51:e6:fc:14:b1:a1:94: b9:22:4c:d0:b6:d6:73:36:cf:82:e0:cf:e3:0a:ed:9e:d9:a8: c8:cb:cb:8c:00:17:49:f8:e4:d2:2c:eb:56:7b:66:0a:b7:18: 8f:d8:4e:32:29:5d:05:9f:f6:2a:01:46:e8:4f:03:c2:17:19: f4:3b:b7:41:8b:fe:6e:6f:3f:72:eb:f6:3c:9e:e4:f5:79:6f: 69:48:f4:86:f9:f9:91:a8:6d:8e:dc:1f:3a:51:d5:35:fc:bb: 66:c4:1c:9b:89:70:0d:6f:fc:31:87:a4:71:2b:8a:bf:bd:f5: f5:8e:9e:b7:a3:83:0c:8a:79:ae:20:6c:b9:70:ba:82:16:42: 8e:57:96:0a:c6:8d:78:50:35:d3:cd:ee:40:12:48:b0:dc:01: 7b:ee:ee:ae:91:c4:34:03:fc:b4:ff:84:9f:7c:73:c3:ce:8f: cd:b1:a3:a4:1e:f7:7e:a2:80:c3:3c:ec:ad:aa:a6:2c:6e:4c: a8:4c:c1:d0:72:fb:bd:87:60:d2:0b:a4:0b:d6:84:e3:14:0b: 73:9f:7a:b4:82:1c:98:79:46:7d:d1:46:40:64:1f:a5:fd:c7: 69:2f:97:bc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x10C/BSiB9U/r8gVUd2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGRlNzJlNTAwNmFmNmRiNTUxMTVlMWI3MDkzMjAyM2Nl ZWNiYTQwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzFkN2JjYmU5NzcxZTQ0OWRmNGRmNDI2NGY3OTk0N2ZmMWI1ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeBqHUJI4mqjz0V5YczBRP9BXwde uysPvFsFPpuWtsF8H3kN4wo8CC7l7KF5o/tjlnMOa+L8aKNoQDCNh8rGbgPNmeZ/ 876ZXCfNGw7SoMf8HDVqylXgwf1YMsuq7Ff/SdwxmwMmXHOhhaYKkyqvpPCmb8h8 7vv2cnrMrECKxz3a5hSOI8b/WLD+PzCSkOS+wxJ7oBftbDEPrzdseSYoW9W++zTC xGxPBGzXy6VaH3+d/1W776pjEgPKgtQULzCJoiZORJALML7d7n+P8F5wpMXNSOFp G5m3hHnFoPMbiS1IzZwvjdDQfQ0DT+f9AOVU1Bpx93QaWma8qEPoEKqoNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMMde8vpdx5EnfTfQmT3mUf/G158MB8GA1UdIwQY MBaAFE+N5y5QBq9ttVEV4bcJMgI87sukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQt NWI1MDc4NjI1ZGVhLzEvd3gxN3ktbDNIa1NkOU45Q1pQZVpSXzhiWG53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQtNWI1MDc4NjI1ZGVh LzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFbc5gAwQE bc8gMA0GCSqGSIb3DQEBCwUAA4IBAQBbjFgbDFjz9ehkCJU6U9zMnzWvW/ymbGg4 LuhvNlHm/BSxoZS5IkzQttZzNs+C4M/jCu2e2ajIy8uMABdJ+OTSLOtWe2YKtxiP 2E4yKV0Fn/YqAUboTwPCFxn0O7dBi/5ubz9y6/Y8nuT1eW9pSPSG+fmRqG2O3B86 UdU1/LtmxBybiXANb/wxh6RxK4q/vfX1jp63o4MMinmuIGy5cLqCFkKOV5YKxo14 UDXTze5AEkiw3AF77u6ukcQ0A/y0/4SffHPDzo/NsaOkHvd+ooDDPOytqqYsbkyo TMHQcvu9h2DSC6QL1oTjFAtzn3q0ghyYeUZ90UZAZB+l/cdpL5e8 -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:32 2026 by rpki-client