This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/WCJ9gE-e8QjNE_vVGqmE6pO_nvw.roa File: WCJ9gE-e8QjNE_vVGqmE6pO_nvw.roa (raw, json) Hash identifier: DeEHxD61Idh7MZyjwpXRlXo6rPbiEwB469c7Waf82Ic= Subject key identifier: 58:22:7D:80:4F:9E:F1:08:CD:13:FB:D5:1A:A9:84:EA:93:BF:9E:FC Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Certificate serial: 019B76EB101EBA7F55570205C569557710D5 Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/WCJ9gE-e8QjNE_vVGqmE6pO_nvw.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11426 IP address blocks: 37.153.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:10:1e:ba:7f:55:57:02:05:c5:69:55:77:10:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58227d804f9ef108cd13fbd51aa984ea93bf9efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ed:24:48:cf:fb:94:d3:9b:d7:0d:cb:5c:5b: 8e:ca:97:99:54:d4:ad:4e:c2:c9:9f:fe:d4:05:9b: c2:13:71:d8:8f:6a:68:22:77:0a:00:0d:44:5a:15: 0b:46:90:d2:86:59:22:de:ba:ff:15:6f:82:5f:71: d3:de:09:2b:3c:b6:41:9f:4f:03:d6:3f:2f:c0:df: 1e:17:93:4b:15:9c:d7:82:a6:23:3c:50:c5:a0:95: 55:3f:18:d0:42:56:17:c4:aa:b9:f1:63:5f:b6:2d: b1:d8:9a:4e:cb:62:ee:9d:18:e1:24:42:98:17:61: de:bc:92:81:50:80:c4:d4:58:27:28:3b:b7:39:83: b0:58:cf:13:cf:10:bc:4c:8a:a0:17:51:43:d4:52: d7:e2:17:be:26:8b:b2:eb:43:bf:98:a1:82:48:57: 3d:29:83:96:48:5e:fe:bd:5a:7e:9d:d9:64:91:3c: 54:4f:31:b3:29:d6:0b:be:30:16:13:41:6b:3e:8e: 7d:84:89:7e:22:84:e3:6b:ba:09:1d:25:d0:44:37: c8:57:6a:84:85:b9:43:d6:f5:8b:27:3a:13:2b:c8: 44:e1:d2:b6:7a:ba:76:21:10:fc:1c:47:36:e4:95: 5a:09:8b:b0:6d:13:c7:bf:8f:59:23:b7:60:c1:56: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:22:7D:80:4F:9E:F1:08:CD:13:FB:D5:1A:A9:84:EA:93:BF:9E:FC X509v3 Authority Key Identifier: keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/WCJ9gE-e8QjNE_vVGqmE6pO_nvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.154.0/24 Signature Algorithm: sha256WithRSAEncryption 33:e6:ca:a5:f7:2c:c7:d8:9d:7a:ba:4c:85:42:54:02:67:03: b9:35:39:79:cc:b9:11:a2:48:6f:2d:ce:5c:75:e5:5e:14:56: f6:ef:38:52:c3:46:4f:c8:9a:4e:b9:eb:5b:f4:ca:0f:5b:ea: f6:c7:f7:c9:2f:cd:6b:8a:dc:f7:4c:c8:4d:70:22:a7:f9:a7: bf:a3:64:4c:af:cf:5e:f0:58:67:04:bc:43:7a:29:a6:b9:4e: 22:1f:a8:b5:7c:24:2a:e5:78:d1:fc:63:b5:c6:06:28:d8:87: 8a:87:17:a4:26:18:9f:43:b5:6f:19:0f:f7:e5:33:21:13:b2: 15:ee:d3:58:ee:cb:85:d0:35:47:2c:78:c5:04:87:7e:0c:9f: 55:f4:75:83:13:4b:eb:49:6c:69:51:ea:9c:ad:66:02:61:2d: c0:35:c0:27:23:e8:cd:8e:12:a5:98:a9:67:fb:f7:6e:0f:72: 0a:70:bf:bc:df:22:d5:e0:77:d2:ec:e4:bb:9b:80:16:03:2d: fc:3e:70:41:c3:2a:9f:40:21:25:26:26:98:54:d9:85:1d:dc: 3f:d5:07:d2:5e:6e:30:dc:64:a8:38:eb:a3:6a:f8:de:63:53: 10:09:02:f4:fc:e0:46:d5:57:20:df:e2:0b:6f:84:ff:47:39: 38:69:bf:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xAeun9VVwIFxWlVdxDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTViZjljNjFjODVkYjdjOTlhYzRjZGY3OTI1N2U3OTk3 YWI3N2MwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODIyN2Q4MDRmOWVmMTA4Y2QxM2ZiZDUxYWE5ODRlYTkzYmY5ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+0kSM/7lNOb1w3LXFuOypeZVNSt TsLJn/7UBZvCE3HYj2poIncKAA1EWhULRpDShlki3rr/FW+CX3HT3gkrPLZBn08D 1j8vwN8eF5NLFZzXgqYjPFDFoJVVPxjQQlYXxKq58WNfti2x2JpOy2LunRjhJEKY F2HevJKBUIDE1FgnKDu3OYOwWM8TzxC8TIqgF1FD1FLX4he+Jouy60O/mKGCSFc9 KYOWSF7+vVp+ndlkkTxUTzGzKdYLvjAWE0FrPo59hIl+IoTja7oJHSXQRDfIV2qE hblD1vWLJzoTK8hE4dK2erp2IRD8HEc25JVaCYuwbRPHv49ZI7dgwVZLcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgifYBPnvEIzRP71RqphOqTv578MB8GA1UdIwQY MBaAFCQVv5xhyF23yZrEzfeSV+eZerd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMt NmExOGRjODgxNmRiLzEvV0NKOWdFLWU4UWpORV92VkdxbUU2cE9fbnZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMtNmExOGRjODgxNmRi LzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZmaMA0G CSqGSIb3DQEBCwUAA4IBAQAz5sql9yzH2J16ukyFQlQCZwO5NTl5zLkRokhvLc5c deVeFFb27zhSw0ZPyJpOuetb9MoPW+r2x/fJL81ritz3TMhNcCKn+ae/o2RMr89e 8FhnBLxDeimmuU4iH6i1fCQq5XjR/GO1xgYo2IeKhxekJhifQ7VvGQ/35TMhE7IV 7tNY7suF0DVHLHjFBId+DJ9V9HWDE0vrSWxpUeqcrWYCYS3ANcAnI+jNjhKlmKln +/duD3IKcL+83yLV4HfS7OS7m4AWAy38PnBBwyqfQCElJiaYVNmFHdw/1QfSXm4w 3GSoOOujavjeY1MQCQL0/OBG1Vcg3+ILb4T/Rzk4ab/S -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:56 2026 by rpki-client