This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/WundBlki0Rx5RItnWQJexSjiPdo.roa File: WundBlki0Rx5RItnWQJexSjiPdo.roa (raw, json) Hash identifier: tn1Rdsti2DdLSurYdjl5heL1jrFbbaiHAu0gcaYWMGg= Subject key identifier: 5A:E9:DD:06:59:22:D1:1C:79:44:8B:67:59:02:5E:C5:28:E2:3D:DA Certificate issuer: /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f Certificate serial: 019B7F841B623B8D92877B3FB98F8CBAE8AE Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/WundBlki0Rx5RItnWQJexSjiPdo.roa Signing time: Fri 02 Jan 2026 16:22:02 +0000 ROA not before: Fri 02 Jan 2026 16:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 185.43.192.0/24 maxlen: 24 185.43.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:1b:62:3b:8d:92:87:7b:3f:b9:8f:8c:ba:e8:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f Validity Not Before: Jan 2 16:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ae9dd065922d11c79448b6759025ec528e23dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:c0:ac:03:dc:51:30:29:c5:08:fa:28:e9: de:24:aa:90:f0:d2:2e:29:bf:6d:bc:be:59:73:a6: c4:30:ff:d7:b8:e3:0c:c3:f2:c4:f8:bd:62:f9:de: fd:77:56:6b:c9:9a:ba:a9:1e:b3:5b:01:02:c9:c9: d7:ab:54:64:c9:8d:23:d2:00:82:e6:6b:08:43:1e: e8:62:a9:ac:27:87:fe:45:5f:ec:13:1d:e6:ad:4a: dd:9c:54:32:0a:e2:46:8c:72:cd:c9:4a:09:3c:e5: 34:8e:3a:ce:c7:78:a4:30:42:d6:9b:d5:88:dd:bc: be:ad:86:4a:4b:b1:3a:c2:e8:52:a8:0a:db:8e:4b: 35:a8:b5:25:6f:43:17:0c:d8:eb:6a:a3:3c:ef:fa: 84:21:bc:bb:22:76:ef:df:94:8f:8f:54:c7:44:e2: f8:c3:22:e1:39:23:45:01:98:de:9b:7e:70:c4:59: ea:bb:55:27:19:25:7b:1b:c5:5d:d0:ef:c7:10:1f: b9:01:fa:3c:6e:d2:d5:55:85:95:42:2a:e6:9f:c9: bd:e9:47:e1:90:36:8b:45:20:23:ca:2c:ec:5e:ca: c5:b3:c1:d4:db:7e:18:6a:bc:49:f2:c5:f3:5f:01: 2d:84:6b:9d:48:52:e6:8e:55:87:d7:2a:af:b8:a4: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:DD:06:59:22:D1:1C:79:44:8B:67:59:02:5E:C5:28:E2:3D:DA X509v3 Authority Key Identifier: keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/WundBlki0Rx5RItnWQJexSjiPdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.192.0/23 Signature Algorithm: sha256WithRSAEncryption 41:f8:3e:bf:51:c1:b9:db:b9:d0:3b:11:02:41:d1:08:be:ba: fe:8f:8b:de:b0:62:cb:b8:de:26:f1:78:a5:29:3f:fc:e2:31: 23:a1:28:23:5e:8c:c0:c5:23:41:be:c4:cd:a7:26:1a:dc:7d: 96:85:28:89:32:f6:69:95:48:43:89:41:a4:ff:a7:bc:bd:f5: 72:d9:d1:0d:af:ec:41:95:df:a9:de:f9:23:bd:03:61:c4:bb: 2b:7f:cb:22:48:ff:11:a6:ab:fe:fc:74:f5:55:8e:4d:fb:06: d2:57:87:fe:aa:86:cd:bd:1c:e4:4e:70:57:5e:35:47:47:8e: a6:e5:92:7d:33:a1:6e:f7:9b:fa:d5:76:64:30:54:75:8c:2c: ec:75:5d:04:75:7a:e6:9d:b4:c5:87:aa:a6:a3:14:2a:e7:c0: 2a:f7:93:a5:f1:e2:b6:df:81:3d:71:49:7a:7a:16:f6:a6:a5: bb:dc:fa:2d:3b:06:89:cb:b2:64:28:e0:39:16:77:40:b4:bf: a8:d0:ac:0f:0c:e2:11:33:37:83:63:0d:3b:2a:07:23:83:61: 4c:06:1b:3f:a9:77:46:3e:34:6b:f6:a0:1c:0b:b4:da:ea:ad: bd:7d:94:04:f1:30:6c:cb:ad:23:22:90:ec:37:87:37:60:42: a0:5e:5e:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hBtiO42Sh3s/uY+MuuiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZDI3MjFmMmUyYmQwMTFiOGE2ODYwYWQyNTcyYzQwNWMw YjU0MGYwHhcNMjYwMTAyMTYyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWU5ZGQwNjU5MjJkMTFjNzk0NDhiNjc1OTAyNWVjNTI4ZTIzZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKPArAPcUTApxQj6KOneJKqQ8NIu Kb9tvL5Zc6bEMP/XuOMMw/LE+L1i+d79d1ZryZq6qR6zWwECycnXq1RkyY0j0gCC 5msIQx7oYqmsJ4f+RV/sEx3mrUrdnFQyCuJGjHLNyUoJPOU0jjrOx3ikMELWm9WI 3by+rYZKS7E6wuhSqArbjks1qLUlb0MXDNjraqM87/qEIby7Inbv35SPj1THROL4 wyLhOSNFAZjem35wxFnqu1UnGSV7G8Vd0O/HEB+5Afo8btLVVYWVQirmn8m96Ufh kDaLRSAjyizsXsrFs8HU234YarxJ8sXzXwEthGudSFLmjlWH1yqvuKS5/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrp3QZZItEceUSLZ1kCXsUo4j3aMB8GA1UdIwQY MBaAFOnSch8uK9ARuKaGCtJXLEBcC1QPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmRKeUh5NHIwQkc0cG9ZSzBsY3NRRndMVkE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zNjhkZjAtNWM0MS00OWQzLWE5YTkt YzQ1OTAzYzNiMzI5LzEvV3VuZEJsa2kwUng1Ukl0bldRSmV4U2ppUGRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zNjhkZjAtNWM0MS00OWQzLWE5YTktYzQ1OTAzYzNiMzI5 LzEvNmRKeUh5NHIwQkc0cG9ZSzBsY3NRRndMVkE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSvAMA0G CSqGSIb3DQEBCwUAA4IBAQBB+D6/UcG527nQOxECQdEIvrr+j4vesGLLuN4m8Xil KT/84jEjoSgjXozAxSNBvsTNpyYa3H2WhSiJMvZplUhDiUGk/6e8vfVy2dENr+xB ld+p3vkjvQNhxLsrf8siSP8Rpqv+/HT1VY5N+wbSV4f+qobNvRzkTnBXXjVHR46m 5ZJ9M6Fu95v61XZkMFR1jCzsdV0EdXrmnbTFh6qmoxQq58Aq95Ol8eK234E9cUl6 ehb2pqW73PotOwaJy7JkKOA5FndAtL+o0KwPDOIRMzeDYw07Kgcjg2FMBhs/qXdG PjRr9qAcC7Ta6q29fZQE8TBsy60jIpDsN4c3YEKgXl6y -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:28 2026 by rpki-client