This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/Wf-ksTwxo7Sq0plKXRXEi63Vqfc.roa File: Wf-ksTwxo7Sq0plKXRXEi63Vqfc.roa (raw, json) Hash identifier: 7+Wwaoq9oqFjf/pv4r/VE2mNMQO06GEpJG3+nVsxTaM= Subject key identifier: 59:FF:A4:B1:3C:31:A3:B4:AA:D2:99:4A:5D:15:C4:8B:AD:D5:A9:F7 Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e Certificate serial: 019B7CED5F7C5B41DA5E0F264911B7C10D1B Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/Wf-ksTwxo7Sq0plKXRXEi63Vqfc.roa Signing time: Fri 02 Jan 2026 04:18:09 +0000 ROA not before: Fri 02 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201299 IP address blocks: 217.198.189.0/24 maxlen: 24 2a11:ffc0::/29 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5f:7c:5b:41:da:5e:0f:26:49:11:b7:c1:0d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e Validity Not Before: Jan 2 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59ffa4b13c31a3b4aad2994a5d15c48badd5a9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:42:24:64:61:c1:b4:73:f1:8e:9e:f3:62: 67:11:9a:17:01:26:f7:c2:b4:25:8f:84:78:81:c9: 33:96:2c:bd:7f:b6:54:b3:12:8d:03:e2:98:5f:60: 22:6f:fd:66:75:fd:3a:32:9c:79:d9:e4:21:2f:e4: 85:ab:5d:bf:48:f6:52:f2:17:5d:d1:6d:80:be:29: 11:08:2e:22:d4:72:6b:d2:03:eb:7f:a4:51:15:0c: f3:a8:ae:43:43:a1:41:46:68:ab:b9:ac:4f:44:58: 0c:cd:f4:b2:48:fc:d3:8b:e7:1a:bc:88:0e:4a:cd: a7:0d:57:04:14:37:5e:11:a1:eb:77:39:59:56:5e: 9f:8f:37:44:e5:db:eb:90:c0:31:36:68:57:d3:20: ac:6d:5d:d6:95:fd:54:f0:c7:a5:36:01:9d:41:b9: c5:ec:88:4a:98:38:59:c7:f0:de:b6:c2:0e:e4:5e: 31:b3:27:c7:22:31:22:66:e6:cf:95:8e:10:e9:35: 28:09:dc:2a:de:52:54:21:cd:6e:89:1d:35:b9:75: e3:3d:08:fb:cd:6f:dd:ac:bf:54:31:00:0d:67:b8: cf:73:21:27:53:30:78:91:d6:d2:7d:7b:50:e6:1f: 2d:6d:ee:e5:fb:1d:fc:fa:84:59:15:1d:50:52:b4: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FF:A4:B1:3C:31:A3:B4:AA:D2:99:4A:5D:15:C4:8B:AD:D5:A9:F7 X509v3 Authority Key Identifier: keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/Wf-ksTwxo7Sq0plKXRXEi63Vqfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.198.189.0/24 IPv6: 2a11:ffc0::/29 Signature Algorithm: sha256WithRSAEncryption 00:27:03:bb:69:73:62:27:59:c6:23:6c:ae:70:3e:43:ce:40: ba:46:df:87:d3:e3:03:f3:e0:5f:d4:4a:b0:15:6a:e7:9a:24: e6:3f:06:15:a6:6b:15:c5:f3:ca:e9:cb:1d:33:2d:69:dd:b4: 23:81:79:ec:20:b4:3a:fd:3c:9d:ff:4f:90:c1:ac:d8:29:9c: 8d:e2:8a:bf:7b:b2:78:20:1a:41:f4:d8:f0:d7:e0:35:35:83: d5:68:43:ac:56:84:22:29:00:4f:64:67:81:b2:c6:4e:1b:d9: 9e:d6:08:dd:1e:0e:75:d6:c0:f8:45:54:1e:1f:20:32:74:f5: 3a:cb:eb:f9:cf:bf:25:03:bf:2e:0a:ba:c8:db:c6:18:22:b7: 89:93:76:3b:67:67:e9:35:e6:7f:5a:45:6e:96:4f:92:ce:c0: 5f:6c:3c:50:49:71:e7:64:da:31:5e:dd:21:51:07:f8:c6:bd: 9e:02:bc:7a:c6:39:6c:0d:d6:5e:08:59:cf:3c:a4:23:71:27: b7:07:32:03:40:04:0d:3a:3e:db:db:1e:80:4d:60:3e:d1:2c: e2:97:72:26:bf:f7:7b:e9:18:78:58:80:ef:c4:2b:82:c4:f3: 33:b1:5a:08:e9:42:5e:78:be:ef:4d:29:73:1f:3a:89:d0:7d: e1:09:fa:0e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87V98W0HaXg8mSRG3wQ0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDExZTUyZGFiN2QwYmUyNjc0MzEzYjZiNWQyZTc0YmQx MTM2MGUwHhcNMjYwMTAyMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWZmYTRiMTNjMzFhM2I0YWFkMjk5NGE1ZDE1YzQ4YmFkZDVhOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2elCJGRhwbRz8Y6e82JnEZoXASb3 wrQlj4R4gckzliy9f7ZUsxKNA+KYX2Aib/1mdf06Mpx52eQhL+SFq12/SPZS8hdd 0W2AvikRCC4i1HJr0gPrf6RRFQzzqK5DQ6FBRmiruaxPRFgMzfSySPzTi+cavIgO Ss2nDVcEFDdeEaHrdzlZVl6fjzdE5dvrkMAxNmhX0yCsbV3Wlf1U8MelNgGdQbnF 7IhKmDhZx/DetsIO5F4xsyfHIjEiZubPlY4Q6TUoCdwq3lJUIc1uiR01uXXjPQj7 zW/drL9UMQANZ7jPcyEnUzB4kdbSfXtQ5h8tbe7l+x38+oRZFR1QUrTwAwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFn/pLE8MaO0qtKZSl0VxIut1an3MB8GA1UdIwQY MBaAFFJBHlLat9C+JnQxO2tdLnS9ETYOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzIt ZDBjZmU0MzAxNmRlLzEvV2Yta3NUd3hvN1NxMHBsS1hSWEVpNjNWcWZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzItZDBjZmU0MzAxNmRl LzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA2ca9MA0E AgACMAcDBQMqEf/AMA0GCSqGSIb3DQEBCwUAA4IBAQAAJwO7aXNiJ1nGI2yucD5D zkC6Rt+H0+MD8+Bf1EqwFWrnmiTmPwYVpmsVxfPK6csdMy1p3bQjgXnsILQ6/Tyd /0+QwazYKZyN4oq/e7J4IBpB9Njw1+A1NYPVaEOsVoQiKQBPZGeBssZOG9me1gjd Hg511sD4RVQeHyAydPU6y+v5z78lA78uCrrI28YYIreJk3Y7Z2fpNeZ/WkVulk+S zsBfbDxQSXHnZNoxXt0hUQf4xr2eArx6xjlsDdZeCFnPPKQjcSe3BzIDQAQNOj7b 2x6ATWA+0Szil3Imv/d76Rh4WIDvxCuCxPMzsVoI6UJeeL7vTSlzHzqJ0H3hCfoO -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:51 2026 by rpki-client