This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/waLcrNH7uHQklmGVHpfmCMZcL3o.roa File: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (raw, json) Hash identifier: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo= Subject key identifier: C1:A2:DC:AC:D1:FB:B8:74:24:96:61:95:1E:97:E6:08:C6:5C:2F:7A Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDCAA04A434788D09798851A6EC571 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/waLcrNH7uHQklmGVHpfmCMZcL3o.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47226 IP address blocks: 88.80.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ca:a0:4a:43:47:88:d0:97:98:85:1a:6e:c5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1a2dcacd1fbb874249661951e97e608c65c2f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:92:84:3b:7b:70:36:dc:27:ac:be:0d:52: 18:7b:3c:76:d9:f8:67:91:a3:a3:27:64:cf:17:05: cd:15:30:0c:36:da:b7:1d:25:25:6f:b4:b4:fa:78: 7b:bd:af:40:2a:39:19:b0:1e:f3:6d:2c:cc:7f:45: 78:99:2c:6e:f7:f3:ce:68:fb:9c:ee:52:25:63:ec: c6:31:12:fa:71:db:e5:51:18:5d:83:89:7e:38:60: 66:42:86:00:00:e0:50:5b:94:00:04:2b:f8:f2:61: 69:04:98:de:95:fe:45:64:31:f4:66:c3:d3:d2:3e: 65:5e:f6:28:2a:28:99:2a:ad:96:53:34:5d:6e:ca: a7:89:0a:1f:27:ed:c6:d7:0e:7d:28:46:ca:49:a7: 24:84:ce:a3:36:63:42:30:30:3a:fc:22:13:6b:32: b6:23:6d:c5:de:ff:f5:61:35:17:87:a7:1d:44:8e: d1:4f:cd:8d:10:e6:20:a7:19:eb:64:00:7c:e1:1d: 1d:23:8d:5a:c6:62:1b:ea:64:ca:a2:b0:cf:d6:ff: 12:89:9b:22:92:a4:f9:67:a1:9f:4c:60:d2:6a:e7: 21:7e:fd:a0:2d:c0:86:b6:d7:72:b9:95:0a:07:b9: 24:d6:37:29:03:eb:c9:2f:b1:86:61:29:b3:ad:0e: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A2:DC:AC:D1:FB:B8:74:24:96:61:95:1E:97:E6:08:C6:5C:2F:7A X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/waLcrNH7uHQklmGVHpfmCMZcL3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.128.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:55:51:b3:9d:94:65:13:80:03:9b:ad:4f:43:cf:3c:31:81: 52:92:67:93:d2:eb:5c:50:73:f2:d2:b0:81:b7:80:91:a0:8e: bf:d0:e9:7e:69:c6:0f:47:5b:31:f0:54:e2:07:71:46:cb:a9: e1:a1:39:76:b2:7d:dc:d4:eb:58:6f:2d:b7:67:49:11:e1:75: e2:e3:5b:c5:d5:52:0b:0e:29:30:a4:94:e2:70:c5:d4:f6:04: 43:0b:32:58:25:c1:7f:a5:1e:24:7a:f1:a0:e0:8a:b3:e8:3a: d2:8e:96:8e:12:70:cf:5f:fd:a7:31:17:66:55:e9:c3:6a:2f: 38:a9:f3:f4:c4:11:ff:dd:57:e8:fc:a5:3a:61:08:5a:c6:31: fe:af:ab:9e:6f:ae:28:4a:79:14:36:1c:85:01:a6:61:2b:2c: 94:13:38:68:28:f7:c2:d0:07:89:72:c3:bb:13:2f:2c:39:44: b6:8a:90:09:77:6b:a6:90:54:bf:86:10:c1:a9:aa:25:92:eb: fa:3a:20:65:7e:34:3b:1e:0a:70:5d:7a:ca:53:a8:c0:d1:a1: 13:4d:e3:ea:58:db:ea:66:b4:dd:61:43:41:6a:73:4d:31:a1: be:59:f5:4b:03:70:22:48:cf:82:90:da:1b:23:7c:25:a1:57: 35:f1:bc:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87cqgSkNHiNCXmIUabsVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWEyZGNhY2QxZmJiODc0MjQ5NjYxOTUxZTk3ZTYwOGM2NWMyZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGShDt7cDbcJ6y+DVIYezx22fhn kaOjJ2TPFwXNFTAMNtq3HSUlb7S0+nh7va9AKjkZsB7zbSzMf0V4mSxu9/POaPuc 7lIlY+zGMRL6cdvlURhdg4l+OGBmQoYAAOBQW5QABCv48mFpBJjelf5FZDH0ZsPT 0j5lXvYoKiiZKq2WUzRdbsqniQofJ+3G1w59KEbKSackhM6jNmNCMDA6/CITazK2 I23F3v/1YTUXh6cdRI7RT82NEOYgpxnrZAB84R0dI41axmIb6mTKorDP1v8SiZsi kqT5Z6GfTGDSauchfv2gLcCGttdyuZUKB7kk1jcpA+vJL7GGYSmzrQ7OGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMGi3KzR+7h0JJZhlR6X5gjGXC96MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvd2FMY3JOSDd1SFFrbG1HVkhwZm1DTVpjTDNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCAMA0G CSqGSIb3DQEBCwUAA4IBAQAfVVGznZRlE4ADm61PQ888MYFSkmeT0utcUHPy0rCB t4CRoI6/0Ol+acYPR1sx8FTiB3FGy6nhoTl2sn3c1OtYby23Z0kR4XXi41vF1VIL DikwpJTicMXU9gRDCzJYJcF/pR4kevGg4Iqz6DrSjpaOEnDPX/2nMRdmVenDai84 qfP0xBH/3Vfo/KU6YQhaxjH+r6ueb64oSnkUNhyFAaZhKyyUEzhoKPfC0AeJcsO7 Ey8sOUS2ipAJd2umkFS/hhDBqaolkuv6OiBlfjQ7HgpwXXrKU6jA0aETTePqWNvq ZrTdYUNBanNNMaG+WfVLA3AiSM+CkNobI3wloVc18byB -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:32 2026 by rpki-client