This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/WNx3fkfnUHFpBcN8eeqOxMX2PDo.roa File: WNx3fkfnUHFpBcN8eeqOxMX2PDo.roa (raw, json) Hash identifier: IlbfPkl/bqfxmwYygb/ypRCceUvsCgtEBEY1myvam2k= Subject key identifier: 58:DC:77:7E:47:E7:50:71:69:05:C3:7C:79:EA:8E:C4:C5:F6:3C:3A Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39139EF2A208449DAE2C768308DC5B Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/WNx3fkfnUHFpBcN8eeqOxMX2PDo.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206337 IP address blocks: 188.93.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:13:9e:f2:a2:08:44:9d:ae:2c:76:83:08:dc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58dc777e47e750716905c37c79ea8ec4c5f63c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:1a:1f:1f:aa:dd:8b:e4:c6:a0:43:eb:5f: 78:f6:ba:fe:60:85:d5:ca:3b:7d:f3:b5:2c:72:09: 76:f7:f7:b7:53:19:ce:1f:b0:05:05:8c:58:2a:5d: 81:ce:bc:9a:b6:cd:f6:e8:6a:0c:e4:28:b3:77:4a: e6:6b:76:69:33:b3:d2:c8:8a:7c:21:22:58:1e:65: d2:13:41:b2:62:08:74:9c:ce:08:0e:06:07:a1:9e: 57:72:c1:79:30:75:c4:62:cf:b5:dd:21:89:3d:21: df:7e:5f:bf:e5:11:8b:80:2a:47:a8:7a:50:46:4d: 65:93:56:a7:84:8d:13:c5:41:d2:49:e8:23:66:f8: 5c:1a:f9:02:5c:e6:2b:94:70:37:a0:fa:16:1a:e0: fd:32:d4:54:d5:b3:43:c6:37:1e:7e:af:40:56:67: b6:e2:13:55:61:e8:44:24:73:26:d4:07:80:20:e1: e1:78:b4:a0:aa:51:72:be:29:c8:57:06:38:a3:d8: dd:5a:4a:aa:f6:b5:39:b0:72:8a:73:68:9e:63:4c: 7c:ee:ce:97:7e:3d:5b:5a:c9:9b:89:8a:81:f2:3e: 8f:eb:01:35:56:98:04:48:15:c3:8d:16:1b:63:86: 2f:0c:4a:9f:96:7e:d9:ff:58:e3:a9:85:52:26:40: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DC:77:7E:47:E7:50:71:69:05:C3:7C:79:EA:8E:C4:C5:F6:3C:3A X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/WNx3fkfnUHFpBcN8eeqOxMX2PDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.93.106.0/24 Signature Algorithm: sha256WithRSAEncryption 64:57:6b:a5:3e:4e:f7:eb:98:1f:14:70:ad:4c:16:b3:4d:ee: 38:63:e5:0e:9c:82:e9:31:8e:5b:05:be:c7:74:f8:aa:2e:fd: 6d:9c:9b:29:7f:f7:66:0b:0b:a9:a5:59:14:df:95:f6:9d:99: 4b:8e:55:a6:12:f8:f0:1b:47:96:9a:a8:55:ef:1e:9b:6e:fd: f7:28:2f:c3:53:dc:22:98:0e:f2:52:bf:f0:68:40:70:8a:43: 4d:6e:ef:38:c1:dc:d3:c9:55:79:91:05:00:aa:23:b2:8b:41: 82:c5:ce:79:71:7a:e9:db:87:3e:59:16:5a:15:43:40:e9:3e: e8:5f:66:09:ee:6e:45:5e:ac:c5:f1:f2:9f:f9:e4:a8:b1:95: ef:f0:6a:f5:d3:79:96:fd:e0:b8:ce:f6:07:3e:81:ae:06:20: 14:17:a7:30:42:6e:89:68:c1:ce:a8:d2:46:a4:36:0a:f5:21: bf:26:fc:bf:0b:51:8d:bc:89:fd:20:13:0f:d4:ec:5c:66:b4: 8e:f3:1b:a9:32:29:82:e9:84:76:90:90:a6:79:ef:24:2a:7f: dc:b3:7b:38:e4:58:57:08:ef:45:85:f4:cc:9e:47:81:b6:e1: 95:d8:27:a4:65:d7:ca:d2:0b:fa:2e:7c:21:a4:3a:94:e9:51: b0:19:1a:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OROe8qIIRJ2uLHaDCNxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGRjNzc3ZTQ3ZTc1MDcxNjkwNWMzN2M3OWVhOGVjNGM1ZjYzYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkaHx+q3YvkxqBD61949rr+YIXV yjt987Uscgl29/e3UxnOH7AFBYxYKl2Bzryats326GoM5Cizd0rma3ZpM7PSyIp8 ISJYHmXSE0GyYgh0nM4IDgYHoZ5XcsF5MHXEYs+13SGJPSHffl+/5RGLgCpHqHpQ Rk1lk1anhI0TxUHSSegjZvhcGvkCXOYrlHA3oPoWGuD9MtRU1bNDxjcefq9AVme2 4hNVYehEJHMm1AeAIOHheLSgqlFyvinIVwY4o9jdWkqq9rU5sHKKc2ieY0x87s6X fj1bWsmbiYqB8j6P6wE1VpgESBXDjRYbY4YvDEqfln7Z/1jjqYVSJkBmiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjcd35H51BxaQXDfHnqjsTF9jw6MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvV054M2ZrZm5VSEZwQmNOOGVlcU94TVgyUERvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF1qMA0G CSqGSIb3DQEBCwUAA4IBAQBkV2ulPk7365gfFHCtTBazTe44Y+UOnILpMY5bBb7H dPiqLv1tnJspf/dmCwuppVkU35X2nZlLjlWmEvjwG0eWmqhV7x6bbv33KC/DU9wi mA7yUr/waEBwikNNbu84wdzTyVV5kQUAqiOyi0GCxc55cXrp24c+WRZaFUNA6T7o X2YJ7m5FXqzF8fKf+eSosZXv8Gr103mW/eC4zvYHPoGuBiAUF6cwQm6JaMHOqNJG pDYK9SG/Jvy/C1GNvIn9IBMP1OxcZrSO8xupMimC6YR2kJCmee8kKn/cs3s45FhX CO9FhfTMnkeBtuGV2CekZdfK0gv6LnwhpDqU6VGwGRoR -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:20 2026 by rpki-client