This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/WX8OHeFW7uVTKm81GUm1-5bI_C0.roa File: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (raw, json) Hash identifier: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4= Subject key identifier: 59:7F:0E:1D:E1:56:EE:E5:53:2A:6F:35:19:49:B5:FB:96:C8:FC:2D Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698 Certificate serial: 019B7BA51E1E673A1D24C735458D180572E3 Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/WX8OHeFW7uVTKm81GUm1-5bI_C0.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 31.42.188.0/23 maxlen: 23 46.175.144.0/21 maxlen: 21 91.219.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1e:1e:67:3a:1d:24:c7:35:45:8d:18:05:72:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=597f0e1de156eee5532a6f351949b5fb96c8fc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:02:c3:d2:23:ed:11:7b:e8:7f:47:7c:cf: 37:4d:cd:34:98:91:1b:d9:7e:6c:25:5b:d9:33:77: 5f:38:97:b5:f3:b4:0e:7b:22:ca:6a:72:ad:b0:00: b5:1b:88:22:0e:5b:c6:8e:c1:59:8d:80:90:9f:cb: d2:29:b5:01:22:3f:3b:45:99:55:79:66:64:0b:22: cb:fe:c3:2a:67:67:8c:24:94:b2:db:0e:df:30:7d: bc:76:be:32:ce:fe:cc:e6:43:3a:43:f5:98:9e:00: b5:5d:d1:60:4d:4f:28:a7:ba:93:1d:50:6a:a7:c7: 42:b3:4c:95:1f:fc:2f:36:4a:6f:e5:8a:00:ff:ca: 16:e4:37:de:1a:e8:81:ee:7d:8f:12:18:bd:60:96: d2:5a:6f:1a:66:60:6a:3b:c4:56:91:1a:86:8b:90: 11:84:da:f2:fe:aa:94:d2:41:c2:5c:12:e1:bb:25: 01:8c:0d:d8:4f:32:48:9d:e0:b4:63:b8:72:9b:56: dd:c6:e2:2a:3d:5e:0b:61:d3:bf:d5:df:6b:8b:32: b9:0c:9b:ea:c9:b9:e5:90:90:31:2a:d9:ec:1b:05: 4e:a2:9c:8a:ab:f2:fd:bb:8b:15:05:09:aa:e4:f6: 58:91:9b:b5:16:f0:89:a6:a4:13:81:34:83:f7:e9: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7F:0E:1D:E1:56:EE:E5:53:2A:6F:35:19:49:B5:FB:96:C8:FC:2D X509v3 Authority Key Identifier: keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/WX8OHeFW7uVTKm81GUm1-5bI_C0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.188.0/23 46.175.144.0/21 91.219.62.0/23 Signature Algorithm: sha256WithRSAEncryption 81:df:45:3a:db:e6:a7:c3:4d:02:a4:e1:a7:c0:c2:2a:a3:46: 8d:c1:53:dd:19:9b:d9:c8:14:5e:0e:3a:c3:95:ee:0d:81:29: 98:96:0e:2c:85:83:dc:0b:7f:c5:8c:a2:ec:3c:52:b6:11:9d: 2c:7f:7f:56:bd:2f:5c:37:fe:41:a4:c8:fb:68:9a:18:23:41: 73:3d:41:2e:cd:19:18:1f:30:37:5d:e5:7b:fb:bd:d2:86:9d: de:d1:51:87:2b:2c:e3:b8:8a:a3:ee:2a:f7:9c:05:ec:fc:20: 46:9e:a5:0c:fa:7a:49:48:04:73:ca:dc:5e:c2:ec:f8:68:1c: b2:58:a9:6d:42:e8:1f:fd:19:66:8e:38:c9:11:d0:a7:4e:5c: ee:a8:88:ac:6b:38:6d:28:9b:7d:40:56:63:9d:ef:b1:3d:93: 10:65:67:b9:8b:94:5f:e3:e0:60:bb:f6:25:08:da:69:8b:51: 02:a8:8e:2b:c7:da:f7:34:08:78:9b:46:2a:da:4a:0d:8a:8d: c2:e9:eb:03:d6:88:a6:df:59:2d:d9:7a:e6:72:49:8d:77:f6: ce:e9:bb:4a:bb:04:78:13:70:6c:47:e4:9e:27:44:8c:b5:9e: 30:55:90:4a:2c:14:1f:52:5e:f7:1b:f9:dd:15:b8:be:6e:8b: 75:d5:3d:a4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pR4eZzodJMc1RY0YBXLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh Mzk2OTgwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTdmMGUxZGUxNTZlZWU1NTMyYTZmMzUxOTQ5YjVmYjk2YzhmYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbUCw9Ij7RF76H9HfM83Tc00mJEb 2X5sJVvZM3dfOJe187QOeyLKanKtsAC1G4giDlvGjsFZjYCQn8vSKbUBIj87RZlV eWZkCyLL/sMqZ2eMJJSy2w7fMH28dr4yzv7M5kM6Q/WYngC1XdFgTU8op7qTHVBq p8dCs0yVH/wvNkpv5YoA/8oW5DfeGuiB7n2PEhi9YJbSWm8aZmBqO8RWkRqGi5AR hNry/qqU0kHCXBLhuyUBjA3YTzJIneC0Y7hym1bdxuIqPV4LYdO/1d9rizK5DJvq ybnlkJAxKtnsGwVOopyKq/L9u4sVBQmq5PZYkZu1FvCJpqQTgTSD9+mDPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFl/Dh3hVu7lUypvNRlJtfuWyPwtMB8GA1UdIwQY MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It MTEzNzA3M2ZhOGY2LzEvV1g4T0hlRlc3dVZUS204MUdVbTEtNWJJX0MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2 LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHyq8AwQD Lq+QAwQBW9s+MA0GCSqGSIb3DQEBCwUAA4IBAQCB30U62+anw00CpOGnwMIqo0aN wVPdGZvZyBReDjrDle4NgSmYlg4shYPcC3/FjKLsPFK2EZ0sf39WvS9cN/5BpMj7 aJoYI0FzPUEuzRkYHzA3XeV7+73Shp3e0VGHKyzjuIqj7ir3nAXs/CBGnqUM+npJ SARzytxewuz4aByyWKltQugf/RlmjjjJEdCnTlzuqIisazhtKJt9QFZjne+xPZMQ ZWe5i5Rf4+Bgu/YlCNppi1ECqI4rx9r3NAh4m0Yq2koNio3C6esD1oim31kt2Xrm ckmNd/bO6btKuwR4E3BsR+SeJ0SMtZ4wVZBKLBQfUl73G/ndFbi+bot11T2k -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:48 2026 by rpki-client