This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa File: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (raw, json) Hash identifier: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw= Subject key identifier: 59:4B:B7:1C:32:BB:FD:BF:54:63:4B:84:58:4D:5E:08:59:91:C6:2F Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 019B7D5C578A656E92319E022668C395CE1B Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa Signing time: Fri 02 Jan 2026 06:19:22 +0000 ROA not before: Fri 02 Jan 2026 06:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207207 IP address blocks: 185.32.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:57:8a:65:6e:92:31:9e:02:26:68:c3:95:ce:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=594bb71c32bbfdbf54634b84584d5e085991c62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:3d:e5:36:e9:c7:73:76:3e:60:ca:f1:4a: 09:29:81:3f:19:40:c3:6f:10:64:61:0d:48:fd:c2: 16:4b:66:1e:2c:fc:a5:0d:1e:b7:10:84:ea:6b:64: c2:3d:b6:52:2a:60:e7:84:a3:c5:b4:8a:14:1a:3c: da:a6:46:be:96:c2:bd:75:7c:7f:15:17:e1:56:30: cf:35:20:44:30:81:f3:07:6e:e8:fb:e3:4f:41:e1: 41:34:8e:28:63:7c:77:18:b5:3a:46:a7:8e:b7:50: d6:8f:8e:1d:91:ba:11:76:d8:97:37:7a:7b:0f:de: e9:e5:fd:54:43:f6:15:04:69:07:64:16:f1:1d:07: eb:2b:7d:a2:b5:a9:99:c8:a1:ab:aa:00:42:b8:03: 27:b9:51:bf:e0:3e:66:81:50:d1:8c:1c:15:7d:70: 32:d4:a4:2d:40:12:be:91:3e:bc:6f:24:30:01:67: 05:c4:69:9f:2a:98:49:96:11:38:76:81:c9:16:0d: 52:29:ea:5e:7e:58:61:bf:fa:8a:c6:c2:dd:59:2d: 15:68:a7:e9:d8:ac:3f:a1:0e:ba:e9:e9:c3:f4:6e: 7b:63:09:85:90:de:03:1a:52:cc:09:59:f7:84:47: 55:3c:90:55:57:46:46:a7:56:75:81:24:31:c9:ea: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4B:B7:1C:32:BB:FD:BF:54:63:4B:84:58:4D:5E:08:59:91:C6:2F X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.186.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:e9:06:ef:f7:ce:d0:a8:1c:00:10:19:8a:bd:93:f3:26:fc: 1d:2c:ee:80:f1:cd:70:2e:01:7b:09:88:8e:4b:50:61:da:a3: 08:ba:6a:89:b4:ad:72:8c:bd:ef:57:47:8a:48:27:54:73:54: aa:c6:02:9a:5a:ef:45:bf:d0:e0:b6:3c:fb:10:17:13:b3:62: 4f:54:fa:0d:23:74:7c:68:f6:ae:13:13:1f:a5:b4:02:98:ef: 2b:50:57:d4:08:e0:11:2b:7a:99:b7:96:a7:80:26:d0:69:38: 0e:1a:cb:04:ba:02:0d:d3:4c:95:b0:f9:e4:b6:a5:c2:94:0a: 21:ee:62:64:a8:03:8f:97:1c:de:81:e1:1d:f4:c1:18:89:8f: 59:76:5a:72:3d:d6:b0:47:12:a8:7f:fe:d7:3a:c2:88:ae:e6: df:66:71:4b:fa:85:7f:e0:13:0b:4a:c8:81:99:1b:ea:ac:2b: 15:02:89:76:ff:67:ab:e9:4b:2a:9c:2f:45:c2:f1:2a:36:e5: 3d:c8:76:25:52:ae:4f:0c:fe:09:45:af:68:62:b9:ab:fc:2d: 0e:b1:11:d0:8f:bb:0c:2b:90:94:ea:f7:69:27:cf:72:75:d8: f5:c7:ea:08:14:84:b5:d8:b7:4d:39:e8:c8:f3:56:3b:27:06: 96:da:56:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XFeKZW6SMZ4CJmjDlc4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTRiYjcxYzMyYmJmZGJmNTQ2MzRiODQ1ODRkNWUwODU5OTFjNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkM95Tbpx3N2PmDK8UoJKYE/GUDD bxBkYQ1I/cIWS2YeLPylDR63EITqa2TCPbZSKmDnhKPFtIoUGjzapka+lsK9dXx/ FRfhVjDPNSBEMIHzB27o++NPQeFBNI4oY3x3GLU6RqeOt1DWj44dkboRdtiXN3p7 D97p5f1UQ/YVBGkHZBbxHQfrK32itamZyKGrqgBCuAMnuVG/4D5mgVDRjBwVfXAy 1KQtQBK+kT68byQwAWcFxGmfKphJlhE4doHJFg1SKepeflhhv/qKxsLdWS0VaKfp 2Kw/oQ666enD9G57YwmFkN4DGlLMCVn3hEdVPJBVV0ZGp1Z1gSQxyeqXpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFlLtxwyu/2/VGNLhFhNXghZkcYvMB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvV1V1M0hESzdfYjlVWTB1RVdFMWVDRm1SeGk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSC6MA0G CSqGSIb3DQEBCwUAA4IBAQAq6Qbv987QqBwAEBmKvZPzJvwdLO6A8c1wLgF7CYiO S1Bh2qMIumqJtK1yjL3vV0eKSCdUc1SqxgKaWu9Fv9Dgtjz7EBcTs2JPVPoNI3R8 aPauExMfpbQCmO8rUFfUCOARK3qZt5angCbQaTgOGssEugIN00yVsPnktqXClAoh 7mJkqAOPlxzegeEd9MEYiY9ZdlpyPdawRxKof/7XOsKIrubfZnFL+oV/4BMLSsiB mRvqrCsVAol2/2er6UsqnC9FwvEqNuU9yHYlUq5PDP4JRa9oYrmr/C0OsRHQj7sM K5CU6vdpJ89yddj1x+oIFIS12LdNOejI81Y7JwaW2lb/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:20 2026 by rpki-client