This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa File: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (raw, json) Hash identifier: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0= Subject key identifier: C2:C6:B1:70:FF:C5:4A:5A:C9:C9:4A:B2:BF:A4:67:59:EE:4C:FF:59 Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81 Certificate serial: 019B7CED7703E50596A1FE7FD48D6AC72E85 Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa Signing time: Fri 02 Jan 2026 04:18:15 +0000 ROA not before: Fri 02 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 79.143.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:77:03:e5:05:96:a1:fe:7f:d4:8d:6a:c7:2e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81 Validity Not Before: Jan 2 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2c6b170ffc54a5ac9c94ab2bfa46759ee4cff59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:3e:fb:45:e0:65:99:07:ca:fd:59:a5:ba: 3c:72:a9:d7:1c:cf:79:08:0b:8b:7b:42:99:00:af: 60:9b:d3:6c:29:02:34:7b:0c:ae:93:96:d6:41:7f: 3d:5e:ca:12:4d:e9:0f:bb:bf:56:10:fe:25:a7:b6: 72:37:f9:78:1c:0d:81:f8:a0:be:da:c6:12:c8:f4: b2:5f:bc:fc:05:f5:ef:da:57:3c:32:2b:f3:9e:ce: 7b:bb:e0:3e:16:7b:6b:0c:67:9f:71:0c:e8:68:5f: 25:e1:74:22:d3:2f:93:82:2a:dd:fd:62:70:58:41: 6a:3c:3f:a9:f1:cf:50:f5:76:2a:0e:14:bb:23:2b: d6:b1:be:d1:f9:46:49:49:80:0a:f3:9a:57:6d:77: 01:70:ca:f2:da:2f:86:7c:63:e3:25:9e:01:ac:2f: 38:e2:f0:95:cc:b9:40:d0:af:8f:49:80:4a:d1:c2: 57:af:9f:4a:6a:ea:65:6e:58:32:2c:6a:ff:6a:a3: 50:15:5f:8d:bb:22:ce:e8:59:3e:c4:aa:5c:4c:0d: ea:e6:00:99:a7:29:e5:92:a3:8f:4b:a1:3f:2a:60: e4:b4:f6:5c:4d:c1:a3:40:c6:09:91:47:47:a6:4c: d2:30:eb:52:3c:94:3b:e0:f2:db:7b:63:60:60:e0: a8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C6:B1:70:FF:C5:4A:5A:C9:C9:4A:B2:BF:A4:67:59:EE:4C:FF:59 X509v3 Authority Key Identifier: keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.143.156.0/24 Signature Algorithm: sha256WithRSAEncryption 90:d9:0b:cb:72:e3:45:36:e4:92:a9:be:ff:14:e7:da:7d:4f: ec:16:7b:bd:2b:14:f3:78:be:2a:cf:57:ac:15:58:3f:de:48: ed:03:8b:c5:26:a1:17:86:73:fc:00:ce:34:c8:c1:16:ba:9e: 3c:4c:70:ae:48:a4:3f:b7:c8:66:ff:61:f9:82:eb:5f:2e:4b: 3a:cf:26:d0:d4:03:97:da:bb:33:fb:3d:a9:fb:5b:ec:00:97: c5:33:fe:f3:59:14:a4:74:ca:bd:09:86:c7:11:a7:06:f2:5f: 61:3c:27:86:3c:6b:77:03:09:4c:46:20:fd:47:56:01:7a:89: 31:b4:d4:71:dd:3b:33:1c:9a:f9:23:bc:77:d8:11:a0:06:ec: a7:a5:92:65:6f:b8:2b:26:9d:8b:51:be:c3:4a:1a:e6:f2:b5: 0d:2e:28:03:5f:d3:4e:ba:2b:0e:91:f0:bf:be:ae:61:18:fe: 19:87:ba:d6:0b:e7:ef:7b:e4:f2:6f:5a:80:94:a5:fb:ca:84: 1a:96:09:ab:30:44:fe:34:49:fd:31:0f:48:cf:4b:08:8c:ba: e2:00:65:f1:9e:e9:00:8a:24:25:1c:20:88:1e:3f:1c:4b:75: 5f:c8:98:d5:0f:e1:82:13:ba:72:86:e0:b7:e2:15:0c:35:c3: 87:cb:3f:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87XcD5QWWof5/1I1qxy6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4 Y2FiODEwHhcNMjYwMTAyMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmM2YjE3MGZmYzU0YTVhYzljOTRhYjJiZmE0Njc1OWVlNGNmZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdA++0XgZZkHyv1Zpbo8cqnXHM95 CAuLe0KZAK9gm9NsKQI0ewyuk5bWQX89XsoSTekPu79WEP4lp7ZyN/l4HA2B+KC+ 2sYSyPSyX7z8BfXv2lc8Mivzns57u+A+FntrDGefcQzoaF8l4XQi0y+Tgird/WJw WEFqPD+p8c9Q9XYqDhS7IyvWsb7R+UZJSYAK85pXbXcBcMry2i+GfGPjJZ4BrC84 4vCVzLlA0K+PSYBK0cJXr59KauplblgyLGr/aqNQFV+NuyLO6Fk+xKpcTA3q5gCZ pynlkqOPS6E/KmDktPZcTcGjQMYJkUdHpkzSMOtSPJQ74PLbe2NgYOConwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLGsXD/xUpayclKsr+kZ1nuTP9ZMB8GA1UdIwQY MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt MWVmOWYyMzE5NTIyLzEvd3NheGNQX0ZTbHJKeVVxeXY2Um5XZTVNXzFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT4+cMA0G CSqGSIb3DQEBCwUAA4IBAQCQ2QvLcuNFNuSSqb7/FOfafU/sFnu9KxTzeL4qz1es FVg/3kjtA4vFJqEXhnP8AM40yMEWup48THCuSKQ/t8hm/2H5gutfLks6zybQ1AOX 2rsz+z2p+1vsAJfFM/7zWRSkdMq9CYbHEacG8l9hPCeGPGt3AwlMRiD9R1YBeokx tNRx3TszHJr5I7x32BGgBuynpZJlb7grJp2LUb7DShrm8rUNLigDX9NOuisOkfC/ vq5hGP4Zh7rWC+fve+Tyb1qAlKX7yoQalgmrMET+NEn9MQ9Iz0sIjLriAGXxnukA iiQlHCCIHj8cS3VfyJjVD+GCE7pyhuC34hUMNcOHyz+r -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:40 2026 by rpki-client