This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/WWu8F3fTeKxkoAs-Mg16JLzG5h0.roa File: WWu8F3fTeKxkoAs-Mg16JLzG5h0.roa (raw, json) Hash identifier: cTjKhIJvmmIv1NQvFzuTNf8mXV9k2oei30S49l2AUWU= Subject key identifier: 59:6B:BC:17:77:D3:78:AC:64:A0:0B:3E:32:0D:7A:24:BC:C6:E6:1D Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2D1E7A1C2B9C83958FE19F4529FF9 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/WWu8F3fTeKxkoAs-Mg16JLzG5h0.roa Signing time: Thu 01 Jan 2026 08:18:15 +0000 ROA not before: Thu 01 Jan 2026 08:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 263702 IP address blocks: 109.72.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d1:e7:a1:c2:b9:c8:39:58:fe:19:f4:52:9f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=596bbc1777d378ac64a00b3e320d7a24bcc6e61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:78:ed:dd:6d:13:6d:79:b3:cd:6c:50:74: c1:f3:20:4f:28:d2:4f:86:ce:13:25:31:02:1e:f2: fb:4b:b2:21:23:41:bf:86:ca:ad:dc:71:74:0b:64: ed:c1:fb:42:b1:5c:84:a3:24:ff:8e:c2:f8:82:eb: 7e:1f:ef:92:7d:fe:72:7a:dd:08:80:77:c8:96:25: b9:1d:d9:31:36:9c:da:41:f0:d2:7d:59:c4:5e:89: 66:38:45:55:06:9d:09:85:54:e6:20:1a:41:10:8f: 3b:09:d9:25:e7:7d:28:87:98:87:d1:0e:67:ac:8f: e1:ae:f8:31:00:bf:c2:b3:94:d1:5c:56:34:d9:80: 97:b3:10:c2:c2:d7:1e:12:36:c0:b5:41:f6:44:73: c3:fc:d1:29:a6:e7:51:9a:33:8b:f7:d8:fe:e4:14: 10:2f:27:31:40:fc:13:22:c6:93:26:3a:78:80:15: a2:d3:6c:ee:ef:11:98:85:6a:21:8d:3c:84:3b:e3: 39:7a:04:82:00:38:5f:27:21:5b:55:36:9c:52:28: 5b:6a:74:a3:99:e9:5e:a2:79:82:3d:fb:12:e8:1a: 8a:76:e9:bf:2c:13:15:cc:c6:50:45:5a:7a:05:91: 68:1f:50:c8:dd:1e:a1:99:bf:61:b0:ac:3d:bd:d1: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6B:BC:17:77:D3:78:AC:64:A0:0B:3E:32:0D:7A:24:BC:C6:E6:1D X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/WWu8F3fTeKxkoAs-Mg16JLzG5h0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.119.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:72:0f:74:3c:ac:d3:63:43:57:c8:22:e5:e1:0c:a7:64:da: bc:16:65:f6:5f:45:67:d3:54:fb:36:7e:c9:19:14:e6:c3:98: d6:64:b1:ba:9b:bc:9a:ea:f2:0a:95:0f:df:56:af:11:cf:14: f8:45:28:36:37:a1:94:1f:6f:20:89:a2:2d:93:48:78:71:13: 4e:fa:e7:bb:ff:a2:9a:d6:70:66:e5:3e:33:3c:0b:d9:a1:39: d1:bf:4b:1a:d7:13:d9:2c:da:da:86:a5:98:71:a5:5f:74:00: bf:b7:8d:fb:86:62:32:79:d6:37:ed:70:70:5e:00:6d:1e:af: b6:8e:65:98:e8:4d:ee:2a:3e:4a:d2:7c:73:65:95:2d:a4:86: e6:17:15:44:49:a0:7a:ea:e0:79:89:5f:eb:33:9a:54:09:e2: 8c:17:7a:c0:65:ef:f7:78:da:30:04:5f:3d:32:e7:f7:ec:7a: b8:0a:02:df:ae:0f:66:02:9d:43:16:1f:93:4e:cd:76:e3:5d: a0:55:73:b0:ac:f8:5b:c2:0c:17:df:13:a0:57:2c:51:2a:b7: cf:81:8c:28:bf:5e:41:13:f3:d5:b4:e9:57:2a:5b:81:b9:fa: b7:78:81:5b:cb:46:3b:ac:dd:ea:07:94:ea:7e:41:c6:31:d6: a8:5c:bd:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otHnocK5yDlY/hn0Up/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTZiYmMxNzc3ZDM3OGFjNjRhMDBiM2UzMjBkN2EyNGJjYzZlNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJ47d1tE215s81sUHTB8yBPKNJP hs4TJTECHvL7S7IhI0G/hsqt3HF0C2TtwftCsVyEoyT/jsL4gut+H++Sff5yet0I gHfIliW5HdkxNpzaQfDSfVnEXolmOEVVBp0JhVTmIBpBEI87Cdkl530oh5iH0Q5n rI/hrvgxAL/Cs5TRXFY02YCXsxDCwtceEjbAtUH2RHPD/NEppudRmjOL99j+5BQQ LycxQPwTIsaTJjp4gBWi02zu7xGYhWohjTyEO+M5egSCADhfJyFbVTacUihbanSj meleonmCPfsS6BqKdum/LBMVzMZQRVp6BZFoH1DI3R6hmb9hsKw9vdG1JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFlrvBd303isZKALPjINeiS8xuYdMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvV1d1OEYzZlRlS3hrb0FzLU1nMTZKTHpHNWgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh3MA0G CSqGSIb3DQEBCwUAA4IBAQA6cg90PKzTY0NXyCLl4QynZNq8FmX2X0Vn01T7Nn7J GRTmw5jWZLG6m7ya6vIKlQ/fVq8RzxT4RSg2N6GUH28giaItk0h4cRNO+ue7/6Ka 1nBm5T4zPAvZoTnRv0sa1xPZLNrahqWYcaVfdAC/t437hmIyedY37XBwXgBtHq+2 jmWY6E3uKj5K0nxzZZUtpIbmFxVESaB66uB5iV/rM5pUCeKMF3rAZe/3eNowBF89 Muf37Hq4CgLfrg9mAp1DFh+TTs12412gVXOwrPhbwgwX3xOgVyxRKrfPgYwov15B E/PVtOlXKluBufq3eIFby0Y7rN3qB5TqfkHGMdaoXL0P -----END CERTIFICATE-----Generated at Thu Jan 22 15:47:38 2026 by rpki-client