This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/WFdUi3XXatfTABnfBpngGAHzARo.roa File: WFdUi3XXatfTABnfBpngGAHzARo.roa (raw, json) Hash identifier: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4= Subject key identifier: 58:57:54:8B:75:D7:6A:D7:D3:00:19:DF:06:99:E0:18:01:F3:01:1A Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B7E38DAA37A574B7DB3E00116D307B1EB Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/WFdUi3XXatfTABnfBpngGAHzARo.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209007 IP address blocks: 194.145.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:da:a3:7a:57:4b:7d:b3:e0:01:16:d3:07:b1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5857548b75d76ad7d30019df0699e01801f3011a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:6c:cd:f4:6d:ca:29:98:e6:e7:cd:e5:b9: cf:7e:21:34:5a:a0:bc:83:e5:06:7f:a3:eb:62:29: 19:f3:89:95:a6:85:be:7c:64:31:7b:96:dd:00:7c: 4f:c5:31:2f:07:07:d7:f9:7a:f5:5e:65:d6:98:e6: 84:fd:32:3c:63:30:16:54:16:40:32:da:83:74:eb: aa:b4:fe:38:18:69:74:a3:b0:07:f8:03:e4:fb:34: 69:d7:19:e3:34:16:9b:d9:cb:aa:f5:3d:2c:83:6a: c6:2d:be:ae:4c:cb:ba:86:7e:7b:19:3a:4f:93:77: 6e:18:1c:3e:b7:e3:44:ac:dd:9c:0c:9d:f9:51:cd: 81:07:46:45:74:f1:9d:ca:06:93:99:d0:78:1d:e1: 7b:ea:48:d9:d9:27:d3:42:8d:c1:89:c9:29:d3:7f: 94:2d:d0:de:16:29:ad:d4:b9:e7:9e:b3:70:9a:b3: 58:fc:43:32:d5:f2:05:78:e9:11:96:7b:6b:40:9d: 30:d9:34:54:aa:2c:f4:1f:ed:24:15:70:19:6d:69: 31:81:06:8e:38:88:a2:be:b6:77:48:7c:22:46:5d: d5:c3:96:e7:2c:89:d6:85:52:30:17:53:ea:02:e2: cf:3c:63:56:d2:29:e3:3e:c6:2e:2a:ce:c2:83:ad: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:57:54:8B:75:D7:6A:D7:D3:00:19:DF:06:99:E0:18:01:F3:01:1A X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/WFdUi3XXatfTABnfBpngGAHzARo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.137.0/24 Signature Algorithm: sha256WithRSAEncryption 41:f6:54:d9:05:2e:67:cc:16:d7:eb:bc:da:7e:43:42:48:c7: a5:d0:d6:0b:c7:7f:fd:d8:a7:48:a5:12:7b:8a:eb:8a:e4:e5: 0c:8d:9d:2b:0c:55:c7:dd:3a:7a:d9:1e:86:6f:33:c3:37:42: e2:5f:b1:a1:e1:28:5e:ca:09:75:ed:b2:ab:81:51:81:93:a9: ee:2d:20:72:23:0b:44:79:41:15:6a:1e:b2:d8:bf:92:00:0b: 8f:ee:33:c6:87:c8:bf:a2:91:cd:86:a6:4d:42:0b:ed:e7:cf: bb:de:a4:d6:42:a3:9d:1d:f4:12:f9:7e:37:03:36:4b:19:b8: d6:41:98:19:31:41:54:b5:15:9c:64:58:eb:ac:be:34:af:1a: 60:08:56:5f:a0:5b:38:7f:fd:c0:fe:2b:d8:8c:00:d6:e4:ca: fb:d1:02:47:87:a5:a1:b8:64:15:fb:ab:47:69:58:49:47:4c: 04:44:cb:e4:88:2d:7d:e9:97:ef:6c:50:f7:54:c4:bf:69:02: 40:db:52:d2:1b:ad:cf:1d:03:ae:13:ae:b8:94:c8:c4:e5:fc: ec:a8:69:78:7c:b3:21:ce:99:5e:54:a7:6e:69:06:45:1d:f3: 24:31:93:56:1b:30:38:3f:78:95:79:7f:4d:2d:83:9f:ae:34: 54:1e:21:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONqjeldLfbPgARbTB7HrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODU3NTQ4Yjc1ZDc2YWQ3ZDMwMDE5ZGYwNjk5ZTAxODAxZjMwMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoldszfRtyimY5ufN5bnPfiE0WqC8 g+UGf6PrYikZ84mVpoW+fGQxe5bdAHxPxTEvBwfX+Xr1XmXWmOaE/TI8YzAWVBZA MtqDdOuqtP44GGl0o7AH+APk+zRp1xnjNBab2cuq9T0sg2rGLb6uTMu6hn57GTpP k3duGBw+t+NErN2cDJ35Uc2BB0ZFdPGdygaTmdB4HeF76kjZ2SfTQo3Bickp03+U LdDeFimt1LnnnrNwmrNY/EMy1fIFeOkRlntrQJ0w2TRUqiz0H+0kFXAZbWkxgQaO OIiivrZ3SHwiRl3Vw5bnLInWhVIwF1PqAuLPPGNW0injPsYuKs7Cg62kJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhXVIt112rX0wAZ3waZ4BgB8wEaMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvV0ZkVWkzWFhhdGZUQUJuZkJwbmdHQUh6QVJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpGJMA0G CSqGSIb3DQEBCwUAA4IBAQBB9lTZBS5nzBbX67zafkNCSMel0NYLx3/92KdIpRJ7 iuuK5OUMjZ0rDFXH3Tp62R6GbzPDN0LiX7Gh4Sheygl17bKrgVGBk6nuLSByIwtE eUEVah6y2L+SAAuP7jPGh8i/opHNhqZNQgvt58+73qTWQqOdHfQS+X43AzZLGbjW QZgZMUFUtRWcZFjrrL40rxpgCFZfoFs4f/3A/ivYjADW5Mr70QJHh6WhuGQV+6tH aVhJR0wERMvkiC196ZfvbFD3VMS/aQJA21LSG63PHQOuE664lMjE5fzsqGl4fLMh zpleVKduaQZFHfMkMZNWGzA4P3iVeX9NLYOfrjRUHiHs -----END CERTIFICATE-----Generated at Mon Jan 26 15:33:58 2026 by rpki-client