This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/WLsy-DnnYnQhVtIJoLpzduDgWrE.roa File: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (raw, json) Hash identifier: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4= Subject key identifier: 58:BB:32:F8:39:E7:62:74:21:56:D2:09:A0:BA:73:76:E0:E0:5A:B1 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019B79ECBB65287483063558D841B794EC3B Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/WLsy-DnnYnQhVtIJoLpzduDgWrE.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 37.143.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bb:65:28:74:83:06:35:58:d8:41:b7:94:ec:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58bb32f839e762742156d209a0ba7376e0e05ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:51:f0:63:51:22:c3:90:88:8d:99:ff:df: a2:82:b1:70:b7:ce:f5:33:9b:4f:9c:21:8d:bd:0c: d5:c7:a9:3f:a8:31:e0:a5:5c:f9:a4:96:93:d7:04: 5d:8e:f8:32:cd:da:76:1a:fe:a0:a7:56:73:cf:06: d2:42:5e:1f:2d:98:01:cd:a0:8a:79:4b:d4:2d:22: 76:c9:64:13:15:fb:7b:7e:50:95:2d:2f:5d:81:29: 0a:d7:20:32:9d:da:b6:0f:3c:4b:98:59:dc:0c:a3: 41:f4:69:a3:f6:c5:0a:29:33:3a:34:3a:1a:04:6e: 8a:23:66:82:8a:f1:02:80:be:f5:24:cf:03:63:8f: a2:10:a7:97:bb:db:c3:8a:8d:f7:3e:4b:21:0e:a8: 74:03:73:4a:92:6a:36:65:20:4b:ba:22:d4:94:2c: fd:f7:ef:5e:b9:a8:f1:03:24:11:78:5c:b4:df:19: 0b:1e:e6:34:95:4c:8f:fa:04:34:e5:34:35:67:ab: 3d:fb:91:09:6e:fc:54:67:c5:d8:5f:6b:da:8e:6d: e5:e9:1d:15:e4:88:e0:9c:c6:7c:ba:07:44:bd:7a: 7f:c7:ff:6d:57:db:22:e7:3a:85:be:90:34:c7:14: 4e:21:5e:92:97:73:45:49:7d:e1:3b:89:2c:4f:83: bb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BB:32:F8:39:E7:62:74:21:56:D2:09:A0:BA:73:76:E0:E0:5A:B1 X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/WLsy-DnnYnQhVtIJoLpzduDgWrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.0.0/22 Signature Algorithm: sha256WithRSAEncryption 36:be:0c:44:69:b7:19:77:46:61:85:e1:d3:17:fe:36:9b:80: e1:69:db:8e:f1:b9:97:0f:6d:da:5d:36:17:af:97:f4:bb:a0: da:7b:a6:1d:d0:17:51:8b:41:3e:d0:29:8d:13:23:80:0e:0a: d5:8a:86:5c:a2:23:74:aa:4d:52:ed:18:6e:17:4b:d5:c4:ba: 84:2d:b9:f9:8a:60:ce:59:08:11:18:b5:1c:5a:2a:5d:68:b9: 20:97:c5:55:fa:d9:94:1d:5a:f1:e7:97:a0:d8:0c:c4:34:ee: ec:6c:54:36:cc:b8:0b:04:c0:8d:78:f4:00:83:cd:a2:95:8b: 9b:6e:59:5b:1f:a3:8a:09:4a:f4:22:70:40:57:c7:50:8c:0d: de:a4:86:4f:37:b7:11:06:6f:59:8c:63:b1:0c:9d:8c:b4:fe: 62:27:97:31:33:99:8c:29:6d:3e:df:d4:7f:bb:c1:27:60:df: 5e:e1:dc:73:80:0b:4a:21:64:8f:5f:82:90:cb:64:f0:ae:9f: 56:06:fa:94:9b:fa:ef:bf:9a:a1:bf:c7:d2:14:4d:db:aa:af: 20:5e:22:6d:43:15:a6:ff:9c:b1:e8:66:e6:4b:7b:13:10:69: 64:a8:6b:d1:90:49:0b:97:bf:4c:09:93:32:d0:3e:2d:ee:e3: 0b:79:c4:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LtlKHSDBjVY2EG3lOw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGJiMzJmODM5ZTc2Mjc0MjE1NmQyMDlhMGJhNzM3NmUwZTA1YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdtR8GNRIsOQiI2Z/9+igrFwt871 M5tPnCGNvQzVx6k/qDHgpVz5pJaT1wRdjvgyzdp2Gv6gp1ZzzwbSQl4fLZgBzaCK eUvULSJ2yWQTFft7flCVLS9dgSkK1yAyndq2DzxLmFncDKNB9Gmj9sUKKTM6NDoa BG6KI2aCivECgL71JM8DY4+iEKeXu9vDio33PkshDqh0A3NKkmo2ZSBLuiLUlCz9 9+9euajxAyQReFy03xkLHuY0lUyP+gQ05TQ1Z6s9+5EJbvxUZ8XYX2vajm3l6R0V 5IjgnMZ8ugdEvXp/x/9tV9si5zqFvpA0xxROIV6Sl3NFSX3hO4ksT4O7hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFi7Mvg552J0IVbSCaC6c3bg4FqxMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvV0xzeS1Ebm5ZblFoVnRJSm9McHpkdURnV3JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8AMA0G CSqGSIb3DQEBCwUAA4IBAQA2vgxEabcZd0ZhheHTF/42m4DhaduO8bmXD23aXTYX r5f0u6Dae6Yd0BdRi0E+0CmNEyOADgrVioZcoiN0qk1S7RhuF0vVxLqELbn5imDO WQgRGLUcWipdaLkgl8VV+tmUHVrx55eg2AzENO7sbFQ2zLgLBMCNePQAg82ilYub bllbH6OKCUr0InBAV8dQjA3epIZPN7cRBm9ZjGOxDJ2MtP5iJ5cxM5mMKW0+39R/ u8EnYN9e4dxzgAtKIWSPX4KQy2Twrp9WBvqUm/rvv5qhv8fSFE3bqq8gXiJtQxWm /5yx6GbmS3sTEGlkqGvRkEkLl79MCZMy0D4t7uMLecQo -----END CERTIFICATE-----Generated at Mon Jan 19 11:50:20 2026 by rpki-client