This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa File: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (raw, json) Hash identifier: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE= Subject key identifier: 59:D3:FC:FD:CE:2B:9B:C4:A5:D1:63:76:17:0B:5D:4C:57:63:50:7C Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B7910226A8835EC4ED3F096B8A3E7C1D3 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215703 IP address blocks: 46.37.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:22:6a:88:35:ec:4e:d3:f0:96:b8:a3:e7:c1:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59d3fcfdce2b9bc4a5d16376170b5d4c5763507c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:00:48:b0:9a:d4:5e:aa:6d:40:2e:6a:52: 72:41:09:52:92:80:d6:46:be:76:08:06:ff:c4:05: d6:fa:a0:c9:58:e9:55:b2:70:e1:91:f8:fa:00:b8: 42:d4:bd:25:d4:f9:9b:80:ae:2a:6d:08:b5:a8:69: af:3e:91:f6:34:0e:9d:c4:59:e2:9c:0d:08:8d:11: 6d:da:10:02:b7:aa:e3:09:26:6b:05:cc:90:b4:48: 72:86:d6:e7:4b:5d:6e:e5:74:f3:cf:59:89:c8:ba: 3e:2d:bd:4f:93:01:5b:17:51:4f:a7:cf:2c:77:80: 24:b6:35:03:69:04:e7:19:7d:38:15:14:f9:6c:91: bd:fc:c2:0c:4b:77:8f:df:4f:72:b8:fc:fc:02:d2: 01:1a:53:23:c6:f1:31:82:4d:db:74:19:28:fc:0a: 5e:bc:c5:85:49:b4:bf:47:eb:bb:fb:c1:55:00:32: b7:6b:b7:3b:bf:ee:b0:b0:1b:d0:3c:9f:6a:a1:18: 6e:b5:2e:fe:9c:45:f0:cd:e4:06:61:67:40:a0:95: f2:fe:53:9a:f7:0c:06:e4:82:d5:ae:f4:b7:54:61: 09:0b:0a:05:22:3d:38:73:f5:26:92:f2:ad:bc:f0: c8:40:2e:45:04:cd:92:80:be:9e:49:89:21:30:ac: ff:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D3:FC:FD:CE:2B:9B:C4:A5:D1:63:76:17:0B:5D:4C:57:63:50:7C X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.123.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:0a:93:42:d3:49:9a:b0:ac:69:a2:22:2a:0e:c4:10:39:26: d1:51:93:a7:55:f6:66:04:ca:f3:14:27:5d:1c:86:6e:2c:8f: 9f:d7:1b:76:d4:c0:aa:53:c3:89:50:d1:2d:db:6e:24:cd:4a: 51:78:0a:4d:d6:92:61:4d:f7:f7:8e:37:ea:2c:1d:af:1c:29: 9e:59:5c:d2:bb:17:68:f7:2f:2c:66:e1:b2:11:c5:f4:89:3f: 3e:22:27:60:b6:77:11:85:d8:97:d5:76:9a:1f:4f:41:fd:d1: 15:0b:a4:23:a4:d5:d3:9c:9d:3a:fd:fc:66:4e:82:6b:fa:73: d7:71:bc:83:6a:38:1d:af:48:cf:9a:d2:7d:34:df:be:a4:26: dc:47:39:c3:30:63:ae:04:95:40:fd:2d:f9:ed:32:81:ba:a8: e8:a8:e0:76:ab:96:d8:34:b1:bf:b7:de:c1:49:81:97:f3:b7: 09:ae:ef:52:68:20:f2:30:60:de:69:92:3e:74:f3:a8:ef:4e: 0a:23:8c:fe:eb:9f:95:41:63:90:ac:8a:09:be:e1:80:e3:0c: 1e:de:c5:05:e7:9f:69:c0:d7:57:09:d2:d1:0a:31:a7:cf:e8: b9:4b:ce:b9:d1:88:a0:02:e3:37:a8:0a:2d:b6:53:01:3f:24: 37:db:3f:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECJqiDXsTtPwlrij58HTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWQzZmNmZGNlMmI5YmM0YTVkMTYzNzYxNzBiNWQ0YzU3NjM1MDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT4ASLCa1F6qbUAualJyQQlSkoDW Rr52CAb/xAXW+qDJWOlVsnDhkfj6ALhC1L0l1PmbgK4qbQi1qGmvPpH2NA6dxFni nA0IjRFt2hACt6rjCSZrBcyQtEhyhtbnS11u5XTzz1mJyLo+Lb1PkwFbF1FPp88s d4AktjUDaQTnGX04FRT5bJG9/MIMS3eP309yuPz8AtIBGlMjxvExgk3bdBko/Ape vMWFSbS/R+u7+8FVADK3a7c7v+6wsBvQPJ9qoRhutS7+nEXwzeQGYWdAoJXy/lOa 9wwG5ILVrvS3VGEJCwoFIj04c/UmkvKtvPDIQC5FBM2SgL6eSYkhMKz/iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFnT/P3OK5vEpdFjdhcLXUxXY1B8MB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvV2RQOF9jNHJtOFNsMFdOMkZ3dGRURmRqVUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV7MA0G CSqGSIb3DQEBCwUAA4IBAQB/CpNC00masKxpoiIqDsQQOSbRUZOnVfZmBMrzFCdd HIZuLI+f1xt21MCqU8OJUNEt224kzUpReApN1pJhTff3jjfqLB2vHCmeWVzSuxdo 9y8sZuGyEcX0iT8+IidgtncRhdiX1XaaH09B/dEVC6QjpNXTnJ06/fxmToJr+nPX cbyDajgdr0jPmtJ9NN++pCbcRznDMGOuBJVA/S357TKBuqjoqOB2q5bYNLG/t97B SYGX87cJru9SaCDyMGDeaZI+dPOo704KI4z+65+VQWOQrIoJvuGA4wwe3sUF559p wNdXCdLRCjGnz+i5S8650YigAuM3qAottlMBPyQ32z+I -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:38 2026 by rpki-client