This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/WUBqB14hg7kEPnfwv69maUCGXb8.roa File: WUBqB14hg7kEPnfwv69maUCGXb8.roa (raw, json) Hash identifier: P7wlfKcfpyTQMIwzdEpbt4O+RfRsnd8yruceXsH7Vq0= Subject key identifier: 59:40:6A:07:5E:21:83:B9:04:3E:77:F0:BF:AF:66:69:40:86:5D:BF Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e Certificate serial: 019B7B36A3C3042A1C4415FF25E8978DA9B8 Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/WUBqB14hg7kEPnfwv69maUCGXb8.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.39.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a3:c3:04:2a:1c:44:15:ff:25:e8:97:8d:a9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59406a075e2183b9043e77f0bfaf666940865dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c9:a2:70:70:78:2e:d3:a3:98:63:9d:55:42: 27:fe:41:f8:ca:cc:82:21:df:3c:56:75:61:ba:43: df:32:7d:33:14:4f:42:d0:8a:83:b2:1c:ae:9f:d1: 7a:74:55:9b:e8:a9:62:c0:4d:af:8c:cb:18:c3:54: fd:81:be:a8:ab:40:05:7f:d5:30:e3:6d:dd:68:4b: dc:d1:2a:2b:d0:60:0f:ad:de:5d:0f:46:90:60:c8: e8:bf:83:f3:9c:63:7d:35:1f:df:9a:54:53:00:6a: b3:c3:9b:c8:b4:b5:2e:c0:8a:e6:cb:69:82:b1:41: 2f:c3:ee:df:c5:6d:eb:e0:89:20:70:4a:52:e7:73: fc:27:b3:28:4d:64:90:aa:aa:44:d1:91:c4:70:43: be:a6:48:d2:55:79:81:73:65:c2:bc:63:ef:9f:9b: 8b:e5:c6:83:6d:dd:87:61:41:b4:11:11:8d:fc:c3: ce:95:c1:8b:27:55:b3:01:cd:cc:e5:80:81:0b:be: 5e:e1:7e:e8:53:b7:ef:c4:5c:ec:80:80:73:97:56: d7:d4:a9:ba:ac:92:83:66:52:df:2a:e0:e0:b7:57: 76:40:43:7b:70:ba:fb:68:10:04:b6:98:7c:20:77: bb:6d:15:c9:fb:e5:a4:d1:8b:2f:d1:1d:79:3b:7d: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:40:6A:07:5E:21:83:B9:04:3E:77:F0:BF:AF:66:69:40:86:5D:BF X509v3 Authority Key Identifier: keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/WUBqB14hg7kEPnfwv69maUCGXb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.114.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:7a:35:e7:77:83:f3:9c:15:2b:54:e3:65:4d:42:c3:0d:ed: da:64:32:35:bd:d5:22:2e:dd:a8:65:84:b8:b5:ea:8e:13:df: 8f:7a:ce:7d:73:af:cc:66:ca:68:8a:ac:a0:61:b9:4e:c6:89: e3:d2:1d:d1:cd:dc:13:0d:e4:ee:3e:82:01:ba:db:62:83:0f: 24:a8:9c:80:56:af:69:ea:fe:7f:c7:d4:b0:88:a4:d7:a2:af: 29:d1:17:30:dd:34:d6:a7:65:b8:bb:27:10:33:19:7e:85:1f: de:49:7e:51:a6:f4:b7:e9:46:3b:a8:b3:ce:4d:b5:82:e8:f8: b8:07:ac:70:d0:0f:81:18:3c:22:0a:52:0a:20:88:0e:f9:85: 75:a8:40:e3:e6:58:b2:91:53:e9:6d:88:cf:8f:4b:15:7e:8c: a8:54:c1:cb:4e:49:7a:70:40:c9:55:2b:bb:46:e8:b1:ee:56: 6e:39:4b:5a:c4:64:ec:67:1f:48:50:f8:be:8b:01:4a:42:9d: a3:91:fa:3d:07:62:43:87:48:03:49:8a:93:72:b2:29:b0:8d: 09:36:b0:d4:c9:83:81:01:00:13:9a:fc:fe:bb:a9:c7:74:94: b9:44:f6:8d:4c:c8:41:70:2b:ea:3e:09:6c:4f:62:1d:f2:a9: 22:49:21:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqPDBCocRBX/JeiXjam4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMzAzYTY0NjJkYmEyOTUxN2RlMGRlZDg3Mzk3ZmE5ZTVj NDA1MmUwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTQwNmEwNzVlMjE4M2I5MDQzZTc3ZjBiZmFmNjY2OTQwODY1ZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MmicHB4LtOjmGOdVUIn/kH4ysyC Id88VnVhukPfMn0zFE9C0IqDshyun9F6dFWb6KliwE2vjMsYw1T9gb6oq0AFf9Uw 423daEvc0Sor0GAPrd5dD0aQYMjov4PznGN9NR/fmlRTAGqzw5vItLUuwIrmy2mC sUEvw+7fxW3r4IkgcEpS53P8J7MoTWSQqqpE0ZHEcEO+pkjSVXmBc2XCvGPvn5uL 5caDbd2HYUG0ERGN/MPOlcGLJ1WzAc3M5YCBC75e4X7oU7fvxFzsgIBzl1bX1Km6 rJKDZlLfKuDgt1d2QEN7cLr7aBAEtph8IHe7bRXJ++Wk0Ysv0R15O30XDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFlAagdeIYO5BD538L+vZmlAhl2/MB8GA1UdIwQY MBaAFBIwOmRi26KVF94N7Yc5f6nlxAUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpBNlpHTGJvcFVYM2czdGh6bF9xZVhFQlM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hODk5NTQtYWQyZi00YTQ4LWE4NzIt M2VjZjcxYTcxMTViLzEvV1VCcUIxNGhnN2tFUG5md3Y2OW1hVUNHWGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hODk5NTQtYWQyZi00YTQ4LWE4NzItM2VjZjcxYTcxMTVi LzEvRWpBNlpHTGJvcFVYM2czdGh6bF9xZVhFQlM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSdyMA0G CSqGSIb3DQEBCwUAA4IBAQA+ejXnd4PznBUrVONlTULDDe3aZDI1vdUiLt2oZYS4 teqOE9+Pes59c6/MZspoiqygYblOxonj0h3RzdwTDeTuPoIButtigw8kqJyAVq9p 6v5/x9SwiKTXoq8p0Rcw3TTWp2W4uycQMxl+hR/eSX5RpvS36UY7qLPOTbWC6Pi4 B6xw0A+BGDwiClIKIIgO+YV1qEDj5liykVPpbYjPj0sVfoyoVMHLTkl6cEDJVSu7 Ruix7lZuOUtaxGTsZx9IUPi+iwFKQp2jkfo9B2JDh0gDSYqTcrIpsI0JNrDUyYOB AQATmvz+u6nHdJS5RPaNTMhBcCvqPglsT2Id8qkiSSG7 -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:47 2026 by rpki-client