This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa File: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (raw, json) Hash identifier: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw= Subject key identifier: 5A:7D:25:FA:8A:38:12:F2:77:DB:2F:80:F5:37:BF:DC:1A:36:DA:B1 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B7F157890372876B3AF8789ED0A653EF6 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 203.13.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:78:90:37:28:76:b3:af:87:89:ed:0a:65:3e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a7d25fa8a3812f277db2f80f537bfdc1a36dab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:ce:cb:6f:dd:4f:88:bb:a0:bf:8b:32:53: a5:25:0a:1d:b0:b7:48:05:df:3e:80:57:19:8a:ba: 35:03:d8:e3:fd:db:d7:24:69:f4:4e:fc:37:cb:a0: b4:68:70:60:f8:3a:90:e8:0e:94:a7:8c:f3:43:62: 92:d0:e2:8d:e6:1d:10:a5:33:77:5e:1e:2a:a1:19: 95:85:dd:20:49:fc:11:ec:22:fb:e0:e4:41:f3:34: a8:1b:29:27:12:51:7c:1e:73:7b:27:98:60:04:9f: 53:d2:78:25:ba:ab:c3:53:05:d5:e0:90:dc:67:82: 24:20:7b:fa:e5:25:d2:25:b3:03:18:6f:11:c8:e8: f2:7e:57:6b:32:f1:74:9f:bb:7d:0d:f9:2b:a0:38: 6b:9f:6b:26:f2:da:bc:fe:cc:66:ad:d4:d8:2b:d2: 6a:91:e9:c7:76:4a:13:3d:0a:4d:27:2f:89:32:a2: 1c:aa:1a:55:1b:8d:4f:7b:6f:13:8f:6c:02:95:4f: b4:58:da:6f:9f:6e:28:35:42:31:10:fe:7e:f4:17: 2c:bb:72:29:9f:d8:f5:1e:3b:7e:31:8a:67:44:6b: c9:5e:c5:0b:61:e4:9a:4c:2a:93:55:63:ae:86:a4: b1:b4:1b:0e:af:46:ff:0a:70:ac:ba:43:0c:8d:63: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7D:25:FA:8A:38:12:F2:77:DB:2F:80:F5:37:BF:DC:1A:36:DA:B1 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.13.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:17:2f:3f:5d:db:c4:fd:18:5f:a3:12:e3:03:3f:8f:31:1e: 52:e1:22:2c:30:90:73:52:ac:d7:cc:55:ea:92:69:a4:7c:11: 25:02:cd:5a:c2:5e:c6:f7:64:4f:21:a5:87:54:7b:ae:76:1e: b8:76:77:97:f3:c2:19:c4:90:00:07:fe:19:ce:ee:53:7e:4d: 13:90:d8:88:7c:fb:89:0b:b6:80:97:2e:d3:f0:d0:e9:c5:55: ff:f8:4d:7a:4f:0c:bd:3c:af:29:85:21:d6:e7:03:b9:2b:5f: d6:68:f4:44:05:83:6b:00:c8:3c:11:79:57:27:c9:e3:4d:e1: c0:32:69:ca:3e:29:e3:6a:c3:fe:a0:28:0d:9c:7f:0a:1d:7f: 5c:86:bb:b1:f7:66:ac:92:14:b0:01:c1:87:87:12:60:17:67: 34:c6:d1:99:c2:b1:11:20:6a:67:25:57:cd:c1:20:14:c2:8c: e8:a7:7b:c8:cd:9a:a4:2b:a6:fd:93:4e:bc:de:62:40:6c:ac: 42:f7:de:58:bb:ee:e3:44:8d:9c:7e:70:9e:cb:bf:09:0b:a1: b4:f1:36:27:fa:0b:ec:4a:98:60:76:10:3a:f8:b3:0d:75:fd: c2:20:3f:22:00:ca:d1:59:a6:1c:26:a9:a7:b6:61:4b:12:c2: 28:64:9a:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXiQNyh2s6+Hie0KZT72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTdkMjVmYThhMzgxMmYyNzdkYjJmODBmNTM3YmZkYzFhMzZkYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQDOy2/dT4i7oL+LMlOlJQodsLdI Bd8+gFcZiro1A9jj/dvXJGn0Tvw3y6C0aHBg+DqQ6A6Up4zzQ2KS0OKN5h0QpTN3 Xh4qoRmVhd0gSfwR7CL74ORB8zSoGyknElF8HnN7J5hgBJ9T0ngluqvDUwXV4JDc Z4IkIHv65SXSJbMDGG8RyOjyfldrMvF0n7t9DfkroDhrn2sm8tq8/sxmrdTYK9Jq kenHdkoTPQpNJy+JMqIcqhpVG41Pe28Tj2wClU+0WNpvn24oNUIxEP5+9Bcsu3Ip n9j1Hjt+MYpnRGvJXsULYeSaTCqTVWOuhqSxtBsOr0b/CnCsukMMjWPrMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFp9JfqKOBLyd9svgPU3v9waNtqxMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvV24wbC1vbzRFdkozMnktQTlUZV8zQm8yMnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyw0UMA0G CSqGSIb3DQEBCwUAA4IBAQBuFy8/XdvE/RhfoxLjAz+PMR5S4SIsMJBzUqzXzFXq kmmkfBElAs1awl7G92RPIaWHVHuudh64dneX88IZxJAAB/4Zzu5Tfk0TkNiIfPuJ C7aAly7T8NDpxVX/+E16Twy9PK8phSHW5wO5K1/WaPREBYNrAMg8EXlXJ8njTeHA MmnKPinjasP+oCgNnH8KHX9chrux92askhSwAcGHhxJgF2c0xtGZwrERIGpnJVfN wSAUwozop3vIzZqkK6b9k0683mJAbKxC995Yu+7jRI2cfnCey78JC6G08TYn+gvs SphgdhA6+LMNdf3CID8iAMrRWaYcJqmntmFLEsIoZJrG -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:42 2026 by rpki-client