This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/WoN0CrYvueqPk1KqmXJffVK7ib4.roa File: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (raw, json) Hash identifier: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ= Subject key identifier: 5A:83:74:0A:B6:2F:B9:EA:8F:93:52:AA:99:72:5F:7D:52:BB:89:BE Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786 Certificate serial: 019B7EA633ECE644E375A164E54A07E5B345 Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/WoN0CrYvueqPk1KqmXJffVK7ib4.roa Signing time: Fri 02 Jan 2026 12:19:39 +0000 ROA not before: Fri 02 Jan 2026 12:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 193.24.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:33:ec:e6:44:e3:75:a1:64:e5:4a:07:e5:b3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786 Validity Not Before: Jan 2 12:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a83740ab62fb9ea8f9352aa99725f7d52bb89be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:32:e9:3a:0c:38:7b:84:31:57:cd:9c:6f:2d: 80:75:9f:b1:0c:2e:22:1e:b9:c4:67:88:05:13:04: a6:ab:38:d9:06:0c:1a:5e:48:18:62:c6:fb:ab:28: ad:d3:39:da:68:35:5f:56:8d:77:e6:61:ec:7b:68: e3:f8:b7:ae:ca:8e:64:9a:2d:00:6a:40:5a:8b:99: a3:fd:e1:8e:6d:ea:c9:ea:43:cb:50:75:20:d9:20: e0:2d:3d:e1:87:0f:d6:5b:ce:47:ed:50:2a:40:29: c1:39:89:f3:f9:c2:93:c0:eb:e2:bc:69:50:ab:62: b1:84:c0:c7:27:42:48:8b:d4:f8:b1:d6:07:e0:28: be:e8:7e:00:32:86:7f:27:bf:fa:de:98:d7:ae:8e: ca:2d:73:06:61:71:db:47:d9:4a:15:f1:bd:0b:f2: 41:d7:e3:f5:b6:99:52:cd:27:6b:66:c0:9e:37:d9: 65:78:db:4c:6f:22:59:d8:1a:46:1a:b5:c1:97:25: 26:ee:21:ef:4e:86:b0:e3:4f:2e:d3:8c:0b:35:b4: af:90:a6:b0:4c:86:68:46:08:80:7e:a2:50:b0:dc: cf:ea:b2:5c:43:7d:27:ef:0b:5a:5a:4e:9f:5c:e3: dd:a2:9e:02:8b:69:86:9a:01:e9:a7:db:96:28:0f: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:83:74:0A:B6:2F:B9:EA:8F:93:52:AA:99:72:5F:7D:52:BB:89:BE X509v3 Authority Key Identifier: keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/WoN0CrYvueqPk1KqmXJffVK7ib4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.120.0/24 Signature Algorithm: sha256WithRSAEncryption 27:f9:c0:c8:58:fb:84:c5:ec:6e:29:ab:97:93:0f:76:22:86: 8c:90:27:08:d8:58:fb:20:ac:9e:af:8e:03:47:74:5e:8d:a5: 30:7a:67:8c:87:c8:de:86:fb:02:c4:ac:15:23:56:de:0f:11: 75:68:6f:34:fa:da:6a:fb:32:82:95:87:8a:c8:db:a1:90:39: d5:f3:fb:be:86:74:fb:29:1e:e7:26:27:7a:a8:37:db:da:84: 25:d4:99:59:5d:ef:50:13:7c:6a:16:d2:10:e3:44:d8:b9:76: 68:1b:eb:0e:84:b5:fe:7e:f3:d7:e4:2e:bb:6d:c6:bd:30:d6: 2d:44:ef:f0:14:d0:5d:62:e3:ae:00:df:44:84:ad:b7:2b:d0: f7:16:7e:f6:59:22:9b:52:bb:33:15:21:73:e4:04:4d:ce:c0: 94:bf:1b:cc:72:c1:41:54:8c:66:4a:70:9d:5e:a6:40:84:1c: 46:1f:25:70:78:df:37:26:4c:e3:71:e2:a6:58:99:a9:61:66: 80:36:51:3b:f2:c6:a8:60:3b:9b:e8:bb:e3:3a:63:6c:21:05: 80:79:71:6a:4b:73:0b:68:1b:5d:4a:65:80:1f:27:d0:8f:c9: bf:a6:9c:e1:13:1e:76:12:10:f4:45:83:70:97:92:9b:d1:20: e6:d7:cf:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pjPs5kTjdaFk5UoH5bNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5 MzE3ODYwHhcNMjYwMTAyMTIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTgzNzQwYWI2MmZiOWVhOGY5MzUyYWE5OTcyNWY3ZDUyYmI4OWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TLpOgw4e4QxV82cby2AdZ+xDC4i HrnEZ4gFEwSmqzjZBgwaXkgYYsb7qyit0znaaDVfVo135mHse2jj+Leuyo5kmi0A akBai5mj/eGOberJ6kPLUHUg2SDgLT3hhw/WW85H7VAqQCnBOYnz+cKTwOvivGlQ q2KxhMDHJ0JIi9T4sdYH4Ci+6H4AMoZ/J7/63pjXro7KLXMGYXHbR9lKFfG9C/JB 1+P1tplSzSdrZsCeN9lleNtMbyJZ2BpGGrXBlyUm7iHvToaw408u04wLNbSvkKaw TIZoRgiAfqJQsNzP6rJcQ30n7wtaWk6fXOPdop4Ci2mGmgHpp9uWKA/p9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFqDdAq2L7nqj5NSqplyX31Su4m+MB8GA1UdIwQY MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt NjMxNzdmYjE5YWJlLzEvV29OMENyWXZ1ZXFQazFLcW1YSmZmVks3aWI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRh4MA0G CSqGSIb3DQEBCwUAA4IBAQAn+cDIWPuExexuKauXkw92IoaMkCcI2Fj7IKyer44D R3RejaUwemeMh8jehvsCxKwVI1beDxF1aG80+tpq+zKClYeKyNuhkDnV8/u+hnT7 KR7nJid6qDfb2oQl1JlZXe9QE3xqFtIQ40TYuXZoG+sOhLX+fvPX5C67bca9MNYt RO/wFNBdYuOuAN9EhK23K9D3Fn72WSKbUrszFSFz5ARNzsCUvxvMcsFBVIxmSnCd XqZAhBxGHyVweN83JkzjceKmWJmpYWaANlE78saoYDub6LvjOmNsIQWAeXFqS3ML aBtdSmWAHyfQj8m/ppzhEx52EhD0RYNwl5Kb0SDm18/2 -----END CERTIFICATE-----Generated at Sun Jan 11 20:46:38 2026 by rpki-client