This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/WdrS0-eTVbTpcKvZNgVuCTckKKo.roa File: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (raw, json) Hash identifier: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g= Subject key identifier: 59:DA:D2:D3:E7:93:55:B4:E9:70:AB:D9:36:05:6E:09:37:24:28:AA Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb Certificate serial: 019B76EB89A53AD9D147D7537986ED17AB8D Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/WdrS0-eTVbTpcKvZNgVuCTckKKo.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214812 IP address blocks: 212.5.58.0/24 maxlen: 24 2a13:a2c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:89:a5:3a:d9:d1:47:d7:53:79:86:ed:17:ab:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59dad2d3e79355b4e970abd936056e09372428aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:c0:fb:67:5f:87:90:e5:20:7c:f3:6e:8b: f6:69:1f:78:8a:aa:a0:d0:da:19:f7:ca:aa:43:cb: 2e:00:56:84:f3:97:7f:c2:9d:81:3b:09:b0:f7:81: 87:d2:d9:1c:be:8a:12:8d:63:06:44:83:87:0d:7a: b8:65:75:4d:fe:a5:df:e6:93:d9:6c:fe:f4:09:c1: c5:61:65:08:8e:77:c8:6f:6e:53:59:da:26:8f:d6: d2:9d:83:e5:0f:09:87:fa:3e:49:54:e4:60:e9:5e: 9b:86:cb:4c:58:cc:19:76:24:61:0f:3a:88:f5:bc: 4b:4f:1f:a6:b1:52:4b:28:06:7f:18:34:da:25:d0: f8:e3:b9:7f:92:73:f9:1c:ad:a7:a8:c3:e7:d2:52: 60:b5:63:a8:58:13:3c:4c:8f:2d:fb:e0:82:55:7a: bf:46:b9:0a:17:c2:c1:3f:e2:ae:8b:25:87:59:3b: 24:35:28:06:c6:9b:ba:0c:5d:b0:b4:a7:2f:39:b9: 02:7c:e7:6b:45:75:e2:09:39:6c:f2:35:10:0c:ae: 1c:68:12:40:04:61:d5:9e:86:f2:d6:d6:a3:1d:b6: 2a:39:6e:62:54:26:ce:c8:73:c7:3d:39:fd:0c:5a: 23:26:f3:53:56:c9:fc:dc:a2:19:38:2a:3a:a8:2c: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DA:D2:D3:E7:93:55:B4:E9:70:AB:D9:36:05:6E:09:37:24:28:AA X509v3 Authority Key Identifier: keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/WdrS0-eTVbTpcKvZNgVuCTckKKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.5.58.0/24 IPv6: 2a13:a2c0::/29 Signature Algorithm: sha256WithRSAEncryption 95:85:a8:82:b1:d2:17:8d:a4:7e:67:cc:06:db:f1:2d:f4:c6: 3e:98:88:bb:ce:3b:22:ef:8f:9b:58:53:41:1b:51:69:a0:a4: ba:12:b2:62:90:1b:65:e9:8f:6a:97:06:c9:9a:c0:56:bb:a5: 92:e5:f5:fd:3c:6a:64:7f:ba:19:70:da:1b:07:29:90:59:00: 0a:8f:57:05:fe:f7:6c:75:80:32:80:f8:2a:e3:40:4f:dd:bc: e1:74:68:4c:49:6c:2f:ca:21:43:57:45:b0:46:d1:33:d5:bc: fc:2a:63:c9:28:d9:38:5b:ef:04:ec:ea:66:25:7d:97:b5:7c: 69:fe:95:c9:fc:52:45:1a:c9:7d:d3:66:49:47:89:1a:0d:1a: 2f:f5:14:81:d8:21:5f:a3:58:6e:60:74:0d:dc:0b:97:29:46: 81:33:16:bb:c6:2b:4a:1e:df:b2:67:ae:aa:a9:be:84:69:a4: 5d:67:03:ea:bf:7d:19:28:e6:09:29:19:a7:b9:75:63:c5:21: 24:40:40:69:c8:3e:59:79:65:28:dc:dd:aa:4c:64:c8:6d:fc: ec:a9:22:06:99:1a:e3:1b:a1:94:08:33:0b:9d:da:a8:b0:4b: 39:d0:34:31:a1:19:f1:a6:4d:a1:f6:3b:06:ac:62:97:ad:9b: 9e:88:71:6a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt264mlOtnRR9dTeYbtF6uNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzVkNTNkYjgyMmQyNWRiODI3ZDAzNzdjYmViMDZkMmNh NDFhY2IwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWRhZDJkM2U3OTM1NWI0ZTk3MGFiZDkzNjA1NmUwOTM3MjQyOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup3A+2dfh5DlIHzzbov2aR94iqqg 0NoZ98qqQ8suAFaE85d/wp2BOwmw94GH0tkcvooSjWMGRIOHDXq4ZXVN/qXf5pPZ bP70CcHFYWUIjnfIb25TWdomj9bSnYPlDwmH+j5JVORg6V6bhstMWMwZdiRhDzqI 9bxLTx+msVJLKAZ/GDTaJdD447l/knP5HK2nqMPn0lJgtWOoWBM8TI8t++CCVXq/ RrkKF8LBP+KuiyWHWTskNSgGxpu6DF2wtKcvObkCfOdrRXXiCTls8jUQDK4caBJA BGHVnoby1tajHbYqOW5iVCbOyHPHPTn9DFojJvNTVsn83KIZOCo6qCwinwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFna0tPnk1W06XCr2TYFbgk3JCiqMB8GA1UdIwQY MBaAFHV11T24ItJduCfQN3y+sG0spBrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTIt MDYxZWQ5MzcxNDc1LzEvV2RyUzAtZVRWYlRwY0t2Wk5nVnVDVGNrS0tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTItMDYxZWQ5MzcxNDc1 LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1AU6MA0E AgACMAcDBQMqE6LAMA0GCSqGSIb3DQEBCwUAA4IBAQCVhaiCsdIXjaR+Z8wG2/Et 9MY+mIi7zjsi74+bWFNBG1FpoKS6ErJikBtl6Y9qlwbJmsBWu6WS5fX9PGpkf7oZ cNobBymQWQAKj1cF/vdsdYAygPgq40BP3bzhdGhMSWwvyiFDV0WwRtEz1bz8KmPJ KNk4W+8E7OpmJX2XtXxp/pXJ/FJFGsl902ZJR4kaDRov9RSB2CFfo1huYHQN3AuX KUaBMxa7xitKHt+yZ66qqb6EaaRdZwPqv30ZKOYJKRmnuXVjxSEkQEBpyD5ZeWUo 3N2qTGTIbfzsqSIGmRrjG6GUCDMLndqosEs50DQxoRnxpk2h9jsGrGKXrZueiHFq -----END CERTIFICATE-----Generated at Fri Jan 23 21:19:51 2026 by rpki-client