This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/KEe0DfowmHrAxvA0fwo8mIyP4gg.roa File: KEe0DfowmHrAxvA0fwo8mIyP4gg.roa (raw, json) Hash identifier: oYMGxUgCYMRovlwMfXITS66TqQt8BdKaT19d0oBTLho= Subject key identifier: 28:47:B4:0D:FA:30:98:7A:C0:C6:F0:34:7F:0A:3C:98:8C:8F:E2:08 Certificate issuer: /CN=583faf07e3ec9200764f273a10e7b6c4b1582ea7 Certificate serial: 019B7EA5250BB8772C18BF2F40D26A352095 Authority key identifier: 58:3F:AF:07:E3:EC:92:00:76:4F:27:3A:10:E7:B6:C4:B1:58:2E:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/KEe0DfowmHrAxvA0fwo8mIyP4gg.roa Signing time: Fri 02 Jan 2026 12:18:30 +0000 ROA not before: Fri 02 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200628 IP address blocks: 37.72.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft rsync://rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:25:0b:b8:77:2c:18:bf:2f:40:d2:6a:35:20:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583faf07e3ec9200764f273a10e7b6c4b1582ea7 Validity Not Before: Jan 2 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2847b40dfa30987ac0c6f0347f0a3c988c8fe208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:3a:47:96:44:6f:ce:9f:00:36:a0:e5:a2: 55:c5:f5:3f:cf:86:68:d9:4e:af:2c:22:29:61:6c: 55:72:08:f2:d4:98:70:26:55:f3:d2:16:bd:cc:d8: d9:01:d6:1b:d9:bb:85:c7:19:d6:16:84:50:cb:f4: 05:6d:23:c3:e7:60:6f:02:c4:c7:c9:f4:d3:49:cd: 5a:b8:b6:3c:a6:d7:2c:33:ec:38:6b:2e:13:dc:33: 4a:9b:d7:35:a8:45:29:c3:4f:df:87:b8:c0:98:34: 62:87:1c:ff:eb:53:52:79:21:ac:18:6a:65:64:d0: 45:e7:69:53:2d:1c:a0:e4:5f:7c:18:ba:6d:26:68: 2c:d3:fb:ef:a7:fb:3a:71:7a:c5:d9:4e:34:32:c7: 3e:4a:9c:de:be:aa:82:3a:46:d1:33:8b:04:1a:c7: 9f:ae:1f:1f:b8:3f:1f:93:12:0a:5e:94:b1:29:32: 76:43:7c:5c:fe:31:12:7f:0a:9c:9e:2a:35:87:40: a8:44:e1:d7:ec:34:81:ea:1f:df:d6:1b:5b:8b:7c: 69:ef:c1:4c:1d:1d:45:9e:35:d1:19:df:15:59:c5: 4f:90:da:54:ef:46:aa:4d:a1:32:ef:71:bc:19:07: 0e:08:6b:8c:6a:8b:b9:18:76:08:ff:67:20:86:84: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:47:B4:0D:FA:30:98:7A:C0:C6:F0:34:7F:0A:3C:98:8C:8F:E2:08 X509v3 Authority Key Identifier: keyid:58:3F:AF:07:E3:EC:92:00:76:4F:27:3A:10:E7:B6:C4:B1:58:2E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/KEe0DfowmHrAxvA0fwo8mIyP4gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.130.0/24 Signature Algorithm: sha256WithRSAEncryption 55:3f:58:be:34:7e:c1:15:33:e5:84:bf:2a:fd:ec:73:fc:ba: 17:34:ca:91:37:89:92:e2:eb:a1:72:eb:53:34:1c:14:2e:01: 17:1f:8e:f1:2e:99:88:31:32:94:b4:7b:88:d1:e9:5e:67:83: bd:e2:34:11:26:f3:c0:4a:d6:cb:1f:19:4e:a8:6a:87:ce:af: c0:13:96:60:09:d0:7e:21:11:3a:c5:06:a3:f0:6b:64:7a:be: c7:a5:f9:c8:b2:fa:14:fc:89:45:4b:fc:ba:7c:a4:59:18:89: e7:31:1c:a9:cb:fb:de:d6:47:0a:da:d7:3b:07:d8:57:c0:0a: e7:82:49:e9:d2:1b:4e:0d:bc:ef:70:d4:04:14:0e:1a:fa:d8: 6c:44:e3:9f:cf:3a:f1:06:84:2f:2d:39:c4:b2:55:dd:4e:9d: f3:9b:73:83:e5:5c:d0:0a:70:a8:95:d7:4c:90:07:05:a8:5f: b6:9e:3b:99:0c:46:1d:5f:ce:fd:f4:f5:1d:ee:41:f7:fd:fb: a7:5b:ef:15:54:6c:79:f8:20:4a:43:63:ae:99:a8:95:da:01: 7c:33:93:5c:cd:e1:8f:4a:21:21:01:a8:29:70:8d:2e:d5:83: 27:1a:11:df:c4:86:b9:86:f7:bc:56:b6:69:d7:da:81:ee:64: fc:00:64:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pSULuHcsGL8vQNJqNSCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2ZhZjA3ZTNlYzkyMDA3NjRmMjczYTEwZTdiNmM0YjE1 ODJlYTcwHhcNMjYwMTAyMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODQ3YjQwZGZhMzA5ODdhYzBjNmYwMzQ3ZjBhM2M5ODhjOGZlMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R86R5ZEb86fADag5aJVxfU/z4Zo 2U6vLCIpYWxVcgjy1JhwJlXz0ha9zNjZAdYb2buFxxnWFoRQy/QFbSPD52BvAsTH yfTTSc1auLY8ptcsM+w4ay4T3DNKm9c1qEUpw0/fh7jAmDRihxz/61NSeSGsGGpl ZNBF52lTLRyg5F98GLptJmgs0/vvp/s6cXrF2U40Msc+SpzevqqCOkbRM4sEGsef rh8fuD8fkxIKXpSxKTJ2Q3xc/jESfwqcnio1h0CoROHX7DSB6h/f1htbi3xp78FM HR1FnjXRGd8VWcVPkNpU70aqTaEy73G8GQcOCGuMaou5GHYI/2cghoS1EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFChHtA36MJh6wMbwNH8KPJiMj+IIMB8GA1UdIwQY MBaAFFg/rwfj7JIAdk8nOhDntsSxWC6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QtdkItUHNrZ0IyVHljNkVPZTJ4TEZZTHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MTdhODYtNGJhZS00NmNkLTk4ZTIt Y2Y5NGIxZmQ0NjllLzEvS0VlMERmb3dtSHJBeHZBMGZ3bzhtSXlQNGdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81MTdhODYtNGJhZS00NmNkLTk4ZTItY2Y5NGIxZmQ0Njll LzEvV0QtdkItUHNrZ0IyVHljNkVPZTJ4TEZZTHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJUiCMA0G CSqGSIb3DQEBCwUAA4IBAQBVP1i+NH7BFTPlhL8q/exz/LoXNMqRN4mS4uuhcutT NBwULgEXH47xLpmIMTKUtHuI0eleZ4O94jQRJvPAStbLHxlOqGqHzq/AE5ZgCdB+ IRE6xQaj8Gtker7HpfnIsvoU/IlFS/y6fKRZGInnMRypy/ve1kcK2tc7B9hXwArn gknp0htODbzvcNQEFA4a+thsROOfzzrxBoQvLTnEslXdTp3zm3OD5VzQCnColddM kAcFqF+2njuZDEYdX8799PUd7kH3/funW+8VVGx5+CBKQ2OumaiV2gF8M5NczeGP SiEhAagpcI0u1YMnGhHfxIa5hve8VrZp19qB7mT8AGQK -----END CERTIFICATE-----Generated at Fri Jan 23 21:39:56 2026 by rpki-client