This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/WmDNL-b0WkRscYpfEnZaGcaTcFM.roa File: WmDNL-b0WkRscYpfEnZaGcaTcFM.roa (raw, json) Hash identifier: vFHl+C0H692uAua09x2J70xulx0PssETV1wVHPp2xHA= Subject key identifier: 5A:60:CD:2F:E6:F4:5A:44:6C:71:8A:5F:12:76:5A:19:C6:93:70:53 Certificate issuer: /CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1 Certificate serial: 019B7D5C593B44B9056284789CB2881BA21C Authority key identifier: B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/WmDNL-b0WkRscYpfEnZaGcaTcFM.roa Signing time: Fri 02 Jan 2026 06:19:22 +0000 ROA not before: Fri 02 Jan 2026 06:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214165 IP address blocks: 83.175.143.0/24 maxlen: 24 2001:67c:260::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:59:3b:44:b9:05:62:84:78:9c:b2:88:1b:a2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1 Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a60cd2fe6f45a446c718a5f12765a19c6937053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:94:cb:19:45:07:5c:6a:d4:bb:43:25:17: 6e:11:2e:e7:2a:de:57:b9:bf:52:06:c9:8c:f4:15: 22:9e:ff:fd:89:dc:b9:12:ca:82:3f:eb:eb:9a:5b: b3:3e:4c:90:39:e2:57:2d:5a:a1:15:4b:c8:44:66: c7:67:ad:e5:d3:d6:ed:91:3e:1c:32:a8:a2:a8:0a: bd:6f:1a:72:bb:01:46:39:9c:c5:70:7e:d1:ac:99: 96:b9:7c:bc:ec:63:09:6e:da:d6:3b:96:60:35:c6: fb:f5:5c:8c:4f:17:f0:6c:5d:c0:e6:ed:8d:f8:7e: 78:23:29:01:27:fc:95:34:f5:03:86:e5:a8:fd:87: 31:13:fc:e1:c2:7b:91:6c:41:f8:37:9c:ee:40:e6: f4:a9:48:c9:4a:30:b9:10:2e:04:86:25:67:d7:35: 2c:5b:76:78:f4:a9:16:33:9c:84:93:45:f3:c0:cd: cc:14:94:d4:bf:db:e6:7c:52:d0:25:99:25:b1:75: a5:fb:af:38:e9:ff:be:21:40:8a:dd:f4:6d:ed:60: be:ac:4c:a6:c3:16:8f:da:1d:d6:f7:be:4d:6a:01: 59:4c:69:b3:95:eb:b7:48:b9:ea:4d:84:fc:53:bb: f9:ce:bb:41:3d:8c:6e:fd:6e:f5:96:c5:3d:40:9b: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:60:CD:2F:E6:F4:5A:44:6C:71:8A:5F:12:76:5A:19:C6:93:70:53 X509v3 Authority Key Identifier: keyid:B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/WmDNL-b0WkRscYpfEnZaGcaTcFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.175.143.0/24 IPv6: 2001:67c:260::/48 Signature Algorithm: sha256WithRSAEncryption 8a:d5:62:b6:17:cd:e1:c8:79:14:4e:c2:c7:a6:db:cf:a9:b0: 47:c1:ec:7f:ee:25:fe:76:79:c0:95:a3:fb:6f:ec:42:1e:1e: 4e:8f:ce:7f:0f:a2:fd:16:6b:bf:f0:09:66:a3:57:89:05:c1: 82:ef:dd:a0:84:2c:69:ca:91:8b:aa:b6:84:96:60:78:c3:a2: bb:a9:3e:d0:43:7a:f2:9e:8f:64:7f:37:69:47:19:9f:c9:37: cc:f5:88:a0:a0:0e:a1:41:4c:17:ed:c6:7e:f1:6d:61:c5:f3: f9:4c:85:7b:b9:62:3a:6c:e3:71:90:c1:22:f3:62:67:10:94: 0d:fb:00:dc:e6:8c:9f:a2:1e:17:81:aa:5e:29:34:4c:4b:96: 5e:62:72:e9:c8:c3:97:e5:b4:cc:21:e5:81:99:61:f4:96:f6: 54:39:ab:3a:6a:72:23:70:34:1c:0e:b2:b9:61:40:8f:e8:bf: 1f:34:33:47:f3:f0:4c:ca:0b:5a:fb:c5:6d:5d:f7:ad:d6:96: 54:60:10:c9:6f:0b:0c:b3:8c:78:32:00:25:fb:00:63:03:7e: f9:7b:fc:c6:e5:4a:90:4c:84:ab:bb:b5:69:80:40:5d:a2:88: 1b:70:4a:5f:66:14:71:30:9e:71:60:54:eb:09:a9:ee:f1:93: c2:7b:17:40 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XFk7RLkFYoR4nLKIG6IcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyOGVmMWY0Zjg4Mjc4ZjRkZjE5ZTczZTMzODFjZWNkNzhl MDY5YzEwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTYwY2QyZmU2ZjQ1YTQ0NmM3MThhNWYxMjc2NWExOWM2OTM3MDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZeUyxlFB1xq1LtDJRduES7nKt5X ub9SBsmM9BUinv/9idy5EsqCP+vrmluzPkyQOeJXLVqhFUvIRGbHZ63l09btkT4c MqiiqAq9bxpyuwFGOZzFcH7RrJmWuXy87GMJbtrWO5ZgNcb79VyMTxfwbF3A5u2N +H54IykBJ/yVNPUDhuWo/YcxE/zhwnuRbEH4N5zuQOb0qUjJSjC5EC4EhiVn1zUs W3Z49KkWM5yEk0XzwM3MFJTUv9vmfFLQJZklsXWl+6846f++IUCK3fRt7WC+rEym wxaP2h3W975NagFZTGmzleu3SLnqTYT8U7v5zrtBPYxu/W71lsU9QJsHbQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFpgzS/m9FpEbHGKXxJ2WhnGk3BTMB8GA1UdIwQY MBaAFLKO8fT4gnj03xnnPjOBzs144GnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc283eDlQaUNlUFRmR2VjLU00SE96WGpnYWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8xZjA1MWItZTczNS00OWI4LWJjNmQt OWVmMGE1OTkyN2IxLzEvV21ETkwtYjBXa1JzY1lwZkVuWmFHY2FUY0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8xZjA1MWItZTczNS00OWI4LWJjNmQtOWVmMGE1OTkyN2Ix LzEvc283eDlQaUNlUFRmR2VjLU00SE96WGpnYWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAU6+PMA8E AgACMAkDBwAgAQZ8AmAwDQYJKoZIhvcNAQELBQADggEBAIrVYrYXzeHIeRROwsem 28+psEfB7H/uJf52ecCVo/tv7EIeHk6Pzn8Pov0Wa7/wCWajV4kFwYLv3aCELGnK kYuqtoSWYHjDorupPtBDevKej2R/N2lHGZ/JN8z1iKCgDqFBTBftxn7xbWHF8/lM hXu5Yjps43GQwSLzYmcQlA37ANzmjJ+iHheBql4pNExLll5icunIw5fltMwh5YGZ YfSW9lQ5qzpqciNwNBwOsrlhQI/ovx80M0fz8EzKC1r7xW1d963WllRgEMlvCwyz jHgyACX7AGMDfvl7/MblSpBMhKu7tWmAQF2iiBtwSl9mFHEwnnFgVOsJqe7xk8J7 F0A= -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:46 2026 by rpki-client