This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/WFq7FEpO1Iycb1yqpZPnE4hFJjg.roa File: WFq7FEpO1Iycb1yqpZPnE4hFJjg.roa (raw, json) Hash identifier: MevGR9qgcVcvlRayBhJVUo3kjeWsQbcikC4WmtwTEw4= Subject key identifier: 58:5A:BB:14:4A:4E:D4:8C:9C:6F:5C:AA:A5:93:E7:13:88:45:26:38 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844F9E7831C4B2C8909F270838274A Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/WFq7FEpO1Iycb1yqpZPnE4hFJjg.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209243 IP address blocks: 45.152.10.0/24 maxlen: 24 45.157.34.0/24 maxlen: 24 80.64.216.0/24 maxlen: 24 80.64.217.0/24 maxlen: 24 194.146.44.0/24 maxlen: 24 194.146.49.0/24 maxlen: 24 194.156.177.0/24 maxlen: 24 195.22.156.0/24 maxlen: 24 195.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4f:9e:78:31:c4:b2:c8:90:9f:27:08:38:27:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=585abb144a4ed48c9c6f5caaa593e71388452638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:38:8f:46:5a:33:8f:4a:a4:2d:90:e8:9b: 2f:be:55:e8:8c:f1:6b:5b:08:11:25:dd:6e:f5:93: 16:65:5a:3f:45:71:77:d3:20:98:29:85:28:c7:e5: bf:6f:d2:e7:1e:f0:5f:14:24:8f:ba:e8:ee:0c:53: 8d:53:ff:14:36:57:3e:f4:04:8b:82:b9:9d:f7:d4: f9:0a:2a:83:75:9f:e1:9a:c6:fd:87:98:10:d8:e1: 2c:4a:be:fe:76:6d:c9:1a:5e:e8:93:00:00:43:51: 83:de:27:14:b2:cb:8d:50:17:44:2a:18:6a:39:7c: a0:c9:50:2e:3a:31:07:1a:04:af:25:e6:03:74:b9: 8a:77:e9:f6:23:f7:21:48:a8:d4:85:dc:3a:da:6d: d8:fd:18:90:b5:cc:b1:8f:44:da:aa:02:38:01:ea: 61:ba:7f:0e:ea:e8:83:b6:ae:dd:41:62:e1:e6:db: f6:5b:fe:03:08:48:ec:01:25:13:d0:52:db:60:4c: 42:0d:88:96:41:38:5c:9d:bf:8e:24:ca:1e:3e:20: 52:d7:eb:fa:ee:94:3f:c9:dc:6a:c8:b4:d2:02:01: 3e:c6:99:2d:5a:61:32:ed:48:40:7e:fb:29:d5:76: b0:5e:e0:cf:8e:3d:54:79:7e:dc:7f:25:52:c9:20: 13:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:BB:14:4A:4E:D4:8C:9C:6F:5C:AA:A5:93:E7:13:88:45:26:38 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/WFq7FEpO1Iycb1yqpZPnE4hFJjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.10.0/24 45.157.34.0/24 80.64.216.0/23 194.146.44.0/24 194.146.49.0/24 194.156.177.0/24 195.22.156.0/23 Signature Algorithm: sha256WithRSAEncryption 99:cf:20:bd:e5:7d:17:67:2b:b9:4b:ec:e8:82:89:00:7f:56: c0:87:03:5d:f0:45:cf:51:f1:79:ce:ad:a6:42:9b:40:e0:69: 27:45:6e:ec:49:75:f7:13:e7:a3:0c:75:61:61:54:93:ff:dc: 83:59:ec:17:d9:88:39:f7:06:a6:aa:2f:13:ca:6e:4e:e9:c5: ec:fe:87:94:c1:55:90:97:fc:d6:6a:ab:90:ce:91:fb:93:62: 71:d7:b3:45:c8:dd:1f:b1:d2:23:da:f4:14:de:d6:2c:e6:24: cc:b4:05:59:d7:b8:6c:ea:70:00:ac:35:04:7c:55:eb:2f:bd: 94:36:e1:12:50:69:39:88:a6:86:fd:fb:94:26:b2:d3:5e:f9: 78:24:72:c7:ee:19:15:d2:08:b0:63:a9:4c:c9:f1:3b:0b:ed: f8:e0:65:a4:d8:f1:c5:fb:a3:9f:18:c6:92:8d:8f:ae:b6:1a: 28:36:e5:ad:1b:d4:2c:a5:5b:98:3b:5f:c0:00:d6:09:99:c3: ec:a4:57:77:c2:6e:3f:17:d5:83:6a:cf:4f:e1:af:cc:3b:06: f3:bd:65:3e:f6:57:a0:5d:3c:4c:db:59:19:4c:bd:d4:85:b1: a3:db:e3:b6:e9:36:8c:3c:d7:3c:4b:69:0f:1e:f8:5d:d6:45: 65:29:4c:97 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/hE+eeDHEssiQnycIOCdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODVhYmIxNDRhNGVkNDhjOWM2ZjVjYWFhNTkzZTcxMzg4NDUyNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5M4j0ZaM49KpC2Q6JsvvlXojPFr WwgRJd1u9ZMWZVo/RXF30yCYKYUox+W/b9LnHvBfFCSPuujuDFONU/8UNlc+9ASL grmd99T5CiqDdZ/hmsb9h5gQ2OEsSr7+dm3JGl7okwAAQ1GD3icUssuNUBdEKhhq OXygyVAuOjEHGgSvJeYDdLmKd+n2I/chSKjUhdw62m3Y/RiQtcyxj0TaqgI4Aeph un8O6uiDtq7dQWLh5tv2W/4DCEjsASUT0FLbYExCDYiWQThcnb+OJMoePiBS1+v6 7pQ/ydxqyLTSAgE+xpktWmEy7UhAfvsp1XawXuDPjj1UeX7cfyVSySATjQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFFhauxRKTtSMnG9cqqWT5xOIRSY4MB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvV0ZxN0ZFcE8xSXljYjF5cXBaUG5FNGhGSmpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALZgKAwQA LZ0iAwQBUEDYAwQAwpIsAwQAwpIxAwQAwpyxAwQBwxacMA0GCSqGSIb3DQEBCwUA A4IBAQCZzyC95X0XZyu5S+zogokAf1bAhwNd8EXPUfF5zq2mQptA4GknRW7sSXX3 E+ejDHVhYVST/9yDWewX2Yg59wamqi8Tym5O6cXs/oeUwVWQl/zWaquQzpH7k2Jx 17NFyN0fsdIj2vQU3tYs5iTMtAVZ17hs6nAArDUEfFXrL72UNuESUGk5iKaG/fuU JrLTXvl4JHLH7hkV0giwY6lMyfE7C+344GWk2PHF+6OfGMaSjY+uthooNuWtG9Qs pVuYO1/AANYJmcPspFd3wm4/F9WDas9P4a/MOwbzvWU+9legXTxM21kZTL3UhbGj 2+O26TaMPNc8S2kPHvhd1kVlKUyX -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:08 2026 by rpki-client