This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/WNgi38YIBh7gSGGMAz3pOwSfPa8.roa File: WNgi38YIBh7gSGGMAz3pOwSfPa8.roa (raw, json) Hash identifier: Fi6JSkMtS00G2FM2ty185le8FKrXwlLgR3IpBCt2xCc= Subject key identifier: 58:D8:22:DF:C6:08:06:1E:E0:48:61:8C:03:3D:E9:3B:04:9F:3D:AF Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Certificate serial: 019B76EB932AEDB41713A4AB4EA207C6F61D Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/WNgi38YIBh7gSGGMAz3pOwSfPa8.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209633 IP address blocks: 139.28.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:93:2a:ed:b4:17:13:a4:ab:4e:a2:07:c6:f6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58d822dfc608061ee048618c033de93b049f3daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:30:f7:20:76:de:48:37:87:b3:a8:d6:35: 02:e6:e1:dc:91:ec:2b:d5:68:8c:39:08:e1:a8:86: 0b:79:3f:fe:cf:16:dc:03:c0:5e:7b:8e:c1:17:70: cd:10:59:d9:b0:6d:b4:aa:14:00:b8:53:b2:65:fa: c3:e2:b5:53:24:ca:be:db:83:69:d5:bf:58:ec:5e: f7:32:b0:fc:db:2f:2c:5d:2d:99:8e:16:98:06:a2: 3e:d9:08:69:6d:81:d6:c9:a4:e2:a8:d7:a1:ea:57: f6:aa:ca:5e:6b:b2:d1:c3:8b:3f:ed:c9:27:70:b3: 41:a4:c0:58:ff:ab:9a:a7:a0:4a:7d:0c:cf:9e:c0: 7d:68:00:60:54:77:b0:9d:e8:96:01:af:6e:bb:d8: 23:55:ec:31:82:a4:44:f4:cc:ca:79:37:1a:31:0d: 03:16:a8:d1:10:38:5e:c0:a1:de:61:a1:c1:43:04: 39:f8:63:8a:08:69:58:05:1e:a4:8a:ab:7f:6b:d0: ae:79:cd:e0:52:fb:1d:f7:9d:f5:a5:d8:33:af:38: 8f:09:c2:8b:56:ea:5a:3c:18:fd:d2:21:d6:62:0e: cf:e6:7a:62:a8:e8:f5:b4:47:7b:88:22:63:e6:de: bc:76:4e:71:e0:f6:0c:83:0d:e2:19:09:57:18:24: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D8:22:DF:C6:08:06:1E:E0:48:61:8C:03:3D:E9:3B:04:9F:3D:AF X509v3 Authority Key Identifier: keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/WNgi38YIBh7gSGGMAz3pOwSfPa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.184.0/22 Signature Algorithm: sha256WithRSAEncryption 12:1c:88:61:37:bb:ca:02:90:27:73:cb:68:2c:34:24:fc:fd: 40:0a:e7:a1:25:f6:d6:42:d1:a4:95:84:11:ce:f1:a8:5e:6a: 06:43:51:81:e1:1a:e5:ed:ba:72:ee:14:98:c2:f9:ad:07:a2: c5:9b:4a:44:12:95:0c:1b:04:42:19:73:3d:cf:de:2b:63:27: c0:2c:ae:96:fc:10:ba:a7:74:77:27:1c:6f:7a:31:42:75:2c: 75:04:6e:d3:18:61:29:b1:2a:0f:9a:05:75:67:5c:0d:69:90: 3b:c0:41:b3:d3:62:2f:a3:f7:5f:99:bd:36:5a:b0:fc:56:03: 75:4b:17:36:ac:41:28:11:d5:3c:58:db:3c:a7:cd:a7:f3:a5: 74:97:79:de:38:a1:e1:62:cb:51:52:2f:62:5d:c1:c9:dd:4d: 46:c8:47:8d:75:be:11:91:c7:e4:aa:f4:36:3c:de:75:13:1e: 93:62:38:de:11:d4:b8:db:38:7d:bb:c4:ed:f1:1f:be:22:8f: 15:b9:3b:29:6e:43:12:3e:91:18:a7:1a:8e:27:5c:cd:8c:a8: a8:27:24:62:d7:09:95:e1:11:7d:ce:bc:21:e9:6b:e0:60:b1: 64:b8:06:2a:39:c4:00:2d:8a:ef:bb:7f:32:20:ff:d3:38:7d: 65:ba:e0:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265Mq7bQXE6SrTqIHxvYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTc5YjM5ZDFjMWQyOGY1MDYzY2E5MjFkNjAwN2UzNjNl MWM2MGIwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGQ4MjJkZmM2MDgwNjFlZTA0ODYxOGMwMzNkZTkzYjA0OWYzZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGQw9yB23kg3h7Oo1jUC5uHckewr 1WiMOQjhqIYLeT/+zxbcA8Bee47BF3DNEFnZsG20qhQAuFOyZfrD4rVTJMq+24Np 1b9Y7F73MrD82y8sXS2ZjhaYBqI+2QhpbYHWyaTiqNeh6lf2qspea7LRw4s/7ckn cLNBpMBY/6uap6BKfQzPnsB9aABgVHewneiWAa9uu9gjVewxgqRE9MzKeTcaMQ0D FqjREDhewKHeYaHBQwQ5+GOKCGlYBR6kiqt/a9Cuec3gUvsd9531pdgzrziPCcKL VupaPBj90iHWYg7P5npiqOj1tEd7iCJj5t68dk5x4PYMgw3iGQlXGCQAbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjYIt/GCAYe4EhhjAM96TsEnz2vMB8GA1UdIwQY MBaAFJYXmznRwdKPUGPKkh1gB+Nj4cYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWIt YTBiNDkzMGNiZDFlLzEvV05naTM4WUlCaDdnU0dHTUF6M3BPd1NmUGE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWItYTBiNDkzMGNiZDFl LzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixy4MA0G CSqGSIb3DQEBCwUAA4IBAQASHIhhN7vKApAnc8toLDQk/P1ACuehJfbWQtGklYQR zvGoXmoGQ1GB4Rrl7bpy7hSYwvmtB6LFm0pEEpUMGwRCGXM9z94rYyfALK6W/BC6 p3R3JxxvejFCdSx1BG7TGGEpsSoPmgV1Z1wNaZA7wEGz02Ivo/dfmb02WrD8VgN1 Sxc2rEEoEdU8WNs8p82n86V0l3neOKHhYstRUi9iXcHJ3U1GyEeNdb4RkcfkqvQ2 PN51Ex6TYjjeEdS42zh9u8Tt8R++Io8VuTspbkMSPpEYpxqOJ1zNjKioJyRi1wmV 4RF9zrwh6WvgYLFkuAYqOcQALYrvu38yIP/TOH1luuA6 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:46 2026 by rpki-client