This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WdXhFta1fI8wiPQVWvH66D43-qU.roa File: WdXhFta1fI8wiPQVWvH66D43-qU.roa (raw, json) Hash identifier: U/PHFK1LCrQ8phjJMN9QdUkubCtYOkuD34WptAC9xkw= Subject key identifier: 59:D5:E1:16:D6:B5:7C:8F:30:88:F4:15:5A:F1:FA:E8:3E:37:FA:A5 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7CFE81DD8FD75C0FC7A86C3C08D10 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WdXhFta1fI8wiPQVWvH66D43-qU.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43615 IP address blocks: 85.254.44.0/24 maxlen: 24 85.254.86.0/23 maxlen: 23 2a02:610:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cf:e8:1d:d8:fd:75:c0:fc:7a:86:c3:c0:8d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59d5e116d6b57c8f3088f4155af1fae83e37faa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:b3:f5:d5:39:4b:32:82:9f:80:2a:94:c6: 0e:fd:ff:8f:95:27:07:af:33:03:5e:6b:d6:9e:8e: ee:da:be:5f:23:fc:df:15:19:65:d9:30:6b:15:ac: 69:0d:c1:16:5f:ce:45:52:b4:28:52:55:88:09:d6: d3:c1:3f:dd:72:77:56:df:a7:cd:b2:b3:a1:4c:32: bc:d3:24:2b:56:4b:d3:19:db:1a:16:0d:36:4f:e5: 60:8e:01:40:58:a2:85:8b:b9:9a:14:14:ac:82:1b: 66:4d:a0:88:49:06:c8:fa:7b:db:91:54:1b:f3:d3: d6:17:02:33:2d:d0:28:81:e6:17:5b:dd:70:94:d0: 12:95:83:11:4a:da:6f:37:bc:1e:2f:7d:fc:de:9d: 7a:48:f7:98:94:73:9f:f5:25:07:3e:06:27:71:75: 15:2f:28:c4:ac:0c:fc:84:0b:6e:be:0a:f9:f3:5c: 3a:cb:0e:0f:85:83:3d:ce:17:dd:b7:98:75:65:dc: 35:0b:53:e9:b9:6b:ad:4d:cc:f2:f9:ec:02:b9:d6: 3d:20:53:e0:b6:9b:32:82:a2:8f:14:e4:eb:ea:5e: cf:cd:1d:4b:b3:b3:c0:1f:6c:3d:d6:a5:75:b9:6f: 85:ee:26:36:21:ab:6d:5b:68:e2:cf:5a:55:eb:f2: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D5:E1:16:D6:B5:7C:8F:30:88:F4:15:5A:F1:FA:E8:3E:37:FA:A5 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WdXhFta1fI8wiPQVWvH66D43-qU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.44.0/24 85.254.86.0/23 IPv6: 2a02:610:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 3e:68:02:a2:26:5d:65:71:6b:7a:59:1e:d7:9f:fd:42:43:ff: 95:24:aa:56:b6:40:7f:8f:8c:7d:37:b3:e1:72:42:54:58:71: 2b:84:b9:50:19:01:97:72:72:f4:9e:62:c2:38:1b:d6:c0:1f: 9c:b9:d4:41:f4:07:1a:fd:25:76:0b:d2:13:65:9e:46:0e:3e: 3f:b2:d8:de:48:63:4e:f0:80:87:b9:4e:88:f2:91:4a:c5:54: 30:e2:85:b6:d4:6b:52:3f:3b:72:1a:1e:33:c5:d3:68:ea:9e: 7e:8e:b5:46:94:29:49:a8:79:8a:39:6c:44:03:17:0d:ee:b1: b5:fc:f8:1a:8a:6a:81:50:39:ce:49:ff:10:fc:25:ed:f9:c0: be:9c:60:a1:e1:0e:8f:a1:64:d6:39:f5:1c:34:87:41:a5:54: da:ab:3f:76:c0:a9:44:45:8b:c1:59:34:82:d1:75:b4:02:e9: 28:28:e7:15:45:a7:02:71:83:54:1c:80:77:68:e4:2e:a4:8d: e3:3d:ee:10:ed:33:30:78:db:79:2f:9c:7a:91:d6:f4:ad:99: 87:69:a1:0d:e9:f5:75:fe:c9:73:3a:ec:f0:33:67:5c:dc:2b: 43:65:1b:cc:a9:d4:58:71:76:ba:11:d7:45:cf:54:20:fe:68: 83:4f:31:e5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6x8/oHdj9dcD8eobDwI0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWQ1ZTExNmQ2YjU3YzhmMzA4OGY0MTU1YWYxZmFlODNlMzdmYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE6z9dU5SzKCn4AqlMYO/f+PlScH rzMDXmvWno7u2r5fI/zfFRll2TBrFaxpDcEWX85FUrQoUlWICdbTwT/dcndW36fN srOhTDK80yQrVkvTGdsaFg02T+VgjgFAWKKFi7maFBSsghtmTaCISQbI+nvbkVQb 89PWFwIzLdAogeYXW91wlNASlYMRStpvN7weL3383p16SPeYlHOf9SUHPgYncXUV LyjErAz8hAtuvgr581w6yw4PhYM9zhfdt5h1Zdw1C1PpuWutTczy+ewCudY9IFPg tpsygqKPFOTr6l7PzR1Ls7PAH2w91qV1uW+F7iY2IattW2jiz1pV6/I4OwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFnV4RbWtXyPMIj0FVrx+ug+N/qlMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvV2RYaEZ0YTFmSTh3aVBRVld2SDY2RDQzLXFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAVf4sAwQB Vf5WMA8EAgACMAkDBwAqAgYQ//4wDQYJKoZIhvcNAQELBQADggEBAD5oAqImXWVx a3pZHtef/UJD/5Ukqla2QH+PjH03s+FyQlRYcSuEuVAZAZdycvSeYsI4G9bAH5y5 1EH0Bxr9JXYL0hNlnkYOPj+y2N5IY07wgIe5TojykUrFVDDihbbUa1I/O3IaHjPF 02jqnn6OtUaUKUmoeYo5bEQDFw3usbX8+BqKaoFQOc5J/xD8Je35wL6cYKHhDo+h ZNY59Rw0h0GlVNqrP3bAqURFi8FZNILRdbQC6Sgo5xVFpwJxg1QcgHdo5C6kjeM9 7hDtMzB423kvnHqR1vStmYdpoQ3p9XX+yXM67PAzZ1zcK0NlG8yp1FhxdroR10XP VCD+aINPMeU= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:56 2026 by rpki-client