This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/WDz5bqq9s7Sot6DZTyns7ujP_G0.roa File: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (raw, json) Hash identifier: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE= Subject key identifier: 58:3C:F9:6E:AA:BD:B3:B4:A8:B7:A0:D9:4F:29:EC:EE:E8:CF:FC:6D Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af Certificate serial: 019B76EB347FF4FCC23FC7ADAC1CEE01D7F4 Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/WDz5bqq9s7Sot6DZTyns7ujP_G0.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8657 IP address blocks: 185.96.172.0/22 maxlen: 22 195.8.0.0/19 maxlen: 24 217.168.112.0/21 maxlen: 24 2001:15d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:34:7f:f4:fc:c2:3f:c7:ad:ac:1c:ee:01:d7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=583cf96eaabdb3b4a8b7a0d94f29eceee8cffc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:b0:37:f3:a8:09:60:73:6e:d8:a5:6d:e6: 2d:93:18:c4:4a:e0:7f:26:e8:b4:6d:5b:33:18:6f: c4:a6:88:52:d8:db:fa:79:5d:83:66:eb:77:b8:50: eb:76:e9:95:69:5e:a4:ba:f5:1b:8f:ad:87:7b:dd: 3e:d4:80:cb:b0:51:22:d8:05:c2:13:70:e5:6d:d5: cd:d6:20:b2:5f:27:09:f8:39:ed:45:5f:fb:6f:38: b4:22:2f:c6:02:3d:72:10:af:d4:e0:36:f7:9a:cf: 19:a1:c8:0f:68:d8:26:0f:db:21:e9:61:fc:e8:a5: ab:bb:b7:47:63:8e:6f:e7:dd:8f:82:3d:2f:e1:39: 90:e1:af:d4:51:b2:19:ba:5d:1e:f6:5b:c1:e5:7b: a0:75:c5:5f:f1:86:99:d1:84:1f:97:f4:2e:52:ef: 02:83:a9:fd:de:f1:ab:6f:58:e9:9b:e3:7b:3c:18: b9:3d:4b:b4:e8:84:6f:1b:8c:8e:5d:b1:ee:ad:24: aa:19:22:38:6f:fa:fd:85:8f:0f:df:fe:e9:8b:1d: b4:da:d4:3f:90:17:fc:b5:50:0f:28:c5:0b:8d:6b: b4:85:c5:73:fe:8e:00:84:d5:2f:c1:20:5d:bc:dc: 6d:ed:f2:93:89:5d:61:f4:e8:58:76:a5:76:6c:3e: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3C:F9:6E:AA:BD:B3:B4:A8:B7:A0:D9:4F:29:EC:EE:E8:CF:FC:6D X509v3 Authority Key Identifier: keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/WDz5bqq9s7Sot6DZTyns7ujP_G0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.172.0/22 195.8.0.0/19 217.168.112.0/21 IPv6: 2001:15d8::/32 Signature Algorithm: sha256WithRSAEncryption 59:ab:f9:88:fe:70:de:30:40:d4:c2:a4:55:fb:99:79:af:98: 6b:fa:43:0a:e0:42:af:43:d1:42:03:3a:41:3c:00:b7:3a:95: 4c:f7:c3:1d:aa:24:96:13:68:e0:85:08:11:a7:02:66:50:79: 41:ec:9c:11:d2:20:af:13:60:4c:46:cc:46:ef:4e:8e:03:01: e3:4a:a7:cf:2a:3a:92:13:82:f2:82:06:3b:6a:85:e8:42:51: 5c:50:81:62:54:da:01:ce:5c:c7:b3:5a:d3:48:5b:22:e6:63: 50:34:ce:32:f5:a0:7b:ca:8f:12:3d:b7:d2:c0:3f:55:1a:be: 4f:1e:36:18:00:a4:50:11:dd:9d:64:76:ba:a7:84:ae:ab:eb: 9c:21:2a:ee:70:40:4b:b1:9f:36:5c:0d:91:6a:2a:8c:93:fb: d7:57:a5:ae:88:6d:d4:67:ba:de:ae:b5:c7:db:18:a0:07:8b: a2:ec:d7:d6:ed:9a:a1:b2:f4:5e:50:ad:8a:0b:74:a6:9f:b8: 0d:3f:e5:7c:5a:2a:69:3a:ab:a0:5e:2c:be:ff:ed:50:30:7d: 73:4c:ff:3b:0f:a2:e2:ef:59:65:0e:21:a9:c7:ea:4d:40:fe: 7b:25:12:58:6b:e9:61:c8:b2:dc:a3:79:fe:57:c4:d9:27:2b: 0f:ae:f7:03 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt26zR/9PzCP8etrBzuAdf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTI1NjU2YzUwYmIyNTRmNTgwNzdkMWI5NjZlNDc0YjE2 MzQ3YWYwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODNjZjk2ZWFhYmRiM2I0YThiN2EwZDk0ZjI5ZWNlZWU4Y2ZmYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkOwN/OoCWBzbtilbeYtkxjESuB/ Jui0bVszGG/EpohS2Nv6eV2DZut3uFDrdumVaV6kuvUbj62He90+1IDLsFEi2AXC E3DlbdXN1iCyXycJ+DntRV/7bzi0Ii/GAj1yEK/U4Db3ms8ZocgPaNgmD9sh6WH8 6KWru7dHY45v592Pgj0v4TmQ4a/UUbIZul0e9lvB5XugdcVf8YaZ0YQfl/QuUu8C g6n93vGrb1jpm+N7PBi5PUu06IRvG4yOXbHurSSqGSI4b/r9hY8P3/7pix202tQ/ kBf8tVAPKMULjWu0hcVz/o4AhNUvwSBdvNxt7fKTiV1h9OhYdqV2bD4IJwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFg8+W6qvbO0qLeg2U8p7O7oz/xtMB8GA1UdIwQY MBaAFGLiVlbFC7JU9YB30blm5HSxY0evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2Mt YzIwNjRiMGY5YWI5LzEvV0R6NWJxcTlzN1NvdDZEWlR5bnM3dWpQX0cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2MtYzIwNjRiMGY5YWI5 LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuWCsAwQF wwgAAwQD2ahwMA0EAgACMAcDBQAgARXYMA0GCSqGSIb3DQEBCwUAA4IBAQBZq/mI /nDeMEDUwqRV+5l5r5hr+kMK4EKvQ9FCAzpBPAC3OpVM98MdqiSWE2jghQgRpwJm UHlB7JwR0iCvE2BMRsxG706OAwHjSqfPKjqSE4LyggY7aoXoQlFcUIFiVNoBzlzH s1rTSFsi5mNQNM4y9aB7yo8SPbfSwD9VGr5PHjYYAKRQEd2dZHa6p4Suq+ucISru cEBLsZ82XA2RaiqMk/vXV6WuiG3UZ7rerrXH2xigB4ui7NfW7ZqhsvReUK2KC3Sm n7gNP+V8WippOqugXiy+/+1QMH1zTP87D6Li71llDiGpx+pNQP57JRJYa+lhyLLc o3n+V8TZJysPrvcD -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:58 2026 by rpki-client