This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Wbq3ETax87bNgr0IS2yPIgugFIw.roa File: Wbq3ETax87bNgr0IS2yPIgugFIw.roa (raw, json) Hash identifier: rzQKsoxByu4D7B4LcyGQotg64vsqqzgntIgDVwaTWwY= Subject key identifier: 59:BA:B7:11:36:B1:F3:B6:CD:82:BD:08:4B:6C:8F:22:0B:A0:14:8C Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED261C0E001DD9A6837CB4EE5A8C21 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Wbq3ETax87bNgr0IS2yPIgugFIw.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206802 IP address blocks: 193.59.50.0/24 maxlen: 24 195.187.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:26:1c:0e:00:1d:d9:a6:83:7c:b4:ee:5a:8c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59bab71136b1f3b6cd82bd084b6c8f220ba0148c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:d3:b8:23:59:21:30:7c:21:6a:8e:25:c9: 36:41:aa:03:d5:6a:22:c0:77:46:df:8e:d9:06:93: 70:5e:50:eb:fb:21:6b:09:a2:43:11:b8:b9:2d:d7: 8c:07:67:9e:0e:fc:d7:e6:77:9f:71:d3:68:14:07: 8d:cb:81:05:ac:14:51:81:9a:e5:08:06:97:9a:ca: ab:72:77:47:08:99:40:0a:0e:e0:20:fc:fc:30:83: 89:6f:a1:d4:48:ed:ae:8b:61:b5:ac:1b:aa:6f:98: b3:2d:0e:5e:d7:09:94:b1:dc:34:e0:f2:74:94:8e: 4e:a0:a6:37:38:0e:9b:ff:f5:28:05:39:2e:06:4e: ad:83:be:b1:15:57:87:e8:34:2a:c0:c1:20:47:01: 33:08:9a:f6:c2:dd:8c:ad:73:38:86:0a:09:15:da: 96:84:cf:ec:71:26:b9:24:14:5a:d1:f5:51:af:66: 20:f0:81:c5:27:cf:8a:dc:09:fd:b7:c5:dd:0a:1d: bc:6b:e0:77:02:e1:cc:df:69:38:fa:6c:0f:e4:ef: 5d:0d:6c:98:fc:4e:56:a9:c5:c6:38:9d:df:25:69: e4:f0:62:0c:5e:b4:b8:65:86:81:26:1e:43:0a:cf: d3:de:f9:13:f4:83:b5:b7:e3:ea:6c:74:8e:39:5b: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BA:B7:11:36:B1:F3:B6:CD:82:BD:08:4B:6C:8F:22:0B:A0:14:8C X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Wbq3ETax87bNgr0IS2yPIgugFIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.59.50.0/24 195.187.82.0/24 Signature Algorithm: sha256WithRSAEncryption 41:aa:40:1d:96:6d:f7:29:16:11:83:3c:2c:90:71:8d:06:51: 44:44:56:c9:54:f0:24:9e:88:6d:18:ce:90:00:e6:94:cd:4a: 29:93:9b:f8:4a:5f:2f:15:ad:cc:56:c3:93:98:b2:c2:fa:b1: e3:e7:c5:c0:9d:f4:7c:e2:16:ee:13:e5:84:44:3b:7c:92:54: 9e:03:6a:3d:74:d2:96:01:b3:9f:00:2d:58:53:f7:bc:f6:a8: 33:23:7a:30:fa:6f:52:49:e0:9e:1c:fa:7d:d0:83:65:b5:38: a5:dd:43:4e:a3:d7:21:1f:05:ba:cf:b0:8a:ad:53:d2:41:16: a4:f6:3e:da:3f:fa:a7:99:56:df:93:69:be:08:e0:63:0b:bc: 8e:a0:98:88:55:7f:c1:31:16:ea:23:0a:1a:64:d1:c3:f1:9b: 0c:dd:1d:d0:7b:56:c4:58:7b:6b:9d:b9:1e:ad:a2:d5:45:06: c9:aa:9b:9b:34:b7:06:65:42:1b:a3:18:87:c1:7f:4f:11:19: 4c:b5:65:d7:3c:21:34:4b:71:af:23:fe:1c:08:a5:df:6b:c1: de:40:0c:96:bf:21:45:e4:2d:30:82:43:c2:27:84:0c:b1:e0: 0a:d5:1c:2d:47:61:6e:c8:b1:f2:22:eb:2d:e6:a4:87:f5:86: 31:55:55:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57SYcDgAd2aaDfLTuWowhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWJhYjcxMTM2YjFmM2I2Y2Q4MmJkMDg0YjZjOGYyMjBiYTAxNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vrTuCNZITB8IWqOJck2QaoD1Woi wHdG347ZBpNwXlDr+yFrCaJDEbi5LdeMB2eeDvzX5nefcdNoFAeNy4EFrBRRgZrl CAaXmsqrcndHCJlACg7gIPz8MIOJb6HUSO2ui2G1rBuqb5izLQ5e1wmUsdw04PJ0 lI5OoKY3OA6b//UoBTkuBk6tg76xFVeH6DQqwMEgRwEzCJr2wt2MrXM4hgoJFdqW hM/scSa5JBRa0fVRr2Yg8IHFJ8+K3An9t8XdCh28a+B3AuHM32k4+mwP5O9dDWyY /E5WqcXGOJ3fJWnk8GIMXrS4ZYaBJh5DCs/T3vkT9IO1t+PqbHSOOVshTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFm6txE2sfO2zYK9CEtsjyILoBSMMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvV2JxM0VUYXg4N2JOZ3IwSVMyeVBJZ3VnRkl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwTsyAwQA w7tSMA0GCSqGSIb3DQEBCwUAA4IBAQBBqkAdlm33KRYRgzwskHGNBlFERFbJVPAk nohtGM6QAOaUzUopk5v4Sl8vFa3MVsOTmLLC+rHj58XAnfR84hbuE+WERDt8klSe A2o9dNKWAbOfAC1YU/e89qgzI3ow+m9SSeCeHPp90INltTil3UNOo9chHwW6z7CK rVPSQRak9j7aP/qnmVbfk2m+COBjC7yOoJiIVX/BMRbqIwoaZNHD8ZsM3R3Qe1bE WHtrnbkeraLVRQbJqpubNLcGZUIboxiHwX9PERlMtWXXPCE0S3GvI/4cCKXfa8He QAyWvyFF5C0wgkPCJ4QMseAK1RwtR2FuyLHyIust5qSH9YYxVVXX -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:44 2026 by rpki-client