This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wnWTDhADq4PBlFfY772aH49N1LI.roa File: wnWTDhADq4PBlFfY772aH49N1LI.roa (raw, json) Hash identifier: 1u4GTidRiqBRxKm5sn/Xdg+SUNUtq16VAUQiokWuO24= Subject key identifier: C2:75:93:0E:10:03:AB:83:C1:94:57:D8:EF:BD:9A:1F:8F:4D:D4:B2 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35914DD55E1A2685E141240AB4D1DD Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wnWTDhADq4PBlFfY772aH49N1LI.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207636 IP address blocks: 85.120.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:91:4d:d5:5e:1a:26:85:e1:41:24:0a:b4:d1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c275930e1003ab83c19457d8efbd9a1f8f4dd4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:58:ad:dc:99:23:fb:ce:8d:8e:6d:23:be:5f: d8:a3:ac:9e:a5:9b:8e:12:f0:b1:cb:90:41:10:4f: 59:3e:88:b9:ab:a0:03:af:65:c5:c5:05:e1:c2:a2: 56:c6:d5:23:ce:7b:57:2d:4d:0b:e6:d1:25:a6:93: 84:3e:70:b0:65:28:4b:5e:f9:e0:f2:df:be:b7:8d: 53:41:7c:4f:c8:38:c6:43:f1:76:b9:57:38:7d:90: 84:a4:99:98:5b:70:4f:54:80:0b:35:49:f0:a7:5a: 56:fc:df:c4:ea:df:ce:7f:75:da:3e:2a:f9:54:d8: 71:55:5a:c9:83:21:07:e8:e8:bc:2f:e0:00:b2:d8: 12:52:dc:ff:0e:be:7f:fb:cc:17:3c:f3:59:af:9b: 89:58:9e:fd:38:7a:e6:50:12:55:78:d4:d4:fc:33: 63:e4:4e:a6:eb:62:57:e9:6e:e3:79:25:cd:a5:d3: 34:fc:f7:ed:8a:be:be:be:b4:6d:a3:62:8e:1b:0d: d9:b6:1c:69:72:c0:4c:a4:a3:c9:49:22:1d:17:70: 9c:78:c7:1c:b9:59:63:97:06:c9:2d:98:ba:58:4e: 48:26:56:d4:ae:f1:b4:81:44:a1:93:fa:c3:c4:f5: 82:f1:00:8c:23:49:56:a8:54:a5:64:6f:46:cd:14: b3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:75:93:0E:10:03:AB:83:C1:94:57:D8:EF:BD:9A:1F:8F:4D:D4:B2 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wnWTDhADq4PBlFfY772aH49N1LI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.80.0/24 Signature Algorithm: sha256WithRSAEncryption b7:52:6a:3f:23:49:5e:f7:76:d3:00:b6:88:3c:03:a4:47:0c: 4e:ca:47:b9:c3:c7:38:57:14:2b:c0:e5:81:26:eb:b7:ae:c7: eb:e4:45:1b:a4:09:28:b0:51:6e:7d:3a:e5:67:df:11:aa:70: 55:bb:6f:38:0c:f5:f1:ce:bb:71:f6:01:56:46:1c:e4:03:6f: 82:c6:c4:4c:41:ad:11:7d:b6:84:a5:d8:56:ff:35:52:e2:f8: ba:79:87:f6:fa:ea:35:c2:b3:ea:84:8c:9c:20:d9:72:af:5c: 42:8e:f1:d8:01:ff:20:f5:e7:b1:f7:24:01:9f:ba:9e:81:d3: 56:10:01:40:cf:c9:f3:fc:03:31:1d:28:83:4d:d7:09:0a:68: ba:0d:6a:40:8b:0b:e6:5a:c5:ad:3d:aa:57:9f:3d:19:e0:1b: 79:95:25:d4:9f:37:c9:c9:72:b6:42:28:dc:f2:c1:44:f3:21: 82:a2:bf:9b:f4:b8:d1:10:16:83:af:e6:45:da:de:23:52:79: 94:0f:12:d7:85:cf:78:15:fc:84:50:0f:06:6e:29:40:52:8b: 95:9c:ba:4b:5c:d4:66:b0:0f:c7:ab:a3:ef:44:19:5a:44:dd: 07:28:9b:39:49:e9:47:3b:39:5b:d0:c4:29:fa:0f:d7:3e:41: f8:07:08:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZFN1V4aJoXhQSQKtNHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjc1OTMwZTEwMDNhYjgzYzE5NDU3ZDhlZmJkOWExZjhmNGRkNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fit3Jkj+86Njm0jvl/Yo6yepZuO EvCxy5BBEE9ZPoi5q6ADr2XFxQXhwqJWxtUjzntXLU0L5tElppOEPnCwZShLXvng 8t++t41TQXxPyDjGQ/F2uVc4fZCEpJmYW3BPVIALNUnwp1pW/N/E6t/Of3XaPir5 VNhxVVrJgyEH6Oi8L+AAstgSUtz/Dr5/+8wXPPNZr5uJWJ79OHrmUBJVeNTU/DNj 5E6m62JX6W7jeSXNpdM0/Pftir6+vrRto2KOGw3ZthxpcsBMpKPJSSIdF3CceMcc uVljlwbJLZi6WE5IJlbUrvG0gUShk/rDxPWC8QCMI0lWqFSlZG9GzRSz+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJ1kw4QA6uDwZRX2O+9mh+PTdSyMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvd25XVERoQURxNFBCbEZmWTc3MmFINDlOMUxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXhQMA0G CSqGSIb3DQEBCwUAA4IBAQC3Umo/I0le93bTALaIPAOkRwxOyke5w8c4VxQrwOWB Juu3rsfr5EUbpAkosFFufTrlZ98RqnBVu284DPXxzrtx9gFWRhzkA2+CxsRMQa0R fbaEpdhW/zVS4vi6eYf2+uo1wrPqhIycINlyr1xCjvHYAf8g9eex9yQBn7qegdNW EAFAz8nz/AMxHSiDTdcJCmi6DWpAiwvmWsWtPapXnz0Z4Bt5lSXUnzfJyXK2Qijc 8sFE8yGCor+b9LjREBaDr+ZF2t4jUnmUDxLXhc94FfyEUA8GbilAUouVnLpLXNRm sA/Hq6PvRBlaRN0HKJs5SelHOzlb0MQp+g/XPkH4Bwjm -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:06 2026 by rpki-client