This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/WYm3xczrKRrNEWF5tktHQDk8t9A.roa File: WYm3xczrKRrNEWF5tktHQDk8t9A.roa (raw, json) Hash identifier: N0pthIoeoPNUkei0wjTWV7l6LzgIka5O/VLvkWXUZjs= Subject key identifier: 59:89:B7:C5:CC:EB:29:1A:CD:11:61:79:B6:4B:47:40:39:3C:B7:D0 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F617417C3215F1A0BDDE2A4E9C1C4 Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/WYm3xczrKRrNEWF5tktHQDk8t9A.roa Signing time: Fri 02 Jan 2026 02:18:01 +0000 ROA not before: Fri 02 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204021 IP address blocks: 213.189.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:61:74:17:c3:21:5f:1a:0b:dd:e2:a4:e9:c1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5989b7c5cceb291acd116179b64b4740393cb7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c6:aa:c2:25:7f:6f:60:22:48:39:b0:2a:83: 86:57:af:0e:b8:5b:5a:64:ad:ea:b6:ad:df:dc:d1: d3:49:97:ec:08:6e:d5:9d:78:70:26:3a:f6:b6:2f: b0:c6:07:25:b4:e9:e0:61:c3:f2:83:27:45:bb:92: 00:06:4f:aa:94:49:bc:9e:37:fe:dd:c8:70:1b:4a: cc:8d:55:69:84:3b:58:f8:00:fd:4e:2b:14:ad:02: 24:f0:1d:19:a0:03:a5:67:9e:d4:32:fb:65:29:7d: 8e:95:34:16:6a:ee:1c:72:24:ac:4d:51:d4:9c:c7: a9:4f:03:4e:c3:08:d6:09:bb:3a:e1:5b:25:28:df: b5:3a:06:88:25:a6:f9:6a:aa:e0:a2:1d:65:d1:79: f2:b5:03:4d:3a:45:ce:18:f6:3c:ff:c8:72:e8:5b: d1:99:04:0a:48:73:89:38:e3:13:7a:dd:1b:e2:63: 94:ba:14:d1:22:ab:b5:e5:8b:c6:0e:79:6c:94:1f: 65:16:02:ec:52:d6:02:a4:ca:34:84:f2:cd:50:ac: 57:be:44:7a:df:d0:c6:f0:c3:6d:1b:a8:f5:b8:7e: d5:e9:c4:41:af:b0:1e:82:52:7e:b4:39:7f:1e:fd: 4c:4f:34:68:47:5b:fb:44:ae:b0:b7:f3:a4:c0:2e: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:B7:C5:CC:EB:29:1A:CD:11:61:79:B6:4B:47:40:39:3C:B7:D0 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/WYm3xczrKRrNEWF5tktHQDk8t9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.189.49.0/24 Signature Algorithm: sha256WithRSAEncryption 90:de:df:32:64:13:5a:48:3d:50:45:31:cd:47:15:7d:66:c0: 5a:a3:43:36:61:28:28:b1:a6:59:07:54:64:ea:1f:e5:22:ba: 53:6d:ba:3e:f9:8b:e0:20:ac:0c:0b:ec:dc:96:66:61:8a:0f: 07:9c:38:09:df:12:1c:46:b7:21:4a:16:00:b0:9b:a8:1f:af: de:37:25:91:62:bb:f1:da:97:b1:61:b2:de:d2:6d:07:29:84: 0f:20:70:ba:4c:38:66:1c:17:6e:e7:d6:69:ca:d1:35:cb:d4: f1:b7:d2:29:db:fb:22:77:8c:d8:66:20:c1:f3:49:6c:03:4c: 50:ff:27:b4:e0:40:87:a2:6d:85:f9:f4:52:7c:4a:06:53:5d: 35:bf:1f:dd:62:9c:46:e3:8b:35:3a:1b:59:4c:87:0c:4d:e8: 86:37:7a:61:1c:d6:5d:b3:37:03:2d:9a:ae:af:78:d9:46:f8: 09:fc:85:0f:7c:69:30:ee:76:b8:d8:ba:f7:99:23:63:19:d2: 26:7e:88:d0:60:ff:e1:e3:0a:7f:40:b3:ba:0c:ae:be:ed:f4: a4:be:c6:b9:c1:64:57:23:b7:14:ee:71:68:c3:c5:05:5a:1f: 65:e9:1b:3c:78:ef:5c:14:24:80:72:21:64:ef:5b:e3:a6:74: 6e:93:0b:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f2F0F8MhXxoL3eKk6cHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTg5YjdjNWNjZWIyOTFhY2QxMTYxNzliNjRiNDc0MDM5M2NiN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8aqwiV/b2AiSDmwKoOGV68OuFta ZK3qtq3f3NHTSZfsCG7VnXhwJjr2ti+wxgcltOngYcPygydFu5IABk+qlEm8njf+ 3chwG0rMjVVphDtY+AD9TisUrQIk8B0ZoAOlZ57UMvtlKX2OlTQWau4cciSsTVHU nMepTwNOwwjWCbs64VslKN+1OgaIJab5aqrgoh1l0XnytQNNOkXOGPY8/8hy6FvR mQQKSHOJOOMTet0b4mOUuhTRIqu15YvGDnlslB9lFgLsUtYCpMo0hPLNUKxXvkR6 39DG8MNtG6j1uH7V6cRBr7AeglJ+tDl/Hv1MTzRoR1v7RK6wt/OkwC6ZNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFmJt8XM6ykazRFhebZLR0A5PLfQMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvV1ltM3hjenJLUnJORVdGNXRrdEhRRGs4dDlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b0xMA0G CSqGSIb3DQEBCwUAA4IBAQCQ3t8yZBNaSD1QRTHNRxV9ZsBao0M2YSgosaZZB1Rk 6h/lIrpTbbo++YvgIKwMC+zclmZhig8HnDgJ3xIcRrchShYAsJuoH6/eNyWRYrvx 2pexYbLe0m0HKYQPIHC6TDhmHBdu59ZpytE1y9Txt9Ip2/sid4zYZiDB80lsA0xQ /ye04ECHom2F+fRSfEoGU101vx/dYpxG44s1OhtZTIcMTeiGN3phHNZdszcDLZqu r3jZRvgJ/IUPfGkw7na42Lr3mSNjGdImfojQYP/h4wp/QLO6DK6+7fSkvsa5wWRX I7cU7nFow8UFWh9l6Rs8eO9cFCSAciFk71vjpnRukwuU -----END CERTIFICATE-----Generated at Mon Jan 26 23:23:22 2026 by rpki-client