This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_WGZTOoeOGRS40hc3bpDyX6gJ9s.roa File: _WGZTOoeOGRS40hc3bpDyX6gJ9s.roa (raw, json) Hash identifier: AtOBEfXwt2enZxMMjdQAYMoKaxTtNe7RPp/273gbpbg= Subject key identifier: FD:61:99:4C:EA:1E:38:64:52:E3:48:5C:DD:BA:43:C9:7E:A0:27:DB Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E72AFFCFC1954072A3F08DB8488CC Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_WGZTOoeOGRS40hc3bpDyX6gJ9s.roa Signing time: Thu 01 Jan 2026 12:18:08 +0000 ROA not before: Thu 01 Jan 2026 12:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153393 IP address blocks: 146.19.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:72:af:fc:fc:19:54:07:2a:3f:08:db:84:88:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd61994cea1e386452e3485cddba43c97ea027db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:23:cc:0e:01:ae:f8:2e:db:ef:2d:2d:de: cc:79:39:9b:ad:21:ed:f2:bb:57:42:0b:59:3d:41: 83:c8:48:e2:04:23:70:68:d7:f9:e2:7c:7b:0b:a8: 80:3b:32:2d:3e:d1:ec:a0:90:bb:8d:46:9c:aa:a1: 11:e8:64:42:9b:b0:07:16:19:d9:2b:a0:b7:00:5c: 67:30:54:0e:14:80:83:d2:2a:f1:3d:d7:cc:db:f0: 8d:79:84:96:75:3f:07:30:93:fc:3b:b4:63:f4:e1: e7:30:58:22:92:e5:a5:e8:f5:26:8e:4f:39:f8:4c: 37:dd:6d:63:e2:a0:3e:e5:5f:2d:dd:52:58:c7:7d: ad:53:c9:e1:c5:88:c7:7d:d2:aa:73:58:31:70:34: 1c:34:12:92:0d:ac:95:c7:30:77:e8:0c:8d:a5:44: d1:ce:1f:f5:ae:36:de:cd:a7:2c:0b:26:a8:7d:2b: ba:dc:c3:6a:42:47:b0:f3:f8:4c:f8:4b:77:77:45: 6e:66:fc:cb:d2:38:db:18:63:ec:91:99:f3:be:f5: 02:41:0f:47:ba:fe:85:cc:33:7e:15:e5:09:6d:f3: a9:d1:d5:45:57:62:e0:d5:a1:f6:17:02:29:d2:e8: 09:de:bb:9b:56:99:e1:db:54:b0:cd:fe:a6:cf:28: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:61:99:4C:EA:1E:38:64:52:E3:48:5C:DD:BA:43:C9:7E:A0:27:DB X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_WGZTOoeOGRS40hc3bpDyX6gJ9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.56.0/24 Signature Algorithm: sha256WithRSAEncryption 28:64:23:03:0d:c4:71:7e:7c:24:6e:7d:56:98:35:56:a0:08: c5:ab:cb:74:4f:a5:30:ae:fe:e6:c6:e8:f2:be:44:05:3a:54: b2:82:24:70:36:69:a2:65:08:18:46:73:fb:c3:cf:03:12:ad: 70:9c:16:7c:e4:f3:8f:bf:fe:2d:6e:d1:de:35:0d:7b:92:11: de:2e:60:cb:6f:10:30:21:b4:3a:f8:2b:4c:f3:44:ed:e3:c8: af:75:0c:da:13:95:d3:2f:e1:9c:6a:14:5f:c2:17:33:37:c5: 09:18:d0:ac:99:69:2a:1b:d0:8f:bc:3f:27:b6:1b:71:0f:65: b1:06:6a:71:cc:ed:f4:58:47:de:63:5a:bc:89:26:e6:fc:a0: b8:70:5c:04:6a:ca:27:70:a0:36:77:69:fa:e0:0b:5e:74:67: 71:f6:21:5b:b3:7c:8c:3a:b9:78:a4:9b:39:6e:02:79:4e:ac: ec:86:d9:15:8c:f9:39:6c:48:f6:09:76:f7:11:ab:e4:57:73: 0c:78:31:81:cc:57:8b:82:0c:e5:41:41:1c:2c:52:fe:08:d4: 91:de:1e:62:f3:54:65:9c:af:0e:25:18:90:bd:02:86:b3:00: 30:bb:44:49:45:f2:ce:51:4f:53:d3:16:43:b8:f9:f7:f8:28: 60:53:d8:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnKv/PwZVAcqPwjbhIjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDYxOTk0Y2VhMWUzODY0NTJlMzQ4NWNkZGJhNDNjOTdlYTAyN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8ojzA4Brvgu2+8tLd7MeTmbrSHt 8rtXQgtZPUGDyEjiBCNwaNf54nx7C6iAOzItPtHsoJC7jUacqqER6GRCm7AHFhnZ K6C3AFxnMFQOFICD0irxPdfM2/CNeYSWdT8HMJP8O7Rj9OHnMFgikuWl6PUmjk85 +Ew33W1j4qA+5V8t3VJYx32tU8nhxYjHfdKqc1gxcDQcNBKSDayVxzB36AyNpUTR zh/1rjbezacsCyaofSu63MNqQkew8/hM+Et3d0VuZvzL0jjbGGPskZnzvvUCQQ9H uv6FzDN+FeUJbfOp0dVFV2Lg1aH2FwIp0ugJ3rubVpnh21Swzf6mzyiO+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1hmUzqHjhkUuNIXN26Q8l+oCfbMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvX1dHWlRPb2VPR1JTNDBoYzNicER5WDZnSjlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhM4MA0G CSqGSIb3DQEBCwUAA4IBAQAoZCMDDcRxfnwkbn1WmDVWoAjFq8t0T6Uwrv7mxujy vkQFOlSygiRwNmmiZQgYRnP7w88DEq1wnBZ85POPv/4tbtHeNQ17khHeLmDLbxAw IbQ6+CtM80Tt48ivdQzaE5XTL+GcahRfwhczN8UJGNCsmWkqG9CPvD8nthtxD2Wx BmpxzO30WEfeY1q8iSbm/KC4cFwEasoncKA2d2n64AtedGdx9iFbs3yMOrl4pJs5 bgJ5TqzshtkVjPk5bEj2CXb3EavkV3MMeDGBzFeLggzlQUEcLFL+CNSR3h5i81Rl nK8OJRiQvQKGswAwu0RJRfLOUU9T0xZDuPn3+ChgU9gE -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:04 2026 by rpki-client