This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/WnrfeKHjp01grMlG1UefiIjVQJ0.roa File: WnrfeKHjp01grMlG1UefiIjVQJ0.roa (raw, json) Hash identifier: 7Bp0dsKH9K4YXSeiewZoI6Eeafpuzu2XCcfRYrCLnF8= Subject key identifier: 5A:7A:DF:78:A1:E3:A7:4D:60:AC:C9:46:D5:47:9F:88:88:D5:40:9D Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea Certificate serial: 019B78A27CCA79686E193F93D258E7B851B7 Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/WnrfeKHjp01grMlG1UefiIjVQJ0.roa Signing time: Thu 01 Jan 2026 08:17:53 +0000 ROA not before: Thu 01 Jan 2026 08:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204758 IP address blocks: 185.240.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7c:ca:79:68:6e:19:3f:93:d2:58:e7:b8:51:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea Validity Not Before: Jan 1 08:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a7adf78a1e3a74d60acc946d5479f8888d5409d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:67:be:8c:8c:cb:bc:c1:5c:53:2c:da:77: 14:a2:a1:97:49:d1:15:dd:a3:5a:e1:1c:97:bb:d9: 12:c8:70:a6:bc:fb:26:55:72:7b:42:a3:8b:39:8f: 33:3d:b0:d6:79:f4:e0:62:81:b4:b1:e3:9d:58:ec: 0f:68:fa:0c:c9:0a:19:54:2a:ae:7b:66:3e:1c:76: 31:9c:9a:b4:ec:43:26:ca:2f:eb:ed:ef:f4:fa:61: 3c:43:89:37:07:ad:d1:46:33:e7:8d:b9:3b:89:3c: a7:87:fb:0f:8a:4f:61:ce:8d:a6:16:f0:b5:5c:30: cb:a7:b1:82:84:df:94:7c:07:1c:a8:09:a7:74:a1: 99:a7:3a:1c:9e:75:18:29:85:76:62:93:b4:aa:ad: 99:98:5a:7a:91:7b:43:c9:53:87:55:79:45:45:b2: b9:88:64:8c:13:b4:6d:41:93:49:a2:18:3d:ff:12: 4c:18:29:a6:6d:da:51:ab:55:0d:6f:2b:74:57:c3: f5:ae:c1:91:5d:e8:8b:14:23:60:81:17:df:dc:92: 25:2c:29:a1:3a:10:dd:44:55:c2:e9:06:3c:1e:71: c1:17:3d:08:68:2f:7a:b6:7e:9f:b0:42:e7:fb:80: 51:e1:04:3f:b4:ba:8c:ee:22:dc:ce:cb:55:1c:27: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7A:DF:78:A1:E3:A7:4D:60:AC:C9:46:D5:47:9F:88:88:D5:40:9D X509v3 Authority Key Identifier: keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/WnrfeKHjp01grMlG1UefiIjVQJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.228.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:47:8d:53:92:23:a9:dc:5b:c9:1c:15:5b:f2:55:70:19:0b: c8:65:b3:db:78:69:be:52:fc:6b:0c:7a:0b:1b:4b:01:39:ca: 26:5b:f6:fc:18:3a:2b:ac:a3:65:7d:49:db:50:eb:1f:bd:92: 2b:f6:84:24:b2:93:ab:51:d8:03:43:6e:2a:41:ea:cc:77:5b: 71:13:67:d3:97:fc:af:ab:61:c3:8d:7d:92:b0:21:ef:bd:bb: c0:98:8d:0d:1d:61:54:1c:26:c8:ba:aa:38:c7:17:1d:0a:33: 02:79:91:f4:22:d8:72:6b:fc:ec:c3:1c:6d:2a:af:54:f3:42: e4:d4:c4:6a:b3:54:7c:d8:e2:92:c2:fb:03:04:c7:9b:10:ca: 26:60:76:45:d9:52:c5:ff:64:c9:e8:13:f8:8d:23:2d:2f:95: f7:41:44:1c:63:a4:0b:0e:55:17:2f:47:5c:79:f5:c9:25:6d: 5f:78:2b:24:e6:27:47:27:43:4e:04:97:38:31:4c:88:ac:e5: 11:47:12:8c:ae:5e:6d:a2:7d:61:9c:80:ca:ae:b2:6d:02:20: 0f:1a:43:75:ac:40:95:f5:ee:be:5e:47:e9:cc:df:62:f2:56: ab:b9:09:de:4a:b0:07:5b:af:5d:29:fb:ee:92:23:8e:49:33: da:b0:e1:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4onzKeWhuGT+T0ljnuFG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjgzMDYxN2M0M2M4Y2JjODlhZjNjYjJhNzRlYTVkZDAw ZmU2ZWEwHhcNMjYwMTAxMDgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTdhZGY3OGExZTNhNzRkNjBhY2M5NDZkNTQ3OWY4ODg4ZDU0MDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEZnvoyMy7zBXFMs2ncUoqGXSdEV 3aNa4RyXu9kSyHCmvPsmVXJ7QqOLOY8zPbDWefTgYoG0seOdWOwPaPoMyQoZVCqu e2Y+HHYxnJq07EMmyi/r7e/0+mE8Q4k3B63RRjPnjbk7iTynh/sPik9hzo2mFvC1 XDDLp7GChN+UfAccqAmndKGZpzocnnUYKYV2YpO0qq2ZmFp6kXtDyVOHVXlFRbK5 iGSME7RtQZNJohg9/xJMGCmmbdpRq1UNbyt0V8P1rsGRXeiLFCNggRff3JIlLCmh OhDdRFXC6QY8HnHBFz0IaC96tn6fsELn+4BR4QQ/tLqM7iLczstVHCcZlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFp633ih46dNYKzJRtVHn4iI1UCdMB8GA1UdIwQY MBaAFCsoMGF8Q8jLyJrzyyp06l3QD+bqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgt MTFiNTJjMjRhMTEyLzEvV25yZmVLSGpwMDFnck1sRzFVZWZpSWpWUUowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgtMTFiNTJjMjRhMTEy LzEvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufDkMA0G CSqGSIb3DQEBCwUAA4IBAQBvR41TkiOp3FvJHBVb8lVwGQvIZbPbeGm+UvxrDHoL G0sBOcomW/b8GDorrKNlfUnbUOsfvZIr9oQkspOrUdgDQ24qQerMd1txE2fTl/yv q2HDjX2SsCHvvbvAmI0NHWFUHCbIuqo4xxcdCjMCeZH0Ithya/zswxxtKq9U80Lk 1MRqs1R82OKSwvsDBMebEMomYHZF2VLF/2TJ6BP4jSMtL5X3QUQcY6QLDlUXL0dc efXJJW1feCsk5idHJ0NOBJc4MUyIrOURRxKMrl5ton1hnIDKrrJtAiAPGkN1rECV 9e6+XkfpzN9i8laruQneSrAHW69dKfvukiOOSTPasOF9 -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:56 2026 by rpki-client