This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/WFejlIfPg5S_AMLcxTJWTgZg9ow.roa File: WFejlIfPg5S_AMLcxTJWTgZg9ow.roa (raw, json) Hash identifier: q+B+l6C+WNpIojm5Ri0/JX/HkDsLQf6W8ljSqGD6wk0= Subject key identifier: 58:57:A3:94:87:CF:83:94:BF:00:C2:DC:C5:32:56:4E:06:60:F6:8C Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8542BE3753CFCB1483BDAA4F1043C5 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/WFejlIfPg5S_AMLcxTJWTgZg9ow.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204421 IP address blocks: 185.212.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:42:be:37:53:cf:cb:14:83:bd:aa:4f:10:43:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5857a39487cf8394bf00c2dcc532564e0660f68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:d7:33:f0:1f:f8:de:84:55:fb:43:16:c7: a2:95:36:cb:43:09:bd:02:24:0a:08:fa:e7:0d:47: cd:cd:28:5c:38:5b:a3:68:ee:96:f8:ca:82:82:cf: 53:98:1d:3f:3e:7c:48:ff:38:54:b1:69:d7:cf:40: 64:5d:63:26:16:7e:da:d6:5f:4d:04:15:93:36:32: c4:d5:bf:10:37:ff:51:6b:c3:48:3d:a9:7a:34:b3: 03:7f:c5:cf:6a:b1:2f:d0:1e:e8:4d:87:64:c8:90: e3:da:84:6d:9e:3f:1c:78:e9:96:2b:d8:de:4c:b3: fa:ed:db:28:14:10:7b:88:5f:eb:59:9c:a9:25:4b: a2:50:95:97:24:3b:b0:c5:22:df:4b:9d:e2:ba:28: 88:0d:a5:1a:32:23:9f:3f:36:33:ae:38:4e:87:8d: 1d:ff:28:62:0f:49:0e:47:e6:d2:f4:50:59:32:2e: 18:31:8c:bd:ae:74:17:bf:50:fe:73:f6:8f:91:a1: 7f:d5:1f:a2:c4:8b:72:ba:49:20:49:6a:0c:48:56: db:11:a4:28:2b:7e:27:4a:d1:48:1f:3b:eb:94:ec: f3:79:34:21:02:d2:b6:66:1a:bf:df:89:54:36:f8: f0:c6:13:45:26:8b:15:96:14:26:19:dd:91:bf:b0: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:57:A3:94:87:CF:83:94:BF:00:C2:DC:C5:32:56:4E:06:60:F6:8C X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/WFejlIfPg5S_AMLcxTJWTgZg9ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.10.0/24 Signature Algorithm: sha256WithRSAEncryption a1:6e:46:f2:13:84:90:8f:28:1e:7e:38:9d:8d:5e:1c:8d:0f: cb:6b:44:02:2b:fd:5f:cb:47:09:f6:41:e3:e6:14:2c:fa:73: f4:74:4b:a9:60:f7:07:c8:fd:b0:3e:67:eb:8c:6b:18:1d:32: 22:66:0f:ba:d7:27:6c:4d:6e:9d:69:3b:8f:19:e0:e6:0b:0d: 0c:57:3f:68:3b:81:85:68:1d:9e:8b:b5:36:d9:8b:29:94:71: 99:dc:5b:90:34:61:a2:07:99:aa:1e:2c:b6:5e:85:22:59:ed: 7f:58:03:b5:7c:53:02:34:04:d7:00:5a:ae:3d:25:0e:f4:6c: 59:3d:20:df:da:ea:ec:e6:36:c7:51:eb:cc:f4:ee:59:a9:40: e6:fa:ea:7e:6e:f0:f8:20:a5:ab:a8:39:29:c3:d5:e4:f8:03: 40:1f:3a:eb:4c:27:39:fd:69:d3:83:19:83:a5:45:34:36:dc: e3:76:d0:1a:a8:c9:f3:fd:f9:5f:af:fc:be:74:fa:24:84:d4: a0:9f:db:a3:51:9d:40:1b:49:5c:42:64:f8:1a:97:62:0d:d9: 56:66:3b:3c:b1:c4:0d:3a:af:a6:55:b1:84:9b:30:ad:b2:2b: 17:8c:71:41:39:03:b3:34:5e:1e:2d:1b:0d:0b:c2:6e:16:ec: de:0f:a0:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUK+N1PPyxSDvapPEEPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODU3YTM5NDg3Y2Y4Mzk0YmYwMGMyZGNjNTMyNTY0ZTA2NjBmNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsojXM/Af+N6EVftDFseilTbLQwm9 AiQKCPrnDUfNzShcOFujaO6W+MqCgs9TmB0/PnxI/zhUsWnXz0BkXWMmFn7a1l9N BBWTNjLE1b8QN/9Ra8NIPal6NLMDf8XParEv0B7oTYdkyJDj2oRtnj8ceOmWK9je TLP67dsoFBB7iF/rWZypJUuiUJWXJDuwxSLfS53iuiiIDaUaMiOfPzYzrjhOh40d /yhiD0kOR+bS9FBZMi4YMYy9rnQXv1D+c/aPkaF/1R+ixItyukkgSWoMSFbbEaQo K34nStFIHzvrlOzzeTQhAtK2Zhq/34lUNvjwxhNFJosVlhQmGd2Rv7A/wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhXo5SHz4OUvwDC3MUyVk4GYPaMMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvV0ZlamxJZlBnNVNfQU1MY3hUSldUZ1pnOW93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudQKMA0G CSqGSIb3DQEBCwUAA4IBAQChbkbyE4SQjygefjidjV4cjQ/La0QCK/1fy0cJ9kHj 5hQs+nP0dEupYPcHyP2wPmfrjGsYHTIiZg+61ydsTW6daTuPGeDmCw0MVz9oO4GF aB2ei7U22YsplHGZ3FuQNGGiB5mqHiy2XoUiWe1/WAO1fFMCNATXAFquPSUO9GxZ PSDf2urs5jbHUevM9O5ZqUDm+up+bvD4IKWrqDkpw9Xk+ANAHzrrTCc5/WnTgxmD pUU0NtzjdtAaqMnz/flfr/y+dPokhNSgn9ujUZ1AG0lcQmT4GpdiDdlWZjs8scQN Oq+mVbGEmzCtsisXjHFBOQOzNF4eLRsNC8JuFuzeD6AT -----END CERTIFICATE-----Generated at Sun Jan 25 19:58:56 2026 by rpki-client