This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WSV7wDu_oOEWknqxauWPGgULCUo.roa File: WSV7wDu_oOEWknqxauWPGgULCUo.roa (raw, json) Hash identifier: cpJEa6OysfsH+SZFVKbmC8vCj4aMLj4mTs3CNrgU8T4= Subject key identifier: 59:25:7B:C0:3B:BF:A0:E1:16:92:7A:B1:6A:E5:8F:1A:05:0B:09:4A Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809EBE181044CBDFDC14C6676486FB Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WSV7wDu_oOEWknqxauWPGgULCUo.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62425 IP address blocks: 89.43.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9e:be:18:10:44:cb:df:dc:14:c6:67:64:86:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59257bc03bbfa0e116927ab16ae58f1a050b094a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:8a:df:49:f7:91:99:ac:2c:2d:8e:04:cc: 25:78:42:ed:14:54:e0:ab:c9:c1:17:24:2f:d9:c7: c4:de:5b:83:e5:26:f2:65:12:45:51:54:54:d3:0f: b4:ea:e9:0f:90:e5:11:6a:5d:de:30:0d:ce:b5:8c: a5:f5:5f:0c:aa:a4:85:68:e2:dd:5f:a2:cb:c3:b6: e2:a2:41:6d:c8:46:cf:57:7d:42:77:f4:bc:0c:3d: 6c:a2:31:45:91:2e:a8:3b:81:10:70:e7:ad:f5:74: 68:05:4b:38:2f:81:9a:fc:9f:21:07:ee:cd:64:66: 92:22:d1:ad:55:21:d6:71:5d:b6:2e:03:f9:27:19: 94:2c:a0:e7:be:2f:bc:fc:d9:6e:68:a3:df:20:c0: dd:bb:62:48:48:cc:f2:35:b2:94:31:e5:fd:a1:e8: 7d:18:7e:c7:35:74:5b:b7:97:ac:9c:16:87:c8:95: 74:82:27:01:ec:70:9c:6f:d6:9c:25:f2:b2:f5:a8: c2:5d:4e:ef:f4:95:f8:cd:67:e6:a3:42:13:90:6b: 67:89:ea:47:68:8d:5e:04:9d:30:ee:71:63:de:42: b1:96:c5:c6:a0:88:93:2f:49:e2:b6:ce:2c:31:11: 51:22:f5:aa:4c:6e:09:d4:f1:10:68:c1:98:4c:fa: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:25:7B:C0:3B:BF:A0:E1:16:92:7A:B1:6A:E5:8F:1A:05:0B:09:4A X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WSV7wDu_oOEWknqxauWPGgULCUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.41.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:ae:e7:6e:f1:14:04:85:d6:bf:e0:92:49:bc:80:5e:0e:fc: be:28:c0:58:f5:7a:09:52:76:3c:98:f3:b5:ed:47:a4:c9:f2: 55:1e:43:ad:2e:76:18:88:b1:e3:70:38:4b:f0:3e:a4:74:34: 39:db:c2:14:00:e8:a6:35:5c:93:14:b0:f1:ff:b4:f7:2c:7b: 95:2d:34:ab:6c:de:ce:46:b9:24:3a:49:79:3d:f1:3e:f1:a5: 85:1a:97:2e:e2:a7:64:f3:cd:c1:59:af:4e:b0:3b:9d:a0:ef: 09:2c:8a:d1:a4:22:b6:f7:88:46:84:e4:33:d8:04:b9:38:93: c4:85:11:ee:01:14:ea:e0:90:22:94:52:37:6e:b7:67:ff:f4: 7a:b7:8d:59:82:41:29:23:43:e3:67:cb:f0:35:40:94:c5:7a: 97:e5:cf:80:bc:7f:7b:66:bd:e0:1e:b6:14:65:9f:06:a1:f3: 01:e6:fb:d4:11:c2:f2:34:aa:48:6b:76:e7:3c:19:80:97:40: a6:a7:1d:06:25:2e:32:32:b3:17:82:84:2c:b0:e2:17:dc:4e: bc:9b:da:33:c3:8d:36:3b:7c:45:5a:33:8a:f3:68:a5:3c:c5: 53:76:23:7e:13:3c:b0:f4:43:df:d7:c3:ef:e8:d1:ff:89:13: fd:5b:8f:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJ6+GBBEy9/cFMZnZIb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTI1N2JjMDNiYmZhMGUxMTY5MjdhYjE2YWU1OGYxYTA1MGIwOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbmK30n3kZmsLC2OBMwleELtFFTg q8nBFyQv2cfE3luD5SbyZRJFUVRU0w+06ukPkOURal3eMA3OtYyl9V8MqqSFaOLd X6LLw7biokFtyEbPV31Cd/S8DD1sojFFkS6oO4EQcOet9XRoBUs4L4Ga/J8hB+7N ZGaSItGtVSHWcV22LgP5JxmULKDnvi+8/NluaKPfIMDdu2JISMzyNbKUMeX9oeh9 GH7HNXRbt5esnBaHyJV0gicB7HCcb9acJfKy9ajCXU7v9JX4zWfmo0ITkGtniepH aI1eBJ0w7nFj3kKxlsXGoIiTL0nits4sMRFRIvWqTG4J1PEQaMGYTPrAewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFkle8A7v6DhFpJ6sWrljxoFCwlKMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvV1NWN3dEdV9vT0VXa25xeGF1V1BHZ1VMQ1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSspMA0G CSqGSIb3DQEBCwUAA4IBAQA/rudu8RQEhda/4JJJvIBeDvy+KMBY9XoJUnY8mPO1 7UekyfJVHkOtLnYYiLHjcDhL8D6kdDQ528IUAOimNVyTFLDx/7T3LHuVLTSrbN7O RrkkOkl5PfE+8aWFGpcu4qdk883BWa9OsDudoO8JLIrRpCK294hGhOQz2AS5OJPE hRHuARTq4JAilFI3brdn//R6t41ZgkEpI0PjZ8vwNUCUxXqX5c+AvH97Zr3gHrYU ZZ8GofMB5vvUEcLyNKpIa3bnPBmAl0Cmpx0GJS4yMrMXgoQssOIX3E68m9ozw402 O3xFWjOK82ilPMVTdiN+Ezyw9EPf18Pv6NH/iRP9W49t -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:33 2026 by rpki-client