This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/WDTYJfU4GmC_Z6SmZBDA6liuL48.roa File: WDTYJfU4GmC_Z6SmZBDA6liuL48.roa (raw, json) Hash identifier: FJHas3EZqiie/GgKCvyAh7bXL6nc+V2NXzO+Cw5KyLA= Subject key identifier: 58:34:D8:25:F5:38:1A:60:BF:67:A4:A6:64:10:C0:EA:58:AE:2F:8F Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1 Certificate serial: 019B797EB6B1A7145886D66E618614455B87 Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/WDTYJfU4GmC_Z6SmZBDA6liuL48.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5479 IP address blocks: 193.219.40.0/21 maxlen: 21 193.219.48.0/21 maxlen: 21 193.219.56.0/22 maxlen: 22 193.219.80.0/20 maxlen: 20 193.219.128.0/20 maxlen: 20 193.219.144.0/21 maxlen: 21 2001:77c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b6:b1:a7:14:58:86:d6:6e:61:86:14:45:5b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1 Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5834d825f5381a60bf67a4a66410c0ea58ae2f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:54:a9:f3:95:47:89:22:e3:30:48:f8:e4: 5a:91:76:9b:44:f5:2f:54:09:22:bc:82:f8:07:58: 60:0e:ef:a3:83:cc:a2:a3:f7:97:04:a9:2b:10:fc: 88:87:60:bf:5b:8d:c1:45:23:c9:5f:8c:a2:70:64: 67:f2:a5:b1:91:d5:ba:ad:cc:f7:1b:43:55:38:4a: bf:d6:d2:9b:43:23:fe:f4:0c:2f:1f:55:96:fe:3e: a1:86:16:1b:04:99:ac:ad:46:61:a4:7c:a1:11:ee: c8:95:50:4a:51:4a:60:ab:d5:57:fe:73:fd:88:5e: 87:3b:f7:2c:f8:21:bf:46:95:52:ea:1f:a0:f4:67: 4f:61:5b:fb:80:dc:57:15:92:2d:6a:0a:29:67:27: 8f:e9:55:a0:ff:20:b7:9b:b0:bc:be:88:84:31:1e: a8:d2:85:a6:cc:bb:bb:1e:d7:9c:fb:a9:50:48:eb: b9:ac:33:79:8e:1f:f2:44:e2:e6:21:9b:9d:f1:a4: ed:8a:26:89:ec:1a:44:2a:35:83:b5:e6:a2:ac:97: c7:ad:e7:5f:94:e3:2d:6c:29:44:73:e1:a8:98:64: 6d:b2:f1:90:41:84:3b:90:e2:cd:3c:d5:e2:65:32: e4:55:ee:5f:36:0a:24:e3:7d:58:31:d8:5c:d2:d7: 5e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:34:D8:25:F5:38:1A:60:BF:67:A4:A6:64:10:C0:EA:58:AE:2F:8F X509v3 Authority Key Identifier: keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/WDTYJfU4GmC_Z6SmZBDA6liuL48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.219.40.0-193.219.59.255 193.219.80.0/20 193.219.128.0-193.219.151.255 IPv6: 2001:77c::/32 Signature Algorithm: sha256WithRSAEncryption 07:76:28:7d:f6:8f:04:ad:ac:e5:93:fd:76:71:21:ca:f4:6e: 30:3a:d9:d0:20:81:fb:6d:50:e3:00:2c:b4:56:5a:87:b0:8d: 2a:05:6b:b8:f7:3c:bf:8a:2b:4d:0d:71:16:2d:ff:21:4e:c0: df:a9:2e:e7:c3:22:28:42:7a:b9:75:e3:6b:37:16:bb:66:69: 04:cb:c8:82:05:12:70:41:17:6b:15:18:f0:61:89:6b:3e:9e: 89:bc:05:78:80:d7:32:8f:96:e7:64:a8:32:e0:e3:91:d5:ef: 76:f9:39:dd:66:7c:43:1f:a9:75:8d:e8:01:8b:8c:c8:a7:b4: c1:98:fc:1a:11:fc:05:9e:7a:15:7a:f0:f3:65:2d:2a:36:98: fa:5e:77:7b:06:ce:fc:33:0b:cf:47:9c:03:40:82:65:ed:70: 2b:43:9a:7d:fc:d9:c4:f5:ce:db:a1:8a:e0:1c:7b:e0:6d:e9: 08:36:93:38:70:cf:cd:a4:48:19:65:db:83:32:94:d0:38:40: f4:98:38:22:45:6b:0b:e9:fc:53:b8:94:8c:6c:22:38:0c:6b: cc:72:0f:41:a8:56:21:ea:e8:b8:d0:8c:a8:83:3e:e6:dc:d2: 39:f5:7c:2f:c0:24:36:04:37:87:b1:82:d2:0a:75:46:1b:14: 6f:6b:fe:b8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt5fraxpxRYhtZuYYYURVuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2YyM2Q2ODkzNzQ5NDI4OGRmY2M3YTBlZmUxZmU3NGEy MDM2ZTEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODM0ZDgyNWY1MzgxYTYwYmY2N2E0YTY2NDEwYzBlYTU4YWUyZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzilUqfOVR4ki4zBI+ORakXabRPUv VAkivIL4B1hgDu+jg8yio/eXBKkrEPyIh2C/W43BRSPJX4yicGRn8qWxkdW6rcz3 G0NVOEq/1tKbQyP+9AwvH1WW/j6hhhYbBJmsrUZhpHyhEe7IlVBKUUpgq9VX/nP9 iF6HO/cs+CG/RpVS6h+g9GdPYVv7gNxXFZItagopZyeP6VWg/yC3m7C8voiEMR6o 0oWmzLu7Htec+6lQSOu5rDN5jh/yROLmIZud8aTtiiaJ7BpEKjWDteairJfHredf lOMtbClEc+GomGRtsvGQQYQ7kOLNPNXiZTLkVe5fNgok431YMdhc0tdezQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFFg02CX1OBpgv2ekpmQQwOpYri+PMB8GA1UdIwQY MBaAFOQ/I9aJN0lCiN/Meg7+H+dKIDbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMt OWQxODVmNzM4MjExLzEvV0RUWUpmVTRHbUNfWjZTbVpCREE2bGl1TDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMtOWQxODVmNzM4MjEx LzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiMAwDBAPB2ygD BALB2zgDBATB21AwDAMEB8HbgAMEA8HbkDANBAIAAjAHAwUAIAEHfDANBgkqhkiG 9w0BAQsFAAOCAQEAB3YoffaPBK2s5ZP9dnEhyvRuMDrZ0CCB+21Q4wAstFZah7CN KgVruPc8v4orTQ1xFi3/IU7A36ku58MiKEJ6uXXjazcWu2ZpBMvIggUScEEXaxUY 8GGJaz6eibwFeIDXMo+W52SoMuDjkdXvdvk53WZ8Qx+pdY3oAYuMyKe0wZj8GhH8 BZ56FXrw82UtKjaY+l53ewbO/DMLz0ecA0CCZe1wK0OaffzZxPXO26GK4Bx74G3p CDaTOHDPzaRIGWXbgzKU0DhA9Jg4IkVrC+n8U7iUjGwiOAxrzHIPQahWIerouNCM qIM+5tzSOfV8L8AkNgQ3h7GC0gp1RhsUb2v+uA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:09 2026 by rpki-client