This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa File: WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa (raw, json) Hash identifier: ajrXPdqhe0OAtEgCrpBNnNMpZPGjD6DwlNl7HI0x0zY= Subject key identifier: 58:15:15:D4:AB:C3:91:BD:A3:39:C4:5D:92:31:56:21:5B:7B:12:B6 Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1 Certificate serial: 019B7834A7F0D8712BC4EF9317EF48D9CF21 Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 195.160.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a7:f0:d8:71:2b:c4:ef:93:17:ef:48:d9:cf:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=581515d4abc391bda339c45d923156215b7b12b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:bb:7a:0f:d2:5b:e2:34:89:d3:c3:45:bb: 22:c1:d8:f9:db:04:aa:1c:65:62:20:71:90:b1:3f: 3e:f8:da:20:55:31:08:0a:41:48:21:4f:a3:e2:61: 0c:16:48:3d:f3:2c:61:69:1e:36:9e:84:b0:42:2c: 33:9e:71:39:e0:ed:86:93:a2:a0:06:9e:d5:1e:fe: 8e:0b:33:50:26:82:5b:82:07:38:2f:41:4c:41:6a: 21:5d:e6:a5:98:f2:78:7b:c6:ef:2e:43:97:ef:d2: 57:4f:92:c9:8d:3d:4f:d4:84:d4:8a:3d:f0:03:55: b6:46:9e:7b:3e:b6:1e:ee:48:8f:56:74:da:8a:97: 35:63:f6:b1:8a:0d:01:b8:78:0a:e8:18:e6:b7:e5: 48:d2:ba:92:47:3f:a5:33:31:ca:29:28:03:af:2e: d8:69:6c:aa:0d:5b:52:8d:97:7e:0d:24:b3:11:d3: 46:44:9d:de:b0:c0:fa:93:01:ff:58:34:02:49:b6: 40:3b:b2:7a:41:a9:c5:9f:e6:e6:38:1c:0f:40:36: 6a:46:9e:00:40:39:65:63:37:ca:a4:ed:bf:a8:f3: f3:1d:03:aa:77:59:cd:20:27:2d:5a:f3:2c:44:ff: d6:1a:e3:ea:c3:80:c4:03:81:30:c4:31:86:4f:6e: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:15:15:D4:AB:C3:91:BD:A3:39:C4:5D:92:31:56:21:5B:7B:12:B6 X509v3 Authority Key Identifier: keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.192.0/23 Signature Algorithm: sha256WithRSAEncryption 55:dd:f1:a9:ca:25:6c:4e:c8:90:4c:29:5b:7b:34:e6:e1:7a: db:a7:c5:de:88:88:59:ff:4a:30:5a:29:27:ab:18:af:3a:b1: c4:39:43:26:e1:9f:de:9e:e4:9d:32:4e:59:a1:5e:db:d9:f2: 6d:1b:e3:66:df:5a:a5:ca:c2:9c:fa:6b:19:e7:c7:7a:9a:46: da:48:1e:63:3b:0c:13:dd:e2:7b:44:12:fb:03:a5:5a:62:8f: 01:0f:4e:b9:73:96:ad:d8:8d:e8:af:d2:b8:d2:fb:3c:0b:d1: 6b:b0:a6:0a:ee:32:0a:05:23:c9:fb:09:3d:8f:57:56:77:15: eb:97:47:a6:0a:5e:17:7d:44:51:d2:2c:1f:03:12:5a:0d:87: 97:91:c4:cc:9d:f2:2e:9a:39:4e:51:aa:73:6d:c3:5d:b3:1c: a7:7c:f1:62:80:36:83:3e:0e:8e:13:25:f6:4b:1f:a3:07:33: 99:ae:54:af:4f:93:30:72:8d:35:a4:5a:23:9f:b4:4b:c2:6c: f7:d9:3d:cf:fb:52:01:06:4b:a8:7c:97:0d:ed:45:97:ed:4a: 60:6d:74:2a:fb:30:5f:b5:bf:d8:0f:a4:95:f0:01:ae:57:d9: bb:c6:68:94:a4:db:20:2d:a6:9a:3c:a6:6f:df:cb:e2:5d:58: c9:47:1c:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKfw2HErxO+TF+9I2c8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz OGVhYzEwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODE1MTVkNGFiYzM5MWJkYTMzOWM0NWQ5MjMxNTYyMTViN2IxMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLq7eg/SW+I0idPDRbsiwdj52wSq HGViIHGQsT8++NogVTEICkFIIU+j4mEMFkg98yxhaR42noSwQiwznnE54O2Gk6Kg Bp7VHv6OCzNQJoJbggc4L0FMQWohXealmPJ4e8bvLkOX79JXT5LJjT1P1ITUij3w A1W2Rp57PrYe7kiPVnTaipc1Y/axig0BuHgK6Bjmt+VI0rqSRz+lMzHKKSgDry7Y aWyqDVtSjZd+DSSzEdNGRJ3esMD6kwH/WDQCSbZAO7J6QanFn+bmOBwPQDZqRp4A QDllYzfKpO2/qPPzHQOqd1nNICctWvMsRP/WGuPqw4DEA4EwxDGGT24pZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgVFdSrw5G9oznEXZIxViFbexK2MB8GA1UdIwQY MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt MmZhZDlhMmZjM2VmLzEvV0JVVjFLdkRrYjJqT2NSZGtqRldJVnQ3RXJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw6DAMA0G CSqGSIb3DQEBCwUAA4IBAQBV3fGpyiVsTsiQTClbezTm4Xrbp8XeiIhZ/0owWikn qxivOrHEOUMm4Z/enuSdMk5ZoV7b2fJtG+Nm31qlysKc+msZ58d6mkbaSB5jOwwT 3eJ7RBL7A6VaYo8BD065c5at2I3or9K40vs8C9FrsKYK7jIKBSPJ+wk9j1dWdxXr l0emCl4XfURR0iwfAxJaDYeXkcTMnfIumjlOUapzbcNdsxynfPFigDaDPg6OEyX2 Sx+jBzOZrlSvT5Mwco01pFojn7RLwmz32T3P+1IBBkuofJcN7UWX7UpgbXQq+zBf tb/YD6SV8AGuV9m7xmiUpNsgLaaaPKZv38viXVjJRxxh -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:25 2026 by rpki-client