This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa File: WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa (raw, json) Hash identifier: ToxcyUtODIjk+vfIoE2fDiyxO6Xp7CGXZG+vHQsn3hA= Subject key identifier: 59:3B:85:EC:63:3F:83:BC:F2:13:FF:30:5C:7B:93:5E:B0:94:13:C4 Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Certificate serial: 019B7BA3CF9FE03D44EF40DEDB98588636D6 Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa Signing time: Thu 01 Jan 2026 22:18:11 +0000 ROA not before: Thu 01 Jan 2026 22:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 93.180.216.0/21 maxlen: 24 138.124.156.0/22 maxlen: 24 144.86.228.0/22 maxlen: 24 185.20.196.0/22 maxlen: 24 185.138.120.0/22 maxlen: 24 185.254.12.0/22 maxlen: 24 195.133.220.0/22 maxlen: 24 199.74.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cf:9f:e0:3d:44:ef:40:de:db:98:58:86:36:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=593b85ec633f83bcf213ff305c7b935eb09413c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:d4:e1:fb:ff:b3:37:22:00:2c:ac:a2:01: 08:f2:be:f1:66:e9:86:c1:4b:a0:f5:c2:ab:e8:4d: af:15:e1:c5:7c:3a:f7:bd:14:bf:a6:f1:4c:60:e0: ec:32:cb:6f:24:1c:08:d0:8a:2d:4b:1d:b7:50:f3: 30:b6:86:41:62:12:1f:ea:c6:be:c4:f1:a7:8a:bb: 13:2f:31:17:17:9e:e2:af:c0:92:25:86:bb:9d:55: 45:f2:2c:28:91:f3:48:8a:8f:b6:ac:0b:5c:d0:b5: cf:1e:e0:49:62:9b:65:b2:f0:a7:fc:94:67:d1:67: f1:f0:0d:03:86:37:74:64:5a:39:21:d0:d2:7a:59: 58:0f:dd:df:f5:2a:f4:4e:92:fb:ba:69:a7:2f:af: 52:f6:be:2b:63:81:2d:57:d5:e7:61:1c:6a:e9:13: b3:dd:94:59:25:79:7a:04:42:1a:c3:81:49:02:8b: 08:d3:14:5c:77:eb:c0:25:fc:0f:65:7f:29:55:ba: f0:03:66:50:35:77:2c:54:21:50:67:81:f0:a6:d3: f8:29:01:ef:3e:9b:81:e4:c6:9d:26:45:9a:83:e2: 05:36:af:6f:99:71:f9:b9:a9:86:90:3c:12:2b:46: f6:10:9e:08:d3:75:63:92:19:de:f2:51:b2:cd:20: 99:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3B:85:EC:63:3F:83:BC:F2:13:FF:30:5C:7B:93:5E:B0:94:13:C4 X509v3 Authority Key Identifier: keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.180.216.0/21 138.124.156.0/22 144.86.228.0/22 185.20.196.0/22 185.138.120.0/22 185.254.12.0/22 195.133.220.0/22 199.74.188.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:d2:58:22:b5:4a:21:1e:6d:7b:4f:61:80:63:12:f4:98:e8: 2e:b3:47:0a:d1:60:25:cd:e0:5f:17:af:7c:c5:d1:96:a9:36: e6:40:01:20:05:fd:ee:b4:22:06:53:48:0c:25:4e:ee:d4:03: f8:5e:be:4b:82:2e:8d:ee:47:4e:ea:d1:ad:a3:45:bd:1a:ed: 3e:53:d8:73:07:f8:64:b0:66:8f:48:40:a0:87:1a:50:07:2d: 37:66:0f:d3:f8:d2:7d:db:be:16:31:fd:6e:f0:17:a1:68:ad: 94:9a:32:fb:2b:fe:01:af:4b:b2:2f:cb:db:4e:1a:d7:f9:5f: b4:bf:ed:87:69:e8:75:6e:3e:5e:2e:1d:e4:8e:3f:36:22:ce: 07:15:c3:72:e4:23:53:dc:22:99:76:ed:85:f2:7d:31:88:84: b7:ce:cf:bf:92:6f:57:58:80:8e:99:15:70:d5:7f:f2:89:0d: ac:4c:3b:04:58:8b:f2:f6:25:54:cf:5b:0c:6e:b9:8c:99:23: db:23:d0:e8:af:ad:a3:25:e2:34:6e:d6:aa:b8:65:43:bf:03: 6a:81:54:41:10:b9:61:b8:72:ce:c3:71:7d:5d:f0:12:bf:b1: e3:d3:b0:89:ac:a9:31:d6:9d:d5:df:54:e0:1e:3e:10:05:3f: 22:cb:30:fc -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt7o8+f4D1E70De25hYhjbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy NDhlMTQwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTNiODVlYzYzM2Y4M2JjZjIxM2ZmMzA1YzdiOTM1ZWIwOTQxM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmzU4fv/szciACysogEI8r7xZumG wUug9cKr6E2vFeHFfDr3vRS/pvFMYODsMstvJBwI0IotSx23UPMwtoZBYhIf6sa+ xPGnirsTLzEXF57ir8CSJYa7nVVF8iwokfNIio+2rAtc0LXPHuBJYptlsvCn/JRn 0Wfx8A0Dhjd0ZFo5IdDSellYD93f9Sr0TpL7ummnL69S9r4rY4EtV9XnYRxq6ROz 3ZRZJXl6BEIaw4FJAosI0xRcd+vAJfwPZX8pVbrwA2ZQNXcsVCFQZ4HwptP4KQHv PpuB5MadJkWag+IFNq9vmXH5uamGkDwSK0b2EJ4I03Vjkhne8lGyzSCZVQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFFk7hexjP4O88hP/MFx7k16wlBPEMB8GA1UdIwQY MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt ZmJjNmZjYjVlN2E2LzEvV1R1RjdHTV9nN3p5RV84d1hIdVRYckNVRThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2 LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDXbTYAwQC inycAwQCkFbkAwQCuRTEAwQCuYp4AwQCuf4MAwQCw4XcAwQCx0q8MA0GCSqGSIb3 DQEBCwUAA4IBAQAd0lgitUohHm17T2GAYxL0mOgus0cK0WAlzeBfF698xdGWqTbm QAEgBf3utCIGU0gMJU7u1AP4Xr5Lgi6N7kdO6tGto0W9Gu0+U9hzB/hksGaPSECg hxpQBy03Zg/T+NJ9274WMf1u8BehaK2UmjL7K/4Br0uyL8vbThrX+V+0v+2Haeh1 bj5eLh3kjj82Is4HFcNy5CNT3CKZdu2F8n0xiIS3zs+/km9XWICOmRVw1X/yiQ2s TDsEWIvy9iVUz1sMbrmMmSPbI9Dor62jJeI0btaquGVDvwNqgVRBELlhuHLOw3F9 XfASv7Hj07CJrKkx1p3V31TgHj4QBT8iyzD8 -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:51 2026 by rpki-client