This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WEP0VCf6tlIVIn9Tq8TAnO9f3gU.roa File: WEP0VCf6tlIVIn9Tq8TAnO9f3gU.roa (raw, json) Hash identifier: OAN56ro5s2M8ZYuTdInaxrnEK2SH54sYG7CxweXFkoE= Subject key identifier: 58:43:F4:54:27:FA:B6:52:15:22:7F:53:AB:C4:C0:9C:EF:5F:DE:05 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B939ED65F75039F3E8C07B9B1A7A3EA43 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WEP0VCf6tlIVIn9Tq8TAnO9f3gU.roa Signing time: Tue 06 Jan 2026 14:03:38 +0000 ROA not before: Tue 06 Jan 2026 14:03:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208185 IP address blocks: 195.178.148.0/24 maxlen: 24 195.178.154.0/24 maxlen: 24 212.111.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:9e:d6:5f:75:03:9f:3e:8c:07:b9:b1:a7:a3:ea:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 6 14:03:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5843f45427fab65215227f53abc4c09cef5fde05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:11:9d:b9:4b:8b:1e:20:ce:dd:92:f7:6a: b1:d8:eb:34:a8:c5:a2:45:36:71:1e:bb:90:28:63: df:11:ff:eb:81:85:02:24:56:1e:a8:96:02:7c:45: 2a:33:38:1a:64:50:66:60:2a:4e:6d:79:f8:1f:70: 99:ed:f9:f0:15:ea:51:3c:7e:c0:71:1e:d5:dd:e0: 5e:3b:97:3d:2b:77:fa:8f:bb:fb:09:3b:cf:62:59: 5b:ff:93:ef:8d:b6:8c:a7:e4:1d:ec:33:7e:0a:1d: 85:0b:06:cd:ac:fc:62:53:b6:cf:67:9c:bb:0a:78: 5f:bf:16:47:48:7a:22:56:52:02:5e:7a:eb:1a:16: cc:e3:7f:7a:63:47:b3:7f:85:67:ab:03:dd:41:72: 71:57:1c:98:13:7b:52:42:37:7a:a4:c1:22:25:95: 22:11:56:58:6b:c0:88:99:50:b8:93:c3:ea:2e:51: 92:b8:bd:6c:07:4f:75:d3:31:98:85:18:9d:78:97: ef:2a:4f:4c:c2:72:6d:d1:d4:24:3f:04:fc:e0:17: f4:6d:73:31:5e:bc:b0:e7:43:97:48:e9:f1:59:11: b7:0c:2c:d8:e7:3e:7c:22:a2:f7:c8:1e:02:c5:29: d5:f7:ab:7d:58:ce:4e:f7:13:a7:dc:3f:fb:dc:66: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:F4:54:27:FA:B6:52:15:22:7F:53:AB:C4:C0:9C:EF:5F:DE:05 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WEP0VCf6tlIVIn9Tq8TAnO9f3gU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.148.0/24 195.178.154.0/24 212.111.194.0/24 Signature Algorithm: sha256WithRSAEncryption 02:45:87:8e:42:26:f6:ee:f7:7d:09:57:c8:a6:4f:d6:55:9b: 62:62:5d:27:73:b8:f2:d2:93:a1:28:fc:64:60:03:50:c4:53: 57:cb:7f:83:93:83:30:f5:a7:7d:f4:14:b9:20:a8:48:ba:bf: ff:4c:a8:bf:0a:af:85:a1:2d:cb:8e:de:68:12:2b:cb:c9:63: 22:c5:71:fb:cb:4c:8b:f3:f7:65:71:a9:4c:80:d4:ab:9d:2e: 18:b6:82:74:7d:0f:ee:91:25:45:b9:51:71:15:54:03:0f:5b: a0:54:9a:b3:7c:33:ec:c9:be:51:85:e0:33:e9:43:ed:5b:9b: 03:c0:c1:1d:d4:4c:a2:da:8e:1d:82:c0:7b:9d:61:a8:f9:b2: 2d:34:d0:9c:d7:ff:2a:60:01:a4:b8:32:d4:3f:26:95:d8:a3: 22:ec:b5:78:01:7f:ff:e7:b7:13:36:7d:71:96:51:1c:ee:19: dd:51:c4:15:f8:4b:16:86:50:d9:cb:40:57:0a:9f:6d:0f:03: 71:f7:78:9c:0b:88:22:e9:b8:b2:4f:df:50:58:6d:44:86:c6: 89:6a:bc:ec:c4:de:db:b2:1b:64:b8:25:e9:72:df:81:6b:c8: 24:2a:a6:82:7b:e5:2c:8f:27:fd:f3:ee:04:90:e4:3e:38:3f: e2:be:53:36 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuTntZfdQOfPowHubGno+pDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTA2MTQwMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODQzZjQ1NDI3ZmFiNjUyMTUyMjdmNTNhYmM0YzA5Y2VmNWZkZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrYRnblLix4gzt2S92qx2Os0qMWi RTZxHruQKGPfEf/rgYUCJFYeqJYCfEUqMzgaZFBmYCpObXn4H3CZ7fnwFepRPH7A cR7V3eBeO5c9K3f6j7v7CTvPYllb/5PvjbaMp+Qd7DN+Ch2FCwbNrPxiU7bPZ5y7 CnhfvxZHSHoiVlICXnrrGhbM4396Y0ezf4VnqwPdQXJxVxyYE3tSQjd6pMEiJZUi EVZYa8CImVC4k8PqLlGSuL1sB0910zGYhRideJfvKk9MwnJt0dQkPwT84Bf0bXMx Xryw50OXSOnxWRG3DCzY5z58IqL3yB4CxSnV96t9WM5O9xOn3D/73Ga+lwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFhD9FQn+rZSFSJ/U6vEwJzvX94FMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvV0VQMFZDZjZ0bElWSW45VHE4VEFuTzlmM2dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAw7KUAwQA w7KaAwQA1G/CMA0GCSqGSIb3DQEBCwUAA4IBAQACRYeOQib27vd9CVfIpk/WVZti Yl0nc7jy0pOhKPxkYANQxFNXy3+Dk4Mw9ad99BS5IKhIur//TKi/Cq+FoS3Ljt5o EivLyWMixXH7y0yL8/dlcalMgNSrnS4YtoJ0fQ/ukSVFuVFxFVQDD1ugVJqzfDPs yb5RheAz6UPtW5sDwMEd1Eyi2o4dgsB7nWGo+bItNNCc1/8qYAGkuDLUPyaV2KMi 7LV4AX//57cTNn1xllEc7hndUcQV+EsWhlDZy0BXCp9tDwNx93icC4gi6biyT99Q WG1EhsaJarzsxN7bshtkuCXpct+Ba8gkKqaCe+Usjyf98+4EkOQ+OD/ivlM2 -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:13 2026 by rpki-client