This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/W-OeV84qZSg1lsIPAL6w563zBTw.roa File: W-OeV84qZSg1lsIPAL6w563zBTw.roa (raw, json) Hash identifier: pNc3Yz5suuHJYMaAX/kAOMaOG4g1c/aRt8SrcTixrFc= Subject key identifier: 5B:E3:9E:57:CE:2A:65:28:35:96:C2:0F:00:BE:B0:E7:AD:F3:05:3C Certificate issuer: /CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc Certificate serial: 019B78A32E11FB4DE36D1BB351DFA3004886 Authority key identifier: 11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/W-OeV84qZSg1lsIPAL6w563zBTw.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204195 IP address blocks: 185.115.236.0/22 maxlen: 22 2a06:2780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2e:11:fb:4d:e3:6d:1b:b3:51:df:a3:00:48:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5be39e57ce2a65283596c20f00beb0e7adf3053c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a6:20:e6:d8:2f:eb:0b:4a:cd:50:ca:eb:40: 43:d3:8f:e7:0e:c6:b5:e4:8a:a7:62:bd:34:18:ae: 1d:57:bd:80:6e:f7:6e:ed:5f:bf:b7:5e:b0:af:a6: a0:f1:5a:18:ff:8f:cc:e6:d4:aa:e3:b8:2a:77:ab: b1:d5:ff:44:7c:b6:3c:7a:8b:50:6d:3e:24:c6:58: c5:28:6b:82:2e:15:90:02:10:7b:4f:46:43:8f:46: 88:e3:ba:78:01:7a:85:4f:39:1c:a2:0c:63:48:32: e0:ff:3e:fb:a0:ee:a3:39:3d:d2:9d:a6:74:19:b8: fe:3f:0c:ce:1b:55:82:90:44:a8:5f:67:4a:6b:3d: 0b:74:5a:c7:16:cb:7d:f1:16:03:88:77:4b:6a:7d: a5:41:0d:6b:95:a7:9a:9e:7d:37:7f:a6:82:66:32: 68:f4:2f:bd:a1:d9:69:09:99:be:89:86:82:60:e7: 8a:f1:74:2d:1a:90:ec:c5:7f:02:f6:48:a7:49:cd: 1d:77:81:8d:3b:e8:30:fa:30:c1:ea:dd:bb:de:06: 5a:ea:5f:50:43:99:40:26:cf:8b:08:ce:25:fb:a8: 1e:4f:d0:1a:40:1c:92:9e:a0:f9:a1:c9:ad:9f:32: c7:d3:e8:18:3f:57:ea:2e:f8:4d:38:81:ee:95:17: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E3:9E:57:CE:2A:65:28:35:96:C2:0F:00:BE:B0:E7:AD:F3:05:3C X509v3 Authority Key Identifier: keyid:11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/W-OeV84qZSg1lsIPAL6w563zBTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.236.0/22 IPv6: 2a06:2780::/29 Signature Algorithm: sha256WithRSAEncryption 32:7b:46:66:ca:aa:74:8b:5c:22:c3:aa:e0:cc:b9:20:47:8f: bf:97:8b:dd:eb:9b:32:9b:75:f5:41:b3:3e:0f:c3:f4:77:94: 43:c2:27:9a:b6:16:98:e3:c6:4a:99:31:d6:46:c9:d6:61:48: ee:ae:39:27:00:c0:63:18:ee:a3:16:ff:2c:18:d8:3c:4e:c1: 02:52:e9:49:ff:b5:7a:89:8a:5e:9c:49:69:b2:fc:f9:f8:65: 32:73:1c:69:79:25:61:58:e2:ad:c6:9c:97:87:5d:48:8e:00: b7:08:d1:59:d8:34:62:34:85:09:07:15:eb:6d:b9:2a:18:dd: a6:0b:16:e8:4f:c5:bf:67:ab:ac:dd:21:76:c5:4d:c3:c4:27: 2d:0c:21:56:b8:f9:39:24:07:2a:ec:4d:f5:a2:54:fc:87:76: 4f:b7:16:1d:26:a1:6d:d9:7f:b2:32:d4:53:fe:94:5f:91:d2: 19:ab:6b:c8:8c:3d:40:b4:56:1a:d1:26:6d:fd:e7:ac:1e:1f: 19:0e:96:a1:c7:d3:5b:5f:76:ee:24:7f:31:70:53:5c:b6:2b: bf:90:bb:63:88:3a:5d:81:4b:9c:05:47:68:3b:48:0f:b8:2e: 9d:1c:73:96:ad:a9:63:e4:8b:ab:1d:ab:36:d4:75:d6:42:9c: 0a:ba:2f:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oy4R+03jbRuzUd+jAEiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNTM1ZjhmYTRiNWY1MTUzM2Q3MjRlYWY5MGRiYTk5NzE1 ZmM2ZmMwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmUzOWU1N2NlMmE2NTI4MzU5NmMyMGYwMGJlYjBlN2FkZjMwNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqYg5tgv6wtKzVDK60BD04/nDsa1 5IqnYr00GK4dV72Abvdu7V+/t16wr6ag8VoY/4/M5tSq47gqd6ux1f9EfLY8eotQ bT4kxljFKGuCLhWQAhB7T0ZDj0aI47p4AXqFTzkcogxjSDLg/z77oO6jOT3SnaZ0 Gbj+PwzOG1WCkESoX2dKaz0LdFrHFst98RYDiHdLan2lQQ1rlaeann03f6aCZjJo 9C+9odlpCZm+iYaCYOeK8XQtGpDsxX8C9kinSc0dd4GNO+gw+jDB6t273gZa6l9Q Q5lAJs+LCM4l+6geT9AaQBySnqD5ocmtnzLH0+gYP1fqLvhNOIHulRcIEwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFvjnlfOKmUoNZbCDwC+sOet8wU8MB8GA1UdIwQY MBaAFBFTX4+ktfUVM9ck6vkNuplxX8b8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZOZmo2UzE5UlV6MXlUcS1RMjZtWEZmeHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wNmQ2ODMtNWE1NS00MmFkLTkxZDkt NWYyZWU1Y2U0NTgxLzEvVy1PZVY4NHFaU2cxbHNJUEFMNnc1NjN6QlR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wNmQ2ODMtNWE1NS00MmFkLTkxZDktNWYyZWU1Y2U0NTgx LzEvRVZOZmo2UzE5UlV6MXlUcS1RMjZtWEZmeHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXPsMA0E AgACMAcDBQMqBieAMA0GCSqGSIb3DQEBCwUAA4IBAQAye0Zmyqp0i1wiw6rgzLkg R4+/l4vd65sym3X1QbM+D8P0d5RDwieathaY48ZKmTHWRsnWYUjurjknAMBjGO6j Fv8sGNg8TsECUulJ/7V6iYpenElpsvz5+GUycxxpeSVhWOKtxpyXh11IjgC3CNFZ 2DRiNIUJBxXrbbkqGN2mCxboT8W/Z6us3SF2xU3DxCctDCFWuPk5JAcq7E31olT8 h3ZPtxYdJqFt2X+yMtRT/pRfkdIZq2vIjD1AtFYa0SZt/eesHh8ZDpahx9NbX3bu JH8xcFNctiu/kLtjiDpdgUucBUdoO0gPuC6dHHOWralj5IurHas21HXWQpwKui+d -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:23 2026 by rpki-client