This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/wdgVJPyUsZ9-HGk_FoAzT19gu6w.roa File: wdgVJPyUsZ9-HGk_FoAzT19gu6w.roa (raw, json) Hash identifier: 2mneISDicPClVA1+3cQM33ETuCO6n5ZeA2u5SBMbUwU= Subject key identifier: C1:D8:15:24:FC:94:B1:9F:7E:1C:69:3F:16:80:33:4F:5F:60:BB:AC Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc Certificate serial: 019B7FF25B27F894C2C1E89ED968B8D47CEB Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/wdgVJPyUsZ9-HGk_FoAzT19gu6w.roa Signing time: Fri 02 Jan 2026 18:22:28 +0000 ROA not before: Fri 02 Jan 2026 18:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.30.84.0/24 maxlen: 24 2a02:11f8:192::/48 maxlen: 48 2a02:11f8:193::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:5b:27:f8:94:c2:c1:e8:9e:d9:68:b8:d4:7c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc Validity Not Before: Jan 2 18:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1d81524fc94b19f7e1c693f1680334f5f60bbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:a4:59:c7:48:b3:8e:37:14:76:dd:86:fa: fd:fe:d6:c1:60:48:1a:a8:de:a1:f4:32:64:d0:c2: d0:e8:b4:a1:0e:b6:97:88:39:b9:5e:e2:b4:a0:e2: 8d:b7:a4:9f:f8:a1:2b:cd:f0:9e:f7:c4:c5:7a:5b: 36:33:d6:9a:88:25:e3:f8:55:52:7e:3a:71:18:a5: 95:00:43:7e:6e:ea:14:c7:ab:73:44:b4:a0:a8:5d: 91:2b:ac:43:36:eb:92:6e:2f:f5:7c:db:db:7c:9c: 33:51:76:5a:1f:2f:9d:b2:74:67:92:19:00:8f:5d: 1e:af:ce:cc:18:13:34:d8:19:07:5c:8b:1e:b6:30: 19:53:04:ad:c3:17:33:7d:a4:c0:0b:50:56:bc:e9: 6b:66:a2:88:f3:cf:b9:a6:17:d9:7e:05:da:21:69: ee:31:a8:f9:f3:33:71:b0:c6:ca:49:e3:c2:c0:d4: 22:6f:31:be:e4:c7:12:01:40:b5:13:a4:68:54:7e: a9:18:73:66:98:4b:2f:82:8e:bc:39:e6:69:a7:ba: 92:d6:54:b3:8c:61:be:79:30:95:44:0e:ae:53:7f: 6a:4d:72:d8:8d:eb:29:a3:1f:7d:5f:5d:8e:7b:e7: ff:5a:ac:06:1e:ee:9c:9d:05:54:fb:39:56:b9:d6: 50:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D8:15:24:FC:94:B1:9F:7E:1C:69:3F:16:80:33:4F:5F:60:BB:AC X509v3 Authority Key Identifier: keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/wdgVJPyUsZ9-HGk_FoAzT19gu6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.84.0/24 IPv6: 2a02:11f8:192::/47 Signature Algorithm: sha256WithRSAEncryption 3c:a3:31:19:96:95:e6:4a:e2:62:26:92:cf:2b:64:ae:3f:3e: 95:d6:a9:d4:a8:94:63:9d:78:60:e3:bc:b5:5e:1b:dc:fa:f1: 2c:42:5a:d5:75:b8:68:33:a5:c5:9d:72:84:e6:6a:e5:41:7e: 7e:e1:85:ee:29:63:63:d0:1f:d0:04:a1:50:d0:a7:5d:d5:2b: 9d:49:db:76:19:22:4b:48:27:39:27:bb:d7:f0:40:6d:c3:d6: a2:2d:47:90:96:b4:79:13:27:1c:f7:e5:8c:7f:e0:8e:82:d2: 8b:ef:14:2f:48:fa:e1:73:37:d4:33:5d:c0:93:c1:83:1d:20: 0c:a7:87:f9:5e:e5:86:3b:06:77:e3:6f:47:26:35:e2:cb:48: 17:52:55:49:3b:f3:4e:f0:a9:a6:54:04:be:79:ab:14:8c:cd: 52:38:76:c9:2e:37:d5:ed:ac:07:cd:ea:bc:17:ce:87:66:78: fa:9e:b1:ce:d4:6c:5a:71:40:84:4d:ad:a2:bd:5d:54:b2:e6: 9b:1a:aa:9b:a4:6a:4d:63:ba:ca:bf:dd:01:8d:1f:5a:9a:6c: f0:e8:69:47:f2:d2:01:2e:0d:02:83:9f:18:50:fb:bc:47:d8: 76:f7:b9:10:9a:e6:47:7d:6f:0d:4a:6b:be:18:b7:dc:4e:f1: fd:2a:01:02 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8lsn+JTCweie2Wi41HzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl OTc3YmMwHhcNMjYwMTAyMTgyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWQ4MTUyNGZjOTRiMTlmN2UxYzY5M2YxNjgwMzM0ZjVmNjBiYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+WkWcdIs443FHbdhvr9/tbBYEga qN6h9DJk0MLQ6LShDraXiDm5XuK0oOKNt6Sf+KErzfCe98TFels2M9aaiCXj+FVS fjpxGKWVAEN+buoUx6tzRLSgqF2RK6xDNuuSbi/1fNvbfJwzUXZaHy+dsnRnkhkA j10er87MGBM02BkHXIsetjAZUwStwxczfaTAC1BWvOlrZqKI88+5phfZfgXaIWnu Maj58zNxsMbKSePCwNQibzG+5McSAUC1E6RoVH6pGHNmmEsvgo68OeZpp7qS1lSz jGG+eTCVRA6uU39qTXLYjespox99X12Oe+f/WqwGHu6cnQVU+zlWudZQzwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMHYFST8lLGffhxpPxaAM09fYLusMB8GA1UdIwQY MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt YTk2YzYyNjZhYmRiLzEvd2RnVkpQeVVzWjktSEdrX0ZvQXpUMTlndTZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwR5UMA8E AgACMAkDBwEqAhH4AZIwDQYJKoZIhvcNAQELBQADggEBADyjMRmWleZK4mImks8r ZK4/PpXWqdSolGOdeGDjvLVeG9z68SxCWtV1uGgzpcWdcoTmauVBfn7hhe4pY2PQ H9AEoVDQp13VK51J23YZIktIJzknu9fwQG3D1qItR5CWtHkTJxz35Yx/4I6C0ovv FC9I+uFzN9QzXcCTwYMdIAynh/le5YY7Bnfjb0cmNeLLSBdSVUk7807wqaZUBL55 qxSMzVI4dskuN9XtrAfN6rwXzodmePqesc7UbFpxQIRNraK9XVSy5psaqpukak1j usq/3QGNH1qabPDoaUfy0gEuDQKDnxhQ+7xH2Hb3uRCa5kd9bw1Ka74Yt9xO8f0q AQI= -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:19 2026 by rpki-client