This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa File: WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa (raw, json) Hash identifier: cCxzpDSEtEshoJyIVMHZls1v4t+x9ri7tVY5Xlsvk/k= Subject key identifier: 58:A7:38:56:8B:3A:12:03:1C:C2:AD:A3:3E:CF:15:A3:F4:F6:80:A8 Certificate issuer: /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c Certificate serial: 019B7C1213AC2B2261D303721E9D8A9CC1F2 Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa Signing time: Fri 02 Jan 2026 00:18:37 +0000 ROA not before: Fri 02 Jan 2026 00:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36351 IP address blocks: 185.228.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:13:ac:2b:22:61:d3:03:72:1e:9d:8a:9c:c1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c Validity Not Before: Jan 2 00:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a738568b3a12031cc2ada33ecf15a3f4f680a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:eb:66:9e:dd:f2:5e:c8:b5:1d:c1:9b:3e: 33:8d:dd:d9:6d:f2:63:c4:c9:1d:cc:09:d7:55:72: 6c:b3:f2:02:fe:e4:72:7a:e8:fa:ec:c9:18:2e:4d: 3c:23:47:c5:74:27:63:86:10:56:b4:ea:3a:51:b0: 34:13:c1:27:5b:03:70:7d:74:d7:da:41:00:83:a4: 59:50:08:fc:77:b0:8f:b9:7e:85:e1:ae:36:83:00: 12:b5:f1:98:79:5d:91:5f:d9:b6:84:9d:0c:ac:ed: fe:1e:98:a4:b7:60:f1:0a:e5:42:52:55:46:a5:8b: 45:d0:69:ce:fc:d6:3f:63:a7:c2:c1:47:b9:9b:94: d8:d3:32:3a:f5:2f:a0:c5:ea:b2:9b:9c:c4:64:b0: 6e:90:7a:c7:41:c4:6b:e9:0a:c0:39:17:37:d0:7b: 7c:81:ed:7d:b0:d1:f9:c3:ef:db:04:0e:fa:df:28: 21:b2:be:bf:af:71:e6:c6:13:a3:48:7b:c5:85:14: 22:ba:05:9c:bf:81:76:53:7d:88:99:1a:36:8f:fb: c6:7d:cc:3e:b5:03:6d:86:90:8e:22:2b:e6:a3:5c: 60:95:9f:65:2f:b0:da:ac:d7:f3:3f:77:e9:38:22: aa:d9:11:9a:94:ad:b2:fa:e6:46:84:82:60:3c:6e: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:38:56:8B:3A:12:03:1C:C2:AD:A3:3E:CF:15:A3:F4:F6:80:A8 X509v3 Authority Key Identifier: keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.36.0/22 Signature Algorithm: sha256WithRSAEncryption 57:ca:6d:e8:80:2c:0d:bc:af:5c:82:27:43:5e:8d:6f:6c:28: 91:ee:c9:ff:7c:3b:1b:6f:eb:67:97:4c:4c:ec:28:13:c7:8f: f9:9f:2d:33:08:24:64:3f:8e:f3:c3:8d:a8:f4:81:65:08:48: 35:a1:a2:fe:91:b9:30:4a:e3:09:75:21:5e:8b:69:31:78:6d: 06:25:55:9e:1a:ad:ff:cc:48:b1:28:45:cb:f5:21:82:03:db: f2:00:5e:10:5e:f2:05:d4:57:87:cf:b4:ba:34:c3:76:fc:b9: f8:98:59:e5:14:63:42:ee:d4:ad:8d:d0:b2:66:eb:ce:eb:26: 35:b2:07:aa:43:1b:ce:a9:d7:d0:35:82:16:1b:4b:63:d1:42: cf:a1:0d:77:50:aa:f0:f7:0b:fb:f0:7e:f8:89:4d:17:c6:f4: 88:78:dd:7e:c7:70:a4:20:91:78:16:d1:d7:82:34:0e:5a:bf: bf:bb:70:1d:19:79:3d:2a:b8:f8:07:63:a9:38:17:14:d2:46: e9:dd:7d:92:37:aa:43:e9:f5:39:16:12:39:cb:ab:c0:77:b5: 9d:a5:85:46:ca:2a:19:e3:f0:7e:5c:4c:e4:b0:0d:f4:5e:fa: 01:af:d3:74:1d:05:f7:4f:b5:14:f9:75:42:e5:80:9b:66:ed: ef:1d:73:58 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8EhOsKyJh0wNyHp2KnMHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NTg3YzViMGQ0MTU1MTZkNzJmNTkxNGY1ZjVmYjUyOGEz MmExMmMwHhcNMjYwMTAyMDAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGE3Mzg1NjhiM2ExMjAzMWNjMmFkYTMzZWNmMTVhM2Y0ZjY4MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+3rZp7d8l7ItR3Bmz4zjd3ZbfJj xMkdzAnXVXJss/IC/uRyeuj67MkYLk08I0fFdCdjhhBWtOo6UbA0E8EnWwNwfXTX 2kEAg6RZUAj8d7CPuX6F4a42gwAStfGYeV2RX9m2hJ0MrO3+Hpikt2DxCuVCUlVG pYtF0GnO/NY/Y6fCwUe5m5TY0zI69S+gxeqym5zEZLBukHrHQcRr6QrAORc30Ht8 ge19sNH5w+/bBA763yghsr6/r3HmxhOjSHvFhRQiugWcv4F2U32ImRo2j/vGfcw+ tQNthpCOIivmo1xglZ9lL7DarNfzP3fpOCKq2RGalK2y+uZGhIJgPG5uuwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFinOFaLOhIDHMKtoz7PFaP09oCoMB8GA1UdIwQY MBaAFPlYfFsNQVUW1y9ZFPX1+1KKMqEsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WaDhXdzFCVlJiWEwxa1U5Zlg3VW9veW9Tdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvZjdkMDcwLTMyODEtNDdiNy04NWM4 LThmYjYyNDM5NGU3YS8xL1dLYzRWb3M2RWdNY3dxMmpQczhWb19UMmdLZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWMvZjdkMDcwLTMyODEtNDdiNy04NWM4LThmYjYyNDM5NGU3 YS8xLzEtVmg4V3cxQlZSYlhMMWtVOWZYN1Vvb3lvU3cuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK55CQw DQYJKoZIhvcNAQELBQADggEBAFfKbeiALA28r1yCJ0NejW9sKJHuyf98Oxtv62eX TEzsKBPHj/mfLTMIJGQ/jvPDjaj0gWUISDWhov6RuTBK4wl1IV6LaTF4bQYlVZ4a rf/MSLEoRcv1IYID2/IAXhBe8gXUV4fPtLo0w3b8ufiYWeUUY0Lu1K2N0LJm687r JjWyB6pDG86p19A1ghYbS2PRQs+hDXdQqvD3C/vwfviJTRfG9Ih43X7HcKQgkXgW 0deCNA5av7+7cB0ZeT0quPgHY6k4FxTSRundfZI3qkPp9TkWEjnLq8B3tZ2lhUbK Khnj8H5cTOSwDfRe+gGv03QdBfdPtRT5dULlgJtm7e8dc1g= -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:28 2026 by rpki-client