This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/WzghRqzGjI_eG3WiC84nx-l-Aus.roa File: WzghRqzGjI_eG3WiC84nx-l-Aus.roa (raw, json) Hash identifier: BkSKCwkOQoqJmPqml1/0+ldKWjkL69DMpw0CtVVRSPA= Subject key identifier: 5B:38:21:46:AC:C6:8C:8F:DE:1B:75:A2:0B:CE:27:C7:E9:7E:02:EB Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8 Certificate serial: 019B7D5CEEFD47E72E37B705D2690DD2C305 Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/WzghRqzGjI_eG3WiC84nx-l-Aus.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.39.100.0/24 maxlen: 24 193.39.101.0/24 maxlen: 24 193.39.102.0/24 maxlen: 24 193.39.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ee:fd:47:e7:2e:37:b7:05:d2:69:0d:d2:c3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b382146acc68c8fde1b75a20bce27c7e97e02eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:cb:a3:58:32:b5:c7:b0:a4:9d:8f:24:26: 19:1e:fe:ff:d0:ca:61:74:c2:2d:d2:2b:78:17:53: a4:76:39:96:a7:ae:c1:e9:d6:40:26:94:51:4b:4a: 63:81:34:f5:e7:c7:e3:fd:53:76:02:f1:53:96:1c: 46:95:38:de:f6:bd:a5:e9:ee:13:fe:02:32:08:6d: 9a:51:92:9f:c3:77:1c:35:27:b8:e4:ca:76:f7:bd: 9b:b7:a3:3a:1d:82:27:1f:32:9b:ef:fd:2b:b7:ee: 9b:a9:16:03:2c:f5:24:2d:58:8c:9e:11:a9:51:e1: f6:91:a5:1f:54:9b:e3:69:33:b3:84:d3:f4:a8:b9: 40:6c:89:64:1f:62:c6:7b:a1:77:da:f0:64:60:00: 0d:70:d6:52:d7:33:11:88:f8:13:68:22:76:f6:70: b3:6e:22:8a:98:07:ad:25:12:4c:49:9f:46:65:ff: 12:97:40:29:28:60:0a:ad:7e:dd:f0:46:fb:03:c5: e4:23:b2:d5:aa:20:e7:45:72:87:93:fa:ef:f6:80: 42:f4:ae:f6:11:50:15:34:ac:15:ed:63:cf:d9:0e: a5:9a:4b:ec:dc:d6:46:7f:a0:33:1d:39:b3:17:21: 51:2f:1b:0d:f6:58:d5:b6:2c:17:fe:10:68:e9:d8: 2e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:21:46:AC:C6:8C:8F:DE:1B:75:A2:0B:CE:27:C7:E9:7E:02:EB X509v3 Authority Key Identifier: keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/WzghRqzGjI_eG3WiC84nx-l-Aus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.100.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:d0:bd:c7:6a:ea:9f:21:36:5e:da:04:8c:e8:c3:b5:e3:d8: 36:ba:7d:9f:70:75:f3:68:e3:e5:ea:42:1a:cd:39:8c:06:d6: 50:d0:3c:09:67:c9:59:ca:fc:83:63:0c:38:39:2f:9e:bd:2b: 78:86:0b:79:90:8d:0f:8d:64:ea:c7:d1:a8:90:6f:d8:51:9d: 58:d9:95:f9:26:45:3d:e5:f0:02:a7:be:4b:d0:6c:de:60:97: 82:24:e8:5e:2a:63:96:d1:f4:81:8e:a1:0b:3f:ab:b9:19:37: c6:d0:7b:71:67:ab:8c:72:69:89:ef:9b:79:ee:0a:47:60:34: ee:e3:e9:7a:5e:b8:89:17:fa:a3:08:5c:85:b0:07:58:7f:19: fa:4b:57:67:cd:2a:1f:17:30:79:48:47:4b:fa:10:5f:85:a0: 33:29:8a:d4:88:40:ec:67:3e:29:5f:3b:8a:2b:b4:b3:2c:eb: c7:26:55:95:a0:82:03:92:69:0f:a4:f5:0a:30:f6:81:cc:45: af:0e:2a:f7:1b:1f:bf:a6:bd:4e:40:cd:04:6b:c9:7d:1e:1f: 7f:79:ad:a3:36:6b:34:a5:84:1c:31:27:08:54:2d:a8:64:ef: 78:46:0e:28:c7:4c:45:dc:83:40:bd:96:54:c8:08:03:fb:19: 63:70:a9:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XO79R+cuN7cF0mkN0sMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzU5YzZhNjJlMjc4ZGE4MzExYWZlYzhmNzY3N2M0MTM2 M2QxZjgwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjM4MjE0NmFjYzY4YzhmZGUxYjc1YTIwYmNlMjdjN2U5N2UwMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBHLo1gytcewpJ2PJCYZHv7/0Mph dMIt0it4F1OkdjmWp67B6dZAJpRRS0pjgTT158fj/VN2AvFTlhxGlTje9r2l6e4T /gIyCG2aUZKfw3ccNSe45Mp2972bt6M6HYInHzKb7/0rt+6bqRYDLPUkLViMnhGp UeH2kaUfVJvjaTOzhNP0qLlAbIlkH2LGe6F32vBkYAANcNZS1zMRiPgTaCJ29nCz biKKmAetJRJMSZ9GZf8Sl0ApKGAKrX7d8Eb7A8XkI7LVqiDnRXKHk/rv9oBC9K72 EVAVNKwV7WPP2Q6lmkvs3NZGf6AzHTmzFyFRLxsN9ljVtiwX/hBo6dguDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFs4IUasxoyP3ht1ogvOJ8fpfgLrMB8GA1UdIwQY MBaAFBB1nGpi4njagxGv7I92d8QTY9H4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4Nzkt MmVlNGZmOGIwYTgwLzEvV3pnaFJxekdqSV9lRzNXaUM4NG54LWwtQXVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4NzktMmVlNGZmOGIwYTgw LzEvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSdkMA0G CSqGSIb3DQEBCwUAA4IBAQBd0L3HauqfITZe2gSM6MO149g2un2fcHXzaOPl6kIa zTmMBtZQ0DwJZ8lZyvyDYww4OS+evSt4hgt5kI0PjWTqx9GokG/YUZ1Y2ZX5JkU9 5fACp75L0GzeYJeCJOheKmOW0fSBjqELP6u5GTfG0HtxZ6uMcmmJ75t57gpHYDTu 4+l6XriJF/qjCFyFsAdYfxn6S1dnzSofFzB5SEdL+hBfhaAzKYrUiEDsZz4pXzuK K7SzLOvHJlWVoIIDkmkPpPUKMPaBzEWvDir3Gx+/pr1OQM0Ea8l9Hh9/ea2jNms0 pYQcMScIVC2oZO94Rg4ox0xF3INAvZZUyAgD+xljcKll -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:22 2026 by rpki-client