This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/wBzUUS1esVzgp7-S8WP1zjKAIpw.roa File: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (raw, json) Hash identifier: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU= Subject key identifier: C0:1C:D4:51:2D:5E:B1:5C:E0:A7:BF:92:F1:63:F5:CE:32:80:22:9C Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209 Certificate serial: 019B7834E362C3CD70A41A96AADF627F796E Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/wBzUUS1esVzgp7-S8WP1zjKAIpw.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 85.158.96.0/24 maxlen: 24 85.158.97.0/24 maxlen: 24 85.158.98.0/24 maxlen: 24 85.158.99.0/24 maxlen: 24 85.158.100.0/24 maxlen: 24 85.158.101.0/24 maxlen: 24 85.158.102.0/24 maxlen: 24 85.158.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e3:62:c3:cd:70:a4:1a:96:aa:df:62:7f:79:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c01cd4512d5eb15ce0a7bf92f163f5ce3280229c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:b5:bb:49:e5:92:f1:7f:6b:13:13:58:c9: 08:96:ad:f8:1c:ab:fa:5a:1f:4c:30:2e:4c:9b:b3: aa:18:f9:e4:e2:98:b0:7b:9c:17:34:19:b3:63:af: a1:4e:23:59:ed:b5:d8:08:fb:39:f2:97:32:fa:ef: 26:6f:24:aa:9e:9b:1d:a0:80:ba:f8:ac:3e:c1:ec: 7b:94:6c:4a:6b:06:88:a4:a2:19:be:1c:34:62:71: b8:40:f5:18:b5:c2:f7:b1:2d:8e:81:e7:bd:da:9b: 79:01:43:02:67:e6:de:90:c1:ac:93:d8:e5:dc:38: 0c:db:d4:15:f4:ba:0f:fe:55:4c:f8:c0:83:70:a3: d2:07:19:a6:50:6e:97:30:a8:b3:2a:de:75:d6:06: 7a:c2:75:9e:8d:e4:06:b3:56:a7:63:b2:45:c2:f4: bd:5e:6c:72:a4:46:a6:78:bc:9e:c1:e6:24:b4:0c: 90:30:fe:85:22:26:82:5d:3e:8e:a9:b7:c4:b3:d1: db:d9:31:f0:ab:25:c4:ac:b3:9f:92:7c:bd:9c:af: 33:45:df:e6:08:2b:f1:7f:4c:9d:25:b8:f2:21:9a: 5f:d2:78:04:1b:55:81:8b:35:7a:2f:5d:15:c8:93: c4:c6:1f:f2:e8:62:a5:b8:fa:96:60:2c:69:04:b9: 22:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1C:D4:51:2D:5E:B1:5C:E0:A7:BF:92:F1:63:F5:CE:32:80:22:9C X509v3 Authority Key Identifier: keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/wBzUUS1esVzgp7-S8WP1zjKAIpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.96.0/21 Signature Algorithm: sha256WithRSAEncryption 25:74:dd:75:32:7f:f2:6a:dd:80:a3:81:11:87:bf:0d:a6:14: 53:d6:be:5f:f6:5b:73:21:de:ef:8e:fc:a2:3f:29:83:74:47: d1:ce:de:b9:32:89:d4:32:85:33:bb:20:0d:fd:96:05:e0:03: d2:b7:6a:c1:88:42:c2:f6:8b:ae:f2:89:e2:e2:0d:d7:47:88: 46:16:b6:a2:65:ad:fc:60:55:ee:53:62:99:38:fe:b2:88:7b: 1c:f1:e4:c6:28:be:5f:b3:fb:1c:e0:90:3b:c3:9e:4f:5e:97: 36:8d:e0:9b:fa:30:4e:59:d3:65:7e:24:63:1a:76:23:f3:2b: 4f:02:cb:de:34:da:36:e8:90:b0:12:a9:0f:f1:6f:d2:e6:2c: 1e:20:f3:83:a1:dd:d7:91:1f:14:67:b2:55:44:28:52:df:00: f3:59:e8:3a:f8:62:f2:fa:a2:cc:6c:1d:09:e7:50:6d:f6:55: 90:2d:b3:74:27:d0:92:e8:73:26:f6:3b:25:b1:c5:57:96:80: e8:35:79:9a:80:ef:26:75:53:27:1c:1a:81:33:3a:34:37:96: 4a:4e:78:e3:4f:54:03:e3:71:c5:cc:f4:76:d8:2a:0e:45:dd: 3c:22:d0:cd:7d:bc:a6:2b:48:b1:81:dd:f2:e0:42:ec:93:36: 46:e0:9f:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NONiw81wpBqWqt9if3luMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1N2Y5ZmRlYTM1MGE3NjZiYjk4YzYwNGQzYjljMjc5MTY3 MzIyMDkwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDFjZDQ1MTJkNWViMTVjZTBhN2JmOTJmMTYzZjVjZTMyODAyMjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7+1u0nlkvF/axMTWMkIlq34HKv6 Wh9MMC5Mm7OqGPnk4piwe5wXNBmzY6+hTiNZ7bXYCPs58pcy+u8mbySqnpsdoIC6 +Kw+wex7lGxKawaIpKIZvhw0YnG4QPUYtcL3sS2Ogee92pt5AUMCZ+bekMGsk9jl 3DgM29QV9LoP/lVM+MCDcKPSBxmmUG6XMKizKt511gZ6wnWejeQGs1anY7JFwvS9 XmxypEameLyeweYktAyQMP6FIiaCXT6OqbfEs9Hb2THwqyXErLOfkny9nK8zRd/m CCvxf0ydJbjyIZpf0ngEG1WBizV6L10VyJPExh/y6GKluPqWYCxpBLkirQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAc1FEtXrFc4Ke/kvFj9c4ygCKcMB8GA1UdIwQY MBaAFHV/n96jUKdmu5jGBNO5wnkWcyIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYt YzI1YWJhNmI1NWFmLzEvd0J6VVVTMWVzVnpncDctUzhXUDF6aktBSXB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYtYzI1YWJhNmI1NWFm LzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVZ5gMA0G CSqGSIb3DQEBCwUAA4IBAQAldN11Mn/yat2Ao4ERh78NphRT1r5f9ltzId7vjvyi PymDdEfRzt65MonUMoUzuyAN/ZYF4APSt2rBiELC9ouu8oni4g3XR4hGFraiZa38 YFXuU2KZOP6yiHsc8eTGKL5fs/sc4JA7w55PXpc2jeCb+jBOWdNlfiRjGnYj8ytP AsveNNo26JCwEqkP8W/S5iweIPODod3XkR8UZ7JVRChS3wDzWeg6+GLy+qLMbB0J 51Bt9lWQLbN0J9CS6HMm9jslscVXloDoNXmagO8mdVMnHBqBMzo0N5ZKTnjjT1QD 43HFzPR22CoORd08ItDNfbymK0ixgd3y4ELskzZG4J+z -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:00 2026 by rpki-client