This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/wEZZ62iCzbaAWMViItHMRW3Yn4A.roa File: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (raw, json) Hash identifier: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA= Subject key identifier: C0:46:59:EB:68:82:CD:B6:80:58:C5:62:22:D1:CC:45:6D:D8:9F:80 Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Certificate serial: 019B7EA6EC4373F4AD9FBC7508773E0BB09A Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/wEZZ62iCzbaAWMViItHMRW3Yn4A.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.231.86.0/24 maxlen: 24 185.231.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ec:43:73:f4:ad:9f:bc:75:08:77:3e:0b:b0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c04659eb6882cdb68058c56222d1cc456dd89f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:a6:06:e8:9c:df:7a:65:b0:9f:3b:d8:3a: 16:55:ad:62:4d:b0:da:b3:d4:63:b8:24:cf:ee:db: dd:7f:26:83:25:ac:2b:aa:b0:04:17:6c:49:5b:39: 1a:3a:25:7d:36:ca:e9:9a:5e:73:bd:2a:03:14:3a: 6e:40:8a:5d:08:eb:4a:16:30:86:cf:ca:10:d7:5d: 08:44:4f:63:57:72:bd:3e:4d:d7:14:83:13:fa:e2: cd:c3:13:3f:c9:f5:f4:19:41:f4:9b:05:0f:d5:50: 9d:23:8c:e1:24:3c:e2:ae:c9:f5:c7:10:f0:e4:9c: 93:26:77:9d:f4:e6:d3:71:b7:90:89:0a:aa:30:f0: 3b:89:66:b2:02:52:44:2b:6e:c6:60:d0:1f:1a:43: 34:ea:d4:df:1c:5b:11:80:cc:c4:ec:cf:1a:07:db: 3f:c7:e3:0d:af:17:2b:cb:7c:80:e4:b8:61:22:6b: b7:00:ea:0b:76:5b:fb:28:32:09:13:f4:f5:c1:d5: 54:33:4e:30:60:3a:21:74:1e:97:fb:ce:c0:66:1c: 5e:86:b1:69:9d:eb:ea:29:3c:a0:90:92:01:3a:d1: 57:d1:e5:da:c6:e4:0f:31:02:91:23:19:02:1d:12: 42:18:f6:a1:18:2f:c8:d3:a3:5e:02:81:03:8f:c4: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:46:59:EB:68:82:CD:B6:80:58:C5:62:22:D1:CC:45:6D:D8:9F:80 X509v3 Authority Key Identifier: keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/wEZZ62iCzbaAWMViItHMRW3Yn4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.86.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:ff:25:37:fe:fe:78:70:d5:fe:6e:b3:de:19:38:1d:57:dd: 1b:2e:19:1d:73:60:f3:2a:05:40:25:f8:b5:2d:6f:46:4a:34: fc:42:ab:99:63:ea:87:55:ca:45:3f:92:01:ac:d7:75:d7:68: 4d:86:63:ff:95:12:49:06:4f:3d:d7:b8:04:bf:0e:40:46:b5: 9d:ff:75:1a:89:53:e8:78:95:c6:4f:c2:77:10:ce:78:2a:ea: 2f:b2:77:9d:61:f5:5b:05:67:fc:59:cf:f2:11:8a:57:a8:74: 54:e4:b0:1f:6d:4f:b6:e3:c6:db:00:54:57:64:2b:9d:4c:e5: c9:b3:9b:06:9e:e2:9e:d0:cd:f1:a6:5c:84:38:9b:be:3c:14: cf:de:d5:9f:6d:3c:37:b9:25:c8:d2:d4:69:37:27:f8:8c:06: 46:c6:e1:f4:01:a3:b0:71:8e:6a:6e:36:7e:be:66:ad:1f:01: f6:1c:d0:b7:c5:b0:24:b3:53:ec:d2:ed:8c:32:a6:da:d4:12: 63:99:72:bf:aa:ed:96:03:87:1e:0a:65:41:08:e2:1c:71:bc: c3:d7:41:f8:c8:6d:c5:e3:8e:4f:6c:51:f6:ac:1b:71:16:1a: 79:37:10:09:26:e1:9e:d4:6b:5a:12:13:70:7c:f8:6a:96:c0: f2:d5:d8:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+puxDc/Stn7x1CHc+C7CaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzJlZTVmMDE4OWVmOWI2NzE0MThlZDMzNmVjYjE3Mjhm OTkyMGEwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDQ2NTllYjY4ODJjZGI2ODA1OGM1NjIyMmQxY2M0NTZkZDg5ZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HmmBuic33plsJ872DoWVa1iTbDa s9RjuCTP7tvdfyaDJawrqrAEF2xJWzkaOiV9Nsrpml5zvSoDFDpuQIpdCOtKFjCG z8oQ110IRE9jV3K9Pk3XFIMT+uLNwxM/yfX0GUH0mwUP1VCdI4zhJDzirsn1xxDw 5JyTJned9ObTcbeQiQqqMPA7iWayAlJEK27GYNAfGkM06tTfHFsRgMzE7M8aB9s/ x+MNrxcry3yA5LhhImu3AOoLdlv7KDIJE/T1wdVUM04wYDohdB6X+87AZhxehrFp nevqKTygkJIBOtFX0eXaxuQPMQKRIxkCHRJCGPahGC/I06NeAoEDj8SJeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMBGWetogs22gFjFYiLRzEVt2J+AMB8GA1UdIwQY MBaAFG8y7l8Bie+bZxQY7TNuyxco+ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2Yt OGU3NjEzODA0YzgwLzEvd0VaWjYyaUN6YmFBV01WaUl0SE1SVzNZbjRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2YtOGU3NjEzODA0Yzgw LzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuedWMA0G CSqGSIb3DQEBCwUAA4IBAQBa/yU3/v54cNX+brPeGTgdV90bLhkdc2DzKgVAJfi1 LW9GSjT8QquZY+qHVcpFP5IBrNd112hNhmP/lRJJBk8917gEvw5ARrWd/3UaiVPo eJXGT8J3EM54KuovsnedYfVbBWf8Wc/yEYpXqHRU5LAfbU+248bbAFRXZCudTOXJ s5sGnuKe0M3xplyEOJu+PBTP3tWfbTw3uSXI0tRpNyf4jAZGxuH0AaOwcY5qbjZ+ vmatHwH2HNC3xbAks1Ps0u2MMqba1BJjmXK/qu2WA4ceCmVBCOIccbzD10H4yG3F 445PbFH2rBtxFhp5NxAJJuGe1GtaEhNwfPhqlsDy1di4 -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:09 2026 by rpki-client