This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/yMoUDAy0kWtoL_t9nqHRBCB21C8.roa File: yMoUDAy0kWtoL_t9nqHRBCB21C8.roa (raw, json) Hash identifier: xKN2sSx0pr5QZ1TQbINSKjUEf4y0JlgK8D6NnMM9OcY= Subject key identifier: C8:CA:14:0C:0C:B4:91:6B:68:2F:FB:7D:9E:A1:D1:04:20:76:D4:2F Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b Certificate serial: 019B7B365EF96F60D6BF31C5A8DD91D8CBC7 Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/yMoUDAy0kWtoL_t9nqHRBCB21C8.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205388 IP address blocks: 146.19.42.0/24 maxlen: 24 185.216.212.0/22 maxlen: 32 2a0b:bbc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5e:f9:6f:60:d6:bf:31:c5:a8:dd:91:d8:cb:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ca140c0cb4916b682ffb7d9ea1d1042076d42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:cf:66:d9:91:fb:4c:0d:a4:e2:ea:f0:7f: 39:ac:62:27:9c:1f:a3:85:c6:32:3e:89:96:3c:f6: ae:1e:74:df:8e:98:ad:1a:3c:4d:2d:ec:52:34:df: c0:a0:71:46:c8:d3:be:80:68:c3:24:03:1f:5e:97: 26:0a:72:07:64:3f:3c:98:76:b2:48:60:b5:d4:18: ae:3d:52:24:b0:59:02:64:fe:98:c2:4b:f7:29:41: c4:4c:48:bc:29:50:f7:8f:6a:46:9f:f0:d0:f9:e2: b8:e8:d9:79:76:45:aa:7d:37:c9:a7:71:65:fd:05: 19:cb:81:22:54:8c:fe:a7:7c:38:39:bd:02:2b:f3: f3:2a:75:8f:cf:39:23:2c:dd:f0:08:c2:25:7d:3c: 8a:aa:09:14:0f:1c:4e:25:14:26:8b:b8:57:cd:33: 93:41:5d:c4:a4:ed:57:c0:54:24:84:c4:1e:57:64: 20:52:27:58:66:2e:cd:fa:33:df:b9:af:67:58:4d: 7d:70:e1:bd:26:30:91:43:56:77:ff:29:5d:b9:a8: f9:46:18:dc:ce:4e:d8:c6:73:0f:6a:bf:4e:1b:82: 93:7e:3a:9e:29:47:d5:cc:bb:19:60:88:5f:d2:4f: 95:f9:5d:3a:db:06:26:1c:93:6f:ce:f0:f8:72:c1: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:14:0C:0C:B4:91:6B:68:2F:FB:7D:9E:A1:D1:04:20:76:D4:2F X509v3 Authority Key Identifier: keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/yMoUDAy0kWtoL_t9nqHRBCB21C8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.42.0/24 185.216.212.0/22 IPv6: 2a0b:bbc0::/32 Signature Algorithm: sha256WithRSAEncryption cd:1b:1c:0a:37:c3:c9:e1:1c:81:16:0d:b6:3c:17:db:7f:24: da:6e:1c:c1:80:88:a7:7d:d3:90:c0:d3:4a:13:53:ba:d6:0b: 0c:af:f4:48:e8:be:a4:b3:ba:41:cf:19:b2:bf:ec:7b:b1:f7: 0b:d0:0e:20:57:af:41:e2:43:17:6d:1d:d8:ae:ce:35:68:3d: bd:13:f6:4f:ea:bf:92:5a:41:9f:78:52:af:c1:f4:85:bf:f9: fa:1f:89:4f:f8:8f:e6:8e:45:73:4d:0d:29:44:fe:9f:70:ea: 4f:3c:fe:5f:87:d9:4b:6b:91:16:30:76:8c:df:12:f9:b3:0b: b2:e1:5b:d2:a2:2f:fa:99:23:ae:83:19:24:0b:97:fa:67:45: fe:a7:b4:85:88:75:cc:46:07:7e:04:bd:22:53:f0:7b:c5:2c: 61:66:a7:05:02:83:83:5d:3a:9c:09:33:57:43:b3:5c:0f:d0: 68:5f:ab:7f:1f:cc:9f:b5:d1:58:71:e6:5a:a0:26:db:a4:6f: 47:eb:b1:45:52:a2:b3:0f:a7:f7:89:1e:a7:a4:e7:8b:ca:30: 75:12:ee:e2:8d:ff:3b:70:fd:a7:c0:5d:bd:4a:8a:88:72:d7: 95:88:f2:b0:ae:e0:3d:ad:c0:be:9f:2a:4c:b3:b6:cb:09:34: df:46:2a:d3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nl75b2DWvzHFqN2R2MvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZmZhMTRkZjJhODljYjY3MDk2MzZmMmIwYjU3MGFiY2Nm OGI4NGIwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGNhMTQwYzBjYjQ5MTZiNjgyZmZiN2Q5ZWExZDEwNDIwNzZkNDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2LPZtmR+0wNpOLq8H85rGInnB+j hcYyPomWPPauHnTfjpitGjxNLexSNN/AoHFGyNO+gGjDJAMfXpcmCnIHZD88mHay SGC11BiuPVIksFkCZP6Ywkv3KUHETEi8KVD3j2pGn/DQ+eK46Nl5dkWqfTfJp3Fl /QUZy4EiVIz+p3w4Ob0CK/PzKnWPzzkjLN3wCMIlfTyKqgkUDxxOJRQmi7hXzTOT QV3EpO1XwFQkhMQeV2QgUidYZi7N+jPfua9nWE19cOG9JjCRQ1Z3/ylduaj5Rhjc zk7YxnMPar9OG4KTfjqeKUfVzLsZYIhf0k+V+V062wYmHJNvzvD4csF/KQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMjKFAwMtJFraC/7fZ6h0QQgdtQvMB8GA1UdIwQY MBaAFFj/oU3yqJy2cJY28rC1cKvM+LhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1AtaFRmS29uTFp3bGpieXNMVndxOHo0dUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYjA2YmMtYjhjNy00Zjc1LWIyOWUt YzEwN2E3YWMwNDg4LzEveU1vVURBeTBrV3RvTF90OW5xSFJCQ0IyMUM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wYjA2YmMtYjhjNy00Zjc1LWIyOWUtYzEwN2E3YWMwNDg4 LzEvV1AtaFRmS29uTFp3bGpieXNMVndxOHo0dUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAkhMqAwQC udjUMA0EAgACMAcDBQAqC7vAMA0GCSqGSIb3DQEBCwUAA4IBAQDNGxwKN8PJ4RyB Fg22PBfbfyTabhzBgIinfdOQwNNKE1O61gsMr/RI6L6ks7pBzxmyv+x7sfcL0A4g V69B4kMXbR3Yrs41aD29E/ZP6r+SWkGfeFKvwfSFv/n6H4lP+I/mjkVzTQ0pRP6f cOpPPP5fh9lLa5EWMHaM3xL5swuy4VvSoi/6mSOugxkkC5f6Z0X+p7SFiHXMRgd+ BL0iU/B7xSxhZqcFAoODXTqcCTNXQ7NcD9BoX6t/H8yftdFYceZaoCbbpG9H67FF UqKzD6f3iR6npOeLyjB1Eu7ijf87cP2nwF29SoqIcteViPKwruA9rcC+nypMs7bL CTTfRirT -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:18 2026 by rpki-client