This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WGUO4eMeC3qtuE4fLcA8cVZfjQw.roa File: WGUO4eMeC3qtuE4fLcA8cVZfjQw.roa (raw, json) Hash identifier: cdGBXVFNsQmxm9ZQTXjfZ1QUNpzFAvRxiEAeb7jvQS4= Subject key identifier: 58:65:0E:E1:E3:1E:0B:7A:AD:B8:4E:1F:2D:C0:3C:71:56:5F:8D:0C Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A815BA3B219D2CB3D66DFF780E83 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WGUO4eMeC3qtuE4fLcA8cVZfjQw.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201179 IP address blocks: 188.130.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a8:15:ba:3b:21:9d:2c:b3:d6:6d:ff:78:0e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58650ee1e31e0b7aadb84e1f2dc03c71565f8d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:4e:df:e7:b8:43:82:42:fc:d8:f3:62:03: dc:9e:30:a1:53:89:78:6c:fb:31:f5:a4:e4:0b:37: ed:c5:c6:87:3f:bd:40:4e:f4:79:7b:ee:c0:2b:5b: 8a:3d:5f:49:29:09:f6:fb:1e:d6:c4:32:a4:07:a0: 7c:83:77:09:d1:e4:de:08:36:f9:c0:b8:6e:fb:f1: b0:eb:43:4c:12:0b:44:b6:86:a7:c9:12:e4:21:d7: 4f:45:8c:c2:c2:98:44:54:fe:b4:85:80:2e:67:da: 8b:94:d1:98:4a:e8:af:4b:a8:23:b1:a5:e5:fe:f6: 82:ca:bd:fc:95:1a:35:53:60:58:f6:19:01:dd:80: 6a:e5:5f:74:a6:e6:86:c0:c0:7c:3f:86:71:b1:7c: 21:33:ba:54:11:0f:6e:8c:31:db:7f:ed:d5:79:c8: d9:56:c1:c2:47:86:9c:75:f7:c6:c9:b7:a7:86:c5: b9:b4:4f:14:67:f4:62:c1:f5:a3:e9:52:8f:a5:7b: 25:bc:f0:68:09:19:ca:84:da:6e:c9:33:6f:ba:dc: 1f:0b:61:84:42:a5:ef:6e:fa:be:c3:7e:2b:c4:53: 80:6b:24:f7:ec:ad:03:ef:79:11:8f:76:0a:cf:11: 13:82:3f:e5:2c:63:8d:30:66:04:08:96:5c:54:c8: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:65:0E:E1:E3:1E:0B:7A:AD:B8:4E:1F:2D:C0:3C:71:56:5F:8D:0C X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WGUO4eMeC3qtuE4fLcA8cVZfjQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.223.0/24 Signature Algorithm: sha256WithRSAEncryption 61:ff:33:57:47:eb:cd:87:6c:37:22:74:ee:04:1c:ec:e7:33: 47:f7:8c:eb:08:3c:8f:d4:2f:a7:48:81:de:2c:14:1a:fb:fa: 30:24:af:97:b3:f7:7b:e0:16:89:b8:52:2e:29:b3:22:fd:ee: 78:91:1c:2f:ca:4f:77:6a:53:81:b5:17:07:ec:ee:28:dc:d9: 5f:c2:c2:4f:08:57:3a:e5:36:bd:f7:e2:53:6a:73:1c:7e:82: 73:18:b8:68:a0:11:5f:c9:2d:fd:a3:0e:41:a5:0d:ff:e7:84: 87:be:3f:5e:7d:9d:7e:d7:c4:b7:1b:c5:25:87:66:cc:cb:d8: b4:80:26:9f:59:e0:20:8c:e9:53:22:31:86:00:d0:c0:e0:3c: 8b:57:b7:59:9d:25:a1:a8:9c:6c:81:1f:8a:b2:88:83:c7:28: 60:b2:e9:20:12:49:f1:2e:4d:35:9c:5c:a4:82:d0:6f:b7:46: c7:82:fb:03:fe:db:06:62:a7:fd:3f:c7:ba:30:65:5b:0e:ca: c0:e4:be:12:7c:b1:3a:4c:26:e9:2b:b3:6e:c8:25:ee:b6:52: 24:1b:0b:a6:e0:9a:dc:68:27:77:db:c6:30:5d:eb:1d:01:85: a2:b5:42:9b:28:ae:48:d1:66:74:d1:56:da:cd:49:9d:71:2e: 2b:0f:d7:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqgVujshnSyz1m3/eA6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODY1MGVlMWUzMWUwYjdhYWRiODRlMWYyZGMwM2M3MTU2NWY4ZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVNO3+e4Q4JC/NjzYgPcnjChU4l4 bPsx9aTkCzftxcaHP71ATvR5e+7AK1uKPV9JKQn2+x7WxDKkB6B8g3cJ0eTeCDb5 wLhu+/Gw60NMEgtEtoanyRLkIddPRYzCwphEVP60hYAuZ9qLlNGYSuivS6gjsaXl /vaCyr38lRo1U2BY9hkB3YBq5V90puaGwMB8P4ZxsXwhM7pUEQ9ujDHbf+3VecjZ VsHCR4acdffGybenhsW5tE8UZ/RiwfWj6VKPpXslvPBoCRnKhNpuyTNvutwfC2GE QqXvbvq+w34rxFOAayT37K0D73kRj3YKzxETgj/lLGONMGYECJZcVMgp8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhlDuHjHgt6rbhOHy3APHFWX40MMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvV0dVTzRlTWVDM3F0dUU0ZkxjQThjVlpmalF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvILfMA0G CSqGSIb3DQEBCwUAA4IBAQBh/zNXR+vNh2w3InTuBBzs5zNH94zrCDyP1C+nSIHe LBQa+/owJK+Xs/d74BaJuFIuKbMi/e54kRwvyk93alOBtRcH7O4o3NlfwsJPCFc6 5Ta99+JTanMcfoJzGLhooBFfyS39ow5BpQ3/54SHvj9efZ1+18S3G8Ulh2bMy9i0 gCafWeAgjOlTIjGGANDA4DyLV7dZnSWhqJxsgR+KsoiDxyhgsukgEknxLk01nFyk gtBvt0bHgvsD/tsGYqf9P8e6MGVbDsrA5L4SfLE6TCbpK7NuyCXutlIkGwum4Jrc aCd328YwXesdAYWitUKbKK5I0WZ00VbazUmdcS4rD9dN -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:01 2026 by rpki-client