This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/W58XMgZh9lZ_P5m3yj1yWR948AE.roa File: W58XMgZh9lZ_P5m3yj1yWR948AE.roa (raw, json) Hash identifier: /DZnUsMGqFUioz1rHfXRehgQ0Epro6BcGMD4flzo29I= Subject key identifier: 5B:9F:17:32:06:61:F6:56:7F:3F:99:B7:CA:3D:72:59:1F:78:F0:01 Certificate issuer: /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745 Certificate serial: 019B7FF1883CEF655429610F365C15D9863A Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/W58XMgZh9lZ_P5m3yj1yWR948AE.roa Signing time: Fri 02 Jan 2026 18:21:34 +0000 ROA not before: Fri 02 Jan 2026 18:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203376 IP address blocks: 185.136.200.0/22 maxlen: 22 185.136.200.0/23 maxlen: 23 185.136.200.0/24 maxlen: 24 185.136.202.0/24 maxlen: 24 185.136.203.0/24 maxlen: 24 2a06:ffc0::/29 maxlen: 29 2a06:ffc0::/30 maxlen: 30 2a06:ffc4::/31 maxlen: 31 2a06:ffc6::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:88:3c:ef:65:54:29:61:0f:36:5c:15:d9:86:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745 Validity Not Before: Jan 2 18:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b9f17320661f6567f3f99b7ca3d72591f78f001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:10:83:79:61:31:d0:95:1a:29:d2:08:bd: cf:c5:45:a3:96:b3:84:fa:4a:f4:af:19:3d:bc:c0: 5b:fc:55:a9:43:24:78:89:b9:bd:ab:c3:26:88:95: 8e:a7:3b:99:9b:d2:3f:2b:5d:0c:11:12:1a:fe:71: 15:c5:23:db:8d:5f:36:31:0b:68:e9:a5:1b:7b:4a: e0:aa:cd:02:c9:0f:c4:be:6f:07:f7:f1:71:14:6e: 82:53:43:6e:1a:aa:de:5a:f7:b8:97:8d:5b:fd:53: 53:25:4b:57:8f:4a:32:e9:76:f2:3f:98:d1:52:31: 11:6d:6a:70:7b:ab:57:53:90:c4:56:02:2a:93:ca: a5:3e:78:95:a0:eb:40:fb:c1:19:da:c4:12:ca:4a: 32:4f:1d:77:c3:c5:4d:da:7d:9a:4b:37:0f:72:20: 75:b1:d8:90:25:16:6b:f2:a7:8c:41:5a:1e:c2:4d: e3:68:47:db:24:6b:1f:3e:42:8c:b9:95:0b:22:85: f0:d5:d1:f9:ef:d6:03:d8:f4:0b:4f:dc:eb:44:e8: fa:b6:f2:0d:b8:64:46:e0:23:80:66:b3:da:8e:ba: bb:c0:06:2c:bf:57:74:ae:f3:a7:92:ac:d9:20:56: cc:da:d6:c1:84:e9:e6:90:94:63:c8:8b:41:b7:4e: 57:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9F:17:32:06:61:F6:56:7F:3F:99:B7:CA:3D:72:59:1F:78:F0:01 X509v3 Authority Key Identifier: keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/W58XMgZh9lZ_P5m3yj1yWR948AE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.200.0/22 IPv6: 2a06:ffc0::/29 Signature Algorithm: sha256WithRSAEncryption 92:a6:5e:76:3a:1d:00:60:39:30:ae:cc:ab:20:42:19:3a:6d: 0b:d1:1a:fd:ff:1b:c9:ff:63:8b:c3:cd:3d:87:7f:28:d8:76: 58:d5:bf:9e:c2:0c:d0:b4:71:6d:67:e8:d2:66:e7:ca:13:fc: 8c:dc:25:72:bf:e4:b6:ca:9e:fc:fd:bd:b0:02:9d:06:24:fe: 22:70:be:ea:b0:52:69:44:26:55:16:8b:cd:0d:2d:f8:ba:db: 66:31:74:cc:92:30:22:57:ec:83:6c:51:a9:55:0e:34:68:2f: f2:b6:bd:cc:f4:0b:f4:fc:06:3b:fd:f1:f6:34:db:87:c4:56: 9b:54:86:67:56:75:c0:79:54:5b:1e:b0:f5:95:d3:a8:b0:55: 15:3b:3f:a1:e1:f6:5e:77:ec:85:e8:42:d7:7e:4c:de:a6:72: 99:ef:08:94:a3:cb:f1:48:0c:0b:a4:45:ba:d9:b2:a9:58:44: 2a:87:8f:2f:f9:8f:6f:c7:5d:de:ca:32:97:79:05:6d:04:86: 9a:1a:b3:cb:61:71:af:aa:b7:2d:4f:b9:5e:32:3c:96:09:82: 3a:56:cd:03:9a:34:86:45:1f:91:77:82:00:22:29:a1:30:cf: 82:e6:25:4b:d6:74:25:de:8e:2d:f9:06:a6:ed:b4:6b:c5:52: 44:b5:ff:bd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8Yg872VUKWEPNlwV2YY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NWY0OTQ5YmY3Y2RhY2YzZTlkNDY1N2IwOGNkODQ3ODBk NDE3NDUwHhcNMjYwMTAyMTgyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjlmMTczMjA2NjFmNjU2N2YzZjk5YjdjYTNkNzI1OTFmNzhmMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvsQg3lhMdCVGinSCL3PxUWjlrOE +kr0rxk9vMBb/FWpQyR4ibm9q8MmiJWOpzuZm9I/K10MERIa/nEVxSPbjV82MQto 6aUbe0rgqs0CyQ/Evm8H9/FxFG6CU0NuGqreWve4l41b/VNTJUtXj0oy6XbyP5jR UjERbWpwe6tXU5DEVgIqk8qlPniVoOtA+8EZ2sQSykoyTx13w8VN2n2aSzcPciB1 sdiQJRZr8qeMQVoewk3jaEfbJGsfPkKMuZULIoXw1dH579YD2PQLT9zrROj6tvIN uGRG4COAZrPajrq7wAYsv1d0rvOnkqzZIFbM2tbBhOnmkJRjyItBt05XYwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFufFzIGYfZWfz+Zt8o9clkfePABMB8GA1UdIwQY MBaAFBVfSUm/fNrPPp1GV7CM2EeA1BdFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUt MWJjZTNiYzY3OGVkLzEvVzU4WE1nWmg5bFpfUDVtM3lqMXlXUjk0OEFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUtMWJjZTNiYzY3OGVk LzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYjIMA0E AgACMAcDBQMqBv/AMA0GCSqGSIb3DQEBCwUAA4IBAQCSpl52Oh0AYDkwrsyrIEIZ Om0L0Rr9/xvJ/2OLw809h38o2HZY1b+ewgzQtHFtZ+jSZufKE/yM3CVyv+S2yp78 /b2wAp0GJP4icL7qsFJpRCZVFovNDS34uttmMXTMkjAiV+yDbFGpVQ40aC/ytr3M 9Av0/AY7/fH2NNuHxFabVIZnVnXAeVRbHrD1ldOosFUVOz+h4fZed+yF6ELXfkze pnKZ7wiUo8vxSAwLpEW62bKpWEQqh48v+Y9vx13eyjKXeQVtBIaaGrPLYXGvqrct T7leMjyWCYI6Vs0DmjSGRR+Rd4IAIimhMM+C5iVL1nQl3o4t+Qam7bRrxVJEtf+9 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:41 2026 by rpki-client