This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/WUUFBQU2GFvKD3Kjb7e_9mOXlXI.roa File: WUUFBQU2GFvKD3Kjb7e_9mOXlXI.roa (raw, json) Hash identifier: dUL3FBjXZ15WKpY0NyPgPU36mDmvrzxulVkA9UNYoaw= Subject key identifier: 59:45:05:05:05:36:18:5B:CA:0F:72:A3:6F:B7:BF:F6:63:97:95:72 Certificate issuer: /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30 Certificate serial: 019B78A37DE23869B24CE55F3535D4A8AC81 Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/WUUFBQU2GFvKD3Kjb7e_9mOXlXI.roa Signing time: Thu 01 Jan 2026 08:18:59 +0000 ROA not before: Thu 01 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204756 IP address blocks: 185.240.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:e2:38:69:b2:4c:e5:5f:35:35:d4:a8:ac:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30 Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=594505050536185bca0f72a36fb7bff663979572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:55:71:7c:93:51:ea:d2:86:58:dd:35:c3: b1:99:09:f4:a7:54:ef:58:98:d2:d0:c0:38:5f:11: 69:37:85:73:25:1d:44:c1:76:ff:1f:78:8d:92:db: 3c:62:76:32:fa:d8:6c:22:2f:9a:3f:66:99:33:a7: d7:03:06:86:bb:4c:8c:f2:fe:2d:ac:61:8c:88:dc: f2:35:05:9a:a9:aa:36:d5:5d:cf:e6:6e:3a:01:dd: fb:a8:ee:62:8c:37:63:94:60:f4:5f:4b:5c:d5:ce: 71:8a:be:bb:a8:62:de:c9:ed:79:e1:9d:a6:bd:fb: 67:22:9a:e0:64:b4:7d:72:c7:fb:6b:49:aa:e8:16: d1:5d:ad:15:48:6e:82:7d:33:db:93:ec:20:05:1c: ba:72:a9:60:82:31:a7:94:44:86:1d:44:37:0f:89: 69:95:0c:74:43:03:8c:f4:ca:45:df:6d:be:66:bd: 3e:64:dc:11:16:d8:c0:d0:09:23:bc:f4:09:f4:3c: 66:05:56:40:44:5c:fc:6f:43:8a:ff:5b:4c:f9:0c: 3f:3e:9b:e5:65:38:15:77:b2:1e:cf:6e:eb:45:bf: 7c:fc:fe:07:e6:e8:2e:78:25:16:d6:36:e8:20:d2: fe:55:0d:84:8a:d4:e0:e0:93:41:74:bb:02:94:4f: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:45:05:05:05:36:18:5B:CA:0F:72:A3:6F:B7:BF:F6:63:97:95:72 X509v3 Authority Key Identifier: keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/WUUFBQU2GFvKD3Kjb7e_9mOXlXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.36.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:a8:05:6d:7e:31:a1:d1:f9:90:2b:90:a1:5e:b6:8a:ec:6a: 96:0b:de:1c:e9:52:37:b6:8c:9b:7e:48:f7:65:1a:f5:1c:3c: 0b:ab:56:e7:85:f7:55:b6:e0:02:92:76:38:cb:b0:83:d5:3d: 66:80:34:af:b8:73:0d:18:44:6f:fd:36:20:67:6c:f0:bc:20: 16:76:7b:00:a4:c0:20:da:ea:52:f3:c8:8c:6b:03:a1:95:3a: a3:69:34:30:e0:67:68:21:53:9a:1d:38:4a:2a:80:d9:9f:16: 8c:a1:74:3b:53:51:12:69:de:1d:aa:71:73:20:d4:92:f3:2c: 3c:57:b7:6e:06:05:89:6b:be:a9:77:5d:55:09:78:9e:68:7e: c0:8b:80:26:0c:1f:05:af:56:61:cf:14:43:fb:53:d2:f9:1a: 1c:99:55:92:74:a4:e0:8c:92:c1:46:16:64:f0:cd:9a:90:21: 96:e0:79:f9:53:e8:81:33:bb:bf:08:eb:cf:0c:4c:6e:68:fc: 22:44:9b:36:79:d0:90:71:8d:4f:ba:77:b0:05:dd:97:92:58: 06:23:4f:3e:98:47:43:18:69:f1:b2:b1:1f:1e:bc:bf:18:22: 5b:73:7c:bc:48:15:99:9c:05:12:3a:bd:6b:29:77:12:4c:31: 69:d9:2f:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o33iOGmyTOVfNTXUqKyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzdkNmMxZjZhNWM0YTkyYmJmZmQ4NWM0MTQyMTI3ZmEz ZTFhMzAwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTQ1MDUwNTA1MzYxODViY2EwZjcyYTM2ZmI3YmZmNjYzOTc5NTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT5VcXyTUerShljdNcOxmQn0p1Tv WJjS0MA4XxFpN4VzJR1EwXb/H3iNkts8YnYy+thsIi+aP2aZM6fXAwaGu0yM8v4t rGGMiNzyNQWaqao21V3P5m46Ad37qO5ijDdjlGD0X0tc1c5xir67qGLeye154Z2m vftnIprgZLR9csf7a0mq6BbRXa0VSG6CfTPbk+wgBRy6cqlggjGnlESGHUQ3D4lp lQx0QwOM9MpF322+Zr0+ZNwRFtjA0AkjvPQJ9DxmBVZARFz8b0OK/1tM+Qw/Ppvl ZTgVd7Iez27rRb98/P4H5ugueCUW1jboINL+VQ2EitTg4JNBdLsClE8i1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFlFBQUFNhhbyg9yo2+3v/Zjl5VyMB8GA1UdIwQY MBaAFP831sH2pcSpK7/9hcQUISf6PhowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84N2Q0M2MtZTBlZC00OGIzLWI0ZTMt MDVlZDg2NzM1MzA2LzEvV1VVRkJRVTJHRnZLRDNLamI3ZV85bU9YbFhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84N2Q0M2MtZTBlZC00OGIzLWI0ZTMtMDVlZDg2NzM1MzA2 LzEvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufAkMA0G CSqGSIb3DQEBCwUAA4IBAQAuqAVtfjGh0fmQK5ChXraK7GqWC94c6VI3toybfkj3 ZRr1HDwLq1bnhfdVtuACknY4y7CD1T1mgDSvuHMNGERv/TYgZ2zwvCAWdnsApMAg 2upS88iMawOhlTqjaTQw4GdoIVOaHThKKoDZnxaMoXQ7U1ESad4dqnFzINSS8yw8 V7duBgWJa76pd11VCXieaH7Ai4AmDB8Fr1ZhzxRD+1PS+RocmVWSdKTgjJLBRhZk 8M2akCGW4Hn5U+iBM7u/COvPDExuaPwiRJs2edCQcY1PunewBd2XklgGI08+mEdD GGnxsrEfHry/GCJbc3y8SBWZnAUSOr1rKXcSTDFp2S/6 -----END CERTIFICATE-----Generated at Tue Feb 10 06:00:53 2026 by rpki-client