This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/WbG6TcgYWYbVPSXH4DBwBfUrNq4.roa File: WbG6TcgYWYbVPSXH4DBwBfUrNq4.roa (raw, json) Hash identifier: MEHeYN4zLk7L6gRGwHOucCpdQci+lV7vAs27KrvMVDE= Subject key identifier: 59:B1:BA:4D:C8:18:59:86:D5:3D:25:C7:E0:30:70:05:F5:2B:36:AE Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627 Certificate serial: 019B78A2C0745633B51BC2CD7C3C40BE4934 Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/WbG6TcgYWYbVPSXH4DBwBfUrNq4.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.115.88.0/24 maxlen: 24 185.115.89.0/24 maxlen: 24 185.115.90.0/24 maxlen: 24 185.115.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c0:74:56:33:b5:1b:c2:cd:7c:3c:40:be:49:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59b1ba4dc8185986d53d25c7e0307005f52b36ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:36:51:3c:18:bd:3c:a9:22:dd:80:26:27: 6f:8f:af:77:9e:73:88:61:b3:5d:82:ee:bd:94:79: e1:b4:e9:c7:be:c9:30:8e:e9:31:92:e4:0f:8e:c5: 22:e9:89:c2:f1:81:b4:a5:e4:67:b6:d0:f1:eb:c0: a7:4d:b1:4b:22:d6:04:be:b0:5d:6f:a6:bf:f6:d0: 63:48:b1:47:7c:23:f5:92:01:c3:6b:92:c8:47:a4: c6:ad:07:20:c1:1b:49:26:61:6b:2b:91:86:3c:75: 24:fb:4a:7e:4b:c1:da:1f:a4:c4:10:26:a7:52:b3: ea:79:19:42:07:f1:c5:a6:31:85:6e:f6:43:86:00: e2:41:66:4f:4c:76:5a:f6:d0:1b:2d:8c:3e:de:f9: 15:d4:c7:f2:6f:35:11:a8:b2:15:c7:db:43:60:3a: 50:b4:27:c5:87:4e:24:ab:1c:40:35:6a:64:42:9a: 93:1f:f6:3e:7c:79:a0:8e:92:65:dc:07:a1:a7:d5: 00:bb:23:bd:d4:a0:3b:a3:a6:ad:4c:09:14:f7:25: fc:e9:f0:7c:68:71:e4:12:8e:2b:59:84:de:c8:f6: a2:d6:0e:f5:bb:93:5d:84:1e:45:8b:76:26:ce:64: da:2b:d8:da:dc:d1:77:75:f1:86:eb:89:f1:db:14: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:BA:4D:C8:18:59:86:D5:3D:25:C7:E0:30:70:05:F5:2B:36:AE X509v3 Authority Key Identifier: keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/WbG6TcgYWYbVPSXH4DBwBfUrNq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.88.0/22 Signature Algorithm: sha256WithRSAEncryption 50:61:f8:d2:41:82:d4:06:c4:f2:4e:b2:ea:72:f0:3e:67:25: 56:dd:92:e6:f4:41:74:83:fc:95:35:86:b4:9d:cb:27:b0:a9: 57:ec:94:f2:d8:f0:3a:aa:09:58:c5:27:56:80:85:79:8b:aa: f4:f3:e8:ab:91:4a:c8:ce:de:aa:b0:41:37:72:fc:3b:fc:7a: f1:d4:92:11:2a:17:9f:9d:43:3f:e3:03:3d:4a:31:1d:86:5d: ad:bd:45:70:2c:67:d9:92:59:3e:56:36:22:5a:70:6b:db:ca: 95:ca:3f:f2:5f:0b:6e:7d:ea:e3:e7:49:72:e7:e6:f9:0f:0b: 87:de:d1:1b:6a:ee:80:b7:0f:75:be:3b:1b:fb:19:a7:d9:53: 6b:f8:1d:40:c1:4b:52:2a:8d:a9:74:65:e3:32:74:a4:da:88: ca:71:db:3c:4a:cb:a9:e1:93:62:fc:2a:2e:4a:ed:da:23:1f: f3:34:74:d6:1b:af:bb:4d:14:60:22:66:18:66:7e:b9:cb:6c: 2f:8c:47:de:73:b5:dc:91:99:9d:50:21:73:61:36:d4:a2:e8: 41:4c:d7:04:0b:62:bb:83:17:98:5a:0f:1e:2d:96:5f:78:15: 94:7c:18:c4:24:dd:4e:26:bf:15:83:7b:a6:ef:87:fb:13:da: da:9c:00:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osB0VjO1G8LNfDxAvkk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyODc3Mjk4ZGFlNWQ1YTNiZWFiY2ExNmU5MmQxYTE0MWU5 NDg2MjcwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWIxYmE0ZGM4MTg1OTg2ZDUzZDI1YzdlMDMwNzAwNWY1MmIzNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nI2UTwYvTypIt2AJidvj693nnOI YbNdgu69lHnhtOnHvskwjukxkuQPjsUi6YnC8YG0peRnttDx68CnTbFLItYEvrBd b6a/9tBjSLFHfCP1kgHDa5LIR6TGrQcgwRtJJmFrK5GGPHUk+0p+S8HaH6TEECan UrPqeRlCB/HFpjGFbvZDhgDiQWZPTHZa9tAbLYw+3vkV1MfybzURqLIVx9tDYDpQ tCfFh04kqxxANWpkQpqTH/Y+fHmgjpJl3Aehp9UAuyO91KA7o6atTAkU9yX86fB8 aHHkEo4rWYTeyPai1g71u5NdhB5Fi3YmzmTaK9ja3NF3dfGG64nx2xQq9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFmxuk3IGFmG1T0lx+AwcAX1KzauMB8GA1UdIwQY MBaAFCKHcpja5dWjvqvKFuktGhQelIYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYt NTkzM2EwOWY3MmQxLzEvV2JHNlRjZ1lXWWJWUFNYSDREQndCZlVyTnE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYtNTkzM2EwOWY3MmQx LzEvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXNYMA0G CSqGSIb3DQEBCwUAA4IBAQBQYfjSQYLUBsTyTrLqcvA+ZyVW3ZLm9EF0g/yVNYa0 ncsnsKlX7JTy2PA6qglYxSdWgIV5i6r08+irkUrIzt6qsEE3cvw7/Hrx1JIRKhef nUM/4wM9SjEdhl2tvUVwLGfZklk+VjYiWnBr28qVyj/yXwtuferj50ly5+b5DwuH 3tEbau6Atw91vjsb+xmn2VNr+B1AwUtSKo2pdGXjMnSk2ojKcds8Ssup4ZNi/Cou Su3aIx/zNHTWG6+7TRRgImYYZn65y2wvjEfec7XckZmdUCFzYTbUouhBTNcEC2K7 gxeYWg8eLZZfeBWUfBjEJN1OJr8Vg3um74f7E9ranAC+ -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:00 2026 by rpki-client