This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/WDt4iXr00KdJl8lJ3kIc8IQzT9o.roa File: WDt4iXr00KdJl8lJ3kIc8IQzT9o.roa (raw, json) Hash identifier: 7oBkx8M/MHVrcHIQeuXw3DqbXYhiRYHX24jPnVtX94s= Subject key identifier: 58:3B:78:89:7A:F4:D0:A7:49:97:C9:49:DE:42:1C:F0:84:33:4F:DA Certificate issuer: /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb Certificate serial: 019B7910A30F7B9E15887066A64586F7D256 Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/WDt4iXr00KdJl8lJ3kIc8IQzT9o.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50698 IP address blocks: 109.202.64.0/19 maxlen: 20 159.253.232.0/21 maxlen: 22 185.116.76.0/22 maxlen: 23 2a06:4400::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a3:0f:7b:9e:15:88:70:66:a6:45:86:f7:d2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=583b78897af4d0a74997c949de421cf084334fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:2e:f1:5b:86:7c:59:31:b3:63:05:1a:2b: 98:f8:8a:c3:c9:95:b7:4e:2d:1e:6e:88:01:53:0f: 8f:44:14:20:79:39:c0:8f:2f:81:9e:65:d5:26:69: bc:38:ed:ce:e9:3b:41:5f:bf:17:fe:e6:13:c5:c3: 66:c2:d5:fd:8b:5b:33:57:97:d9:53:61:15:31:3d: cb:8a:65:11:b4:42:e0:45:9b:5a:59:35:84:1d:a4: e6:a6:58:64:33:3c:3f:27:62:ee:c3:62:be:26:95: 77:37:d5:c0:de:92:6f:58:cb:30:71:ec:50:ba:2a: 6f:2c:e2:e3:aa:7b:c9:09:ae:fd:1f:3e:e4:01:5d: bd:3d:1d:11:19:67:bf:ad:3b:c5:74:5c:65:63:8a: fc:12:53:7a:bd:24:ce:a2:a7:8f:c6:aa:f4:f7:99: 62:3e:21:a6:3b:5e:b2:71:f1:95:9e:e0:9f:66:1f: 46:f0:81:6d:76:df:b3:6d:9b:15:71:12:d5:0d:7a: 72:06:da:1f:70:d2:01:03:44:a3:e5:f9:a1:57:a9: 62:38:38:1a:46:f0:4f:7d:ee:f2:63:7e:97:76:ac: b0:d9:72:ae:ec:bd:8a:5c:9f:d3:77:85:33:3c:d9: 68:cb:92:17:4b:e9:3f:19:e1:0d:4f:eb:94:ff:15: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3B:78:89:7A:F4:D0:A7:49:97:C9:49:DE:42:1C:F0:84:33:4F:DA X509v3 Authority Key Identifier: keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/WDt4iXr00KdJl8lJ3kIc8IQzT9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.202.64.0/19 159.253.232.0/21 185.116.76.0/22 IPv6: 2a06:4400::/29 Signature Algorithm: sha256WithRSAEncryption 05:52:cf:04:17:66:b0:08:b7:96:4e:2f:29:25:6d:1c:fd:d7: c2:90:76:62:c1:a9:b0:9e:70:c3:c5:5d:95:82:dd:bb:ea:59: 0c:b8:91:63:84:69:77:ac:66:37:04:cd:8a:6f:52:2e:d9:51: cb:f3:d0:35:78:2e:b0:28:fe:17:0c:7d:1d:64:95:89:3c:06: 69:83:2d:03:1c:ae:91:58:de:bc:45:cc:46:e8:c5:5e:f9:2b: ff:5a:3b:77:70:0d:36:73:39:5a:e2:21:98:88:62:16:66:62: bb:81:c9:f1:2c:5a:df:ce:0f:30:30:ce:83:f0:ef:00:a8:c2: fa:08:df:9d:f9:9d:88:67:b7:7a:2d:49:ab:f3:3c:5e:65:b2: 24:76:cc:c6:aa:ad:26:54:ae:01:f4:5b:07:4f:78:13:76:4b: cb:59:22:99:5f:dc:fb:18:b0:e1:58:2e:3b:42:a9:37:ed:0b: a2:58:62:53:55:60:4b:a8:a6:9f:94:f3:e5:2b:10:b7:23:3f: 9e:aa:83:64:6c:5f:79:cb:61:61:87:e0:44:18:92:f8:d0:72: 05:8a:8d:ce:1e:68:8b:1d:d9:4a:e0:39:76:cd:64:4b:9d:d5: 0a:45:53:d1:79:42:75:26:a5:b0:b6:a2:aa:8f:11:21:e5:e0: e6:f3:c9:f1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5EKMPe54ViHBmpkWG99JWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWNkOWE2OWUxYjg0OTg3MDg0NThhYzUyMjA3Y2ZhYzFm MmMzY2IwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODNiNzg4OTdhZjRkMGE3NDk5N2M5NDlkZTQyMWNmMDg0MzM0ZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ0u8VuGfFkxs2MFGiuY+IrDyZW3 Ti0ebogBUw+PRBQgeTnAjy+BnmXVJmm8OO3O6TtBX78X/uYTxcNmwtX9i1szV5fZ U2EVMT3LimURtELgRZtaWTWEHaTmplhkMzw/J2Luw2K+JpV3N9XA3pJvWMswcexQ uipvLOLjqnvJCa79Hz7kAV29PR0RGWe/rTvFdFxlY4r8ElN6vSTOoqePxqr095li PiGmO16ycfGVnuCfZh9G8IFtdt+zbZsVcRLVDXpyBtofcNIBA0Sj5fmhV6liODga RvBPfe7yY36Xdqyw2XKu7L2KXJ/Td4UzPNloy5IXS+k/GeENT+uU/xXLFwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFg7eIl69NCnSZfJSd5CHPCEM0/aMB8GA1UdIwQY MBaAFAes2aaeG4SYcIRYrFIgfPrB8sPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZ6WnBwNGJoSmh3aEZpc1VpQjgtc0h5dzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jYzhiYzgtMjQ0MC00OTlkLTlkOTct YmE4NDk3NzhmZjU4LzEvV0R0NGlYcjAwS2RKbDhsSjNrSWM4SVF6VDlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jYzhiYzgtMjQ0MC00OTlkLTlkOTctYmE4NDk3NzhmZjU4 LzEvQjZ6WnBwNGJoSmh3aEZpc1VpQjgtc0h5dzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFbcpAAwQD n/3oAwQCuXRMMA0EAgACMAcDBQMqBkQAMA0GCSqGSIb3DQEBCwUAA4IBAQAFUs8E F2awCLeWTi8pJW0c/dfCkHZiwamwnnDDxV2Vgt276lkMuJFjhGl3rGY3BM2Kb1Iu 2VHL89A1eC6wKP4XDH0dZJWJPAZpgy0DHK6RWN68RcxG6MVe+Sv/Wjt3cA02czla 4iGYiGIWZmK7gcnxLFrfzg8wMM6D8O8AqML6CN+d+Z2IZ7d6LUmr8zxeZbIkdszG qq0mVK4B9FsHT3gTdkvLWSKZX9z7GLDhWC47Qqk37QuiWGJTVWBLqKaflPPlKxC3 Iz+eqoNkbF95y2Fhh+BEGJL40HIFio3OHmiLHdlK4Dl2zWRLndUKRVPReUJ1JqWw tqKqjxEh5eDm88nx -----END CERTIFICATE-----Generated at Tue Feb 10 05:48:53 2026 by rpki-client