This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/wtGM5BsZqPclLmQJVZ4Qugj0xo0.roa File: wtGM5BsZqPclLmQJVZ4Qugj0xo0.roa (raw, json) Hash identifier: 2XlLOO+ABU/ZZshWxT2yxE7ljUn/cRbzQybAhDOI4UQ= Subject key identifier: C2:D1:8C:E4:1B:19:A8:F7:25:2E:64:09:55:9E:10:BA:08:F4:C6:8D Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8 Certificate serial: 019B7EA4D690E67C4E80CC33C3F5C0FB2286 Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/wtGM5BsZqPclLmQJVZ4Qugj0xo0.roa Signing time: Fri 02 Jan 2026 12:18:10 +0000 ROA not before: Fri 02 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.98.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d6:90:e6:7c:4e:80:cc:33:c3:f5:c0:fb:22:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8 Validity Not Before: Jan 2 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2d18ce41b19a8f7252e6409559e10ba08f4c68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:03:fd:dd:e9:fb:f5:8e:8a:cb:ea:9d:88: 30:f3:44:a8:2c:ed:7e:e7:d1:bc:cb:bd:67:a8:ba: e8:f1:ef:86:ef:0a:70:1e:08:69:cd:8a:3d:53:57: cb:d1:4b:cd:a5:36:3f:32:e2:56:9e:db:b8:a6:83: 5b:4e:19:3e:15:dc:fa:1a:8a:16:bd:9b:9e:30:95: a5:64:3c:25:79:3a:ae:90:9b:7e:78:7f:19:3c:9c: b2:eb:8c:b6:fd:ac:8f:5a:f2:f2:40:e0:b7:01:53: 99:ad:ad:e3:04:1c:2d:ef:50:ca:9d:f0:85:c9:82: 47:27:2a:6d:bb:f6:c7:3a:0b:15:2f:0a:a9:97:5e: b5:a8:c6:37:09:82:16:63:c2:0b:0e:05:13:b9:b7: 61:d3:34:b0:49:6f:37:6e:ab:f4:42:2e:af:0d:e8: 09:89:9d:e2:d9:10:51:44:58:4b:48:9d:fd:c6:76: e1:22:2f:57:b4:0e:5e:43:b5:a1:b9:bd:c5:3b:e2: 7d:ad:0d:d8:4f:b4:ad:d1:4c:b7:71:01:57:c5:87: 66:39:ca:c2:51:d2:87:43:a5:41:07:14:2b:1e:05: 03:f7:6b:0a:d2:cc:1b:a6:cb:72:88:65:25:57:d9: e8:12:79:52:36:47:f8:82:62:04:12:01:9b:6d:e6: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D1:8C:E4:1B:19:A8:F7:25:2E:64:09:55:9E:10:BA:08:F4:C6:8D X509v3 Authority Key Identifier: keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/wtGM5BsZqPclLmQJVZ4Qugj0xo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.159.0/24 Signature Algorithm: sha256WithRSAEncryption 76:a2:d7:d8:5b:29:82:26:c2:ad:28:48:88:bb:43:ee:93:57: 8f:a4:b8:40:8b:f0:60:f3:ab:8d:2f:c0:eb:7f:dd:cb:0f:ad: 6f:e1:65:7b:f3:ea:aa:da:52:34:05:e6:f3:bb:c1:f2:7d:14: 32:30:ca:69:94:be:fb:88:b4:67:a5:56:c4:ef:7a:5a:bd:64: 68:69:92:81:bc:b3:b3:43:e9:a9:3b:de:7f:d0:32:9d:e9:66: 3c:40:85:9c:35:dd:7c:db:33:ea:96:8d:7a:1d:fe:23:9a:32: a1:70:c7:f3:36:4c:5a:14:d1:b3:83:d1:3d:87:69:95:b2:b4: 42:31:74:58:2c:7c:16:b8:3e:dc:8d:a2:a6:54:a1:e4:1f:12: c9:9d:e2:0f:58:36:95:90:5a:fb:2e:a7:ac:13:0d:04:90:39: ed:34:f2:7b:97:50:d1:65:9f:09:76:89:6b:fa:8c:98:c8:a1: e9:72:64:3d:dd:06:d4:eb:ad:e9:ab:d9:3b:d2:e9:c5:6e:29: 2e:8e:06:ac:fe:30:b7:5f:8d:74:e2:ad:57:67:37:23:93:c8: bc:4b:d6:68:16:3e:ee:a2:9c:59:98:8a:ae:55:ec:00:b6:98: 06:e5:04:42:f5:a7:44:2e:9b:82:25:02:f1:1e:a5:2f:47:9e: 8c:ab:85:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pNaQ5nxOgMwzw/XA+yKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDYwZDJkYzZhZDgyYTI1NzBlMDAwMGZkZDk5Mzk0OGJj NDU0ZDgwHhcNMjYwMTAyMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmQxOGNlNDFiMTlhOGY3MjUyZTY0MDk1NTllMTBiYTA4ZjRjNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx0D/d3p+/WOisvqnYgw80SoLO1+ 59G8y71nqLro8e+G7wpwHghpzYo9U1fL0UvNpTY/MuJWntu4poNbThk+Fdz6GooW vZueMJWlZDwleTqukJt+eH8ZPJyy64y2/ayPWvLyQOC3AVOZra3jBBwt71DKnfCF yYJHJyptu/bHOgsVLwqpl161qMY3CYIWY8ILDgUTubdh0zSwSW83bqv0Qi6vDegJ iZ3i2RBRRFhLSJ39xnbhIi9XtA5eQ7Whub3FO+J9rQ3YT7St0Uy3cQFXxYdmOcrC UdKHQ6VBBxQrHgUD92sK0swbpstyiGUlV9noEnlSNkf4gmIEEgGbbea0HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLRjOQbGaj3JS5kCVWeELoI9MaNMB8GA1UdIwQY MBaAFITWDS3GrYKiVw4AAP3Zk5SLxFTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAt NTRmNmJjODVhYWMwLzEvd3RHTTVCc1pxUGNsTG1RSlZaNFF1Z2oweG8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAtNTRmNmJjODVhYWMw LzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWKfMA0G CSqGSIb3DQEBCwUAA4IBAQB2otfYWymCJsKtKEiIu0Puk1ePpLhAi/Bg86uNL8Dr f93LD61v4WV78+qq2lI0Bebzu8HyfRQyMMpplL77iLRnpVbE73pavWRoaZKBvLOz Q+mpO95/0DKd6WY8QIWcNd182zPqlo16Hf4jmjKhcMfzNkxaFNGzg9E9h2mVsrRC MXRYLHwWuD7cjaKmVKHkHxLJneIPWDaVkFr7LqesEw0EkDntNPJ7l1DRZZ8Jdolr +oyYyKHpcmQ93QbU663pq9k70unFbikujgas/jC3X4104q1XZzcjk8i8S9ZoFj7u opxZmIquVewAtpgG5QRC9adELpuCJQLxHqUvR56Mq4Xj -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:58 2026 by rpki-client