This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/WteyplI9VbEj_k0baJL_kanP5wg.roa File: WteyplI9VbEj_k0baJL_kanP5wg.roa (raw, json) Hash identifier: eJHXRODGT84UEP05+CFtsRHNqBl4pdX8D+nlKwWrVTg= Subject key identifier: 5A:D7:B2:A6:52:3D:55:B1:23:FE:4D:1B:68:92:FF:91:A9:CF:E7:08 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C133EC51B18CD35FB4C747816E87BF0 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/WteyplI9VbEj_k0baJL_kanP5wg.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 185.68.244.0/24 maxlen: 24 185.104.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3e:c5:1b:18:cd:35:fb:4c:74:78:16:e8:7b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ad7b2a6523d55b123fe4d1b6892ff91a9cfe708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:bb:4f:57:64:61:2b:1f:df:11:18:ea:67: 54:6d:c3:ee:d6:99:48:cb:96:0c:ce:fd:04:55:cc: 5d:f1:a5:ff:f4:ed:ed:0e:e4:62:93:85:ff:32:d3: 20:8c:d3:04:8b:01:50:50:f4:cd:7d:bc:42:58:ba: d9:d2:b9:77:60:47:46:a0:1f:2c:c0:ea:ff:10:20: da:7e:d1:5b:47:f1:d2:1e:89:8c:5d:80:22:81:92: de:cb:37:48:d2:44:74:40:99:de:e2:bb:a5:23:11: 6b:99:f5:8a:70:34:0c:a4:fa:2c:92:e6:b4:06:7e: 75:bf:40:98:d7:e2:2d:d5:01:18:7c:79:d0:fc:5c: 0c:66:a7:7d:b0:be:e1:92:bd:82:18:7f:3b:1b:7f: 35:51:26:2c:c2:1a:76:15:15:50:93:0a:f4:0d:46: b7:d1:4f:cd:40:f8:1d:2b:12:56:e9:98:1d:8d:71: 7b:97:b0:07:f2:8a:64:22:67:ba:c3:21:fc:2e:7e: 3c:c2:66:9f:d7:1d:01:5c:07:dc:1f:d3:14:ca:2a: ff:5b:7a:eb:ce:1b:ba:20:b3:6a:c6:b8:8d:74:c0: f3:3e:90:18:8d:4b:62:eb:34:17:50:f9:2e:24:e6: 7f:76:b3:31:69:4d:ca:be:c1:d4:e9:7f:06:3d:c7: 51:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D7:B2:A6:52:3D:55:B1:23:FE:4D:1B:68:92:FF:91:A9:CF:E7:08 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/WteyplI9VbEj_k0baJL_kanP5wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.244.0/24 185.104.151.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:70:68:b6:69:f0:d0:c3:6f:85:d4:44:30:b5:d5:06:eb:ad: 8b:62:78:52:f7:35:99:a9:cb:ce:49:ce:2b:06:a8:b9:83:43: 0d:e6:c3:f7:a6:c5:e0:4e:a0:b7:67:78:32:c1:8a:ab:72:fd: 67:8c:cf:23:08:c5:0e:58:0e:99:32:cf:48:69:09:0d:ad:a7: 64:b1:fc:07:96:63:45:c3:b0:6d:50:44:81:7d:f6:e8:da:39: 3c:35:c0:48:1f:de:1a:0f:58:18:e1:96:f7:60:02:58:44:d2: 9f:59:6d:cd:75:ee:07:31:e8:8d:35:57:93:30:eb:98:2a:78: 11:8e:ca:d8:3a:b5:30:df:b7:c3:2f:b8:b5:42:ad:54:09:ff: 4b:93:bd:75:96:de:00:b3:03:3e:49:4e:05:80:bc:79:f9:99: c7:5e:88:da:fe:61:d3:d6:42:76:a4:18:c3:86:64:b0:31:11: 02:22:74:98:ce:8e:1c:26:79:22:a4:92:f4:4c:cb:54:5e:1b: ed:80:12:c3:1a:59:14:e4:19:ef:b4:bf:4d:93:fd:45:ef:50: ed:77:30:c4:e6:00:53:8b:f6:b6:ff:03:ab:8f:65:4e:28:82: 6f:a9:d9:c7:99:66:6f:73:03:ab:29:e9:9e:0c:78:9f:11:0c: d7:34:73:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ez7FGxjNNftMdHgW6HvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ3YjJhNjUyM2Q1NWIxMjNmZTRkMWI2ODkyZmY5MWE5Y2ZlNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpa7T1dkYSsf3xEY6mdUbcPu1plI y5YMzv0EVcxd8aX/9O3tDuRik4X/MtMgjNMEiwFQUPTNfbxCWLrZ0rl3YEdGoB8s wOr/ECDaftFbR/HSHomMXYAigZLeyzdI0kR0QJne4rulIxFrmfWKcDQMpPoskua0 Bn51v0CY1+It1QEYfHnQ/FwMZqd9sL7hkr2CGH87G381USYswhp2FRVQkwr0DUa3 0U/NQPgdKxJW6ZgdjXF7l7AH8opkIme6wyH8Ln48wmaf1x0BXAfcH9MUyir/W3rr zhu6ILNqxriNdMDzPpAYjUti6zQXUPkuJOZ/drMxaU3KvsHU6X8GPcdRqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFrXsqZSPVWxI/5NG2iS/5Gpz+cIMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvV3RleXBsSTlWYkVqX2swYmFKTF9rYW5QNXdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUT0AwQA uWiXMA0GCSqGSIb3DQEBCwUAA4IBAQA/cGi2afDQw2+F1EQwtdUG662LYnhS9zWZ qcvOSc4rBqi5g0MN5sP3psXgTqC3Z3gywYqrcv1njM8jCMUOWA6ZMs9IaQkNradk sfwHlmNFw7BtUESBffbo2jk8NcBIH94aD1gY4Zb3YAJYRNKfWW3Nde4HMeiNNVeT MOuYKngRjsrYOrUw37fDL7i1Qq1UCf9Lk711lt4AswM+SU4FgLx5+ZnHXoja/mHT 1kJ2pBjDhmSwMRECInSYzo4cJnkipJL0TMtUXhvtgBLDGlkU5BnvtL9Nk/1F71Dt dzDE5gBTi/a2/wOrj2VOKIJvqdnHmWZvcwOrKemeDHifEQzXNHNX -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:13 2026 by rpki-client