This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/wr64Qkyhhg94kKtHi11AmFA9j-0.roa File: wr64Qkyhhg94kKtHi11AmFA9j-0.roa (raw, json) Hash identifier: Mf2dT8r50MOCzgq5UCOMg4z4yEZJfDirWvZn2rKZ9bM= Subject key identifier: C2:BE:B8:42:4C:A1:86:0F:78:90:AB:47:8B:5D:40:98:50:3D:8F:ED Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64 Certificate serial: 019B78A32D04963B8C73BA48828084225B2D Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/wr64Qkyhhg94kKtHi11AmFA9j-0.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206359 IP address blocks: 185.242.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2d:04:96:3b:8c:73:ba:48:82:80:84:22:5b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2beb8424ca1860f7890ab478b5d4098503d8fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:9e:11:88:3d:72:8c:35:84:a4:17:e3:6c: bb:b6:9d:f7:33:5f:e1:bd:dc:74:17:85:2a:d8:67: ac:28:e3:b6:3c:54:93:2a:23:4a:10:ae:20:3b:e7: a9:55:61:15:cc:35:aa:9f:1c:88:90:e2:b8:b9:47: 2c:c9:83:c9:dc:f6:6d:98:c5:98:a3:c5:ae:27:7b: eb:62:f2:2f:d3:9d:35:15:56:b1:fe:03:df:31:d1: fa:7f:0d:5b:dc:05:78:80:a8:57:1a:17:6a:52:14: 39:37:b5:34:b8:98:0b:53:0f:6c:13:db:47:fc:d8: 06:47:f9:09:7c:c4:8c:be:19:2d:94:2c:a1:14:9d: 71:db:06:bc:c5:61:8b:f6:47:d3:43:9e:b8:5f:68: c8:d7:c7:fd:1a:b0:2f:36:58:9a:59:fe:4d:9d:3e: d6:45:cb:76:3b:4b:9e:f7:b8:fb:60:25:0c:8e:79: 0d:06:c3:1e:7f:bc:ec:f9:84:28:b6:44:27:4c:ba: 24:1a:9a:22:51:36:a9:f9:1d:68:fe:46:63:71:70: e0:7e:79:d3:a6:ce:ec:c4:a9:fa:fe:36:6a:6e:0f: 65:d9:c9:10:36:08:9a:de:bd:dd:5e:d2:90:dc:71: b1:bd:d1:74:25:0f:15:f9:2c:0b:7a:12:f1:5c:4d: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BE:B8:42:4C:A1:86:0F:78:90:AB:47:8B:5D:40:98:50:3D:8F:ED X509v3 Authority Key Identifier: keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/wr64Qkyhhg94kKtHi11AmFA9j-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.136.0/24 Signature Algorithm: sha256WithRSAEncryption ab:ab:bd:8d:3f:ae:5a:e2:aa:64:ad:c1:93:13:9f:e9:b2:7d: ef:8b:9f:b7:ec:c9:49:b5:4f:66:6e:10:32:13:32:f2:3e:0a: e0:f4:05:fc:57:93:a1:77:ee:c9:ed:72:67:1c:f7:11:78:5f: 66:68:14:9e:1e:b5:0b:65:a9:38:d8:47:09:db:9f:89:9b:0c: 04:b9:4f:ae:db:a3:73:f4:e8:d3:02:d5:26:b5:9b:29:0b:55: b9:b1:0f:8d:b6:16:c2:ba:6a:ad:44:8d:53:5f:d1:ac:74:2d: 33:f2:fa:ab:66:61:9e:49:46:b7:d2:b6:7a:ac:ac:cb:05:f1: a9:24:2b:9d:45:fd:5b:55:dc:c4:c2:f5:ee:0c:35:60:91:62: 7b:51:0b:b0:ac:db:1a:e2:3e:1e:cb:b0:e2:2a:cd:e1:5a:8c: 95:68:36:40:2d:35:7a:f6:57:a0:20:da:6b:b6:1c:49:c7:73: 92:6f:82:d2:0c:6d:81:f4:9c:7b:d6:fa:f6:1e:27:7c:3f:7f: 64:1c:9c:fc:92:1e:0c:c2:8a:bf:d6:96:ee:e4:50:2b:bb:34: 4a:44:e1:d3:ad:bf:a5:a5:84:01:82:5c:43:9b:2a:fc:76:e4: 70:f7:c0:bd:6d:7b:73:77:7e:38:91:cf:75:55:90:bc:7e:7d: 21:a3:74:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oy0EljuMc7pIgoCEIlstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTlhYzk4OWM0NGIyZTFjZGFiYzI1OGU5NmNhOTNjYWFk NGJkNjQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmJlYjg0MjRjYTE4NjBmNzg5MGFiNDc4YjVkNDA5ODUwM2Q4ZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0syeEYg9cow1hKQX42y7tp33M1/h vdx0F4Uq2GesKOO2PFSTKiNKEK4gO+epVWEVzDWqnxyIkOK4uUcsyYPJ3PZtmMWY o8WuJ3vrYvIv0501FVax/gPfMdH6fw1b3AV4gKhXGhdqUhQ5N7U0uJgLUw9sE9tH /NgGR/kJfMSMvhktlCyhFJ1x2wa8xWGL9kfTQ564X2jI18f9GrAvNliaWf5NnT7W Rct2O0ue97j7YCUMjnkNBsMef7zs+YQotkQnTLokGpoiUTap+R1o/kZjcXDgfnnT ps7sxKn6/jZqbg9l2ckQNgia3r3dXtKQ3HGxvdF0JQ8V+SwLehLxXE3A3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMK+uEJMoYYPeJCrR4tdQJhQPY/tMB8GA1UdIwQY MBaAFLeZrJicRLLhzavCWOlsqTyq1L1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMt OTE3NGRmNGRkYjlhLzEvd3I2NFFreWhoZzk0a0t0SGkxMUFtRkE5ai0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMtOTE3NGRmNGRkYjlh LzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufKIMA0G CSqGSIb3DQEBCwUAA4IBAQCrq72NP65a4qpkrcGTE5/psn3vi5+37MlJtU9mbhAy EzLyPgrg9AX8V5Ohd+7J7XJnHPcReF9maBSeHrULZak42EcJ25+JmwwEuU+u26Nz 9OjTAtUmtZspC1W5sQ+NthbCumqtRI1TX9GsdC0z8vqrZmGeSUa30rZ6rKzLBfGp JCudRf1bVdzEwvXuDDVgkWJ7UQuwrNsa4j4ey7DiKs3hWoyVaDZALTV69legINpr thxJx3OSb4LSDG2B9Jx71vr2Hid8P39kHJz8kh4Mwoq/1pbu5FAruzRKROHTrb+l pYQBglxDmyr8duRw98C9bXtzd344kc91VZC8fn0ho3Rf -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:22 2026 by rpki-client