This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/WBLbs6kYXGrlEx6T40cioY5X7d0.roa File: WBLbs6kYXGrlEx6T40cioY5X7d0.roa (raw, json) Hash identifier: 4ngnju8c6iA7vz95M3kK1HJp1mfNKhTarXKcGx/UIAU= Subject key identifier: 58:12:DB:B3:A9:18:5C:6A:E5:13:1E:93:E3:47:22:A1:8E:57:ED:DD Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324 Certificate serial: 019B7A5AC053B69E0D48E26524AC5B62EC5B Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/WBLbs6kYXGrlEx6T40cioY5X7d0.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49054 IP address blocks: 95.131.168.0/22 maxlen: 22 95.131.169.0/24 maxlen: 24 95.131.170.0/24 maxlen: 24 185.247.232.0/22 maxlen: 22 185.247.232.0/24 maxlen: 24 185.247.233.0/24 maxlen: 24 185.247.234.0/24 maxlen: 24 2a0d:d080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c0:53:b6:9e:0d:48:e2:65:24:ac:5b:62:ec:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324 Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5812dbb3a9185c6ae5131e93e34722a18e57eddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:51:eb:54:06:80:ad:98:21:58:76:23:65: 5c:38:c8:d3:6d:7e:ef:92:89:fc:14:57:c0:1d:89: 5c:81:dc:ad:d2:40:e3:b8:20:52:82:d2:08:8b:87: d2:c6:90:fc:c5:93:38:af:01:0b:01:b6:05:f1:b6: ff:8e:01:68:09:9e:15:b6:26:7e:67:3d:41:90:4d: 48:54:de:d5:11:b0:38:10:ac:21:f6:8a:50:1f:ac: fb:c1:53:47:78:97:f1:06:a9:45:62:6e:d3:ca:c7: e6:8f:f3:fd:c3:d0:d2:ee:fc:35:6d:f0:6a:3e:fe: 73:33:a3:c4:1c:92:2d:54:0c:fb:4a:e8:98:14:bb: db:65:49:f5:a6:68:14:73:e5:39:54:c3:1c:73:43: a9:87:e1:5c:25:d3:67:e9:ac:a4:9c:a0:5a:8f:98: d8:25:55:6f:5e:07:2c:47:41:5a:d7:a7:8e:bc:ab: c2:01:59:bf:96:15:0a:74:e8:f2:cf:ba:0a:ef:0b: 10:15:d6:b7:b8:59:56:e5:77:d3:68:fb:37:23:59: 93:fa:72:7f:82:01:71:eb:18:8a:08:3e:94:a8:19: ee:9b:70:78:63:b2:7d:21:93:81:a2:55:19:29:00: 98:49:f5:f4:f6:14:c2:7f:57:5d:65:e6:e2:27:ea: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:DB:B3:A9:18:5C:6A:E5:13:1E:93:E3:47:22:A1:8E:57:ED:DD X509v3 Authority Key Identifier: keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/WBLbs6kYXGrlEx6T40cioY5X7d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.168.0/22 185.247.232.0/22 IPv6: 2a0d:d080::/29 Signature Algorithm: sha256WithRSAEncryption 03:19:fb:24:d2:6a:ef:98:59:1d:9b:a8:14:93:10:9d:28:4d: fe:7c:cc:da:71:9a:59:19:fc:32:f5:07:fb:10:4d:82:24:a4: db:35:9e:b8:eb:cc:2f:e7:83:1e:2e:3f:cd:70:95:56:5c:97: 61:2e:e4:3b:58:9f:95:38:50:09:5f:54:7f:28:f8:73:6b:ce: 24:bb:49:cd:8a:52:c7:74:f1:c8:db:37:4a:59:4f:bb:c9:2d: d6:12:68:ad:59:30:c9:19:d7:2e:57:6f:a5:9a:c8:20:39:24: 0d:0d:5b:0e:eb:82:eb:7a:d9:a2:8a:fb:eb:18:33:ee:f2:05: c5:48:f6:30:08:63:04:31:68:9f:0a:62:43:47:8e:81:a1:4f: ab:e6:e8:e1:4d:09:2c:d2:d5:57:85:8a:0b:64:75:ef:65:f1: 3f:52:e8:f5:5f:1a:22:80:ed:4b:ee:18:6a:b3:8a:7f:f8:09: 74:26:65:7b:9b:1f:a1:4a:fe:32:f0:de:24:8f:2c:0a:90:af: e7:13:e1:93:b8:89:a4:4f:12:39:24:b4:d1:e6:7b:08:7a:01: 4f:03:e5:de:12:27:ed:a1:b9:70:62:38:ae:00:e2:8d:d2:4e: a1:ed:d0:05:7c:5a:47:12:95:f5:6a:e8:bc:78:e2:e4:d5:c7: d2:11:30:d1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WsBTtp4NSOJlJKxbYuxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGExODFhYTA5MGNiOTcwNjA1YTI1YTdhNTdkNjUzNTQ3 ZjIzMjQwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODEyZGJiM2E5MTg1YzZhZTUxMzFlOTNlMzQ3MjJhMThlNTdlZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml9R61QGgK2YIVh2I2VcOMjTbX7v kon8FFfAHYlcgdyt0kDjuCBSgtIIi4fSxpD8xZM4rwELAbYF8bb/jgFoCZ4VtiZ+ Zz1BkE1IVN7VEbA4EKwh9opQH6z7wVNHeJfxBqlFYm7Tysfmj/P9w9DS7vw1bfBq Pv5zM6PEHJItVAz7SuiYFLvbZUn1pmgUc+U5VMMcc0Oph+FcJdNn6ayknKBaj5jY JVVvXgcsR0Fa16eOvKvCAVm/lhUKdOjyz7oK7wsQFda3uFlW5XfTaPs3I1mT+nJ/ ggFx6xiKCD6UqBnum3B4Y7J9IZOBolUZKQCYSfX09hTCf1ddZebiJ+oJywIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFgS27OpGFxq5RMek+NHIqGOV+3dMB8GA1UdIwQY MBaAFFcKGBqgkMuXBgWiWnpX1lNUfyMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVndvWUdxQ1F5NWNHQmFKYWVsZldVMVJfSXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wYzhiMGYtNTM4NC00NTgwLTg5YzIt YTYzNzY1MGM3NGFlLzEvV0JMYnM2a1lYR3JsRXg2VDQwY2lvWTVYN2QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wYzhiMGYtNTM4NC00NTgwLTg5YzItYTYzNzY1MGM3NGFl LzEvVndvWUdxQ1F5NWNHQmFKYWVsZldVMVJfSXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCX4OoAwQC uffoMA0EAgACMAcDBQMqDdCAMA0GCSqGSIb3DQEBCwUAA4IBAQADGfsk0mrvmFkd m6gUkxCdKE3+fMzacZpZGfwy9Qf7EE2CJKTbNZ6468wv54MeLj/NcJVWXJdhLuQ7 WJ+VOFAJX1R/KPhza84ku0nNilLHdPHI2zdKWU+7yS3WEmitWTDJGdcuV2+lmsgg OSQNDVsO64LretmiivvrGDPu8gXFSPYwCGMEMWifCmJDR46BoU+r5ujhTQks0tVX hYoLZHXvZfE/Uuj1XxoigO1L7hhqs4p/+Al0JmV7mx+hSv4y8N4kjywKkK/nE+GT uImkTxI5JLTR5nsIegFPA+XeEiftoblwYjiuAOKN0k6h7dAFfFpHEpX1aui8eOLk 1cfSETDR -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:23 2026 by rpki-client