This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/WYdRQ5cIvCbePXrfeSyu6TkOanw.roa File: WYdRQ5cIvCbePXrfeSyu6TkOanw.roa (raw, json) Hash identifier: ovr1qQ5nW2VpX0gLwNkAZbSyQiC2DrZzZpubC+JN+Yk= Subject key identifier: 59:87:51:43:97:08:BC:26:DE:3D:7A:DF:79:2C:AE:E9:39:0E:6A:7C Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e Certificate serial: 019B7D5C2CD82201B16BD6860FD4C2F26F6C Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/WYdRQ5cIvCbePXrfeSyu6TkOanw.roa Signing time: Fri 02 Jan 2026 06:19:11 +0000 ROA not before: Fri 02 Jan 2026 06:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211629 IP address blocks: 185.252.203.0/24 maxlen: 24 2a10:b340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2c:d8:22:01:b1:6b:d6:86:0f:d4:c2:f2:6f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e Validity Not Before: Jan 2 06:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=598751439708bc26de3d7adf792caee9390e6a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:65:ab:8c:56:df:a2:f2:2d:db:b8:cc:93: 33:e0:c3:d4:0b:56:f1:e3:ef:7e:04:a0:af:04:74: ab:ee:40:27:5b:74:e1:3c:b5:95:49:42:d8:18:38: a3:88:b8:d4:45:2f:18:97:c0:68:54:9c:47:91:38: 34:a1:0b:0c:f5:77:02:d5:08:ef:64:e4:a3:fd:e7: 3a:8e:3f:77:ec:c0:2f:73:cd:19:e9:e4:0a:c4:36: 2b:76:13:0c:83:7d:30:2d:67:1c:a1:ac:33:55:c3: 45:20:71:45:11:3d:b9:87:78:dd:b6:04:1d:d5:e6: 58:44:59:1b:a9:f2:84:f8:a2:10:11:cf:94:6f:10: e8:50:6a:fe:05:b3:a1:83:e1:f0:a5:ef:8d:e0:31: 44:d5:e7:87:d4:62:4e:73:38:93:f3:01:cd:ce:e3: a7:58:c6:0e:fc:a4:a8:0c:6b:32:ca:64:19:f4:43: 3a:dc:13:03:15:36:7e:df:cf:99:64:b4:c5:65:c6: 02:21:b7:4d:f1:d3:bb:af:21:d9:f1:be:ca:4e:a1: 8c:61:44:8a:3a:01:91:e1:71:22:66:4c:9b:75:ad: 43:eb:1f:08:a9:5c:d7:d9:25:e6:bb:88:4d:92:6f: 0b:f3:47:e9:8d:62:3d:c2:80:cd:53:fc:48:b1:7f: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:87:51:43:97:08:BC:26:DE:3D:7A:DF:79:2C:AE:E9:39:0E:6A:7C X509v3 Authority Key Identifier: keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/WYdRQ5cIvCbePXrfeSyu6TkOanw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.203.0/24 IPv6: 2a10:b340::/29 Signature Algorithm: sha256WithRSAEncryption 6a:10:66:1b:c0:30:4e:b8:ac:62:eb:9c:36:5c:c1:b2:d1:e1: be:7a:d9:a3:04:fa:8e:59:b3:50:3e:5b:ea:16:89:0e:b1:50: ac:dd:28:28:04:68:ba:04:f7:46:3e:4c:a0:b1:df:99:51:00: 25:6c:13:9f:c4:07:66:33:dd:d2:3b:e9:cf:f9:b5:25:0b:9e: 66:c5:4d:0c:71:76:30:72:00:ce:69:41:11:b7:36:ec:d5:1a: 14:06:ce:fc:3c:b8:c4:c9:37:42:ef:22:4a:9b:67:27:3f:22: f3:93:91:33:95:52:e1:1d:1a:da:43:6e:3a:01:35:5a:c8:f4: e1:2c:71:6a:55:db:ef:bf:6a:f5:f8:38:e9:05:1d:09:e8:c5: 9e:61:f9:cb:00:6d:e4:7c:7f:6c:4e:a8:76:0a:8e:90:0b:af: 96:aa:14:0c:a3:3b:06:ce:1e:6c:c2:d4:7a:54:0f:80:93:73: 53:dd:fc:ee:26:c2:0a:01:38:09:a0:ee:5e:21:f7:c3:ae:59: 26:1f:78:26:2f:a5:a8:61:f4:61:37:72:ee:62:1e:88:45:9b: b1:67:7e:ab:d7:aa:d0:2f:b3:24:6f:bb:d5:f8:d2:67:d4:9e: 13:8d:15:dc:2a:a5:fd:c4:6c:55:b9:38:30:58:49:fe:25:69: b5:d1:94:a4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XCzYIgGxa9aGD9TC8m9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkODUzMTRkMTNjNzgyYzA1MmRkMDIyYjNlNGUyMDE0MmI2 NDE3MGUwHhcNMjYwMTAyMDYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTg3NTE0Mzk3MDhiYzI2ZGUzZDdhZGY3OTJjYWVlOTM5MGU2YTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArutlq4xW36LyLdu4zJMz4MPUC1bx 4+9+BKCvBHSr7kAnW3ThPLWVSULYGDijiLjURS8Yl8BoVJxHkTg0oQsM9XcC1Qjv ZOSj/ec6jj937MAvc80Z6eQKxDYrdhMMg30wLWccoawzVcNFIHFFET25h3jdtgQd 1eZYRFkbqfKE+KIQEc+UbxDoUGr+BbOhg+Hwpe+N4DFE1eeH1GJOcziT8wHNzuOn WMYO/KSoDGsyymQZ9EM63BMDFTZ+38+ZZLTFZcYCIbdN8dO7ryHZ8b7KTqGMYUSK OgGR4XEiZkybda1D6x8IqVzX2SXmu4hNkm8L80fpjWI9woDNU/xIsX88ZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFmHUUOXCLwm3j1633ksruk5Dmp8MB8GA1UdIwQY MBaAFL2FMU0Tx4LAUt0CKz5OIBQrZBcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdllVeFRSUEhnc0JTM1FJclBrNGdGQ3RrRnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wNTJkMzgtNjA4MC00ZTc5LThhNGIt NjI1NTE1ZmY1OTQ0LzEvV1lkUlE1Y0l2Q2JlUFhyZmVTeXU2VGtPYW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wNTJkMzgtNjA4MC00ZTc5LThhNGItNjI1NTE1ZmY1OTQ0 LzEvdllVeFRSUEhnc0JTM1FJclBrNGdGQ3RrRnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufzLMA0E AgACMAcDBQMqELNAMA0GCSqGSIb3DQEBCwUAA4IBAQBqEGYbwDBOuKxi65w2XMGy 0eG+etmjBPqOWbNQPlvqFokOsVCs3SgoBGi6BPdGPkygsd+ZUQAlbBOfxAdmM93S O+nP+bUlC55mxU0McXYwcgDOaUERtzbs1RoUBs78PLjEyTdC7yJKm2cnPyLzk5Ez lVLhHRraQ246ATVayPThLHFqVdvvv2r1+DjpBR0J6MWeYfnLAG3kfH9sTqh2Co6Q C6+WqhQMozsGzh5swtR6VA+Ak3NT3fzuJsIKATgJoO5eIffDrlkmH3gmL6WoYfRh N3LuYh6IRZuxZ36r16rQL7Mkb7vV+NJn1J4TjRXcKqX9xGxVuTgwWEn+JWm10ZSk -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:56 2026 by rpki-client