This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/wZmbsUs_zMKDhyYysQ150aHCark.roa File: wZmbsUs_zMKDhyYysQ150aHCark.roa (raw, json) Hash identifier: E/PsEmFmpmX2u5lDiUuhxf7JjZYZ6hXTzvmHbRmdJEU= Subject key identifier: C1:99:9B:B1:4B:3F:CC:C2:83:87:26:32:B1:0D:79:D1:A1:C2:6A:B9 Certificate issuer: /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101 Certificate serial: 019B783526E3BC386DA09FCA3D931E65E51A Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/wZmbsUs_zMKDhyYysQ150aHCark.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205007 IP address blocks: 185.48.250.0/24 maxlen: 24 185.48.251.0/24 maxlen: 24 2a04:b540:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:26:e3:bc:38:6d:a0:9f:ca:3d:93:1e:65:e5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101 Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1999bb14b3fccc283872632b10d79d1a1c26ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:8e:35:12:d3:b0:69:5f:96:44:6c:0f:38: 57:93:72:2e:7d:1c:85:69:4f:6d:7b:62:93:aa:44: e0:da:aa:44:0d:fa:56:3a:3f:8a:5d:26:e2:bc:3a: 1c:25:ea:62:b6:b8:63:3e:8a:4d:7b:59:05:4a:e0: d9:69:3b:c6:72:c6:ba:37:0d:5f:3f:bc:9b:c2:f3: 80:83:de:80:21:19:a7:5c:d1:e6:fa:04:96:08:8a: e5:e5:1d:c5:52:94:f0:43:57:e2:ff:d4:f4:eb:c4: 51:87:2e:c8:41:01:a3:a7:fd:4e:71:03:22:7c:62: da:46:59:54:cc:68:c0:8a:db:e1:b3:98:73:6e:5f: 46:15:13:0b:2f:10:b9:af:5d:6f:9d:3d:da:d2:81: 2d:92:7f:fd:cf:43:f5:cd:a5:5d:51:10:d7:2c:6f: 79:63:12:9c:8a:1b:a6:a4:97:aa:eb:89:58:07:d3: 58:07:41:cd:0a:e0:97:61:cf:bd:0e:19:4f:36:1d: 75:5d:f1:e7:e0:65:90:2f:ac:bb:eb:c6:46:67:d0: 87:07:f5:d6:21:a4:01:b3:e6:16:86:c0:b5:18:3c: 45:39:59:f2:a9:db:fa:0a:c6:d6:21:40:a6:a6:d6: aa:86:2b:22:79:84:e6:33:20:61:2a:e3:78:9a:b4: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:99:9B:B1:4B:3F:CC:C2:83:87:26:32:B1:0D:79:D1:A1:C2:6A:B9 X509v3 Authority Key Identifier: keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/wZmbsUs_zMKDhyYysQ150aHCark.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.250.0/23 IPv6: 2a04:b540:3000::/36 Signature Algorithm: sha256WithRSAEncryption 97:e6:f7:36:cf:9d:81:08:b8:8c:a4:b7:1e:cc:0e:32:6f:c1: 63:3d:a5:ff:29:93:5d:2b:1b:a7:63:a2:93:d2:7e:72:07:72: 91:9b:84:09:98:63:7a:0b:8f:d0:28:64:3d:dc:18:e2:36:e9: f1:88:66:82:f9:9f:ac:c2:78:71:83:6b:83:b0:e2:c4:45:cf: 2a:d7:56:67:d9:e5:1a:fa:7d:66:58:6e:86:6a:90:57:b2:ab: 06:42:24:e3:70:3d:68:5a:6c:b8:2b:a7:e8:05:11:29:8b:41: 7d:f3:73:d7:da:66:57:01:ec:2e:05:b7:74:22:90:cf:a1:6a: 48:52:3d:54:ef:9e:c9:0f:a3:0d:1d:39:ce:3a:39:c0:60:89: 3c:1f:7d:ee:45:e9:f9:8b:8a:82:2a:0b:9c:e7:c7:5d:d4:c5: f8:25:72:b2:b1:af:19:c6:1a:28:cd:94:b7:19:fe:8c:86:ba: ef:86:ad:bf:13:61:8d:0a:b5:fa:d8:e9:29:08:40:eb:87:27: 02:f4:3b:17:19:02:1a:ad:ea:ae:5f:4d:4a:cd:f1:c8:f7:42: e3:39:f5:23:3f:90:32:de:b3:a3:65:5d:4b:52:52:db:b4:8f: cb:17:bd:b1:0f:35:29:da:19:54:aa:91:62:df:b2:36:15:ef: fb:a8:c4:e6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4NSbjvDhtoJ/KPZMeZeUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOTgyODgzZTFkZmJmNDYzM2UwOGMwYjU4Yzg1ZTg5ZmZj MzIxMDEwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTk5OWJiMTRiM2ZjY2MyODM4NzI2MzJiMTBkNzlkMWExYzI2YWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VqONRLTsGlflkRsDzhXk3IufRyF aU9te2KTqkTg2qpEDfpWOj+KXSbivDocJepitrhjPopNe1kFSuDZaTvGcsa6Nw1f P7ybwvOAg96AIRmnXNHm+gSWCIrl5R3FUpTwQ1fi/9T068RRhy7IQQGjp/1OcQMi fGLaRllUzGjAitvhs5hzbl9GFRMLLxC5r11vnT3a0oEtkn/9z0P1zaVdURDXLG95 YxKcihumpJeq64lYB9NYB0HNCuCXYc+9DhlPNh11XfHn4GWQL6y768ZGZ9CHB/XW IaQBs+YWhsC1GDxFOVnyqdv6CsbWIUCmptaqhisieYTmMyBhKuN4mrTWGwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFMGZm7FLP8zCg4cmMrENedGhwmq5MB8GA1UdIwQY MBaAFBuYKIPh379GM+CMC1jIXon/wyEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2It ZDA3OGVlYzgyYjJhLzEvd1ptYnNVc196TUtEaHlZeXNRMTUwYUhDYXJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2ItZDA3OGVlYzgyYjJh LzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuTD6MA4E AgACMAgDBgQqBLVAMDANBgkqhkiG9w0BAQsFAAOCAQEAl+b3Ns+dgQi4jKS3HswO Mm/BYz2l/ymTXSsbp2Oik9J+cgdykZuECZhjeguP0ChkPdwY4jbp8YhmgvmfrMJ4 cYNrg7DixEXPKtdWZ9nlGvp9ZlhuhmqQV7KrBkIk43A9aFpsuCun6AURKYtBffNz 19pmVwHsLgW3dCKQz6FqSFI9VO+eyQ+jDR05zjo5wGCJPB997kXp+YuKgioLnOfH XdTF+CVysrGvGcYaKM2Utxn+jIa674atvxNhjQq1+tjpKQhA64cnAvQ7FxkCGq3q rl9NSs3xyPdC4zn1Iz+QMt6zo2VdS1JS27SPyxe9sQ81KdoZVKqRYt+yNhXv+6jE 5g== -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:27 2026 by rpki-client