This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/WgdXGCq5750IZB5Te3z2Ts4JuHo.roa File: WgdXGCq5750IZB5Te3z2Ts4JuHo.roa (raw, json) Hash identifier: BuQ1Y5enK/3DpIsodzPPjyugSuHNto6XMIOPzcMe6cQ= Subject key identifier: 5A:07:57:18:2A:B9:EF:9D:08:64:1E:53:7B:7C:F6:4E:CE:09:B8:7A Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Certificate serial: 019B7C1113197B107DE75EE6206085E4A994 Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/WgdXGCq5750IZB5Te3z2Ts4JuHo.roa Signing time: Fri 02 Jan 2026 00:17:32 +0000 ROA not before: Fri 02 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205220 IP address blocks: 185.167.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:13:19:7b:10:7d:e7:5e:e6:20:60:85:e4:a9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Validity Not Before: Jan 2 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a0757182ab9ef9d08641e537b7cf64ece09b87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:2a:f1:7e:f3:c4:2f:45:ed:8c:8e:8c:4f: 10:8d:e4:42:b4:ef:68:41:3b:d6:3b:a5:79:65:6a: a8:ab:2d:a2:b5:fc:f5:64:c9:cb:ea:2d:ee:b4:c5: 7b:33:99:0b:11:5f:f7:a7:59:eb:9f:af:0b:92:9c: 58:6f:79:e6:18:3e:15:d6:d0:ac:2b:0c:94:91:fb: 3b:a8:47:78:49:95:d0:8a:27:26:11:6e:35:b0:8e: 42:16:37:7c:6e:cf:c7:85:4b:96:85:cd:89:e7:97: 24:1b:56:01:d8:89:bf:6f:55:3c:e9:92:18:0e:2c: a0:e4:21:fc:d1:01:8c:0d:35:e0:bc:c8:e0:17:24: 86:72:c2:7e:1f:75:c3:35:d2:0b:15:2e:3d:b0:24: f1:0c:26:f4:fd:18:2c:dc:8d:6e:95:78:25:48:a2: 4b:34:37:85:42:49:af:0b:0f:81:8d:48:ed:3e:df: ea:9b:15:78:b3:11:26:67:f7:e7:84:34:0c:dd:fa: c6:31:e7:c3:db:80:bd:94:5e:06:2a:34:68:9b:48: b5:14:e6:60:51:3d:f9:83:6e:f4:11:07:d9:62:cb: ca:a0:b4:d7:aa:5f:8a:4c:c7:77:7d:89:ff:e5:ac: 92:35:7b:94:7b:0e:f5:87:6c:5b:f9:ae:7b:56:d2: be:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:07:57:18:2A:B9:EF:9D:08:64:1E:53:7B:7C:F6:4E:CE:09:B8:7A X509v3 Authority Key Identifier: keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/WgdXGCq5750IZB5Te3z2Ts4JuHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.233.0/24 Signature Algorithm: sha256WithRSAEncryption 17:4f:7f:96:6d:bd:a2:ef:d4:37:34:f2:4c:a0:df:72:29:0c: be:3c:82:1d:15:f9:78:65:52:af:6f:c6:a8:cc:9f:75:27:5b: 47:bd:1c:22:d4:3b:70:15:06:1c:35:15:ef:14:8f:3c:78:73: 70:d7:45:0f:f8:1d:3c:16:6f:c4:0f:12:f0:ed:4e:54:d1:9a: 22:d1:90:25:21:9e:2a:32:88:3b:50:95:32:6b:5f:fe:a0:b0: c8:8b:45:c8:b4:9d:b8:df:3b:ad:f3:83:e2:b2:8e:f9:f2:8f: 61:2b:83:b0:dd:8e:c9:c6:50:14:84:2f:e1:0b:03:45:c1:4a: cf:44:d8:1b:63:a4:8e:8a:51:cc:29:6f:e5:62:c7:45:d0:3e: 7d:49:8e:ad:96:a5:40:ef:8f:8a:38:7c:38:ee:59:b5:be:a5: f4:ed:16:df:d1:58:8f:79:3b:1c:b1:12:c5:6e:28:b9:c7:31: 21:eb:98:6e:5d:bc:23:ee:1d:88:4b:6e:f6:ea:87:99:0e:f6: 9c:62:cb:91:e4:46:c1:f4:1c:02:26:06:1e:10:ab:22:cb:51: a1:e4:2a:7f:35:14:70:14:a5:4a:4c:a3:9a:c3:96:6e:3e:df: 44:37:93:53:42:07:b0:93:31:7f:ba:7b:80:53:0f:f0:ac:bd: c5:ae:5b:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ERMZexB9517mIGCF5KmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx MmJiNjAwHhcNMjYwMTAyMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTA3NTcxODJhYjllZjlkMDg2NDFlNTM3YjdjZjY0ZWNlMDliODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHAq8X7zxC9F7YyOjE8QjeRCtO9o QTvWO6V5ZWqoqy2itfz1ZMnL6i3utMV7M5kLEV/3p1nrn68LkpxYb3nmGD4V1tCs KwyUkfs7qEd4SZXQiicmEW41sI5CFjd8bs/HhUuWhc2J55ckG1YB2Im/b1U86ZIY Diyg5CH80QGMDTXgvMjgFySGcsJ+H3XDNdILFS49sCTxDCb0/Rgs3I1ulXglSKJL NDeFQkmvCw+BjUjtPt/qmxV4sxEmZ/fnhDQM3frGMefD24C9lF4GKjRom0i1FOZg UT35g270EQfZYsvKoLTXql+KTMd3fYn/5aySNXuUew71h2xb+a57VtK+2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoHVxgque+dCGQeU3t89k7OCbh6MB8GA1UdIwQY MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt OWNmODQzZjA1NjcwLzEvV2dkWEdDcTU3NTBJWkI1VGUzejJUczRKdUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuafpMA0G CSqGSIb3DQEBCwUAA4IBAQAXT3+Wbb2i79Q3NPJMoN9yKQy+PIIdFfl4ZVKvb8ao zJ91J1tHvRwi1DtwFQYcNRXvFI88eHNw10UP+B08Fm/EDxLw7U5U0Zoi0ZAlIZ4q Mog7UJUya1/+oLDIi0XItJ243zut84Piso758o9hK4Ow3Y7JxlAUhC/hCwNFwUrP RNgbY6SOilHMKW/lYsdF0D59SY6tlqVA74+KOHw47lm1vqX07Rbf0ViPeTscsRLF bii5xzEh65huXbwj7h2IS2726oeZDvacYsuR5EbB9BwCJgYeEKsiy1Gh5Cp/NRRw FKVKTKOaw5ZuPt9EN5NTQgewkzF/unuAUw/wrL3FrluR -----END CERTIFICATE-----Generated at Fri Jan 2 21:42:10 2026 by rpki-client