This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/WsB2cpz5PeeV12FuRGXIMnfEpDA.roa File: WsB2cpz5PeeV12FuRGXIMnfEpDA.roa (raw, json) Hash identifier: RXGdsxXZdhMgqQg6njT8x//0fSXw5JT6Hs6Qaa1Fb6M= Subject key identifier: 5A:C0:76:72:9C:F9:3D:E7:95:D7:61:6E:44:65:C8:32:77:C4:A4:30 Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6 Certificate serial: 019B77C704F8EB097C3309AD06533EEADBBD Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/WsB2cpz5PeeV12FuRGXIMnfEpDA.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197120 IP address blocks: 193.160.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:04:f8:eb:09:7c:33:09:ad:06:53:3e:ea:db:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ac076729cf93de795d7616e4465c83277c4a430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ec:da:91:05:7e:02:3d:c1:58:d7:e2:e8:9b: d0:06:55:95:78:bb:71:e1:28:ec:08:58:ef:79:2c: 13:f8:4e:68:d0:dd:ff:dd:83:da:b8:25:86:3c:6a: 72:7f:30:c9:35:7f:80:54:ae:74:c5:88:18:1e:62: 3b:17:73:8c:8f:e9:02:c5:83:2d:0d:87:14:6d:60: 41:2f:6e:a1:ba:4c:21:ad:62:d2:a0:41:a1:78:fd: ae:01:2e:6a:24:28:b7:dc:06:22:10:b7:99:39:c2: 46:67:9e:82:c6:df:9a:b2:88:b2:66:9f:e9:84:09: c6:53:59:52:0e:29:93:ac:8e:62:05:02:47:67:02: ad:16:2a:c3:57:c6:82:15:6e:c2:41:b0:1b:e4:8f: 35:e1:90:e4:b2:37:96:38:2c:89:7e:56:1f:6e:41: d2:89:04:29:f6:ea:f4:7d:ed:89:d8:f2:9a:11:aa: ee:ea:57:16:0a:41:45:a1:cb:e3:42:0e:d3:4e:32: b1:6b:3f:19:80:5e:16:ba:07:8d:fb:ce:01:d2:49: 45:ab:85:6d:d9:98:d4:56:a5:c8:40:39:25:66:d7: 52:4b:e6:ab:c1:22:b5:e3:17:a6:8c:b2:bb:c1:90: 76:46:86:68:52:02:71:af:43:63:1a:38:38:f5:f6: ae:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C0:76:72:9C:F9:3D:E7:95:D7:61:6E:44:65:C8:32:77:C4:A4:30 X509v3 Authority Key Identifier: keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/WsB2cpz5PeeV12FuRGXIMnfEpDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.228.0/22 Signature Algorithm: sha256WithRSAEncryption 17:4e:93:b9:fc:fc:6d:b1:11:0a:ed:2d:4b:50:be:cb:93:18: 4c:aa:21:34:12:07:3f:f8:3d:d7:50:93:70:c7:1e:21:0c:8d: 53:14:e2:23:c8:77:a1:b0:4b:d1:72:27:91:c1:3a:ed:fe:f5: 3b:bc:e0:e8:bf:63:26:5e:26:d0:20:92:72:f5:2c:1b:78:e3: 26:5e:0e:12:af:c0:3e:1c:c6:94:7b:b5:3f:ac:be:8c:5c:a3: b7:8f:a5:fb:d8:cd:c7:45:e4:9e:47:90:fc:5f:7d:8d:51:0d: 51:de:a3:f2:dc:79:ba:46:2b:5c:81:72:1c:96:09:c8:38:4f: 4a:66:50:c6:d0:c2:9f:30:3e:22:18:fe:ae:19:35:32:de:95: c8:1d:7d:68:17:c4:4e:80:dd:26:82:37:48:e0:c6:45:b3:bc: 57:f5:7b:eb:eb:04:cb:00:6b:53:ae:75:63:92:d1:19:19:8a: dc:ea:27:0c:13:0b:3b:f2:ea:34:8e:b6:90:2c:b4:b6:ed:77: 09:c5:e7:44:2c:3e:2b:0a:a1:4f:03:65:65:9c:af:59:24:5f: c7:8b:02:1f:b3:6d:e6:e9:64:23:bd:cb:df:91:07:7f:3c:02: 8e:78:e9:06:f2:17:6d:ba:c2:99:87:34:47:55:08:81:10:81: 04:8c:58:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwT46wl8MwmtBlM+6tu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDM5ZTcxY2I3MTUyMDRhODNjYzI1MzgyMmRjMjlhNjJj Nzk5ZTYwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWMwNzY3MjljZjkzZGU3OTVkNzYxNmU0NDY1YzgzMjc3YzRhNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOzakQV+Aj3BWNfi6JvQBlWVeLtx 4SjsCFjveSwT+E5o0N3/3YPauCWGPGpyfzDJNX+AVK50xYgYHmI7F3OMj+kCxYMt DYcUbWBBL26hukwhrWLSoEGheP2uAS5qJCi33AYiELeZOcJGZ56Cxt+asoiyZp/p hAnGU1lSDimTrI5iBQJHZwKtFirDV8aCFW7CQbAb5I814ZDksjeWOCyJflYfbkHS iQQp9ur0fe2J2PKaEaru6lcWCkFFocvjQg7TTjKxaz8ZgF4WugeN+84B0klFq4Vt 2ZjUVqXIQDklZtdSS+arwSK14xemjLK7wZB2RoZoUgJxr0NjGjg49fauTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrAdnKc+T3nlddhbkRlyDJ3xKQwMB8GA1UdIwQY MBaAFAYDnnHLcVIEqDzCU4Itwppix5nmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYt MGU0Njg3NWQ0NWZkLzEvV3NCMmNwejVQZWVWMTJGdVJHWElNbmZFcERBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYtMGU0Njg3NWQ0NWZk LzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwaDkMA0G CSqGSIb3DQEBCwUAA4IBAQAXTpO5/PxtsREK7S1LUL7LkxhMqiE0Egc/+D3XUJNw xx4hDI1TFOIjyHehsEvRcieRwTrt/vU7vODov2MmXibQIJJy9SwbeOMmXg4Sr8A+ HMaUe7U/rL6MXKO3j6X72M3HReSeR5D8X32NUQ1R3qPy3Hm6RitcgXIclgnIOE9K ZlDG0MKfMD4iGP6uGTUy3pXIHX1oF8ROgN0mgjdI4MZFs7xX9Xvr6wTLAGtTrnVj ktEZGYrc6icMEws78uo0jraQLLS27XcJxedELD4rCqFPA2VlnK9ZJF/HiwIfs23m 6WQjvcvfkQd/PAKOeOkG8hdtusKZhzRHVQiBEIEEjFix -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:51 2026 by rpki-client