This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/WkDOgdUMhIbvisg1gB1VqlRy5CE.roa File: WkDOgdUMhIbvisg1gB1VqlRy5CE.roa (raw, json) Hash identifier: n8TyrFK/s854qKIOj2eeizMFn+Hfv9n1i9/epsUGYR0= Subject key identifier: 5A:40:CE:81:D5:0C:84:86:EF:8A:C8:35:80:1D:55:AA:54:72:E4:21 Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Certificate serial: 019B797EDA702FC8C0351F1744426A8A3A20 Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/WkDOgdUMhIbvisg1gB1VqlRy5CE.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205478 IP address blocks: 176.113.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:da:70:2f:c8:c0:35:1f:17:44:42:6a:8a:3a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a40ce81d50c8486ef8ac835801d55aa5472e421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:6a:85:12:ab:27:7b:11:6a:e6:fe:fb:b5: 21:64:db:9a:f0:0f:a0:00:e0:01:33:b7:49:98:48: a2:f8:56:10:e8:55:fc:0f:07:8c:43:a8:64:ff:4b: 97:f3:b5:e3:9e:28:5a:d2:13:43:d2:25:e8:35:15: 12:86:59:bf:10:55:3b:7b:cb:27:5d:94:58:a1:58: 30:d8:06:df:ce:43:59:d9:0e:fa:b8:32:ef:fc:29: bd:14:de:5e:10:54:46:92:45:15:02:d4:5b:30:ee: 98:48:7f:d4:76:7d:42:8e:cd:1c:73:7a:ac:56:ba: f4:b0:90:47:0c:ac:5f:ed:d3:8e:a6:65:a0:5d:ce: 39:41:74:1d:fb:9b:99:db:e4:2e:70:2a:d4:54:ca: 72:b7:2c:6d:04:1f:7d:96:b5:8b:84:c0:79:70:d5: 2d:92:33:fc:b5:c2:e8:76:43:90:f5:a4:76:84:9d: 2e:8c:64:af:50:b0:d0:e1:47:64:1b:cd:7f:0a:35: ea:e5:ca:25:bd:1c:6b:fd:59:90:b5:5b:b9:d7:a4: 5d:3a:17:fb:18:30:9a:40:0d:c1:2d:16:c1:93:73: bf:48:28:b8:7b:4b:6f:f2:91:99:6f:93:c6:63:c0: 43:38:97:19:91:a0:8f:d3:bd:40:81:a6:f7:d6:2c: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:40:CE:81:D5:0C:84:86:EF:8A:C8:35:80:1D:55:AA:54:72:E4:21 X509v3 Authority Key Identifier: keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/WkDOgdUMhIbvisg1gB1VqlRy5CE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.95.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:92:43:76:7e:a7:6e:6e:16:b4:ca:39:20:1e:07:61:64:f9: 0b:07:e1:99:ae:af:5b:0a:af:fb:f1:67:24:b8:2c:d3:5d:e7: f1:86:68:86:04:4d:e4:fd:98:7f:99:7e:13:b0:3b:f9:e0:93: c6:aa:7b:8b:99:6f:cb:46:f5:05:08:e6:40:08:d4:09:96:63: 8c:57:0d:f1:52:09:4e:76:f8:34:f6:8c:d9:21:30:12:70:6d: 37:4f:f7:24:d9:55:3b:08:a7:b0:69:d5:17:3a:f6:31:0c:f7: 09:55:06:56:13:09:db:ca:d0:46:8d:b7:c1:6a:e1:7d:f5:6f: d0:92:df:eb:7b:21:7f:bc:54:08:be:60:77:93:0d:6c:fd:bb: 3a:30:18:be:0c:e3:b1:1d:bc:05:24:7b:cc:f5:41:85:41:ff: 93:66:e8:ff:e1:ec:e5:f9:ec:41:9d:f2:7e:fb:e9:6a:8a:a5: 6e:38:04:1c:dc:13:02:74:64:19:fe:cc:30:8d:1b:19:35:ef: c3:e0:a2:59:fb:04:a7:b9:89:cb:36:fc:36:a9:60:9e:9d:16: 66:bf:df:b0:80:23:00:a3:69:65:4d:ca:dd:13:ff:3d:a3:2a: 37:12:7d:e3:1f:ac:f5:64:74:aa:24:72:bb:e9:30:e5:df:db: ca:5e:e4:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftpwL8jANR8XREJqijogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4 OTI1MmYwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTQwY2U4MWQ1MGM4NDg2ZWY4YWM4MzU4MDFkNTVhYTU0NzJlNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoFqhRKrJ3sRaub++7UhZNua8A+g AOABM7dJmEii+FYQ6FX8DweMQ6hk/0uX87Xjniha0hND0iXoNRUShlm/EFU7e8sn XZRYoVgw2AbfzkNZ2Q76uDLv/Cm9FN5eEFRGkkUVAtRbMO6YSH/Udn1Cjs0cc3qs Vrr0sJBHDKxf7dOOpmWgXc45QXQd+5uZ2+QucCrUVMpytyxtBB99lrWLhMB5cNUt kjP8tcLodkOQ9aR2hJ0ujGSvULDQ4UdkG81/CjXq5colvRxr/VmQtVu516RdOhf7 GDCaQA3BLRbBk3O/SCi4e0tv8pGZb5PGY8BDOJcZkaCP071Agab31izUFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFpAzoHVDISG74rINYAdVapUcuQhMB8GA1UdIwQY MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt NjA3OGVmZDA3ODVlLzEvV2tET2dkVU1oSWJ2aXNnMWdCMVZxbFJ5NUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHFfMA0G CSqGSIb3DQEBCwUAA4IBAQCdkkN2fqdubha0yjkgHgdhZPkLB+GZrq9bCq/78Wck uCzTXefxhmiGBE3k/Zh/mX4TsDv54JPGqnuLmW/LRvUFCOZACNQJlmOMVw3xUglO dvg09ozZITAScG03T/ck2VU7CKewadUXOvYxDPcJVQZWEwnbytBGjbfBauF99W/Q kt/reyF/vFQIvmB3kw1s/bs6MBi+DOOxHbwFJHvM9UGFQf+TZuj/4ezl+exBnfJ+ ++lqiqVuOAQc3BMCdGQZ/swwjRsZNe/D4KJZ+wSnuYnLNvw2qWCenRZmv9+wgCMA o2llTcrdE/89oyo3En3jH6z1ZHSqJHK76TDl39vKXuTO -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:02 2026 by rpki-client