This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/WIxhLEYJGDRzvi2YQPkejSnZcyY.roa File: WIxhLEYJGDRzvi2YQPkejSnZcyY.roa (raw, json) Hash identifier: IQv8lDCReAIo1vSxymiyMrbwR8Ln0jB9PXL5wzjZ1uM= Subject key identifier: 58:8C:61:2C:46:09:18:34:73:BE:2D:98:40:F9:1E:8D:29:D9:73:26 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B8E52060D88530D924C4D5AA7F9A6E6B8 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/WIxhLEYJGDRzvi2YQPkejSnZcyY.roa Signing time: Mon 05 Jan 2026 13:21:38 +0000 ROA not before: Mon 05 Jan 2026 13:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 87.248.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:52:06:0d:88:53:0d:92:4c:4d:5a:a7:f9:a6:e6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 5 13:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=588c612c4609183473be2d9840f91e8d29d97326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ec:c8:2e:32:08:f0:87:f0:32:fd:18:02:e1: 52:80:8d:cd:83:ee:69:90:03:4b:97:a0:a2:07:78: c3:f2:fe:99:9a:58:15:86:1c:cd:07:29:40:58:e7: bc:4e:63:31:69:35:bb:f6:3d:bf:e1:a5:2b:25:5d: ea:3b:1b:16:46:43:40:ad:54:b9:0e:8e:b7:37:11: d6:df:62:d8:79:be:a9:fe:b4:48:bc:3e:98:96:a5: 4b:ed:73:83:48:0c:85:2b:2c:3e:5c:8e:62:bb:76: 18:82:ec:2c:db:f3:01:9c:03:7a:b6:53:2f:4a:10: 30:1b:a1:86:1d:a2:96:4d:fc:e0:dd:db:12:2c:95: 5f:62:8b:e0:74:87:21:81:58:f1:0b:69:44:5e:e0: 6c:bb:21:c3:37:1a:7c:68:b7:83:de:4b:49:f1:00: 36:b6:25:b1:35:c1:3d:33:f5:6e:92:74:4e:31:47: 4b:27:8e:4e:62:3a:e1:fb:4f:67:a6:fe:ff:6f:8d: 41:90:36:fd:15:16:ec:54:e2:a1:b1:d0:68:a0:d3: ad:95:e1:18:2f:17:6a:a8:c9:f7:4d:30:71:c6:2e: e6:8c:de:93:04:32:26:dd:d5:51:05:99:47:c4:15: 94:66:b0:5e:f0:08:80:18:e2:66:91:de:49:19:6f: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:61:2C:46:09:18:34:73:BE:2D:98:40:F9:1E:8D:29:D9:73:26 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/WIxhLEYJGDRzvi2YQPkejSnZcyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.143.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:b1:ce:65:52:b3:10:11:c8:9c:77:71:81:74:6e:50:25:9a: e1:ee:65:fb:bc:ea:dd:ce:a5:59:00:e6:85:ad:21:f7:51:8f: 7d:07:64:f6:4b:1c:17:8f:23:ad:b4:7d:32:b2:77:88:d2:b1: f2:1d:3e:78:01:0a:2d:4f:12:5a:27:b1:9d:bb:42:35:b0:34: 34:8a:54:c9:33:62:5b:7a:c4:22:6a:56:f4:7b:a2:32:cb:87: 71:c8:c8:56:99:ed:d4:cf:03:38:d6:6e:85:f2:cf:ad:fd:70: 53:b5:55:b4:f5:53:9c:93:61:9f:fd:52:e9:cc:c6:5e:c8:93: 90:b6:39:8b:28:ab:0d:cc:3f:73:ea:c9:1a:91:a0:8c:83:e2: 3a:23:53:c2:8c:91:23:ec:2d:da:a4:5b:fc:27:a0:83:8f:d3: c3:08:ec:d4:e7:54:52:f9:cc:50:eb:61:74:4a:74:e8:2a:20: 8c:c8:48:d8:81:bf:a5:cc:53:b7:15:1d:0e:de:11:2c:f0:e0: d4:bf:0b:53:0f:b1:06:16:ab:f0:54:4d:3f:f0:cc:7b:54:3a: 87:e6:5e:ef:db:f3:39:ff:35:f9:ab:94:6e:9b:11:93:4c:67: 3f:e0:dc:f9:6c:cf:3f:55:fc:ad:1f:40:ba:4c:da:cb:6b:c0: 36:47:f0:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuOUgYNiFMNkkxNWqf5pua4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTA1MTMyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODhjNjEyYzQ2MDkxODM0NzNiZTJkOTg0MGY5MWU4ZDI5ZDk3MzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OzILjII8IfwMv0YAuFSgI3Ng+5p kANLl6CiB3jD8v6ZmlgVhhzNBylAWOe8TmMxaTW79j2/4aUrJV3qOxsWRkNArVS5 Do63NxHW32LYeb6p/rRIvD6YlqVL7XODSAyFKyw+XI5iu3YYguws2/MBnAN6tlMv ShAwG6GGHaKWTfzg3dsSLJVfYovgdIchgVjxC2lEXuBsuyHDNxp8aLeD3ktJ8QA2 tiWxNcE9M/VuknROMUdLJ45OYjrh+09npv7/b41BkDb9FRbsVOKhsdBooNOtleEY LxdqqMn3TTBxxi7mjN6TBDIm3dVRBZlHxBWUZrBe8AiAGOJmkd5JGW/6XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFiMYSxGCRg0c74tmED5Ho0p2XMmMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvV0l4aExFWUpHRFJ6dmkyWVFQa2VqU25aY3lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iPMA0G CSqGSIb3DQEBCwUAA4IBAQB9sc5lUrMQEcicd3GBdG5QJZrh7mX7vOrdzqVZAOaF rSH3UY99B2T2SxwXjyOttH0ysneI0rHyHT54AQotTxJaJ7Gdu0I1sDQ0ilTJM2Jb esQialb0e6Iyy4dxyMhWme3UzwM41m6F8s+t/XBTtVW09VOck2Gf/VLpzMZeyJOQ tjmLKKsNzD9z6skakaCMg+I6I1PCjJEj7C3apFv8J6CDj9PDCOzU51RS+cxQ62F0 SnToKiCMyEjYgb+lzFO3FR0O3hEs8ODUvwtTD7EGFqvwVE0/8Mx7VDqH5l7v2/M5 /zX5q5RumxGTTGc/4Nz5bM8/VfytH0C6TNrLa8A2R/Aw -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:28 2026 by rpki-client