This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/WJgNqH0Lz6yrLTwJwJhGPuLSIm8.roa File: WJgNqH0Lz6yrLTwJwJhGPuLSIm8.roa (raw, json) Hash identifier: a7Wll+kDTu8pwv4hn9ws5V2i8nVgewIeqZ+Vdb+Q5pY= Subject key identifier: 58:98:0D:A8:7D:0B:CF:AC:AB:2D:3C:09:C0:98:46:3E:E2:D2:22:6F Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED6BD82BC7990FE48DD6EBFFA9AC2E Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/WJgNqH0Lz6yrLTwJwJhGPuLSIm8.roa Signing time: Thu 01 Jan 2026 14:19:21 +0000 ROA not before: Thu 01 Jan 2026 14:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216383 IP address blocks: 87.248.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:6b:d8:2b:c7:99:0f:e4:8d:d6:eb:ff:a9:ac:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58980da87d0bcfacab2d3c09c098463ee2d2226f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:57:b6:42:4f:62:96:b1:22:34:7f:90:11: 0d:db:b8:0d:eb:f8:a4:20:3f:67:18:af:6a:59:0f: 7e:c0:14:dd:2e:4f:60:61:a8:80:99:4c:38:69:5f: 11:7e:02:2d:0e:1e:74:b3:39:4b:4c:33:3c:be:cf: a9:68:84:dd:c1:70:88:49:3d:c4:a8:10:de:8c:fa: 30:87:a5:54:0e:69:bb:dc:69:f3:d0:04:66:47:1d: 79:bf:0e:30:be:f3:11:9c:c9:c3:c3:55:52:c2:6f: d2:20:bd:ee:fa:2b:c7:9c:a8:91:92:97:af:78:7a: 48:ed:df:09:bd:35:39:27:72:d6:8f:cb:39:a1:c3: e0:f4:b0:7d:a2:22:42:14:9e:e2:9f:6c:64:c0:c8: dc:9e:ce:be:a8:bf:85:e4:7f:57:be:8d:cc:d3:81: 0b:0a:a4:f3:39:92:ff:b3:de:c1:73:04:02:6e:fe: d6:e0:ad:19:4f:a2:78:5a:e1:87:4c:d4:65:bf:a9: df:c2:23:16:ae:01:9f:90:f4:e2:32:bf:9c:95:98: 33:d0:55:52:e6:ed:f3:9c:61:bf:55:70:83:19:43: b9:f3:e3:75:35:95:a6:3b:a0:84:63:6e:14:74:16: ec:c7:e8:bf:13:25:97:f0:f8:ea:e8:aa:05:1f:69: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:98:0D:A8:7D:0B:CF:AC:AB:2D:3C:09:C0:98:46:3E:E2:D2:22:6F X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/WJgNqH0Lz6yrLTwJwJhGPuLSIm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.129.0/24 Signature Algorithm: sha256WithRSAEncryption 81:78:5a:00:a8:e6:68:09:fd:ea:41:20:ad:57:0e:96:f7:a4: ea:fc:de:97:b9:ce:a7:9a:69:af:1d:ac:a8:9e:5d:46:5a:6f: 2b:c9:10:6d:f4:1d:e4:76:f2:7f:a6:81:d4:e0:42:94:e0:f5: 9c:ba:31:ea:3b:92:2c:40:57:87:0e:65:40:fd:f1:60:31:fc: 12:62:ea:59:ef:8f:b9:29:75:0f:9a:ae:25:ec:63:fe:d9:dd: 75:f9:dc:49:1a:96:df:a7:23:14:f5:8f:b2:49:e2:92:a4:6b: b4:51:10:a9:b3:18:9e:e4:ec:c5:35:82:ac:02:97:73:ff:78: e9:36:72:8b:3d:58:d9:65:3c:79:15:3a:04:9f:4b:9f:a3:1f: b7:16:3a:5a:66:15:e4:fc:37:62:72:98:aa:67:4b:76:c5:bb: 0b:c7:79:56:80:13:e4:95:f1:d0:10:38:4d:a3:a4:8e:f3:2f: 77:ff:13:86:49:ab:52:64:b1:51:70:bc:f5:13:ff:6b:b0:13: 5a:d1:17:34:7b:fe:61:07:44:50:0b:4f:b7:72:40:83:c8:04: 32:b5:a0:c0:d8:4f:31:4d:d2:e3:f3:4a:6b:29:2d:ba:c8:8f: b6:4d:b3:4c:0e:e0:4f:07:6e:45:0b:49:1e:5c:6d:f5:7c:7e: 84:32:71:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WvYK8eZD+SN1uv/qawuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODk4MGRhODdkMGJjZmFjYWIyZDNjMDljMDk4NDYzZWUyZDIyMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm1XtkJPYpaxIjR/kBEN27gN6/ik ID9nGK9qWQ9+wBTdLk9gYaiAmUw4aV8RfgItDh50szlLTDM8vs+paITdwXCIST3E qBDejPowh6VUDmm73Gnz0ARmRx15vw4wvvMRnMnDw1VSwm/SIL3u+ivHnKiRkpev eHpI7d8JvTU5J3LWj8s5ocPg9LB9oiJCFJ7in2xkwMjcns6+qL+F5H9Xvo3M04EL CqTzOZL/s97BcwQCbv7W4K0ZT6J4WuGHTNRlv6nfwiMWrgGfkPTiMr+clZgz0FVS 5u3znGG/VXCDGUO58+N1NZWmO6CEY24UdBbsx+i/EyWX8Pjq6KoFH2lfywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFiYDah9C8+sqy08CcCYRj7i0iJvMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvV0pnTnFIMEx6NnlyTFR3SndKaEdQdUxTSW04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iBMA0G CSqGSIb3DQEBCwUAA4IBAQCBeFoAqOZoCf3qQSCtVw6W96Tq/N6Xuc6nmmmvHayo nl1GWm8ryRBt9B3kdvJ/poHU4EKU4PWcujHqO5IsQFeHDmVA/fFgMfwSYupZ74+5 KXUPmq4l7GP+2d11+dxJGpbfpyMU9Y+ySeKSpGu0URCpsxie5OzFNYKsApdz/3jp NnKLPVjZZTx5FToEn0ufox+3FjpaZhXk/DdicpiqZ0t2xbsLx3lWgBPklfHQEDhN o6SO8y93/xOGSatSZLFRcLz1E/9rsBNa0Rc0e/5hB0RQC0+3ckCDyAQytaDA2E8x TdLj80prKS26yI+2TbNMDuBPB25FC0keXG31fH6EMnEH -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:29 2026 by rpki-client