This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/WMJW8PYFLwejvXuXLZdPSAFJeBs.roa File: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (raw, json) Hash identifier: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw= Subject key identifier: 58:C2:56:F0:F6:05:2F:07:A3:BD:7B:97:2D:97:4F:48:01:49:78:1B Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED6C21581353F68C29505245F1D856 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/WMJW8PYFLwejvXuXLZdPSAFJeBs.roa Signing time: Thu 01 Jan 2026 14:19:21 +0000 ROA not before: Thu 01 Jan 2026 14:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400039 IP address blocks: 87.248.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:6c:21:58:13:53:f6:8c:29:50:52:45:f1:d8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58c256f0f6052f07a3bd7b972d974f480149781b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:44:d4:75:49:7f:0b:c6:74:b6:f6:bd:cf: a2:e2:62:6e:ce:f2:43:66:b2:3b:b8:0c:d8:bc:52: f8:8a:c1:2b:99:66:a9:40:d1:a2:57:5b:07:36:68: d7:8b:c2:9d:20:4b:a3:67:e8:52:ea:fd:c8:f6:4c: 5d:52:e9:bf:68:be:07:08:c4:5c:a6:28:d6:da:27: 66:1e:a0:dd:49:d4:95:91:33:15:7d:d8:cf:4e:2a: bb:90:55:7c:59:a8:1e:f8:fd:04:14:6c:03:2f:ae: c4:6a:fb:1e:ff:c3:ac:3f:be:7f:35:61:d3:ea:df: 04:51:63:87:ca:5b:63:a9:d5:08:4d:ee:8f:42:ef: 61:cc:b2:bb:f9:f4:78:80:11:bc:cb:0a:2a:e9:ef: 43:78:6f:c1:39:f2:64:b5:62:7d:d0:a4:0d:4b:16: aa:53:a2:f2:26:79:68:cc:72:92:cf:2d:0c:aa:aa: 31:34:48:78:6f:26:f5:93:2f:8f:bd:de:35:9c:30: b5:40:d4:69:87:08:5f:9f:34:0e:2b:9f:7c:9a:59: 09:6e:10:59:17:0e:4e:c2:58:bf:b5:a6:57:9e:04: 2d:1f:3e:4d:a4:d8:14:2e:9e:66:57:43:a9:47:4f: 42:4f:89:73:e0:ff:90:ff:82:07:6f:5e:54:10:f8: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:56:F0:F6:05:2F:07:A3:BD:7B:97:2D:97:4F:48:01:49:78:1B X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/WMJW8PYFLwejvXuXLZdPSAFJeBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.136.0/24 Signature Algorithm: sha256WithRSAEncryption 06:f7:79:46:13:5a:71:a2:17:53:ae:01:4a:16:aa:48:11:3e: ef:b2:50:d7:5f:b6:eb:53:c6:75:ba:f7:94:16:e9:35:22:19: bd:f1:3a:8e:12:e8:30:d1:6e:3b:9f:43:c0:f3:89:63:0e:70: d6:22:f2:a6:2b:0c:63:49:58:86:67:44:b7:0f:44:6e:15:c6: 73:58:27:86:0d:ba:96:42:e7:60:5a:15:67:1b:7c:8e:55:ac: 44:51:ff:3d:f0:71:07:90:a9:7a:c2:83:0b:17:89:5b:70:37: 39:21:73:0a:b7:ae:7b:33:01:6c:ed:1d:af:08:49:65:df:8f: ba:4a:af:c9:d1:fa:77:69:36:f3:31:38:ca:86:9a:e7:db:e5: 09:18:81:43:5f:c6:78:44:5d:6e:d2:ca:e7:93:b0:72:b4:04: e9:6a:aa:74:be:22:25:6f:84:65:3e:b2:c5:9d:52:c1:22:23: 2c:08:32:ff:89:15:38:fb:31:21:6f:81:4b:93:a3:7b:73:34: 28:16:89:8d:63:1e:30:41:ea:72:43:c2:95:64:e3:2a:c1:9f: eb:39:8a:81:88:7c:35:1a:79:ec:74:58:ab:7b:ea:78:91:78: ee:d0:d0:92:21:1e:02:83:0d:de:4e:3a:2f:44:47:d8:be:85: dc:0e:1f:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WwhWBNT9owpUFJF8dhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGMyNTZmMGY2MDUyZjA3YTNiZDdiOTcyZDk3NGY0ODAxNDk3ODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDhE1HVJfwvGdLb2vc+i4mJuzvJD ZrI7uAzYvFL4isErmWapQNGiV1sHNmjXi8KdIEujZ+hS6v3I9kxdUum/aL4HCMRc pijW2idmHqDdSdSVkTMVfdjPTiq7kFV8Wage+P0EFGwDL67Eavse/8OsP75/NWHT 6t8EUWOHyltjqdUITe6PQu9hzLK7+fR4gBG8ywoq6e9DeG/BOfJktWJ90KQNSxaq U6LyJnlozHKSzy0MqqoxNEh4byb1ky+Pvd41nDC1QNRphwhfnzQOK598mlkJbhBZ Fw5Owli/taZXngQtHz5NpNgULp5mV0OpR09CT4lz4P+Q/4IHb15UEPjjSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjCVvD2BS8Ho717ly2XT0gBSXgbMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvV01KVzhQWUZMd2Vqdlh1WExaZFBTQUZKZUJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iIMA0G CSqGSIb3DQEBCwUAA4IBAQAG93lGE1pxohdTrgFKFqpIET7vslDXX7brU8Z1uveU Fuk1Ihm98TqOEugw0W47n0PA84ljDnDWIvKmKwxjSViGZ0S3D0RuFcZzWCeGDbqW QudgWhVnG3yOVaxEUf898HEHkKl6woMLF4lbcDc5IXMKt657MwFs7R2vCEll34+6 Sq/J0fp3aTbzMTjKhprn2+UJGIFDX8Z4RF1u0srnk7BytATpaqp0viIlb4RlPrLF nVLBIiMsCDL/iRU4+zEhb4FLk6N7czQoFomNYx4wQepyQ8KVZOMqwZ/rOYqBiHw1 GnnsdFire+p4kXju0NCSIR4Cgw3eTjovREfYvoXcDh9I -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:46 2026 by rpki-client