This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/WxImH-LXs0d6zerX8rbJADEs0b4.roa File: WxImH-LXs0d6zerX8rbJADEs0b4.roa (raw, json) Hash identifier: 1hpI1k0NLPuLhvebFCrou0mJyF8538s4/VSeky9KzZw= Subject key identifier: 5B:12:26:1F:E2:D7:B3:47:7A:CD:EA:D7:F2:B6:C9:00:31:2C:D1:BE Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Certificate serial: 019B7DCA78C0DA8E5C37F22027A91DC2B826 Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/WxImH-LXs0d6zerX8rbJADEs0b4.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207645 IP address blocks: 185.86.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:78:c0:da:8e:5c:37:f2:20:27:a9:1d:c2:b8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b12261fe2d7b3477acdead7f2b6c900312cd1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:f2:85:52:82:27:60:92:db:03:53:54:7d: 3a:89:9c:78:e7:01:0c:25:3e:64:e7:41:ac:0c:d1: f0:03:a1:f0:f7:46:bd:0c:59:23:96:42:c4:88:00: 2a:45:7b:9f:b3:b9:cc:8d:3d:b1:e5:8a:ee:a0:4a: f2:ea:8b:06:32:f4:8f:f2:3d:a6:4c:96:b9:f4:36: cc:67:ea:da:24:cf:83:23:04:49:16:d8:19:8d:38: a3:c0:74:c4:0c:66:6a:50:a6:d1:c3:db:35:76:72: 73:6f:6c:4b:3a:44:cf:15:85:ff:48:f1:97:fc:3d: f1:ff:7a:3f:99:eb:5b:c1:c9:a5:a4:94:45:a9:a4: ce:b7:fb:e5:1f:eb:b2:34:be:14:36:97:c1:c7:d8: 7a:61:a6:64:ee:fd:cc:6c:5d:db:f7:bd:a0:31:98: 0a:6a:31:b7:43:ff:00:f5:38:61:ec:6c:69:b5:2d: 0d:c6:e6:3a:8d:a1:8a:b5:f9:27:c2:1b:28:50:af: 9c:dc:6c:5f:50:1c:e8:46:20:0d:55:2f:41:6e:f5: f9:0a:6f:00:1a:64:a0:4a:48:df:cf:54:ac:65:bf: 5a:de:65:00:8a:0f:93:57:49:83:0e:8e:20:ab:98: c1:a4:05:5a:a6:fa:c7:58:dd:e2:db:a7:9b:55:04: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:12:26:1F:E2:D7:B3:47:7A:CD:EA:D7:F2:B6:C9:00:31:2C:D1:BE X509v3 Authority Key Identifier: keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/WxImH-LXs0d6zerX8rbJADEs0b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.10.0/24 Signature Algorithm: sha256WithRSAEncryption 84:02:4d:0b:45:b8:1f:b4:f1:14:96:8a:e7:70:5e:0e:90:52: 74:c5:3b:19:1d:eb:1b:06:9c:6b:8b:1c:9d:fa:59:e0:1d:e1: c8:72:79:d4:7c:7d:d6:42:3a:66:b9:b6:f6:0e:71:fc:e1:8d: 13:2e:ab:86:f4:e1:5b:5a:21:44:8b:dd:8b:53:59:23:3b:ff: c3:34:75:d7:b6:aa:19:15:a6:91:90:d0:0e:ca:6c:ae:20:48: cc:f2:a9:93:36:4b:ab:86:1a:2c:07:ce:87:9b:e6:2a:45:74: e4:3a:f0:ea:87:67:d9:aa:78:01:83:cd:39:3b:e2:b6:67:72: 69:d8:61:c3:27:f3:77:e6:24:0c:e6:1f:59:7f:71:ce:20:a7: 3b:e5:9a:8e:a6:b6:3e:dd:e9:44:8f:23:d5:73:d0:8e:45:4c: e4:fe:0f:3b:01:a2:13:e7:e7:12:14:39:49:02:20:60:25:1f: 89:c3:42:80:6d:0d:a7:03:8c:74:6d:94:13:66:19:cf:7c:3c: 87:86:b2:35:7d:69:7b:56:b4:71:73:14:80:67:82:e9:74:92: ea:55:ce:94:49:98:f9:5c:5c:df:39:ef:b2:66:7a:8c:84:16: 33:91:78:fe:9a:b0:75:83:c3:7a:cc:ee:9d:a2:17:a0:d3:61: 1b:61:e5:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ynjA2o5cN/IgJ6kdwrgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNzg2MmI0NjA4Yzc5ZjQ1MDI5NWVjNWM4MGM3YzdhZDZk ZmUyYTIwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjEyMjYxZmUyZDdiMzQ3N2FjZGVhZDdmMmI2YzkwMDMxMmNkMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKjyhVKCJ2CS2wNTVH06iZx45wEM JT5k50GsDNHwA6Hw90a9DFkjlkLEiAAqRXufs7nMjT2x5YruoEry6osGMvSP8j2m TJa59DbMZ+raJM+DIwRJFtgZjTijwHTEDGZqUKbRw9s1dnJzb2xLOkTPFYX/SPGX /D3x/3o/metbwcmlpJRFqaTOt/vlH+uyNL4UNpfBx9h6YaZk7v3MbF3b972gMZgK ajG3Q/8A9Thh7GxptS0NxuY6jaGKtfknwhsoUK+c3GxfUBzoRiANVS9BbvX5Cm8A GmSgSkjfz1SsZb9a3mUAig+TV0mDDo4gq5jBpAVapvrHWN3i26ebVQRLxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFsSJh/i17NHes3q1/K2yQAxLNG+MB8GA1UdIwQY MBaAFAN4YrRgjHn0UClexcgMfHrW3+KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMt ZjQ3NGY3YmQzNTMxLzEvV3hJbUgtTFhzMGQ2emVyWDhyYkpBREVzMGI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMtZjQ3NGY3YmQzNTMx LzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVYKMA0G CSqGSIb3DQEBCwUAA4IBAQCEAk0LRbgftPEUlorncF4OkFJ0xTsZHesbBpxrixyd +lngHeHIcnnUfH3WQjpmubb2DnH84Y0TLquG9OFbWiFEi92LU1kjO//DNHXXtqoZ FaaRkNAOymyuIEjM8qmTNkurhhosB86Hm+YqRXTkOvDqh2fZqngBg805O+K2Z3Jp 2GHDJ/N35iQM5h9Zf3HOIKc75ZqOprY+3elEjyPVc9CORUzk/g87AaIT5+cSFDlJ AiBgJR+Jw0KAbQ2nA4x0bZQTZhnPfDyHhrI1fWl7VrRxcxSAZ4LpdJLqVc6USZj5 XFzfOe+yZnqMhBYzkXj+mrB1g8N6zO6doheg02EbYeWJ -----END CERTIFICATE-----Generated at Tue Jan 27 02:33:03 2026 by rpki-client