This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/WG28MJ6GfBcScCKqRDEvob91T1k.roa File: WG28MJ6GfBcScCKqRDEvob91T1k.roa (raw, json) Hash identifier: 6xxB8aNVMWtEKkp4uvdHGR25LDD6UpDdJnexnLea70w= Subject key identifier: 58:6D:BC:30:9E:86:7C:17:12:70:22:AA:44:31:2F:A1:BF:75:4F:59 Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73 Certificate serial: 019B7BA32B31F8E8C32C17966B775EEE5770 Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/WG28MJ6GfBcScCKqRDEvob91T1k.roa Signing time: Thu 01 Jan 2026 22:17:29 +0000 ROA not before: Thu 01 Jan 2026 22:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49262 IP address blocks: 185.107.236.0/24 maxlen: 24 2a06:1140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2b:31:f8:e8:c3:2c:17:96:6b:77:5e:ee:57:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73 Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=586dbc309e867c17127022aa44312fa1bf754f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:bc:82:68:ff:d9:85:91:9e:ee:6f:5b:32: f8:3c:53:e5:51:b6:63:98:86:f4:b3:d5:82:5f:ac: 79:f6:3f:95:6a:8f:aa:64:2e:5d:f6:ba:7e:09:e0: ba:b0:51:27:23:7c:c3:4d:02:7a:07:39:8f:32:4a: 62:13:3a:bc:04:e1:d4:2b:b8:bf:2a:90:4c:72:b6: 1f:e6:eb:80:a3:42:bc:a6:7a:fb:3a:0a:70:ef:47: 06:9c:d8:5f:52:5d:27:5f:19:9c:bd:9b:8b:4f:eb: c4:8b:3d:dd:6b:0d:9a:69:33:80:3f:59:9c:d0:0a: 19:4b:71:e6:8b:e6:48:9b:ab:83:1f:be:96:96:a6: fd:14:3c:8b:85:b6:a1:9c:3f:40:79:4e:8b:53:63: 00:f5:05:79:cd:4c:70:17:1a:13:96:ba:16:b1:a2: a1:74:bb:90:76:a0:bc:f3:b5:24:dd:73:35:34:25: 97:22:20:95:5c:34:b5:1c:78:2b:62:a0:90:cb:57: b8:ba:fa:04:83:a1:eb:f8:c9:da:0f:1d:ba:68:ae: f1:6b:a0:4b:26:5c:f0:22:3d:a1:62:56:1d:94:da: 4a:6b:22:61:24:7a:fe:ab:54:dd:56:06:7f:21:3c: 77:dc:c5:79:39:71:aa:bb:fa:a7:eb:3b:23:e7:07: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6D:BC:30:9E:86:7C:17:12:70:22:AA:44:31:2F:A1:BF:75:4F:59 X509v3 Authority Key Identifier: keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/WG28MJ6GfBcScCKqRDEvob91T1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.236.0/24 IPv6: 2a06:1140::/29 Signature Algorithm: sha256WithRSAEncryption 39:92:fa:a5:4a:9a:a7:e9:cc:8c:8e:3b:16:5a:6f:3c:b5:e5: 97:99:7d:11:50:58:6b:50:41:aa:bf:aa:c1:d8:bb:4a:bc:9f: 53:13:df:83:46:0f:8f:d8:81:c4:f8:c0:ab:be:47:f6:5f:c7: 6b:90:4f:c9:41:e3:13:10:17:f6:fe:56:30:bb:60:5e:6b:0d: d1:ce:d7:07:8f:2c:54:c5:d9:8d:7b:51:0b:4e:fa:28:33:3f: e1:5f:b8:5d:94:b6:f5:db:ab:c0:c3:2f:fe:d5:b8:43:49:12: 7d:d7:d3:31:6e:5d:f0:8f:5c:76:32:9f:e2:b0:a4:79:7f:9b: 05:15:96:1f:c7:af:ef:b5:98:db:45:d5:8b:5f:a1:18:b7:cf: 8b:d0:ff:85:b5:38:f1:e6:c5:e1:7e:01:4b:05:10:c6:64:2f: fc:18:2d:b2:17:35:cd:e3:40:77:b4:45:46:68:cb:f9:ef:7d: 46:5e:ef:c0:33:84:70:f6:ab:d8:46:c0:57:f8:f0:ea:4c:1c: d9:80:bf:af:02:55:a4:30:27:f0:52:cd:9a:58:90:cf:68:5e: a7:f3:14:83:55:17:63:52:45:5b:f6:0d:60:5a:63:19:6a:ab: af:86:36:80:43:e5:fb:7c:10:32:98:ae:34:95:4f:c8:14:d4: 27:df:48:27 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7oysx+OjDLBeWa3de7ldwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzBkM2E5ZGMwMzkyN2FlNTVhODFkODZjYTkxYmRjOWVl NzRjNzMwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODZkYmMzMDllODY3YzE3MTI3MDIyYWE0NDMxMmZhMWJmNzU0ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AK8gmj/2YWRnu5vWzL4PFPlUbZj mIb0s9WCX6x59j+Vao+qZC5d9rp+CeC6sFEnI3zDTQJ6BzmPMkpiEzq8BOHUK7i/ KpBMcrYf5uuAo0K8pnr7Ogpw70cGnNhfUl0nXxmcvZuLT+vEiz3daw2aaTOAP1mc 0AoZS3Hmi+ZIm6uDH76Wlqb9FDyLhbahnD9AeU6LU2MA9QV5zUxwFxoTlroWsaKh dLuQdqC887Uk3XM1NCWXIiCVXDS1HHgrYqCQy1e4uvoEg6Hr+MnaDx26aK7xa6BL JlzwIj2hYlYdlNpKayJhJHr+q1TdVgZ/ITx33MV5OXGqu/qn6zsj5wdmiQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFhtvDCehnwXEnAiqkQxL6G/dU9ZMB8GA1UdIwQY MBaAFAYw06ncA5J65VqB2GypG9ye50xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmIt YzNmNGQxMTI3NGQ0LzEvV0cyOE1KNkdmQmNTY0NLcVJERXZvYjkxVDFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmItYzNmNGQxMTI3NGQ0 LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuWvsMA0E AgACMAcDBQMqBhFAMA0GCSqGSIb3DQEBCwUAA4IBAQA5kvqlSpqn6cyMjjsWWm88 teWXmX0RUFhrUEGqv6rB2LtKvJ9TE9+DRg+P2IHE+MCrvkf2X8drkE/JQeMTEBf2 /lYwu2Beaw3RztcHjyxUxdmNe1ELTvooMz/hX7hdlLb126vAwy/+1bhDSRJ919Mx bl3wj1x2Mp/isKR5f5sFFZYfx6/vtZjbRdWLX6EYt8+L0P+FtTjx5sXhfgFLBRDG ZC/8GC2yFzXN40B3tEVGaMv5731GXu/AM4Rw9qvYRsBX+PDqTBzZgL+vAlWkMCfw Us2aWJDPaF6n8xSDVRdjUkVb9g1gWmMZaquvhjaAQ+X7fBAymK40lU/IFNQn30gn -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:36 2026 by rpki-client