This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/WKMGTZqxrFLfgBCZ6QDmgOznr-M.roa File: WKMGTZqxrFLfgBCZ6QDmgOznr-M.roa (raw, json) Hash identifier: ASMesKu+MNoEbQ+bQElbFSCL0GnFYhup+rYh0oKim+M= Subject key identifier: 58:A3:06:4D:9A:B1:AC:52:DF:80:10:99:E9:00:E6:80:EC:E7:AF:E3 Certificate issuer: /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883 Certificate serial: 019B7EA50403854A2D19CB862C6D3C733C44 Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/WKMGTZqxrFLfgBCZ6QDmgOznr-M.roa Signing time: Fri 02 Jan 2026 12:18:21 +0000 ROA not before: Fri 02 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212453 IP address blocks: 185.192.122.0/24 maxlen: 24 185.192.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:04:03:85:4a:2d:19:cb:86:2c:6d:3c:73:3c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883 Validity Not Before: Jan 2 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a3064d9ab1ac52df801099e900e680ece7afe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:26:4a:0d:2f:5c:0c:24:1c:07:f3:c2:c6:a8: 7c:a5:03:cd:6f:e1:02:83:6b:5b:db:5f:0d:be:68: 59:71:37:ac:0f:76:71:e8:dc:e4:cf:5b:e2:f3:81: 3f:b2:32:db:3a:72:4d:a0:25:c4:3f:7e:bc:97:32: cf:59:b5:78:93:e2:8a:75:c1:92:e8:b1:a6:0d:94: fd:d9:c2:31:05:64:fd:78:59:47:cc:cf:17:fe:dc: 90:0c:92:6c:cb:a7:2a:3c:dc:70:35:be:78:fd:3c: 11:4e:7f:b4:12:d9:6b:96:24:c0:df:0d:65:de:d8: 5a:b7:a4:f6:ff:cb:d9:0c:34:23:58:6e:c8:21:06: 1f:1e:06:e6:6d:96:4c:02:3a:7f:4f:96:c0:aa:6c: 48:94:c3:ea:4f:05:30:67:f7:54:13:ac:2e:9c:49: f7:32:7f:12:c3:c5:f6:a4:67:18:72:80:ce:e4:14: 73:a8:7d:f2:6b:6d:38:09:d0:99:ee:d3:67:36:2a: 48:21:48:65:cd:e7:3a:73:6a:c6:71:de:b7:97:b0: 88:8a:65:1b:08:a3:56:6c:94:4f:a3:0e:55:b7:c9: 2c:df:c8:43:24:ec:e4:b9:c6:dd:15:4f:e9:f7:76: 8f:de:39:49:88:b9:7e:03:41:cd:7c:d8:ca:36:dd: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:06:4D:9A:B1:AC:52:DF:80:10:99:E9:00:E6:80:EC:E7:AF:E3 X509v3 Authority Key Identifier: keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/WKMGTZqxrFLfgBCZ6QDmgOznr-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.122.0/23 Signature Algorithm: sha256WithRSAEncryption 68:dd:17:4b:37:8c:61:aa:2a:b7:da:46:61:8c:79:c3:99:81: 75:1c:71:f5:60:aa:fe:1f:27:10:2c:bc:14:94:39:62:29:51: 5b:14:a7:96:d9:e3:fb:04:3c:74:75:2d:ee:2f:ee:32:81:e0: 1c:4e:ab:8f:7c:33:13:c6:1c:20:64:e8:9f:77:52:c2:83:25: b9:c7:6d:5c:82:82:0c:bd:40:e0:78:29:7b:5d:b2:df:d7:8b: fc:37:dc:a2:a8:f5:d9:78:bd:98:4b:1e:da:e3:9c:55:da:df: d5:ee:29:cb:32:cd:fe:bb:e9:70:f6:43:60:69:92:63:94:2f: a8:ef:26:af:a8:17:4e:17:ff:03:b8:a3:4a:a5:a6:c2:44:3d: c6:2e:b8:67:73:e2:8e:d8:10:5c:68:48:f6:26:33:ce:f4:7c: ba:2c:c6:1b:b3:68:9f:c6:84:31:4f:89:1d:f0:aa:1b:e9:29: ba:44:3b:85:f4:3f:e0:f7:80:3a:78:0e:e8:9d:ee:59:59:36: d9:8b:97:73:55:a0:00:9d:2b:83:de:83:bc:ac:58:07:05:26: ff:34:a2:cb:7a:9c:29:8f:2d:83:b4:30:69:7a:2b:a9:a2:c9: 78:a5:f0:57:b9:7c:a3:c1:5e:09:29:56:50:a5:f7:3b:79:cc: 59:ce:70:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pQQDhUotGcuGLG08czxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2QzN2U2NWM4MjI4Zjc5M2Y0OGI4ZTlhMjBmMTJjMmY4 MGI4ODMwHhcNMjYwMTAyMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGEzMDY0ZDlhYjFhYzUyZGY4MDEwOTllOTAwZTY4MGVjZTdhZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliZKDS9cDCQcB/PCxqh8pQPNb+EC g2tb218NvmhZcTesD3Zx6Nzkz1vi84E/sjLbOnJNoCXEP368lzLPWbV4k+KKdcGS 6LGmDZT92cIxBWT9eFlHzM8X/tyQDJJsy6cqPNxwNb54/TwRTn+0EtlrliTA3w1l 3that6T2/8vZDDQjWG7IIQYfHgbmbZZMAjp/T5bAqmxIlMPqTwUwZ/dUE6wunEn3 Mn8Sw8X2pGcYcoDO5BRzqH3ya204CdCZ7tNnNipIIUhlzec6c2rGcd63l7CIimUb CKNWbJRPow5Vt8ks38hDJOzkucbdFU/p93aP3jlJiLl+A0HNfNjKNt2YmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFijBk2asaxS34AQmekA5oDs56/jMB8GA1UdIwQY MBaAFFc9N+Zcgij3k/SLjpog8SwvgLiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83Y2Q1YjgtOGRmNi00Yzk5LWE2MjMt ODRjZDIxZmZiOTFiLzEvV0tNR1RacXhyRkxmZ0JDWjZRRG1nT3puci1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83Y2Q1YjgtOGRmNi00Yzk5LWE2MjMtODRjZDIxZmZiOTFi LzEvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucB6MA0G CSqGSIb3DQEBCwUAA4IBAQBo3RdLN4xhqiq32kZhjHnDmYF1HHH1YKr+HycQLLwU lDliKVFbFKeW2eP7BDx0dS3uL+4ygeAcTquPfDMTxhwgZOifd1LCgyW5x21cgoIM vUDgeCl7XbLf14v8N9yiqPXZeL2YSx7a45xV2t/V7inLMs3+u+lw9kNgaZJjlC+o 7yavqBdOF/8DuKNKpabCRD3GLrhnc+KO2BBcaEj2JjPO9Hy6LMYbs2ifxoQxT4kd 8Kob6Sm6RDuF9D/g94A6eA7one5ZWTbZi5dzVaAAnSuD3oO8rFgHBSb/NKLLepwp jy2DtDBpeiuposl4pfBXuXyjwV4JKVZQpfc7ecxZznBv -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:32 2026 by rpki-client