This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/WbmA7_GX8lhYD5gwDfMty_B0UMU.roa File: WbmA7_GX8lhYD5gwDfMty_B0UMU.roa (raw, json) Hash identifier: pbu61dkoeJNOEFlPCcPVO/fOlKpt2IKFm6HwfwnwwJQ= Subject key identifier: 59:B9:80:EF:F1:97:F2:58:58:0F:98:30:0D:F3:2D:CB:F0:74:50:C5 Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Certificate serial: 019B7BA544803DA6D2C3A63EA9CCCF894BBB Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/WbmA7_GX8lhYD5gwDfMty_B0UMU.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204341 IP address blocks: 193.200.52.0/24 maxlen: 24 193.200.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:44:80:3d:a6:d2:c3:a6:3e:a9:cc:cf:89:4b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59b980eff197f258580f98300df32dcbf07450c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:6c:e6:6d:c6:82:ba:0f:59:8c:a5:51:fb: ef:e8:80:77:bc:10:50:1d:73:a2:1b:ff:43:4f:e2: a9:c8:c8:31:3d:b9:33:ce:35:b6:8c:42:a7:51:87: bb:bd:68:ea:83:00:2e:2a:19:8a:68:40:34:fa:7c: 88:90:8f:c1:6a:55:df:c9:14:ef:3e:e5:30:67:48: 13:a4:3a:36:64:96:63:9c:75:55:19:e5:5c:a8:81: f4:85:a8:10:0f:a3:a3:e5:c8:4b:f6:a2:cb:1c:3e: b4:fc:f4:c7:22:62:39:bf:bd:91:52:00:ed:9b:10: 9f:60:d3:98:3c:a4:3a:a9:73:c8:ac:1b:eb:f0:88: 8f:f8:11:c4:45:cf:cf:dd:79:61:b3:ab:9d:63:0c: 8a:3b:e4:5b:a5:b4:e3:df:57:dc:6f:54:fb:0c:39: 04:4a:2d:bd:cb:f1:be:54:a2:4d:63:19:70:2c:83: c4:a4:67:d1:02:9c:93:65:f3:d2:ac:29:49:3e:1d: fa:c3:f7:7a:44:5b:39:30:c3:53:27:57:45:4d:3d: e1:44:49:f4:45:57:49:4e:cb:15:4b:a8:5b:09:9d: 5e:ce:74:08:e8:b5:6f:93:31:85:bb:99:69:c2:76: 8e:43:e8:c6:c1:9f:7d:4e:96:01:29:59:a6:7a:f8: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B9:80:EF:F1:97:F2:58:58:0F:98:30:0D:F3:2D:CB:F0:74:50:C5 X509v3 Authority Key Identifier: keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/WbmA7_GX8lhYD5gwDfMty_B0UMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.52.0/23 Signature Algorithm: sha256WithRSAEncryption 32:8d:72:7d:7d:1f:6d:0f:60:95:84:bc:8a:98:6d:0f:f7:23: a7:04:10:63:dc:40:48:7d:fd:2f:6e:95:81:ba:c9:f7:a9:5a: b1:06:d3:42:3b:cc:85:43:30:9a:62:38:41:fb:13:24:d6:18: d0:31:c4:f2:af:11:30:78:7b:96:92:20:ae:ae:0d:76:95:da: 41:d5:4b:08:35:27:77:3d:81:21:32:e3:74:6b:e9:ea:b4:5d: ad:3e:96:bc:a5:7b:87:81:c1:98:d5:11:a5:fb:ee:7b:9e:0c: 53:ed:5f:2a:8c:3f:29:c4:67:55:71:0c:9d:2d:9a:da:d1:4c: cb:4c:0f:1b:19:f0:d4:c5:fe:39:6a:9d:45:2c:b9:14:7a:c4: ae:9b:21:8f:60:d0:44:ac:dc:78:57:74:bd:92:92:83:c6:20: 5c:bb:9b:32:98:31:9b:68:e8:5b:1b:6f:4d:f6:04:7f:be:f6: 65:47:7f:36:8d:ae:36:9b:db:db:48:8d:02:f3:f7:45:bb:a7: 23:08:89:ce:3f:9a:1d:50:a9:f9:0c:fb:4c:1d:f1:88:3f:f2: 05:9c:a3:e0:ee:4f:26:ec:76:cf:fb:45:af:1b:69:95:37:22: b4:76:34:04:92:64:85:cd:73:d9:3e:20:e7:a9:49:d6:c5:a6: c7:71:b4:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUSAPabSw6Y+qczPiUu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy ZmVmMDgwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWI5ODBlZmYxOTdmMjU4NTgwZjk4MzAwZGYzMmRjYmYwNzQ1MGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMls5m3GgroPWYylUfvv6IB3vBBQ HXOiG/9DT+KpyMgxPbkzzjW2jEKnUYe7vWjqgwAuKhmKaEA0+nyIkI/BalXfyRTv PuUwZ0gTpDo2ZJZjnHVVGeVcqIH0hagQD6Oj5chL9qLLHD60/PTHImI5v72RUgDt mxCfYNOYPKQ6qXPIrBvr8IiP+BHERc/P3Xlhs6udYwyKO+RbpbTj31fcb1T7DDkE Si29y/G+VKJNYxlwLIPEpGfRApyTZfPSrClJPh36w/d6RFs5MMNTJ1dFTT3hREn0 RVdJTssVS6hbCZ1eznQI6LVvkzGFu5lpwnaOQ+jGwZ99TpYBKVmmevge4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFm5gO/xl/JYWA+YMA3zLcvwdFDFMB8GA1UdIwQY MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt NjM5ZTE0ZDA0ZGU2LzEvV2JtQTdfR1g4bGhZRDVnd0RmTXR5X0IwVU1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2 LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcg0MA0G CSqGSIb3DQEBCwUAA4IBAQAyjXJ9fR9tD2CVhLyKmG0P9yOnBBBj3EBIff0vbpWB usn3qVqxBtNCO8yFQzCaYjhB+xMk1hjQMcTyrxEweHuWkiCurg12ldpB1UsINSd3 PYEhMuN0a+nqtF2tPpa8pXuHgcGY1RGl++57ngxT7V8qjD8pxGdVcQydLZra0UzL TA8bGfDUxf45ap1FLLkUesSumyGPYNBErNx4V3S9kpKDxiBcu5symDGbaOhbG29N 9gR/vvZlR382ja42m9vbSI0C8/dFu6cjCInOP5odUKn5DPtMHfGIP/IFnKPg7k8m 7HbP+0WvG2mVNyK0djQEkmSFzXPZPiDnqUnWxabHcbSa -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:44 2026 by rpki-client