This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WBN7Xr3jVM2EKYBkbxIB4pf0KhY.roa File: WBN7Xr3jVM2EKYBkbxIB4pf0KhY.roa (raw, json) Hash identifier: h1icJynfo4wcU6DZNs4G9kvY2xWRQ7h4dSID0k5VU00= Subject key identifier: 58:13:7B:5E:BD:E3:54:CD:84:29:80:64:6F:12:01:E2:97:F4:2A:16 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13A9DAC7B1C759E1A4FC4A0E8DA8F3 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WBN7Xr3jVM2EKYBkbxIB4pf0KhY.roa Signing time: Fri 02 Jan 2026 00:20:21 +0000 ROA not before: Fri 02 Jan 2026 00:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400529 IP address blocks: 185.222.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:a9:da:c7:b1:c7:59:e1:a4:fc:4a:0e:8d:a8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58137b5ebde354cd842980646f1201e297f42a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:f8:91:bc:82:56:b1:01:35:d4:91:b1:1d: 0a:02:9d:27:a6:6c:1c:c4:2f:e1:e1:33:fe:8b:4c: 4a:79:43:b0:a3:39:7d:49:e4:95:aa:ef:53:88:9e: fb:5c:2c:ed:55:20:1f:4e:e1:7d:0d:64:1e:db:82: e8:b9:9c:f1:6a:e1:ed:88:00:90:a9:b6:1d:05:da: d4:34:cc:19:c0:33:78:21:fb:20:c5:22:1d:a7:84: af:74:37:23:9d:8a:71:da:23:6b:4a:0d:0f:00:9b: 31:3d:44:23:c1:a9:cd:61:5c:59:a4:d0:d0:1d:80: 2a:35:c9:4e:0b:dd:05:1f:f5:a8:0a:66:c9:34:40: 25:d6:49:67:6b:20:d6:b4:9a:40:62:98:2e:87:0a: ae:2a:aa:ba:2c:c1:14:ef:e1:b6:d2:01:6d:9a:64: 3b:21:e9:bb:43:e7:c7:a5:23:e3:1a:8a:22:6f:c7: 2c:9f:87:e8:05:8b:70:64:6b:b3:9a:9c:7d:8d:63: 17:76:f4:82:e4:8f:c6:94:9b:20:d6:bf:4e:c0:fe: c9:7f:d4:44:67:2f:08:d2:b1:a0:42:27:29:01:bd: 38:bd:b5:81:77:1d:08:f7:01:37:91:6b:f8:f2:25: 02:e8:18:a4:9c:33:1e:21:c2:4e:33:0c:0b:af:65: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:7B:5E:BD:E3:54:CD:84:29:80:64:6F:12:01:E2:97:F4:2A:16 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WBN7Xr3jVM2EKYBkbxIB4pf0KhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.31.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:95:0b:d5:bd:fd:4b:0d:fa:04:75:6c:b5:13:e8:ec:90:3b: c0:17:35:10:ba:00:6c:fe:c4:d6:82:69:e8:e3:f0:08:50:d2: 08:1e:b0:dc:fd:6f:09:38:eb:bb:49:b8:b4:44:46:2c:f0:24: 87:5d:e6:a7:42:4c:4d:17:c9:1b:5b:0a:9e:6b:7e:a6:16:fd: 7c:eb:97:d0:d2:b6:1d:44:2f:87:27:a2:7f:af:39:b0:9f:04: 6b:fe:7a:bd:f9:13:76:ed:8d:d5:c9:55:dc:ae:f4:76:77:5a: 2b:0f:a8:a6:06:ac:5f:be:88:fb:09:bd:64:71:9c:16:9b:d5: 59:0e:c2:a5:02:27:98:61:6b:48:43:5a:bd:05:e8:7d:89:d4: 98:d8:be:20:80:0b:81:6c:01:5d:09:0d:14:e0:ab:7e:99:07: 1c:98:3b:5e:f2:38:be:ef:24:83:a8:f0:56:32:7a:8a:2f:4d: c8:7e:b9:26:92:ff:97:01:a3:e4:2b:87:a1:37:3d:6a:c7:2c: 93:3a:c3:13:ff:e1:3e:3e:13:1e:ef:2f:08:b1:f5:72:1a:a4: 5a:95:45:92:cf:7f:21:73:b5:5e:16:63:4b:b0:d0:a6:66:0a: ab:87:26:b2:10:fb:bb:85:83:0d:64:c7:5b:5f:74:bd:4d:75: 5d:4d:0d:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E6nax7HHWeGk/EoOjajzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODEzN2I1ZWJkZTM1NGNkODQyOTgwNjQ2ZjEyMDFlMjk3ZjQyYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G34kbyCVrEBNdSRsR0KAp0npmwc xC/h4TP+i0xKeUOwozl9SeSVqu9TiJ77XCztVSAfTuF9DWQe24LouZzxauHtiACQ qbYdBdrUNMwZwDN4IfsgxSIdp4SvdDcjnYpx2iNrSg0PAJsxPUQjwanNYVxZpNDQ HYAqNclOC90FH/WoCmbJNEAl1klnayDWtJpAYpguhwquKqq6LMEU7+G20gFtmmQ7 Iem7Q+fHpSPjGooib8csn4foBYtwZGuzmpx9jWMXdvSC5I/GlJsg1r9OwP7Jf9RE Zy8I0rGgQicpAb04vbWBdx0I9wE3kWv48iUC6BiknDMeIcJOMwwLr2XUMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgTe16941TNhCmAZG8SAeKX9CoWMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvV0JON1hyM2pWTTJFS1lCa2J4SUI0cGYwS2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud4fMA0G CSqGSIb3DQEBCwUAA4IBAQBNlQvVvf1LDfoEdWy1E+jskDvAFzUQugBs/sTWgmno 4/AIUNIIHrDc/W8JOOu7Sbi0REYs8CSHXeanQkxNF8kbWwqea36mFv1865fQ0rYd RC+HJ6J/rzmwnwRr/nq9+RN27Y3VyVXcrvR2d1orD6imBqxfvoj7Cb1kcZwWm9VZ DsKlAieYYWtIQ1q9Beh9idSY2L4ggAuBbAFdCQ0U4Kt+mQccmDte8ji+7ySDqPBW MnqKL03Ifrkmkv+XAaPkK4ehNz1qxyyTOsMT/+E+PhMe7y8IsfVyGqRalUWSz38h c7VeFmNLsNCmZgqrhyayEPu7hYMNZMdbX3S9TXVdTQ1Y -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:28 2026 by rpki-client