This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/weSznS_D69-XMNDCwtiO75avWl8.roa File: weSznS_D69-XMNDCwtiO75avWl8.roa (raw, json) Hash identifier: kN1ixQnp+DMlBTBG3+va71F0e9Sgb4tbZE+ePeLfqAw= Subject key identifier: C1:E4:B3:9D:2F:C3:EB:DF:97:30:D0:C2:C2:D8:8E:EF:96:AF:5A:5F Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1389CFA73382BA1E0F2CAD5EE0634A Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/weSznS_D69-XMNDCwtiO75avWl8.roa Signing time: Fri 02 Jan 2026 00:20:13 +0000 ROA not before: Fri 02 Jan 2026 00:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 185.238.231.0/24 maxlen: 24 185.255.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:89:cf:a7:33:82:ba:1e:0f:2c:ad:5e:e0:63:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e4b39d2fc3ebdf9730d0c2c2d88eef96af5a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:0c:5b:77:2e:38:b3:ed:2e:e1:10:63:9b: e6:5f:a8:d4:54:04:1d:b9:38:28:9e:a3:5c:94:a0: ce:db:32:2c:ae:89:58:e1:14:a2:03:c7:4f:42:e7: 3c:85:53:86:df:50:2c:57:e2:8a:69:cf:3a:ca:b0: 27:dd:45:70:eb:a3:88:07:e3:75:69:55:c2:a6:18: 94:57:b3:3c:31:2a:4a:e3:4f:66:09:4f:1b:b8:97: 2d:6a:83:e0:f6:6a:c6:6f:0d:20:4d:b6:4f:1d:a1: ce:06:95:d0:42:55:a9:90:a7:d8:86:a8:4f:f0:42: a5:f1:4a:74:fd:00:92:73:36:a5:e1:49:f9:bc:5c: 18:35:39:1d:96:1d:95:0b:3f:79:fb:b7:2c:41:60: 5b:05:b9:c1:af:cc:06:80:02:45:62:f0:de:70:4e: 7e:5b:a7:38:38:50:e9:8b:c1:ce:82:82:7b:14:f9: 1e:16:7d:32:eb:25:49:63:9c:9e:e0:f9:f7:4c:4d: 82:16:79:9e:71:ed:b8:23:f6:89:f9:66:55:34:75: 1b:14:c4:3d:65:4d:d9:4d:20:56:fe:e1:95:e4:4c: 77:5e:49:a0:9c:03:ab:72:2c:b9:36:4e:c1:71:00: 48:f2:26:ca:00:3b:05:2c:f3:aa:b6:00:dd:80:52: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E4:B3:9D:2F:C3:EB:DF:97:30:D0:C2:C2:D8:8E:EF:96:AF:5A:5F X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/weSznS_D69-XMNDCwtiO75avWl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.231.0/24 185.255.125.0/24 Signature Algorithm: sha256WithRSAEncryption 38:b9:df:f9:d1:ad:a8:86:ab:fe:4d:9d:fc:c6:52:dc:44:af: 11:1e:c9:41:ac:c7:9d:6f:bd:03:17:76:3c:32:8f:6e:81:3d: e2:82:88:e0:d1:5e:24:97:f8:0a:db:56:4a:1b:81:8b:37:59: a3:6b:69:4b:b5:56:61:40:0f:85:f1:28:d2:21:d4:45:6c:ea: e8:99:8b:05:d5:59:0b:ae:d0:65:e3:66:53:11:1c:71:14:64: 11:56:f4:44:a4:a4:18:7b:02:4c:c5:1e:dc:f9:71:fb:62:63: ed:1c:6d:9e:2e:5a:4a:03:81:21:e6:3f:ae:c1:65:2d:d9:20: 80:c3:5a:3b:1a:9c:a9:0b:28:ff:e4:20:51:b1:fe:40:fc:2b: c9:1d:2c:0e:65:df:7e:a4:99:34:bd:ba:9f:33:a3:35:78:6e: 57:8e:b3:ac:20:fe:ae:5d:32:02:b2:5f:df:b9:4e:00:8a:4a: 96:0e:73:a3:34:26:42:f6:f5:13:05:6b:96:e2:9e:39:c7:55: f6:f6:da:53:b5:ca:a9:cd:d6:03:fd:41:12:a2:40:e6:bf:96: b5:71:0b:f1:6e:f3:fe:12:a6:89:bd:55:ca:ba:a9:d4:54:fa: b6:19:b1:92:a1:35:7d:d5:83:d8:73:4c:48:83:73:ea:39:17: 5e:a5:39:fe -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E4nPpzOCuh4PLK1e4GNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU0YjM5ZDJmYzNlYmRmOTczMGQwYzJjMmQ4OGVlZjk2YWY1YTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk54MW3cuOLPtLuEQY5vmX6jUVAQd uTgonqNclKDO2zIsrolY4RSiA8dPQuc8hVOG31AsV+KKac86yrAn3UVw66OIB+N1 aVXCphiUV7M8MSpK409mCU8buJctaoPg9mrGbw0gTbZPHaHOBpXQQlWpkKfYhqhP 8EKl8Up0/QCSczal4Un5vFwYNTkdlh2VCz95+7csQWBbBbnBr8wGgAJFYvDecE5+ W6c4OFDpi8HOgoJ7FPkeFn0y6yVJY5ye4Pn3TE2CFnmece24I/aJ+WZVNHUbFMQ9 ZU3ZTSBW/uGV5Ex3XkmgnAOrciy5Nk7BcQBI8ibKADsFLPOqtgDdgFK0rwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMHks50vw+vflzDQwsLYju+Wr1pfMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvd2VTem5TX0Q2OS1YTU5EQ3d0aU83NWF2V2w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAue7nAwQA uf99MA0GCSqGSIb3DQEBCwUAA4IBAQA4ud/50a2ohqv+TZ38xlLcRK8RHslBrMed b70DF3Y8Mo9ugT3igojg0V4kl/gK21ZKG4GLN1mja2lLtVZhQA+F8SjSIdRFbOro mYsF1VkLrtBl42ZTERxxFGQRVvREpKQYewJMxR7c+XH7YmPtHG2eLlpKA4Eh5j+u wWUt2SCAw1o7GpypCyj/5CBRsf5A/CvJHSwOZd9+pJk0vbqfM6M1eG5XjrOsIP6u XTICsl/fuU4AikqWDnOjNCZC9vUTBWuW4p45x1X29tpTtcqpzdYD/UESokDmv5a1 cQvxbvP+EqaJvVXKuqnUVPq2GbGSoTV91YPYc0xIg3PqORdepTn+ -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:18 2026 by rpki-client