This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/WMBlv5TYOFhb5nmDTbMHQgVvFpc.roa File: WMBlv5TYOFhb5nmDTbMHQgVvFpc.roa (raw, json) Hash identifier: aKDzW6jTAaiYbIZ5LNCccfbLrCredMGyDoJe0MXZVlA= Subject key identifier: 58:C0:65:BF:94:D8:38:58:5B:E6:79:83:4D:B3:07:42:05:6F:16:97 Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652 Certificate serial: 019B7F14D3D48D04B927C8F7410F2F268FB2 Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/WMBlv5TYOFhb5nmDTbMHQgVvFpc.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28900 IP address blocks: 213.190.224.0/21 maxlen: 21 213.190.232.0/21 maxlen: 21 213.190.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d3:d4:8d:04:b9:27:c8:f7:41:0f:2f:26:8f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652 Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58c065bf94d838585be679834db30742056f1697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:58:7e:bb:7b:c8:89:82:06:90:fd:29:a7: 5a:b5:cd:c3:ed:84:48:59:c5:b8:2b:d0:7e:32:7f: 51:54:6a:db:1c:43:48:ea:57:25:ff:62:7e:3e:3e: 54:3d:1a:64:a1:b4:d3:9e:95:a7:50:09:a4:b6:62: 9f:47:17:09:26:f5:34:d7:89:41:64:96:a8:1e:2b: 71:f2:34:40:f0:4d:3d:35:98:88:68:20:52:48:22: f3:8d:2a:46:17:e0:91:ca:2c:58:ef:2e:16:5c:8d: 98:aa:2d:cb:c3:3f:99:88:8f:2c:be:92:6c:92:b9: c2:2c:3a:2a:86:d8:1f:dc:bc:e2:aa:71:eb:03:9b: f9:ce:53:59:cc:ec:cf:73:bc:44:4d:25:cc:95:e6: 2c:99:0b:e5:79:a0:8c:ea:02:6e:3f:d1:2c:e8:2e: 9a:8e:cc:e3:ee:d1:5a:34:48:76:cd:b5:10:4b:49: d7:4e:55:ae:1f:9b:13:d0:a8:45:c1:82:9c:35:5d: 33:e8:63:46:ec:11:92:bd:ea:15:37:1f:14:31:f6: 28:c9:f9:c6:6b:38:89:d8:ac:0c:b7:e0:4a:fa:16: f2:de:55:13:3d:ef:e2:93:40:b0:fe:f9:c1:a9:e4: 9c:15:fa:5f:29:1b:eb:2b:7a:a0:4b:7e:a3:84:be: 78:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C0:65:BF:94:D8:38:58:5B:E6:79:83:4D:B3:07:42:05:6F:16:97 X509v3 Authority Key Identifier: keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/WMBlv5TYOFhb5nmDTbMHQgVvFpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.190.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:da:b7:a3:84:df:c2:32:f9:15:6b:a1:50:15:44:44:36:29: 52:a0:a9:23:1e:ab:9a:97:b2:3c:3e:b3:8b:b4:d9:b2:02:97: ba:45:9a:2e:32:68:42:27:80:23:8b:7c:88:00:1c:5b:7f:fa: ae:4b:56:43:22:a4:32:43:d1:9c:36:53:92:58:4a:1d:69:0a: 8b:e0:16:9b:c8:bb:9f:64:cb:27:48:63:7b:cd:e2:90:a5:b2: 06:dc:62:22:83:eb:58:6f:69:d2:b7:35:8e:d2:f2:4e:54:8f: 19:e2:ca:dd:0a:6e:96:4f:93:6e:24:fa:f4:80:5b:95:e9:a8: a3:ab:3f:3b:46:7a:08:76:ab:ba:eb:97:e7:c5:f8:9a:1e:c1: 60:5e:19:fb:2a:5f:26:ce:10:01:23:11:cf:de:bf:9f:74:a9: 40:10:65:40:e2:8b:2a:c5:d8:d6:a9:6b:88:aa:18:f2:25:9e: cd:33:0d:8e:9f:20:04:48:25:6e:9a:5f:a3:80:fe:00:2b:ab: 18:20:88:5f:3d:a4:7c:e9:b0:21:db:96:a6:f5:17:52:02:a0: 5e:93:82:0e:1e:f7:db:eb:1a:ce:e3:45:d7:32:f3:65:6b:01: ab:93:18:67:ea:35:6f:68:12:c0:91:38:f0:24:d5:34:e3:94: c4:74:69:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FNPUjQS5J8j3QQ8vJo+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYmExMGIwYTY3NmQzZTFmYWI1NjUyODQzMGZhYzg5MWEw ODM2NTIwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGMwNjViZjk0ZDgzODU4NWJlNjc5ODM0ZGIzMDc0MjA1NmYxNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuBYfrt7yImCBpD9Kadatc3D7YRI WcW4K9B+Mn9RVGrbHENI6lcl/2J+Pj5UPRpkobTTnpWnUAmktmKfRxcJJvU014lB ZJaoHitx8jRA8E09NZiIaCBSSCLzjSpGF+CRyixY7y4WXI2Yqi3Lwz+ZiI8svpJs krnCLDoqhtgf3LziqnHrA5v5zlNZzOzPc7xETSXMleYsmQvleaCM6gJuP9Es6C6a jszj7tFaNEh2zbUQS0nXTlWuH5sT0KhFwYKcNV0z6GNG7BGSveoVNx8UMfYoyfnG aziJ2KwMt+BK+hby3lUTPe/ik0Cw/vnBqeScFfpfKRvrK3qgS36jhL54AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjAZb+U2DhYW+Z5g02zB0IFbxaXMB8GA1UdIwQY MBaAFK+6ELCmdtPh+rVlKEMPrIkaCDZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdvUXNLWjIwLUg2dFdVb1F3LXNpUm9JTmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYTljOWYtMGMwNy00Nzc2LWFlNjUt ZTAyN2RjYjFkMTg2LzEvV01CbHY1VFlPRmhiNW5tRFRiTUhRZ1Z2RnBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYTljOWYtMGMwNy00Nzc2LWFlNjUtZTAyN2RjYjFkMTg2 LzEvcjdvUXNLWjIwLUg2dFdVb1F3LXNpUm9JTmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1b7gMA0G CSqGSIb3DQEBCwUAA4IBAQBK2rejhN/CMvkVa6FQFURENilSoKkjHqual7I8PrOL tNmyApe6RZouMmhCJ4Aji3yIABxbf/quS1ZDIqQyQ9GcNlOSWEodaQqL4BabyLuf ZMsnSGN7zeKQpbIG3GIig+tYb2nStzWO0vJOVI8Z4srdCm6WT5NuJPr0gFuV6aij qz87RnoIdqu665fnxfiaHsFgXhn7Kl8mzhABIxHP3r+fdKlAEGVA4osqxdjWqWuI qhjyJZ7NMw2OnyAESCVuml+jgP4AK6sYIIhfPaR86bAh25am9RdSAqBek4IOHvfb 6xrO40XXMvNlawGrkxhn6jVvaBLAkTjwJNU045TEdGni -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:52 2026 by rpki-client