This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/Wdq9UIvFzgDqiYju4znORuRnk4A.roa File: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (raw, json) Hash identifier: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA= Subject key identifier: 59:DA:BD:50:8B:C5:CE:00:EA:89:88:EE:E3:39:CE:46:E4:67:93:80 Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5 Certificate serial: 019B7BA3D360D8BAC689FA9F856861107959 Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/Wdq9UIvFzgDqiYju4znORuRnk4A.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25091 IP address blocks: 185.247.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d3:60:d8:ba:c6:89:fa:9f:85:68:61:10:79:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59dabd508bc5ce00ea8988eee339ce46e4679380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:6a:5d:17:af:8b:6e:f4:a9:04:bc:26:54: 85:26:b4:ad:cb:5e:e5:3e:58:75:0e:af:69:e2:1d: 15:88:04:fa:29:4c:53:f9:7b:dd:5b:7c:09:5d:fb: 73:40:fd:2f:90:46:8a:77:f2:c0:8c:ca:65:ff:4a: 12:d0:79:14:a8:26:56:c4:c1:79:7f:fa:13:cf:ae: 9f:6d:86:86:4c:c3:e6:b0:2f:4f:da:1f:48:b4:6d: 97:40:30:50:50:14:31:f9:64:cb:1b:fa:1d:e0:71: ca:59:0a:c0:eb:c3:fa:62:1d:1f:7d:f7:14:08:7d: 73:bb:51:6d:2f:01:dc:aa:a6:51:0f:28:1b:f7:b0: 13:42:7b:d1:46:fc:52:c2:bd:cc:5a:e3:50:1d:30: db:54:cd:3d:eb:fe:d2:e4:33:9b:18:41:bc:5d:8f: 49:76:bb:3f:53:6b:68:7f:9c:e1:57:f1:e8:ab:31: fa:04:8e:48:a2:35:b8:41:d6:22:06:d2:bf:86:38: 1e:91:e1:53:d1:0c:5f:86:e3:9c:2b:29:a3:c1:e1: e3:12:9d:60:ea:31:79:e4:36:ea:13:fb:2f:15:7a: 37:47:94:91:c9:a8:9f:ce:35:38:5f:22:c7:cf:c5: c2:8b:d2:a7:df:7a:4b:de:f5:91:43:8c:cf:b6:97: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DA:BD:50:8B:C5:CE:00:EA:89:88:EE:E3:39:CE:46:E4:67:93:80 X509v3 Authority Key Identifier: keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/Wdq9UIvFzgDqiYju4znORuRnk4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.76.0/22 Signature Algorithm: sha256WithRSAEncryption 41:1d:c3:94:e8:fb:87:a9:e2:13:70:80:bc:8a:82:c6:14:17: cd:87:ed:12:c6:30:9a:4e:36:ff:58:d2:73:a9:a4:6d:4a:54: 71:79:a3:55:12:87:5e:7e:96:2e:f1:f1:96:cc:c7:63:d4:8e: 1a:d4:a7:d5:81:11:8b:cb:03:50:98:ad:5d:d3:3d:c5:14:09: a5:9b:3f:dd:a9:67:00:5e:35:0a:8f:0a:0a:9a:31:8d:9f:8e: ac:b9:99:dd:10:97:7c:f4:b5:14:cc:c0:33:7f:9b:11:de:06: dc:0e:9b:e1:bb:23:50:e2:f4:2a:68:d4:be:12:84:07:de:7e: 49:f4:7f:44:95:4f:b5:bd:da:b6:28:1b:8c:5f:4d:ef:fb:10: 9c:09:19:30:e0:3e:3d:13:f8:63:50:e7:52:ad:04:ae:9f:a8: 1f:82:b3:27:70:a4:52:78:27:aa:43:29:0d:ec:05:ef:b0:e2: 4a:04:48:a2:13:68:5c:a4:64:a0:1d:48:4c:f9:53:ef:33:8c: 2c:f3:f0:91:ca:b5:7b:87:8d:f3:df:47:ea:34:a3:2d:52:b9: 9f:06:9b:dd:9e:cd:b4:c5:3f:05:a1:43:08:43:29:3a:c4:b6: e3:1f:a7:59:20:a8:96:02:98:c5:20:1a:10:60:03:b8:3f:1a: 59:ab:13:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9Ng2LrGifqfhWhhEHlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2 OGM3YjUwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWRhYmQ1MDhiYzVjZTAwZWE4OTg4ZWVlMzM5Y2U0NmU0Njc5MzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIxqXRevi270qQS8JlSFJrSty17l Plh1Dq9p4h0ViAT6KUxT+XvdW3wJXftzQP0vkEaKd/LAjMpl/0oS0HkUqCZWxMF5 f/oTz66fbYaGTMPmsC9P2h9ItG2XQDBQUBQx+WTLG/od4HHKWQrA68P6Yh0fffcU CH1zu1FtLwHcqqZRDygb97ATQnvRRvxSwr3MWuNQHTDbVM096/7S5DObGEG8XY9J drs/U2tof5zhV/HoqzH6BI5IojW4QdYiBtK/hjgekeFT0QxfhuOcKymjweHjEp1g 6jF55DbqE/svFXo3R5SRyaifzjU4XyLHz8XCi9Kn33pL3vWRQ4zPtpfA2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFnavVCLxc4A6omI7uM5zkbkZ5OAMB8GA1UdIwQY MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt NGFiZGMyYmI5ZmEzLzEvV2RxOVVJdkZ6Z0RxaVlqdTR6bk9SdVJuazRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufdMMA0G CSqGSIb3DQEBCwUAA4IBAQBBHcOU6PuHqeITcIC8ioLGFBfNh+0SxjCaTjb/WNJz qaRtSlRxeaNVEodefpYu8fGWzMdj1I4a1KfVgRGLywNQmK1d0z3FFAmlmz/dqWcA XjUKjwoKmjGNn46suZndEJd89LUUzMAzf5sR3gbcDpvhuyNQ4vQqaNS+EoQH3n5J 9H9ElU+1vdq2KBuMX03v+xCcCRkw4D49E/hjUOdSrQSun6gfgrMncKRSeCeqQykN 7AXvsOJKBEiiE2hcpGSgHUhM+VPvM4ws8/CRyrV7h43z30fqNKMtUrmfBpvdns20 xT8FoUMIQyk6xLbjH6dZIKiWApjFIBoQYAO4PxpZqxNW -----END CERTIFICATE-----Generated at Sun Jan 18 20:54:01 2026 by rpki-client