This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/wCBMxNVW2s2juIQvGN-nvZjm17I.roa File: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (raw, json) Hash identifier: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo= Subject key identifier: C0:20:4C:C4:D5:56:DA:CD:A3:B8:84:2F:18:DF:A7:BD:98:E6:D7:B2 Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Certificate serial: 019B7BA4AEAB0CE7D877ECB5621A887D4B1E Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/wCBMxNVW2s2juIQvGN-nvZjm17I.roa Signing time: Thu 01 Jan 2026 22:19:08 +0000 ROA not before: Thu 01 Jan 2026 22:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60793 IP address blocks: 185.19.12.0/22 maxlen: 22 185.192.156.0/22 maxlen: 22 2a03:fe40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ae:ab:0c:e7:d8:77:ec:b5:62:1a:88:7d:4b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b Validity Not Before: Jan 1 22:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0204cc4d556dacda3b8842f18dfa7bd98e6d7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:76:25:38:fa:df:54:2e:99:ce:91:a7:d8: 0d:56:13:58:57:7f:b1:c0:62:0e:af:7f:62:ff:58: 7e:68:f3:a9:d6:a2:ed:6d:14:34:4b:06:70:79:ff: cd:eb:36:a4:5c:77:ea:90:08:f9:60:50:82:b8:a5: 13:cf:1a:fd:7c:ba:87:f8:77:fb:09:e5:46:88:dc: f8:3a:e3:4a:a3:5f:1e:98:e0:01:a7:03:ca:5d:5d: 20:be:9a:34:40:60:da:ea:2c:a8:8d:d6:d3:09:e7: 71:f3:56:7e:70:05:65:50:70:92:cb:6a:d0:fa:63: b4:e4:9c:8a:9f:a1:3b:97:aa:d0:60:1e:9e:dd:b0: 6e:3f:ab:5c:ce:ce:b4:f6:3b:11:41:9f:bc:4d:b0: 1a:cf:c3:b4:68:3b:77:01:bc:68:8e:bf:58:d6:a7: 7e:df:a9:b5:9d:27:bd:d6:b5:ba:92:ec:5f:f2:81: 24:6c:19:de:17:3d:30:18:74:4d:75:28:0d:43:21: 4c:30:4d:61:18:3e:f7:f1:4e:f8:0a:8c:60:c4:fb: a8:fb:a5:b2:14:5e:2f:81:b0:ca:d7:f7:ec:15:49: 70:f0:46:cd:ed:0d:7c:68:25:83:8c:50:ea:29:8f: c7:2c:46:b6:ed:51:87:f4:47:13:6e:2d:8d:a7:56: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:20:4C:C4:D5:56:DA:CD:A3:B8:84:2F:18:DF:A7:BD:98:E6:D7:B2 X509v3 Authority Key Identifier: keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/wCBMxNVW2s2juIQvGN-nvZjm17I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.12.0/22 185.192.156.0/22 IPv6: 2a03:fe40::/32 Signature Algorithm: sha256WithRSAEncryption a0:49:5a:e0:39:c9:ca:9d:5f:9a:1c:b6:35:88:41:06:3e:7c: f1:ee:ac:b3:b2:76:8f:ce:6d:9b:8e:95:ec:f9:9f:83:ea:d3: 14:d0:60:81:2a:41:c6:df:e0:c9:ba:ac:b7:be:36:c1:ce:07: 45:bf:76:ab:2e:ad:8c:20:66:27:93:35:c4:5a:f6:5d:a5:f5: c6:72:3f:ae:0d:43:6a:77:78:90:16:76:b4:73:5f:36:ba:04: ad:35:fd:cb:81:19:04:63:78:fb:51:4c:c2:2a:30:0d:a9:cd: 2c:33:c0:bf:8f:e7:ae:d6:2a:5d:9a:45:f3:41:dc:2a:6a:e4: 4c:b1:bf:6c:27:c0:84:7b:fc:a5:0b:24:66:2e:2b:d3:e4:19: 10:8c:cc:94:e9:c0:22:7c:66:72:80:6f:8e:d3:c0:b8:60:82: c7:1e:f7:19:0f:23:09:d2:bb:96:f9:27:9e:b3:ad:72:a3:ac: 75:d5:64:4b:6a:ae:07:c8:70:d7:43:76:50:4e:17:be:bb:03: 11:79:ed:8b:ad:d8:d0:a5:bc:36:77:70:94:ee:c8:38:f2:f3: 2a:7a:8d:85:15:cd:58:aa:36:f8:97:89:c5:e1:c9:15:84:2e: 96:3e:fb:4e:d3:95:f7:93:6d:21:13:d8:71:96:62:5e:4e:73: 59:be:ce:af -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pK6rDOfYd+y1YhqIfUseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODFiN2I0YWUzZTc1ZGM0YjM2Y2ZmMjkzNzkyM2VjZGZm NzI1OWIwHhcNMjYwMTAxMjIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDIwNGNjNGQ1NTZkYWNkYTNiODg0MmYxOGRmYTdiZDk4ZTZkN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUF2JTj631Qumc6Rp9gNVhNYV3+x wGIOr39i/1h+aPOp1qLtbRQ0SwZwef/N6zakXHfqkAj5YFCCuKUTzxr9fLqH+Hf7 CeVGiNz4OuNKo18emOABpwPKXV0gvpo0QGDa6iyojdbTCedx81Z+cAVlUHCSy2rQ +mO05JyKn6E7l6rQYB6e3bBuP6tczs609jsRQZ+8TbAaz8O0aDt3Abxojr9Y1qd+ 36m1nSe91rW6kuxf8oEkbBneFz0wGHRNdSgNQyFMME1hGD738U74CoxgxPuo+6Wy FF4vgbDK1/fsFUlw8EbN7Q18aCWDjFDqKY/HLEa27VGH9EcTbi2Np1a+awIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMAgTMTVVtrNo7iELxjfp72Y5teyMB8GA1UdIwQY MBaAFCaBt7SuPnXcSzbP8pN5I+zf9yWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEt ZmM4MzliYjZkMTczLzEvd0NCTXhOVlcyczJqdUlRdkdOLW52WmptMTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEtZmM4MzliYjZkMTcz LzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRMMAwQC ucCcMA0EAgACMAcDBQAqA/5AMA0GCSqGSIb3DQEBCwUAA4IBAQCgSVrgOcnKnV+a HLY1iEEGPnzx7qyzsnaPzm2bjpXs+Z+D6tMU0GCBKkHG3+DJuqy3vjbBzgdFv3ar Lq2MIGYnkzXEWvZdpfXGcj+uDUNqd3iQFna0c182ugStNf3LgRkEY3j7UUzCKjAN qc0sM8C/j+eu1ipdmkXzQdwqauRMsb9sJ8CEe/ylCyRmLivT5BkQjMyU6cAifGZy gG+O08C4YILHHvcZDyMJ0ruW+Sees61yo6x11WRLaq4HyHDXQ3ZQThe+uwMRee2L rdjQpbw2d3CU7sg48vMqeo2FFc1Yqjb4l4nF4ckVhC6WPvtO05X3k20hE9hxlmJe TnNZvs6v -----END CERTIFICATE-----Generated at Sun Jan 25 12:47:05 2026 by rpki-client