This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/wBtREldvDjl4K9_Eyc6xek7-RYI.roa File: wBtREldvDjl4K9_Eyc6xek7-RYI.roa (raw, json) Hash identifier: z4RdhE9lhhi0tt8aHo4p1WawqFAV7GTzx2aHrOIBbVU= Subject key identifier: C0:1B:51:12:57:6F:0E:39:78:2B:DF:C4:C9:CE:B1:7A:4E:FE:45:82 Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Certificate serial: 019B7D5CE2CCEE2C2E510869581A97886142 Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/wBtREldvDjl4K9_Eyc6xek7-RYI.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394434 IP address blocks: 185.187.132.0/23 maxlen: 24 185.187.134.0/23 maxlen: 24 2a0b:a580::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e2:cc:ee:2c:2e:51:08:69:58:1a:97:88:61:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c01b5112576f0e39782bdfc4c9ceb17a4efe4582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:5e:fb:2d:a8:2e:e7:10:76:6b:af:55:25: 7a:77:fb:45:1c:27:7d:ac:05:e4:15:5a:b6:a2:4c: 00:64:e8:e5:46:25:e2:a0:15:0f:5a:1e:6b:de:bd: 60:f1:6a:32:98:0e:b8:f6:a4:7d:82:e1:dc:c6:18: 69:7c:c2:51:b7:33:97:68:cb:bf:38:14:c0:a8:72: 1d:4f:9f:f4:34:d5:1a:62:34:fe:a9:f0:d6:50:15: 8e:e0:a2:e9:ac:17:d5:f9:40:8b:2c:98:c8:2f:cb: 32:84:ac:f8:9b:3b:5d:90:73:7f:47:d5:7f:fb:de: de:98:ec:b7:6d:ef:74:c2:79:d0:38:f0:0d:ae:b2: 97:2f:57:10:77:b7:c9:f4:eb:95:73:69:94:d2:16: f9:46:af:32:dd:e2:51:11:63:b8:32:57:54:d6:55: 85:41:af:15:1a:67:da:6a:a6:33:f2:3a:6c:cc:66: 1e:8c:0d:ab:2e:09:05:dc:3d:cb:80:5f:fb:e9:2e: 30:47:99:9e:71:3e:e9:83:b4:ef:35:3f:cf:ac:ac: 8d:24:0d:00:31:74:b5:33:e9:04:66:0a:0d:6e:5a: 57:52:0f:60:fe:b1:08:30:03:6e:a7:cc:69:6e:93: a0:32:e2:b7:34:65:1f:19:80:68:8a:4a:65:0b:00: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1B:51:12:57:6F:0E:39:78:2B:DF:C4:C9:CE:B1:7A:4E:FE:45:82 X509v3 Authority Key Identifier: keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/wBtREldvDjl4K9_Eyc6xek7-RYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.132.0/22 IPv6: 2a0b:a580::/29 Signature Algorithm: sha256WithRSAEncryption a5:75:e9:92:d7:f3:50:18:30:49:71:4a:21:3b:cd:1a:63:98: d9:a1:68:0e:45:6d:4b:00:ae:b8:6e:4c:70:1f:75:ee:8f:62: ab:7a:17:8a:53:a8:d8:4b:31:15:db:68:87:57:32:46:f9:8c: 98:be:7b:d2:30:c8:c8:02:9a:90:0b:7e:74:26:e1:a7:9c:53: 82:8e:5a:b2:7f:77:e4:ab:75:70:d1:c0:54:b6:d2:ed:45:7a: 80:54:08:9c:2f:e2:9b:de:f7:d8:84:95:65:56:7f:ee:e2:0d: c8:ae:80:37:f5:1a:af:89:66:c2:d0:e1:dd:c2:9e:16:cc:b0: e3:89:f3:94:3f:28:07:dc:e5:fc:70:05:51:5d:ed:b8:c6:8e: 91:da:5b:38:41:98:33:6c:2a:b5:d7:ca:c8:8e:3d:6c:7f:3e: 18:5e:c8:29:a1:49:ab:98:a8:89:7f:b4:eb:c7:43:3c:17:15: 4f:9d:5c:12:b1:d7:dc:54:79:f9:da:f1:6a:a8:25:66:54:5f: 0b:2a:84:8a:f6:b5:86:05:c9:5d:7b:96:85:d2:9b:66:f8:bb: 94:d7:96:92:81:ab:2b:96:9d:4c:7b:12:26:9f:a8:a8:ee:2b: ba:ae:ab:3e:d6:d4:8f:c3:a5:59:a9:59:55:fd:3b:10:20:8d: 83:0a:05:28 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XOLM7iwuUQhpWBqXiGFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGEzOTFhYWViOGZjN2M4MzNmODI1N2Q3YTllNzRhNTVi MzNhZmUwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDFiNTExMjU3NmYwZTM5NzgyYmRmYzRjOWNlYjE3YTRlZmU0NTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYNe+y2oLucQdmuvVSV6d/tFHCd9 rAXkFVq2okwAZOjlRiXioBUPWh5r3r1g8WoymA649qR9guHcxhhpfMJRtzOXaMu/ OBTAqHIdT5/0NNUaYjT+qfDWUBWO4KLprBfV+UCLLJjIL8syhKz4mztdkHN/R9V/ +97emOy3be90wnnQOPANrrKXL1cQd7fJ9OuVc2mU0hb5Rq8y3eJREWO4MldU1lWF Qa8VGmfaaqYz8jpszGYejA2rLgkF3D3LgF/76S4wR5mecT7pg7TvNT/PrKyNJA0A MXS1M+kEZgoNblpXUg9g/rEIMANup8xpbpOgMuK3NGUfGYBoikplCwDnUwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMAbURJXbw45eCvfxMnOsXpO/kWCMB8GA1UdIwQY MBaAFI4KORquuPx8gz+CV9ep50pVszr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYt ZWRiNDNlMWQ0ZWUwLzEvd0J0UkVsZHZEamw0SzlfRXljNnhlazctUllJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYtZWRiNDNlMWQ0ZWUw LzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubuEMA0E AgACMAcDBQMqC6WAMA0GCSqGSIb3DQEBCwUAA4IBAQCldemS1/NQGDBJcUohO80a Y5jZoWgORW1LAK64bkxwH3Xuj2KreheKU6jYSzEV22iHVzJG+YyYvnvSMMjIApqQ C350JuGnnFOCjlqyf3fkq3Vw0cBUttLtRXqAVAicL+Kb3vfYhJVlVn/u4g3IroA3 9RqviWbC0OHdwp4WzLDjifOUPygH3OX8cAVRXe24xo6R2ls4QZgzbCq118rIjj1s fz4YXsgpoUmrmKiJf7Trx0M8FxVPnVwSsdfcVHn52vFqqCVmVF8LKoSK9rWGBcld e5aF0ptm+LuU15aSgasrlp1MexImn6io7iu6rqs+1tSPw6VZqVlV/TsQII2DCgUo -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:47 2026 by rpki-client