This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa File: WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa (raw, json) Hash identifier: QXm/UopRYCraXfnadtlxCqtDzUMyQNtipIGzmPAgbf4= Subject key identifier: 59:C0:5B:EF:8E:86:7B:72:80:10:5F:B2:2F:21:F9:23:A6:45:13:41 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019B7B3624B93BE4DECD3CA735C5CEF21D2C Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200436 IP address blocks: 5.42.223.0/24 maxlen: 24 194.180.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:24:b9:3b:e4:de:cd:3c:a7:35:c5:ce:f2:1d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59c05bef8e867b7280105fb22f21f923a6451341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:a4:97:e9:a8:95:cf:13:c2:df:05:b7:f7: 65:44:d8:e4:e0:22:09:98:e1:47:3c:7e:54:c4:08: 26:17:cd:d9:40:b7:ce:64:84:04:d0:2f:e1:db:4c: 91:19:fb:77:30:77:f6:18:43:f2:f1:62:2e:6c:20: b3:de:90:84:23:ce:b2:ec:42:65:33:a6:68:82:34: c4:76:6b:c5:09:42:27:35:a8:e2:01:f4:79:0c:e7: 0e:4b:38:05:a9:55:0e:bf:8e:b1:ff:94:ec:93:b9: 76:aa:1b:de:09:5c:77:f4:3e:86:7b:dd:87:19:47: 3a:b8:bb:87:4b:3b:4f:c2:8a:a1:a2:82:79:ae:23: d1:67:fb:58:fe:b4:1d:e1:ec:2e:f9:5e:48:95:d7: d9:a5:63:06:e1:22:39:da:ef:20:0f:c7:7b:b3:f4: a9:5e:be:20:13:e3:45:19:0b:d8:c8:6c:ae:3f:79: 89:57:12:9f:2c:64:54:62:fe:aa:ad:f8:69:6c:44: 1a:05:51:42:b0:77:d6:40:dc:34:93:e2:c0:00:b7: 89:64:1e:ef:24:87:9c:ec:3d:80:19:2c:4b:cb:35: ae:58:22:a8:99:29:51:c4:06:0c:78:68:90:0b:90: e7:89:5f:a6:a2:9c:bb:3d:78:f6:65:0b:1e:c5:d8: 38:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C0:5B:EF:8E:86:7B:72:80:10:5F:B2:2F:21:F9:23:A6:45:13:41 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.223.0/24 194.180.224.0/24 Signature Algorithm: sha256WithRSAEncryption a3:dc:47:9c:5e:2e:69:4e:e6:64:98:e5:d7:33:3b:54:96:fb: 96:e8:cc:9e:c0:18:e3:89:29:f0:d9:52:86:f1:8d:39:3e:37: bd:77:bc:69:1d:5f:25:56:f7:99:a5:d4:7f:3b:56:ca:e5:23: 86:ed:dd:6b:07:cb:6d:d7:b7:25:4a:a6:0d:d1:7e:b6:47:1e: 32:b6:0e:96:3e:ac:ff:95:41:83:f2:bc:51:91:6f:5a:c8:f9: 3f:86:94:f1:f2:22:a0:2a:11:f0:cb:f3:27:3f:b6:95:31:4f: 0f:ef:57:6a:1d:fc:22:e7:b4:00:97:85:15:42:6a:e6:91:01: af:2b:05:69:d4:90:df:c3:a7:f6:b6:01:9f:fb:07:0d:08:f6: 77:0b:9b:10:a5:c8:45:2f:fd:69:ae:9b:5c:54:d6:f8:a1:cd: e6:d3:98:87:b6:06:d6:15:f4:3c:13:da:f0:cb:15:e7:6b:59: 8b:f8:a8:12:ba:10:5d:10:4d:4b:ae:3d:9a:55:88:25:00:04: bf:27:f7:a4:f3:97:d5:29:f3:1d:70:84:43:fd:b4:fd:2c:d9: 2a:bc:69:55:c2:2e:79:c9:ed:ce:ea:e9:cd:d2:6a:0c:32:19: b3:08:d1:01:e4:e8:05:d2:2e:46:79:9d:01:ed:54:a2:a3:70: b2:02:00:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NiS5O+TezTynNcXO8h0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWMwNWJlZjhlODY3YjcyODAxMDVmYjIyZjIxZjkyM2E2NDUxMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgukl+molc8Twt8Ft/dlRNjk4CIJ mOFHPH5UxAgmF83ZQLfOZIQE0C/h20yRGft3MHf2GEPy8WIubCCz3pCEI86y7EJl M6ZogjTEdmvFCUInNajiAfR5DOcOSzgFqVUOv46x/5Tsk7l2qhveCVx39D6Ge92H GUc6uLuHSztPwoqhooJ5riPRZ/tY/rQd4ewu+V5IldfZpWMG4SI52u8gD8d7s/Sp Xr4gE+NFGQvYyGyuP3mJVxKfLGRUYv6qrfhpbEQaBVFCsHfWQNw0k+LAALeJZB7v JIec7D2AGSxLyzWuWCKomSlRxAYMeGiQC5DniV+mopy7PXj2ZQsexdg4YwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFnAW++OhntygBBfsi8h+SOmRRNBMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvV2NCYjc0NkdlM0tBRUYteUx5SDVJNlpGRTBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABSrfAwQA wrTgMA0GCSqGSIb3DQEBCwUAA4IBAQCj3EecXi5pTuZkmOXXMztUlvuW6MyewBjj iSnw2VKG8Y05Pje9d7xpHV8lVveZpdR/O1bK5SOG7d1rB8tt17clSqYN0X62Rx4y tg6WPqz/lUGD8rxRkW9ayPk/hpTx8iKgKhHwy/MnP7aVMU8P71dqHfwi57QAl4UV QmrmkQGvKwVp1JDfw6f2tgGf+wcNCPZ3C5sQpchFL/1prptcVNb4oc3m05iHtgbW FfQ8E9rwyxXna1mL+KgSuhBdEE1Lrj2aVYglAAS/J/ek85fVKfMdcIRD/bT9LNkq vGlVwi55ye3O6unN0moMMhmzCNEB5OgF0i5GeZ0B7VSio3CyAgDM -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:36 2026 by rpki-client