This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/WDscPdpfG-kb__QIc1556x7o_PY.roa File: WDscPdpfG-kb__QIc1556x7o_PY.roa (raw, json) Hash identifier: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4= Subject key identifier: 58:3B:1C:3D:DA:5F:1B:E9:1B:FF:F4:08:73:5E:79:EB:1E:E8:FC:F6 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019BCB567383EBB371DC14BA316BD9956F42 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/WDscPdpfG-kb__QIc1556x7o_PY.roa Signing time: Sat 17 Jan 2026 09:43:19 +0000 ROA not before: Sat 17 Jan 2026 09:43:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51814 IP address blocks: 89.200.219.0/24 maxlen: 24 185.107.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cb:56:73:83:eb:b3:71:dc:14:ba:31:6b:d9:95:6f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Jan 17 09:43:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=583b1c3dda5f1be91bfff408735e79eb1ee8fcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5a:0b:52:5e:58:6e:d1:09:46:0a:17:3b:91: fc:80:4f:30:be:39:f9:05:95:27:a8:50:dd:de:d9: f9:bd:4f:5b:72:59:07:4d:27:c3:7c:33:3a:c4:1b: 42:da:10:19:92:c4:0d:fc:91:8e:ff:3c:bf:75:87: 3c:9f:54:dd:27:3c:fb:08:3e:ae:70:19:0c:de:8c: 00:82:40:82:9a:f1:d8:5f:b2:d4:a5:94:9e:4f:8c: bb:fe:2d:79:a9:dd:13:74:a7:11:36:24:36:a4:0a: 92:35:4a:af:06:67:bd:6d:7f:a8:4e:79:b4:34:75: 21:66:39:f8:db:20:e8:7d:ce:8f:dc:0a:fd:ee:f0: d6:87:e3:a6:ac:67:e9:89:e6:ce:7e:b0:4a:ac:8e: ab:8f:d1:07:fb:03:51:88:fa:be:55:4f:fd:ba:ec: bc:51:62:fb:64:b6:26:6d:57:54:23:8b:e4:b1:e3: 89:64:62:b7:99:4b:28:56:49:9d:39:35:f5:ef:91: 78:66:31:f8:ec:2a:26:e7:c2:99:1c:02:76:2d:cd: 53:a8:8e:f4:df:24:e7:b6:bd:2b:7e:f5:5d:4b:63: 70:0d:85:21:fd:d3:fa:39:74:dc:4a:22:6b:88:8a: f4:ad:3f:cf:34:2d:da:2e:d5:94:c5:19:be:90:73: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3B:1C:3D:DA:5F:1B:E9:1B:FF:F4:08:73:5E:79:EB:1E:E8:FC:F6 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/WDscPdpfG-kb__QIc1556x7o_PY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.200.219.0/24 185.107.133.0/24 Signature Algorithm: sha256WithRSAEncryption 12:e8:2c:07:f1:78:cf:b2:c2:15:09:18:a4:ad:d4:55:c4:53: bb:30:76:b6:81:a4:6e:50:bf:44:c1:bd:ec:2d:ac:fe:a3:8c: 98:ce:de:11:9a:90:22:ca:bb:6b:f2:e1:11:17:57:20:b6:0e: dd:e7:f0:17:0e:66:cf:f5:29:14:99:c5:9f:77:46:7d:3e:e4: 76:5e:20:05:90:2f:c7:31:ec:78:16:34:f6:e1:12:33:17:02: 5f:c2:a8:f7:51:0b:fe:47:7c:ad:cd:21:fe:55:dd:a5:7a:0d: ac:2a:20:02:93:ff:20:6a:9c:65:9a:58:f5:9d:9e:e1:31:71: e5:e7:e8:89:1b:18:fc:63:45:d6:53:54:96:fd:57:69:a4:de: e2:1c:8d:5c:e5:40:be:a0:97:88:12:c4:8a:4a:42:26:de:60: cf:9f:75:af:e9:8c:25:0d:59:82:26:b2:c6:82:c2:fa:69:43: 4e:b5:8f:83:4f:40:28:2a:54:68:41:72:1b:ae:5d:3e:7e:ad: ad:7e:35:2e:56:20:a9:25:21:4c:cb:fd:bb:2a:1e:9f:51:5a: 32:cb:53:48:20:a6:7e:e7:d0:52:91:54:12:2b:78:fe:0b:7d: b8:eb:ab:43:c7:66:0e:8b:fd:01:f9:9f:53:ca:5b:07:36:cf: b6:01:02:02 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvLVnOD67Nx3BS6MWvZlW9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwMTE3MDk0MzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODNiMWMzZGRhNWYxYmU5MWJmZmY0MDg3MzVlNzllYjFlZThmY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiloLUl5YbtEJRgoXO5H8gE8wvjn5 BZUnqFDd3tn5vU9bclkHTSfDfDM6xBtC2hAZksQN/JGO/zy/dYc8n1TdJzz7CD6u cBkM3owAgkCCmvHYX7LUpZSeT4y7/i15qd0TdKcRNiQ2pAqSNUqvBme9bX+oTnm0 NHUhZjn42yDofc6P3Ar97vDWh+OmrGfpiebOfrBKrI6rj9EH+wNRiPq+VU/9uuy8 UWL7ZLYmbVdUI4vkseOJZGK3mUsoVkmdOTX175F4ZjH47Com58KZHAJ2Lc1TqI70 3yTntr0rfvVdS2NwDYUh/dP6OXTcSiJriIr0rT/PNC3aLtWUxRm+kHOYSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFg7HD3aXxvpG//0CHNeeese6Pz2MB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvV0RzY1BkcGZHLWtiX19RSWMxNTU2eDdvX1BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWcjbAwQA uWuFMA0GCSqGSIb3DQEBCwUAA4IBAQAS6CwH8XjPssIVCRikrdRVxFO7MHa2gaRu UL9Ewb3sLaz+o4yYzt4RmpAiyrtr8uERF1cgtg7d5/AXDmbP9SkUmcWfd0Z9PuR2 XiAFkC/HMex4FjT24RIzFwJfwqj3UQv+R3ytzSH+Vd2leg2sKiACk/8gapxlmlj1 nZ7hMXHl5+iJGxj8Y0XWU1SW/VdppN7iHI1c5UC+oJeIEsSKSkIm3mDPn3Wv6Ywl DVmCJrLGgsL6aUNOtY+DT0AoKlRoQXIbrl0+fq2tfjUuViCpJSFMy/27Kh6fUVoy y1NIIKZ+59BSkVQSK3j+C32466tDx2YOi/0B+Z9TylsHNs+2AQIC -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:30 2026 by rpki-client