This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/wemg5rTkkqVzI0Wh91rmncErW9M.roa File: wemg5rTkkqVzI0Wh91rmncErW9M.roa (raw, json) Hash identifier: egq769rSEvJ3yiKJ+cXaazDpSWPy4/IG74+NvtNY77Q= Subject key identifier: C1:E9:A0:E6:B4:E4:92:A5:73:23:45:A1:F7:5A:E6:9D:C1:2B:5B:D3 Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90 Certificate serial: 019B79106A47CFCE19C217C5B1192D63A007 Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/wemg5rTkkqVzI0Wh91rmncErW9M.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51191 IP address blocks: 185.169.24.0/24 maxlen: 24 185.169.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6a:47:cf:ce:19:c2:17:c5:b1:19:2d:63:a0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e9a0e6b4e492a5732345a1f75ae69dc12b5bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:f5:90:83:be:d5:da:f6:71:e7:4d:66:80: 70:28:87:56:54:2a:b2:dc:83:5f:b6:38:c9:fb:32: a4:f3:fa:be:a6:de:f0:2a:67:8d:d1:f7:65:75:91: 4b:cd:a1:3b:03:8f:42:5d:ee:aa:2d:bc:9d:82:9b: 1c:82:62:80:58:1d:fb:4a:a4:f6:c0:88:f8:c4:d4: 47:c4:cc:b8:b3:6c:c9:58:50:52:64:45:a0:6d:6b: 09:da:99:45:a5:d5:0e:72:21:a4:b5:1e:63:4b:66: c7:c4:3a:96:41:84:df:a5:d9:d1:5e:95:60:59:4e: 8a:48:51:e3:ad:7b:58:e3:4a:19:f7:da:d3:03:69: 19:c2:f3:38:b9:1d:0a:1b:8b:e9:f6:f7:45:7f:94: 21:66:83:88:9c:ea:53:58:54:e3:79:c7:c6:78:99: 93:fb:2c:78:1a:92:87:b3:2c:c0:9a:d1:6d:e2:67: e2:fd:ff:b5:43:37:9c:a5:a9:a7:b2:78:1f:4c:23: e8:e5:39:68:03:66:d2:0d:0d:10:fa:65:7b:cd:70: c3:13:6e:53:78:98:3e:b3:d2:d9:e1:99:94:63:33: eb:ca:f9:51:1f:3a:d0:fe:ea:02:80:41:44:75:36: df:6e:c8:3f:2a:1a:68:15:ce:21:cc:ca:52:3e:13: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E9:A0:E6:B4:E4:92:A5:73:23:45:A1:F7:5A:E6:9D:C1:2B:5B:D3 X509v3 Authority Key Identifier: keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/wemg5rTkkqVzI0Wh91rmncErW9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.24.0/23 Signature Algorithm: sha256WithRSAEncryption 36:d9:11:6c:78:15:6c:15:7c:19:49:10:63:09:1c:79:0b:d7: 54:28:8e:b9:cf:b6:d8:43:86:2b:42:f8:71:08:f3:77:5f:ac: 79:93:b9:e0:9d:a9:38:76:0a:dc:4c:3f:4b:1e:11:b9:09:0e: f3:d0:f3:69:12:73:89:c3:18:16:55:91:52:88:63:00:fb:60: 8b:c3:2b:90:a2:98:17:c8:e6:b2:39:17:a5:c2:b6:2a:83:f2: 5c:d4:e9:b5:d2:52:40:eb:b2:c7:12:73:b7:c5:6b:cc:2c:3a: 85:f7:b2:c8:9c:de:d0:7e:17:48:68:a7:f6:4c:23:fc:b9:6c: 94:9d:2f:0f:e4:24:38:6a:30:d0:54:a0:78:11:62:50:af:2c: 17:10:78:5d:65:7d:34:5e:e2:38:73:6b:61:3c:38:83:2c:33: 53:78:cd:8f:cd:28:0f:f1:3f:74:db:6e:13:47:21:4e:2e:c8: d8:27:4f:83:61:21:bd:53:91:88:4b:32:1d:09:56:70:60:fa: 2b:f3:13:b5:fe:4a:c9:b3:a3:5d:8f:44:1c:d8:98:22:ea:4f: ff:24:f4:df:2f:c3:37:cb:c6:03:37:9a:48:a7:27:73:a2:df: 11:27:88:e8:3b:e9:dd:bd:ea:c4:22:b1:6c:c1:45:e8:91:07: e9:2c:03:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGpHz84ZwhfFsRktY6AHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTk1MjlkZDMxNzA2NDVkNzZjZjZhYzA2NTk1MDZjYzY0 OWNhOTAwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU5YTBlNmI0ZTQ5MmE1NzMyMzQ1YTFmNzVhZTY5ZGMxMmI1YmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4X1kIO+1dr2cedNZoBwKIdWVCqy 3INftjjJ+zKk8/q+pt7wKmeN0fdldZFLzaE7A49CXe6qLbydgpscgmKAWB37SqT2 wIj4xNRHxMy4s2zJWFBSZEWgbWsJ2plFpdUOciGktR5jS2bHxDqWQYTfpdnRXpVg WU6KSFHjrXtY40oZ99rTA2kZwvM4uR0KG4vp9vdFf5QhZoOInOpTWFTjecfGeJmT +yx4GpKHsyzAmtFt4mfi/f+1QzecpamnsngfTCPo5TloA2bSDQ0Q+mV7zXDDE25T eJg+s9LZ4ZmUYzPryvlRHzrQ/uoCgEFEdTbfbsg/KhpoFc4hzMpSPhPwYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMHpoOa05JKlcyNFofda5p3BK1vTMB8GA1UdIwQY MBaAFJdZUp3TFwZF12z2rAZZUGzGScqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYt ZGU0YWNjYjAwZGQ3LzEvd2VtZzVyVGtrcVZ6STBXaDkxcm1uY0VyVzlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYtZGU0YWNjYjAwZGQ3 LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuakYMA0G CSqGSIb3DQEBCwUAA4IBAQA22RFseBVsFXwZSRBjCRx5C9dUKI65z7bYQ4YrQvhx CPN3X6x5k7ngnak4dgrcTD9LHhG5CQ7z0PNpEnOJwxgWVZFSiGMA+2CLwyuQopgX yOayORelwrYqg/Jc1Om10lJA67LHEnO3xWvMLDqF97LInN7QfhdIaKf2TCP8uWyU nS8P5CQ4ajDQVKB4EWJQrywXEHhdZX00XuI4c2thPDiDLDNTeM2PzSgP8T90224T RyFOLsjYJ0+DYSG9U5GISzIdCVZwYPor8xO1/krJs6Ndj0Qc2Jgi6k//JPTfL8M3 y8YDN5pIpydzot8RJ4joO+ndverEIrFswUXokQfpLANv -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:33 2026 by rpki-client