This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa File: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (raw, json) Hash identifier: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0= Subject key identifier: 59:93:D6:71:2E:87:69:4D:87:CD:57:6B:EC:34:71:67:EA:63:38:91 Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b Certificate serial: 019B77C7153D0D20F62BCD4728590126BCE4 Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62313 IP address blocks: 213.32.224.0/24 maxlen: 24 213.32.228.0/24 maxlen: 24 213.32.230.0/24 maxlen: 24 213.32.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:15:3d:0d:20:f6:2b:cd:47:28:59:01:26:bc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5993d6712e87694d87cd576bec347167ea633891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:68:ec:f8:59:50:45:72:9a:2a:a4:bf:d9: 54:31:b2:d8:4b:18:9a:8f:5b:9b:f9:17:47:74:64: ff:29:ae:76:83:4a:d3:4d:ca:e8:30:70:87:6a:03: 57:dd:d8:a9:94:24:d5:b2:da:97:26:f7:ff:52:9d: 9b:af:dd:72:38:f4:75:71:80:a5:ee:17:ff:83:31: 71:b8:95:42:18:cf:4d:fd:12:ba:52:5a:cc:5d:34: ab:eb:73:fe:12:39:e8:b9:ed:67:b3:4c:e0:2b:8d: d3:f4:c8:1b:1a:df:10:7f:85:21:8a:35:d1:1e:46: 4e:9b:8b:de:8d:7b:34:d0:d5:23:9c:0c:7b:2f:35: 8b:1b:ab:06:6f:24:c1:14:00:d2:95:0d:8a:fd:21: 24:50:23:2e:18:cb:73:f0:a9:f8:7e:cb:52:1b:3c: 69:cc:a6:48:0b:8c:a1:33:b1:0a:ed:86:54:ed:ae: 33:e2:fb:dc:b7:f7:57:79:d0:83:1a:2c:81:16:fe: 2c:a1:d8:68:d0:90:9a:db:e1:a7:c1:7c:c0:0d:04: b4:3c:8b:c0:39:cb:67:b4:04:db:b1:b3:b6:71:60: 49:bd:88:b6:1c:ea:c3:48:13:87:c4:d9:79:bc:d8: 17:c2:03:65:18:5f:3b:5e:e8:fe:7f:a3:60:6e:4b: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:93:D6:71:2E:87:69:4D:87:CD:57:6B:EC:34:71:67:EA:63:38:91 X509v3 Authority Key Identifier: keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.32.224.0/24 213.32.228.0/24 213.32.230.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:a0:0d:09:6e:b8:2a:ef:d1:8d:ff:5a:8b:12:26:ca:59:fc: e8:c2:3a:ca:18:70:44:e9:83:13:63:a2:83:18:d0:24:7c:f4: b9:a7:09:39:67:a7:16:c0:d4:d1:2d:c5:39:99:cb:18:e2:97: 8d:24:84:9c:07:a1:7c:47:9f:22:04:d7:78:50:b5:b8:ef:77: 6a:31:c1:65:c3:9c:68:5a:75:d5:19:bc:75:c9:ca:ab:e7:76: 0d:92:2d:90:71:54:7e:0a:e8:86:74:5d:d0:3e:69:54:76:3e: be:5b:9c:18:e7:d9:d8:94:8d:df:94:56:d9:ce:53:c0:6e:27: 9a:4d:e4:ca:d7:79:37:33:82:4c:a1:3b:c9:41:cf:10:f5:43: 64:50:10:b8:5a:4e:07:3a:ba:47:6d:70:24:5b:28:8b:80:bc: 38:b0:6d:c6:43:da:12:23:06:9e:81:68:e5:7c:fc:bf:5e:75: 7e:c5:94:1a:71:af:73:41:66:b4:4d:86:3c:a0:8a:0e:ac:e8: d3:84:ec:38:f6:b2:1d:84:cb:ed:fb:e0:d0:6c:13:4a:23:6f: a5:45:b6:7b:cf:ae:6a:6d:38:7e:cf:ba:92:91:c3:84:a1:89: e3:04:59:a5:e0:9c:d8:5f:b0:95:b8:c9:93:63:32:c2:3a:17: ac:17:0f:e2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xxU9DSD2K81HKFkBJrzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2 ZWFkNWIwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTkzZDY3MTJlODc2OTRkODdjZDU3NmJlYzM0NzE2N2VhNjMzODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn5o7PhZUEVymiqkv9lUMbLYSxia j1ub+RdHdGT/Ka52g0rTTcroMHCHagNX3diplCTVstqXJvf/Up2br91yOPR1cYCl 7hf/gzFxuJVCGM9N/RK6UlrMXTSr63P+Ejnoue1ns0zgK43T9MgbGt8Qf4UhijXR HkZOm4vejXs00NUjnAx7LzWLG6sGbyTBFADSlQ2K/SEkUCMuGMtz8Kn4fstSGzxp zKZIC4yhM7EK7YZU7a4z4vvct/dXedCDGiyBFv4sodho0JCa2+GnwXzADQS0PIvA OctntATbsbO2cWBJvYi2HOrDSBOHxNl5vNgXwgNlGF87Xuj+f6Ngbkv7uwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFmT1nEuh2lNh81Xa+w0cWfqYziRMB8GA1UdIwQY MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt NWZiZjMzYWNkODNlLzEvV1pQV2NTNkhhVTJIelZkcjdEUnhaLXBqT0pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1SDgAwQA 1SDkAwQB1SDmMA0GCSqGSIb3DQEBCwUAA4IBAQBqoA0Jbrgq79GN/1qLEibKWfzo wjrKGHBE6YMTY6KDGNAkfPS5pwk5Z6cWwNTRLcU5mcsY4peNJIScB6F8R58iBNd4 ULW473dqMcFlw5xoWnXVGbx1ycqr53YNki2QcVR+CuiGdF3QPmlUdj6+W5wY59nY lI3flFbZzlPAbieaTeTK13k3M4JMoTvJQc8Q9UNkUBC4Wk4HOrpHbXAkWyiLgLw4 sG3GQ9oSIwaegWjlfPy/XnV+xZQaca9zQWa0TYY8oIoOrOjThOw49rIdhMvt++DQ bBNKI2+lRbZ7z65qbTh+z7qSkcOEoYnjBFml4JzYX7CVuMmTYzLCOhesFw/i -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:33 2026 by rpki-client