This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa File: wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa (raw, json) Hash identifier: aqTWkdbUh2lUmpGqUaJazitQHO++p5bcYZRKvviqQCM= Subject key identifier: C2:C4:16:16:76:7D:42:F5:3A:AC:BE:19:4A:DA:EA:82:1A:08:E0:85 Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Certificate serial: 019B78348176461C52C8777ADB026AF3C822 Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7262 IP address blocks: 185.152.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:81:76:46:1c:52:c8:77:7a:db:02:6a:f3:c8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2c41616767d42f53aacbe194adaea821a08e085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:77:26:db:00:ba:06:be:34:e4:4e:2e:9a: ac:89:33:51:af:c6:ca:4a:3c:64:e4:f0:8c:24:27: 54:07:a1:c1:13:02:42:1b:3e:af:a1:35:49:68:53: 22:50:5c:37:93:6f:3a:bd:00:df:47:79:29:71:b6: 24:0e:0b:7d:42:d4:65:6e:cc:4f:67:2d:77:30:a9: 71:6b:73:29:5b:d7:36:5f:d7:48:f9:27:37:e6:3d: 31:9e:b0:a4:d5:53:7c:b8:17:78:de:94:e0:0c:9a: 6f:03:5b:f4:71:4d:f5:7a:97:3e:3d:80:4c:f9:5a: 13:dc:ba:52:8a:4e:4c:a1:23:38:6b:3e:43:0e:5e: 6d:93:40:42:2e:98:6a:84:c3:25:bb:db:00:26:10: 89:ea:2b:d7:81:19:84:21:bb:be:af:4c:2a:59:ce: 0a:cf:08:06:32:a6:e1:6d:f3:fa:25:fe:29:ae:98: 63:b9:fe:45:4c:31:3d:f2:cd:b5:0a:24:60:f1:3d: a7:1e:d0:cf:a1:c9:c1:75:ee:9f:a7:ba:9b:ad:e1: e8:30:09:b9:4f:18:60:64:db:74:b0:1d:c4:a5:03: 61:7e:38:d1:54:71:fe:c3:91:51:a3:24:35:b8:c0: 03:71:4b:47:32:96:b5:53:4e:13:32:40:c8:d2:8b: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:16:16:76:7D:42:F5:3A:AC:BE:19:4A:DA:EA:82:1A:08:E0:85 X509v3 Authority Key Identifier: keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.51.0/24 Signature Algorithm: sha256WithRSAEncryption 27:74:63:76:a1:1f:16:ef:2e:d1:d2:7e:17:d7:20:9a:70:31: c2:02:f8:7c:e2:40:32:ea:83:40:68:74:77:0c:6a:66:d8:a6: 0d:f2:5f:15:ac:d0:f7:d3:7a:2d:a6:cd:13:02:7a:e4:ac:02: a8:44:6d:1a:c9:76:ce:eb:68:03:60:a1:e8:fd:7f:f8:6e:33: 7d:df:c0:12:6e:e7:8a:a0:28:61:f3:d7:d0:c5:bf:c7:07:8f: 14:30:b0:c2:66:66:f4:63:08:e2:38:41:40:54:0a:38:77:57: c1:77:24:ec:45:87:54:6e:55:cb:14:e7:5c:58:87:40:ba:c0: 6e:ff:7e:c8:9a:a2:db:08:1b:a9:b4:66:54:75:3d:7b:fc:3a: af:80:19:5f:5b:d3:0e:8a:60:25:09:1c:d6:db:64:54:17:b0: 3f:8c:0f:1c:c4:93:68:68:40:75:0e:37:bc:a9:cd:fb:0c:61: 8f:a1:9e:93:6d:5f:c9:11:4b:61:eb:0d:61:8a:58:db:ec:64: 88:59:4c:5c:2d:17:7d:71:5a:ef:3e:2a:0a:8f:69:0c:6d:3e: 61:93:d1:d0:f5:dd:c9:33:70:73:b3:bd:5b:4e:1d:57:1e:a3: 11:22:cc:7d:7c:8c:e8:3d:0b:8b:eb:80:e1:0b:42:46:ee:4e: 94:5d:16:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NIF2RhxSyHd62wJq88giMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDZmMDI2YjFmZTYzNmM5YTVkYTAxMWRjN2ZkNjljNTgx ZDAyYjgwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmM0MTYxNjc2N2Q0MmY1M2FhY2JlMTk0YWRhZWE4MjFhMDhlMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1l3JtsAuga+NOROLpqsiTNRr8bK Sjxk5PCMJCdUB6HBEwJCGz6voTVJaFMiUFw3k286vQDfR3kpcbYkDgt9QtRlbsxP Zy13MKlxa3MpW9c2X9dI+Sc35j0xnrCk1VN8uBd43pTgDJpvA1v0cU31epc+PYBM +VoT3LpSik5MoSM4az5DDl5tk0BCLphqhMMlu9sAJhCJ6ivXgRmEIbu+r0wqWc4K zwgGMqbhbfP6Jf4prphjuf5FTDE98s21CiRg8T2nHtDPocnBde6fp7qbreHoMAm5 TxhgZNt0sB3EpQNhfjjRVHH+w5FRoyQ1uMADcUtHMpa1U04TMkDI0ou2NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLEFhZ2fUL1Oqy+GUra6oIaCOCFMB8GA1UdIwQY MBaAFCkG8Cax/mNsml2gEdx/1pxYHQK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUt ODBhOTFiZTgzZTRiLzEvd3NRV0ZuWjlRdlU2ckw0WlN0cnFnaG9JNElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUtODBhOTFiZTgzZTRi LzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZgzMA0G CSqGSIb3DQEBCwUAA4IBAQAndGN2oR8W7y7R0n4X1yCacDHCAvh84kAy6oNAaHR3 DGpm2KYN8l8VrND303otps0TAnrkrAKoRG0ayXbO62gDYKHo/X/4bjN938ASbueK oChh89fQxb/HB48UMLDCZmb0YwjiOEFAVAo4d1fBdyTsRYdUblXLFOdcWIdAusBu /37ImqLbCBuptGZUdT17/DqvgBlfW9MOimAlCRzW22RUF7A/jA8cxJNoaEB1Dje8 qc37DGGPoZ6TbV/JEUth6w1hiljb7GSIWUxcLRd9cVrvPioKj2kMbT5hk9HQ9d3J M3Bzs71bTh1XHqMRIsx9fIzoPQuL64DhC0JG7k6UXRbi -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:33 2026 by rpki-client