This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa File: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (raw, json) Hash identifier: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y= Subject key identifier: 58:43:97:85:5C:2A:6C:80:DC:38:25:55:49:F9:D4:0C:A5:CA:C8:20 Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064 Certificate serial: 019B7BA531EDA2C247F50C85B6BB84DA5249 Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 193.53.128.0/19 maxlen: 19 193.53.128.0/24 maxlen: 24 193.53.137.0/24 maxlen: 24 193.53.139.0/24 maxlen: 24 193.53.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:31:ed:a2:c2:47:f5:0c:85:b6:bb:84:da:52:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=584397855c2a6c80dc38255549f9d40ca5cac820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:23:33:a1:74:18:3b:66:5c:15:45:86:be: 99:08:9a:d3:38:e1:42:a7:44:2a:a4:6d:96:03:dd: 08:d3:a7:31:95:42:6d:80:9f:06:66:0d:2f:4c:4c: ed:ae:9f:24:f6:23:e8:11:2a:a8:2b:f0:23:bf:39: 7c:8c:58:c9:32:cb:70:82:9c:36:8f:14:01:6d:6c: f2:ee:cd:ce:07:c7:b2:f5:47:ce:3e:ad:c7:9e:63: ce:e6:f6:bb:6a:21:e6:fc:bd:00:08:99:cb:f6:18: 98:55:dc:76:e7:8a:dd:17:f7:7d:0c:23:05:c7:2f: 76:1f:eb:52:27:90:43:67:71:77:7b:69:44:39:6f: 59:6b:22:76:66:d3:c2:17:45:79:c2:7f:2f:b6:bd: 3d:64:be:54:cb:55:cd:dd:e3:95:55:de:b4:af:d0: 08:75:77:e4:39:f6:31:b7:77:05:38:da:56:a0:a4: 7b:28:e6:e1:20:6e:30:1a:0f:f2:fa:7b:40:01:9a: 08:60:85:72:82:ad:8f:59:4c:95:59:68:3c:b7:d7: fa:6b:0d:02:33:e4:3e:c7:0b:61:0b:f4:0c:e6:d3: 10:a8:b6:5a:cb:22:05:de:f5:1a:cb:04:62:c7:25: e6:a8:b0:fd:77:f1:aa:90:ca:17:64:f7:b4:a3:90: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:97:85:5C:2A:6C:80:DC:38:25:55:49:F9:D4:0C:A5:CA:C8:20 X509v3 Authority Key Identifier: keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.128.0/19 Signature Algorithm: sha256WithRSAEncryption 05:d4:b4:13:4d:39:49:a6:a1:a6:ed:8e:84:73:78:c0:f7:8f: ad:93:93:4a:cc:5b:b5:8d:e9:c0:a4:5b:b7:30:0b:fa:04:d8: 86:77:b5:db:40:8b:4d:6d:de:5e:b2:0f:82:96:d1:68:e2:51: c3:ab:fa:76:5c:a2:57:c3:9e:23:06:07:47:80:b3:85:cd:26: 62:2a:8b:60:1e:81:26:8e:4c:f3:97:a8:cc:3a:9e:12:f1:1f: 1f:6c:be:0f:43:ea:60:f6:4a:4b:6e:a1:32:dd:88:6e:fe:7b: 67:be:e0:f6:86:fb:c5:0d:d5:7f:7b:80:f5:7f:58:54:c5:cb: 07:3d:9b:ff:90:f8:0a:1c:94:b8:1a:5f:25:d7:bc:2a:37:92: ed:a8:c3:3d:49:44:01:23:96:82:c4:f9:87:10:bc:10:84:6c: 6b:55:86:c1:71:20:ae:e5:f8:80:7e:2f:a2:70:c9:f8:40:ff: 54:2a:cf:09:39:e5:b0:49:1f:fe:d7:a6:65:e6:91:24:36:a1: 72:86:ae:bd:3a:e2:f4:ff:a3:ff:7b:cc:16:f2:34:50:6b:a8: d0:4e:94:4e:05:8d:9a:3c:f9:4c:10:7e:58:bd:7b:b9:3e:67: 32:17:6b:28:b3:88:43:c5:64:69:c1:d9:35:2d:b0:ca:28:d2: d5:5a:ac:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTHtosJH9QyFtruE2lJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMzBmMmZmZjRmZTEwYjFhNzljMTI3YTZhNGFkODJjYTUz MjYwNjQwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODQzOTc4NTVjMmE2YzgwZGMzODI1NTU0OWY5ZDQwY2E1Y2FjODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZIjM6F0GDtmXBVFhr6ZCJrTOOFC p0QqpG2WA90I06cxlUJtgJ8GZg0vTEztrp8k9iPoESqoK/Ajvzl8jFjJMstwgpw2 jxQBbWzy7s3OB8ey9UfOPq3HnmPO5va7aiHm/L0ACJnL9hiYVdx254rdF/d9DCMF xy92H+tSJ5BDZ3F3e2lEOW9ZayJ2ZtPCF0V5wn8vtr09ZL5Uy1XN3eOVVd60r9AI dXfkOfYxt3cFONpWoKR7KObhIG4wGg/y+ntAAZoIYIVygq2PWUyVWWg8t9f6aw0C M+Q+xwthC/QM5tMQqLZayyIF3vUaywRixyXmqLD9d/GqkMoXZPe0o5CwGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhDl4VcKmyA3DglVUn51AylysggMB8GA1UdIwQY MBaAFNsw8v/0/hCxp5wSempK2CylMmBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYt OTM3ZTI1MjNkNmY3LzEvV0VPWGhWd3FiSURjT0NWVlNmblVES1hLeUNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYtOTM3ZTI1MjNkNmY3 LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwTWAMA0G CSqGSIb3DQEBCwUAA4IBAQAF1LQTTTlJpqGm7Y6Ec3jA94+tk5NKzFu1jenApFu3 MAv6BNiGd7XbQItNbd5esg+CltFo4lHDq/p2XKJXw54jBgdHgLOFzSZiKotgHoEm jkzzl6jMOp4S8R8fbL4PQ+pg9kpLbqEy3Yhu/ntnvuD2hvvFDdV/e4D1f1hUxcsH PZv/kPgKHJS4Gl8l17wqN5LtqMM9SUQBI5aCxPmHELwQhGxrVYbBcSCu5fiAfi+i cMn4QP9UKs8JOeWwSR/+16Zl5pEkNqFyhq69OuL0/6P/e8wW8jRQa6jQTpROBY2a PPlMEH5YvXu5PmcyF2sos4hDxWRpwdk1LbDKKNLVWqyS -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:20 2026 by rpki-client