This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/wEDppBCkxMeXKCmEIpLC-dW_mTc.roa File: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (raw, json) Hash identifier: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I= Subject key identifier: C0:40:E9:A4:10:A4:C4:C7:97:28:29:84:22:92:C2:F9:D5:BF:99:37 Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Certificate serial: 019B7D5C6089687E6C5FFBA8284807F29DE3 Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/wEDppBCkxMeXKCmEIpLC-dW_mTc.roa Signing time: Fri 02 Jan 2026 06:19:24 +0000 ROA not before: Fri 02 Jan 2026 06:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203965 IP address blocks: 185.118.172.0/22 maxlen: 22 185.118.172.0/24 maxlen: 24 185.118.173.0/24 maxlen: 24 185.118.174.0/24 maxlen: 24 185.118.175.0/24 maxlen: 24 2a06:9380::/29 maxlen: 48 2a06:9380:172::/48 maxlen: 48 2a06:9380:173::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:60:89:68:7e:6c:5f:fb:a8:28:48:07:f2:9d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c040e9a410a4c4c7972829842292c2f9d5bf9937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:98:f5:9b:9c:be:1f:ab:7f:ce:e1:32:00: 91:66:c2:6f:59:b6:a1:44:93:56:28:1e:71:3d:12: 89:c5:c6:ca:0b:fd:7e:e4:15:b9:c7:f8:d8:a0:33: 8f:ad:45:17:83:f4:db:8e:d3:9d:64:75:9a:4c:c4: 6c:95:a6:fd:47:2f:14:c2:75:ca:7b:2f:8a:40:16: 82:31:89:f6:21:a4:99:ee:f2:79:1b:cc:ad:5f:bc: 2a:00:53:89:73:23:8b:cd:9d:58:5a:9c:89:d2:41: c2:07:21:74:3d:8e:c2:b9:b2:50:63:49:af:3b:25: 05:76:f3:81:e4:9a:20:8e:ac:23:dd:f7:9b:23:97: c5:f5:09:c4:72:09:cd:ea:a4:9d:bc:d5:e2:0f:e3: a8:0e:d9:3e:70:a5:de:91:6c:0f:eb:5e:ca:a5:3d: 7a:bc:de:b5:f7:de:58:b9:de:c5:42:cf:d8:52:0f: e4:d5:c4:b3:0f:e6:07:04:9b:28:41:7f:1d:32:c2: 19:ff:85:0b:dd:f7:87:e3:0b:aa:07:fb:9f:1c:f3: b6:b8:52:4c:67:f8:65:69:6d:6e:9d:f2:91:fb:21: 4c:0e:ad:4c:60:0b:63:ea:2d:5e:dd:fe:61:0a:b0: 1a:c8:ea:bd:e0:15:ed:a9:ae:a9:b8:16:58:35:7b: a4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:40:E9:A4:10:A4:C4:C7:97:28:29:84:22:92:C2:F9:D5:BF:99:37 X509v3 Authority Key Identifier: keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/wEDppBCkxMeXKCmEIpLC-dW_mTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.172.0/22 IPv6: 2a06:9380::/29 Signature Algorithm: sha256WithRSAEncryption 5a:4f:f7:78:f3:c4:04:52:70:49:21:8e:24:7b:f5:25:d6:c0: d7:e6:ed:3b:8d:93:1e:98:4a:4b:e7:7c:fd:00:91:ed:64:4a: e5:2f:d9:30:6e:20:79:f3:a6:af:47:4c:93:bf:a6:94:8b:76: 2d:27:1b:0e:ba:a1:e9:09:cf:46:50:19:0c:d0:1d:7e:43:a3: 55:e5:2b:72:5f:67:2e:ce:27:43:c4:8e:b0:f1:98:70:08:d1: f6:a0:23:e6:84:92:4a:ee:39:d0:8d:ba:c4:35:93:d3:48:68: 0b:67:ff:1b:0a:fb:4f:4b:b6:8f:ee:b4:4c:5a:d8:d2:44:14: c8:c9:12:75:30:bc:ae:05:40:17:b3:cf:88:8e:94:63:d6:0d: 00:e7:75:07:d1:03:98:03:25:d0:bb:f4:ea:37:99:ed:a2:53: 31:0a:e6:da:f1:e6:f0:37:28:cc:09:a8:e6:55:52:95:dd:9d: 45:0e:e1:87:c5:66:e0:8b:dc:d6:07:e3:56:50:dd:c1:63:4a: b8:03:d1:84:40:b6:b7:2f:c0:4f:fa:6e:0e:6a:57:aa:b1:bd: 5c:8f:7b:6d:1d:df:60:c0:b6:42:1f:d4:82:b5:09:10:d6:6c: 7c:c3:34:a6:3b:7c:d2:be:34:5a:ba:3c:b2:62:97:91:2c:00: 5f:15:9e:78 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XGCJaH5sX/uoKEgH8p3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MmQxNzhjOGU1M2Y1MjEzMWMxZmI2NDc0M2M5NjBjZjg5 N2ZkMGMwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDQwZTlhNDEwYTRjNGM3OTcyODI5ODQyMjkyYzJmOWQ1YmY5OTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vWY9Zucvh+rf87hMgCRZsJvWbah RJNWKB5xPRKJxcbKC/1+5BW5x/jYoDOPrUUXg/TbjtOdZHWaTMRslab9Ry8UwnXK ey+KQBaCMYn2IaSZ7vJ5G8ytX7wqAFOJcyOLzZ1YWpyJ0kHCByF0PY7CubJQY0mv OyUFdvOB5Jogjqwj3febI5fF9QnEcgnN6qSdvNXiD+OoDtk+cKXekWwP617KpT16 vN61995Yud7FQs/YUg/k1cSzD+YHBJsoQX8dMsIZ/4UL3feH4wuqB/ufHPO2uFJM Z/hlaW1unfKR+yFMDq1MYAtj6i1e3f5hCrAayOq94BXtqa6puBZYNXukuwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMBA6aQQpMTHlygphCKSwvnVv5k3MB8GA1UdIwQY MBaAFKctF4yOU/UhMcH7ZHQ8lgz4l/0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2Qt MjhiOWQyNjFlY2IxLzEvd0VEcHBCQ2t4TWVYS0NtRUlwTEMtZFdfbVRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2QtMjhiOWQyNjFlY2Ix LzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXasMA0E AgACMAcDBQMqBpOAMA0GCSqGSIb3DQEBCwUAA4IBAQBaT/d488QEUnBJIY4ke/Ul 1sDX5u07jZMemEpL53z9AJHtZErlL9kwbiB586avR0yTv6aUi3YtJxsOuqHpCc9G UBkM0B1+Q6NV5StyX2cuzidDxI6w8ZhwCNH2oCPmhJJK7jnQjbrENZPTSGgLZ/8b CvtPS7aP7rRMWtjSRBTIyRJ1MLyuBUAXs8+IjpRj1g0A53UH0QOYAyXQu/TqN5nt olMxCuba8ebwNyjMCajmVVKV3Z1FDuGHxWbgi9zWB+NWUN3BY0q4A9GEQLa3L8BP +m4Oaleqsb1cj3ttHd9gwLZCH9SCtQkQ1mx8wzSmO3zSvjRaujyyYpeRLABfFZ54 -----END CERTIFICATE-----Generated at Mon Jan 26 14:07:58 2026 by rpki-client