This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/WMTxNqy5dxe24um7JtSXmDnNRnM.roa File: WMTxNqy5dxe24um7JtSXmDnNRnM.roa (raw, json) Hash identifier: TxZKxHcS8Fj+JFe1cwBosTBaRiZeeZ2HacumzoOW+L8= Subject key identifier: 58:C4:F1:36:AC:B9:77:17:B6:E2:E9:BB:26:D4:97:98:39:CD:46:73 Certificate issuer: /CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b Certificate serial: 019B7B36E19CA506B359DE56977CCDFE4111 Authority key identifier: 92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/WMTxNqy5dxe24um7JtSXmDnNRnM.roa Signing time: Thu 01 Jan 2026 20:19:12 +0000 ROA not before: Thu 01 Jan 2026 20:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64444 IP address blocks: 185.164.164.0/22 maxlen: 22 2a0a:a400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e1:9c:a5:06:b3:59:de:56:97:7c:cd:fe:41:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b Validity Not Before: Jan 1 20:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58c4f136acb97717b6e2e9bb26d4979839cd4673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2a:28:d4:60:90:81:4b:e9:58:f5:80:c9:67: e3:b6:22:d2:14:38:2f:18:ad:10:86:e7:b3:17:b0: 3c:23:79:26:9a:a1:79:db:9e:74:10:86:3a:f8:30: 07:5b:07:2c:4c:93:d0:1b:0d:47:2f:b7:9d:b9:87: c4:d4:0a:f3:fe:e8:55:2c:66:34:8f:41:36:86:fa: 2c:21:fc:49:7f:c1:63:71:60:b8:dc:e9:a0:9c:99: 41:5f:1a:07:59:11:31:96:6e:33:77:49:20:6d:64: 88:ec:5d:d8:71:99:d3:8c:12:00:d4:3d:5e:cd:ef: 3d:1d:6f:b4:13:40:a6:fd:57:dc:a1:22:aa:97:72: 40:b8:a8:5c:de:dd:31:8f:95:e0:f4:e0:f6:49:f3: a9:f3:51:23:49:30:54:79:ec:cd:24:e0:2a:20:ed: 21:7f:49:f2:cc:b9:5a:63:ec:00:b5:9a:d6:55:b7: 2d:81:4e:08:7f:c1:94:ac:1c:71:3d:30:46:62:ef: 8d:cf:e1:d1:1b:c7:fc:65:3b:a6:92:76:ad:03:cc: 62:e7:65:78:23:92:bc:5e:9e:b0:f2:50:55:23:79: b7:7f:94:3d:25:0b:4f:3a:7b:3e:fe:49:f6:69:73: 50:c4:83:df:35:4e:be:da:32:a5:18:93:46:bc:06: 1d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C4:F1:36:AC:B9:77:17:B6:E2:E9:BB:26:D4:97:98:39:CD:46:73 X509v3 Authority Key Identifier: keyid:92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/WMTxNqy5dxe24um7JtSXmDnNRnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.164.0/22 IPv6: 2a0a:a400::/29 Signature Algorithm: sha256WithRSAEncryption 88:fa:75:09:ae:ef:7c:06:70:db:1c:4f:51:ee:78:06:2a:0a: 8d:7b:08:6b:a6:18:af:39:e3:06:a3:c3:02:fa:3b:b3:99:f8: 0b:69:dc:6c:2c:75:18:f6:c9:2d:df:32:2e:59:1b:ac:3a:a2: 5a:d6:98:b2:96:1c:e7:9e:35:54:81:de:ec:de:d5:02:07:2e: eb:40:24:ac:f7:53:b2:cb:af:cf:e6:65:af:d2:b3:ec:98:35: 37:27:63:bd:0f:2a:44:32:5e:ec:bb:07:d2:b1:7b:f1:22:3a: 6e:0e:f1:4c:03:ea:4d:9b:07:2e:a1:f5:f0:e9:f1:95:aa:95: 56:0d:35:ef:e1:2b:c7:58:5b:c6:38:dd:f0:d5:b0:77:e9:de: 55:94:5f:fa:8d:89:76:e6:9a:75:8f:bb:a0:64:3e:28:5a:e9: 2b:c1:aa:7b:63:ab:63:f9:3e:08:52:ca:a8:1c:5c:7f:99:f1: 4c:ec:5a:ca:b2:29:02:52:fb:95:2c:c5:77:c5:8a:82:f7:d3: c6:8c:07:c9:f5:31:f1:b8:54:da:91:7d:2d:5c:38:d9:5c:7d: 26:43:43:99:a8:c3:52:03:7f:09:30:db:41:2c:df:0c:d6:c1: 2e:71:ef:58:e9:38:de:91:ac:30:41:9b:de:8b:02:a2:15:f4: 1b:af:87:6d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NuGcpQazWd5Wl3zN/kERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTZkODRlNjRkNTVlYzgxMjQ3NmZiODA2ZjBmZTc1YTA4 YmZiMmIwHhcNMjYwMTAxMjAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGM0ZjEzNmFjYjk3NzE3YjZlMmU5YmIyNmQ0OTc5ODM5Y2Q0NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ioo1GCQgUvpWPWAyWfjtiLSFDgv GK0QhuezF7A8I3kmmqF52550EIY6+DAHWwcsTJPQGw1HL7eduYfE1Arz/uhVLGY0 j0E2hvosIfxJf8FjcWC43OmgnJlBXxoHWRExlm4zd0kgbWSI7F3YcZnTjBIA1D1e ze89HW+0E0Cm/VfcoSKql3JAuKhc3t0xj5Xg9OD2SfOp81EjSTBUeezNJOAqIO0h f0nyzLlaY+wAtZrWVbctgU4If8GUrBxxPTBGYu+Nz+HRG8f8ZTumknatA8xi52V4 I5K8Xp6w8lBVI3m3f5Q9JQtPOns+/kn2aXNQxIPfNU6+2jKlGJNGvAYdzwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFjE8TasuXcXtuLpuybUl5g5zUZzMB8GA1UdIwQY MBaAFJKW2E5k1V7IEkdvuAbw/nWgi/srMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BiWVRtVFZYc2dTUjItNEJ2RC1kYUNMLXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hNTRlYjEtMzNkZS00MDFmLTkzNWEt ZjM0OTI4NDUwOWI3LzEvV01UeE5xeTVkeGUyNHVtN0p0U1htRG5OUm5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hNTRlYjEtMzNkZS00MDFmLTkzNWEtZjM0OTI4NDUwOWI3 LzEva3BiWVRtVFZYc2dTUjItNEJ2RC1kYUNMLXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaSkMA0E AgACMAcDBQMqCqQAMA0GCSqGSIb3DQEBCwUAA4IBAQCI+nUJru98BnDbHE9R7ngG KgqNewhrphivOeMGo8MC+juzmfgLadxsLHUY9skt3zIuWRusOqJa1piylhznnjVU gd7s3tUCBy7rQCSs91Oyy6/P5mWv0rPsmDU3J2O9DypEMl7suwfSsXvxIjpuDvFM A+pNmwcuofXw6fGVqpVWDTXv4SvHWFvGON3w1bB36d5VlF/6jYl25pp1j7ugZD4o Wukrwap7Y6tj+T4IUsqoHFx/mfFM7FrKsikCUvuVLMV3xYqC99PGjAfJ9THxuFTa kX0tXDjZXH0mQ0OZqMNSA38JMNtBLN8M1sEuce9Y6TjekawwQZveiwKiFfQbr4dt -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:00 2026 by rpki-client