This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WLEHMA85bB4iQoxGZrACWogTW9E.roa File: WLEHMA85bB4iQoxGZrACWogTW9E.roa (raw, json) Hash identifier: mam/TKEoRmB/tI3YXQonftLoRFXoVI++jIVqzEevihg= Subject key identifier: 58:B1:07:30:0F:39:6C:1E:22:42:8C:46:66:B0:02:5A:88:13:5B:D1 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8500F7855E711E30A88F930EAA081E Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WLEHMA85bB4iQoxGZrACWogTW9E.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207896 IP address blocks: 93.170.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:00:f7:85:5e:71:1e:30:a8:8f:93:0e:aa:08:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58b107300f396c1e22428c4666b0025a88135bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:3b:a0:99:18:f0:f3:3e:fe:3b:54:98:ad: 76:65:32:cd:0c:18:31:2a:27:4f:7a:ac:2c:97:a5: 7d:8d:0b:44:ea:70:ca:7a:43:be:67:f5:e3:38:50: ac:d2:8e:62:45:ee:f0:ca:9b:32:ad:49:39:76:dd: 5b:92:dd:97:7f:c4:5d:85:85:ef:32:0a:13:2b:b4: 35:4f:09:c5:f3:2e:3c:06:f9:e4:bc:88:41:40:15: 96:bc:dd:ff:14:27:b7:e7:39:ef:d8:d4:df:60:47: b2:7d:f2:a6:5a:74:ee:96:a3:e9:78:6a:0d:b8:ae: 5a:f2:5b:c0:17:32:b0:9d:ee:4f:17:fb:cf:cd:3a: 26:f9:ce:68:55:e4:da:78:e9:fd:9d:d6:30:d0:48: 63:9d:6e:22:f3:66:c6:80:d8:80:3b:ae:dc:72:72: be:8e:45:20:da:a1:2b:b1:14:1b:a7:7a:cc:2f:e2: 62:50:47:7c:d0:7b:a2:19:ad:48:d6:a0:34:53:06: df:31:78:6e:39:6e:b0:f6:9c:b3:82:f2:e4:17:d2: 95:9c:aa:82:1e:22:89:c3:20:76:43:cb:ef:f9:05: 4e:1b:c1:1d:a9:2d:32:32:8b:35:93:70:3a:cc:95: 10:de:c7:d7:1a:26:ad:d5:c8:76:15:b3:93:26:4a: 91:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B1:07:30:0F:39:6C:1E:22:42:8C:46:66:B0:02:5A:88:13:5B:D1 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WLEHMA85bB4iQoxGZrACWogTW9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.13.0/24 Signature Algorithm: sha256WithRSAEncryption 30:ba:87:bc:74:3c:06:f4:96:f4:26:a1:75:f3:b1:77:e8:fe: 94:ba:63:d4:4a:a3:9a:b7:15:ef:59:95:18:3e:95:a3:f2:a2: 1c:c7:ee:f1:0f:a8:2e:da:67:ce:fc:d1:71:fd:a1:36:62:4f: f7:1a:a7:67:68:c1:a8:56:55:16:7b:74:22:91:ad:e1:ad:d2: b4:ca:64:61:16:7a:ce:cd:ff:5b:f0:1e:20:50:c2:fd:59:5d: 4a:4e:94:0f:57:d7:cc:39:82:8a:ed:6a:d0:4b:54:3b:c6:77: e5:3a:41:eb:09:e4:8b:d4:da:aa:29:46:f9:5c:fa:a1:e9:28: 8a:be:9b:f8:bc:5b:8e:21:4a:6c:6f:e0:24:86:44:e1:cd:e6: 0f:31:06:21:36:c8:0f:0b:4a:44:32:4d:eb:54:46:6a:82:10: 32:d1:25:7f:70:91:03:ee:74:86:4a:91:3c:da:f4:b1:5e:09: e4:32:00:3c:3a:9c:b7:c0:67:4a:a4:9a:ff:ab:ad:6c:4e:bc: 6c:40:7f:0e:c1:ea:57:27:2b:f6:65:33:91:5a:ad:d6:6f:36: 94:e6:c9:16:e6:ed:95:11:40:43:88:3a:be:d9:22:21:6c:17: bc:b7:1a:e4:47:49:9b:3f:a2:3c:54:ce:e4:8d:ea:34:f2:06: 34:5d:41:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQD3hV5xHjCoj5MOqggeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGIxMDczMDBmMzk2YzFlMjI0MjhjNDY2NmIwMDI1YTg4MTM1YmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeo7oJkY8PM+/jtUmK12ZTLNDBgx KidPeqwsl6V9jQtE6nDKekO+Z/XjOFCs0o5iRe7wypsyrUk5dt1bkt2Xf8RdhYXv MgoTK7Q1TwnF8y48BvnkvIhBQBWWvN3/FCe35znv2NTfYEeyffKmWnTulqPpeGoN uK5a8lvAFzKwne5PF/vPzTom+c5oVeTaeOn9ndYw0EhjnW4i82bGgNiAO67ccnK+ jkUg2qErsRQbp3rML+JiUEd80HuiGa1I1qA0UwbfMXhuOW6w9pyzgvLkF9KVnKqC HiKJwyB2Q8vv+QVOG8EdqS0yMos1k3A6zJUQ3sfXGiat1ch2FbOTJkqRIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFixBzAPOWweIkKMRmawAlqIE1vRMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvV0xFSE1BODViQjRpUW94R1pyQUNXb2dUVzlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaoNMA0G CSqGSIb3DQEBCwUAA4IBAQAwuoe8dDwG9Jb0JqF187F36P6UumPUSqOatxXvWZUY PpWj8qIcx+7xD6gu2mfO/NFx/aE2Yk/3GqdnaMGoVlUWe3Qika3hrdK0ymRhFnrO zf9b8B4gUML9WV1KTpQPV9fMOYKK7WrQS1Q7xnflOkHrCeSL1NqqKUb5XPqh6SiK vpv4vFuOIUpsb+AkhkThzeYPMQYhNsgPC0pEMk3rVEZqghAy0SV/cJED7nSGSpE8 2vSxXgnkMgA8Opy3wGdKpJr/q61sTrxsQH8OwepXJyv2ZTORWq3WbzaU5skW5u2V EUBDiDq+2SIhbBe8txrkR0mbP6I8VM7kjeo08gY0XUFf -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:17 2026 by rpki-client