This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wYSuQ6AQ88UUO1mJjdjP6YJkV8M.roa File: wYSuQ6AQ88UUO1mJjdjP6YJkV8M.roa (raw, json) Hash identifier: UIuWfLkpmYGVkAbSrtzeQEvcN3/GBen/VQiW3Ly+sLI= Subject key identifier: C1:84:AE:43:A0:10:F3:C5:14:3B:59:89:8D:D8:CF:E9:82:64:57:C3 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84F7CD2432A3FF106977D0CACFEE80 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wYSuQ6AQ88UUO1mJjdjP6YJkV8M.roa Signing time: Fri 02 Jan 2026 16:22:58 +0000 ROA not before: Fri 02 Jan 2026 16:22:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204514 IP address blocks: 146.158.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f7:cd:24:32:a3:ff:10:69:77:d0:ca:cf:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c184ae43a010f3c5143b59898dd8cfe9826457c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:3b:b5:4d:0a:7c:78:f4:a9:94:29:b6:6a: 98:a0:34:fa:ff:b7:d0:0e:fc:8e:36:64:49:57:70: e7:75:f0:05:89:4d:15:54:7b:87:f2:33:c2:c9:82: ee:00:13:6d:81:4f:a6:36:8b:97:c4:9b:a3:c8:d4: 37:ba:30:ac:5d:fa:0d:89:e3:f9:0d:7e:ba:c4:af: 37:79:c6:8c:e5:4f:43:66:b6:ab:0d:dd:28:0a:88: f3:e2:5b:38:c4:f0:9e:a4:ad:43:86:13:03:90:34: ea:b8:9c:6e:90:0b:aa:3b:49:e5:4d:fd:70:ce:78: 95:59:25:9a:62:39:ef:6d:aa:e2:e5:27:81:2b:0b: 6f:6a:72:5f:fb:cc:7e:b5:af:a9:67:32:40:42:f2: 5a:b8:1b:76:62:28:c9:55:d7:52:91:e5:cb:e6:0f: 55:f4:e7:0b:99:77:91:be:71:b1:63:a5:7c:ed:1a: 1b:92:2e:9b:08:8f:05:46:e2:bd:0d:b5:ab:3d:9f: 47:d8:a5:f5:80:5d:7f:7f:66:92:01:04:e6:f9:47: 9b:1d:0e:be:df:aa:3e:2a:24:9e:0e:3e:02:30:68: 2a:b6:63:01:b4:4f:92:6c:c9:ba:9f:fd:58:29:7a: 24:a0:a2:5c:dd:1c:4d:e1:fb:de:f8:d3:6c:70:cc: 5d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:AE:43:A0:10:F3:C5:14:3B:59:89:8D:D8:CF:E9:82:64:57:C3 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wYSuQ6AQ88UUO1mJjdjP6YJkV8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.158.79.0/24 Signature Algorithm: sha256WithRSAEncryption 62:7a:cf:1a:8b:ad:0b:03:d3:f4:a4:99:8f:17:a0:2c:1f:af: ed:39:cf:5a:c3:e6:1f:bc:54:f3:dd:9c:44:ed:19:71:04:2c: c5:c7:c2:27:68:4c:db:bf:b1:61:86:42:a3:cf:9e:b9:57:1d: 58:4d:a8:09:f8:43:da:cc:0f:4e:f4:b3:dc:90:9b:77:7f:4b: 52:89:b3:6a:dd:97:b5:11:2f:eb:c4:8c:32:e1:9c:d2:97:20: 5a:0e:29:9b:82:0b:d5:8a:52:e1:7a:c8:42:12:a2:a5:f7:9e: a6:72:26:6d:1d:66:df:6e:2a:61:77:a2:f1:d6:91:3d:f6:58: c1:38:77:fd:a1:0e:6c:fb:b6:35:83:58:5b:88:fa:27:17:72: 26:c2:d0:c8:16:eb:14:84:bf:64:d7:80:a2:20:ec:53:e4:09: 18:14:b4:ea:45:09:b8:b3:aa:10:a0:9c:2c:34:68:75:53:19: a1:a9:4e:47:e6:c9:b8:19:5c:74:05:86:ad:bf:97:77:73:fc: 79:d0:1c:59:67:7c:19:ef:49:5e:a0:fe:37:83:33:f9:e3:55: 8a:c6:53:65:65:30:b5:56:10:94:68:69:48:47:78:55:cc:49: ed:07:5e:09:2a:88:1b:d0:0b:1b:03:39:02:4f:cc:c9:fe:67: 3c:5d:4b:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPfNJDKj/xBpd9DKz+6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTg0YWU0M2EwMTBmM2M1MTQzYjU5ODk4ZGQ4Y2ZlOTgyNjQ1N2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h47tU0KfHj0qZQptmqYoDT6/7fQ DvyONmRJV3DndfAFiU0VVHuH8jPCyYLuABNtgU+mNouXxJujyNQ3ujCsXfoNieP5 DX66xK83ecaM5U9DZrarDd0oCojz4ls4xPCepK1DhhMDkDTquJxukAuqO0nlTf1w zniVWSWaYjnvbari5SeBKwtvanJf+8x+ta+pZzJAQvJauBt2YijJVddSkeXL5g9V 9OcLmXeRvnGxY6V87Robki6bCI8FRuK9DbWrPZ9H2KX1gF1/f2aSAQTm+UebHQ6+ 36o+KiSeDj4CMGgqtmMBtE+SbMm6n/1YKXokoKJc3RxN4fve+NNscMxdewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMGErkOgEPPFFDtZiY3Yz+mCZFfDMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvd1lTdVE2QVE4OFVVTzFtSmpkalA2WUprVjhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkp5PMA0G CSqGSIb3DQEBCwUAA4IBAQBies8ai60LA9P0pJmPF6AsH6/tOc9aw+YfvFTz3ZxE 7RlxBCzFx8InaEzbv7FhhkKjz565Vx1YTagJ+EPazA9O9LPckJt3f0tSibNq3Ze1 ES/rxIwy4ZzSlyBaDimbggvVilLheshCEqKl956mciZtHWbfbiphd6Lx1pE99ljB OHf9oQ5s+7Y1g1hbiPonF3ImwtDIFusUhL9k14CiIOxT5AkYFLTqRQm4s6oQoJws NGh1UxmhqU5H5sm4GVx0BYatv5d3c/x50BxZZ3wZ70leoP43gzP541WKxlNlZTC1 VhCUaGlIR3hVzEntB14JKogb0AsbAzkCT8zJ/mc8XUvA -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:41 2026 by rpki-client