This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/WD55UE5qlePOSI_a9oMyg8wcNhM.roa File: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (raw, json) Hash identifier: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw= Subject key identifier: 58:3E:79:50:4E:6A:95:E3:CE:48:8F:DA:F6:83:32:83:CC:1C:36:13 Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e Certificate serial: 019B78A3100FF3FD06CCA5415CA203A378FF Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/WD55UE5qlePOSI_a9oMyg8wcNhM.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44668 IP address blocks: 77.87.40.0/21 maxlen: 21 91.202.104.0/22 maxlen: 22 176.122.88.0/21 maxlen: 21 185.11.80.0/22 maxlen: 22 185.255.48.0/22 maxlen: 22 193.168.51.0/24 maxlen: 24 193.168.55.0/24 maxlen: 24 193.194.112.0/22 maxlen: 22 195.5.126.0/24 maxlen: 24 195.18.28.0/22 maxlen: 22 2a0c:5940::/29 maxlen: 29 2a0c:5940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:10:0f:f3:fd:06:cc:a5:41:5c:a2:03:a3:78:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=583e79504e6a95e3ce488fdaf6833283cc1c3613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e2:39:af:b9:3a:33:da:db:bf:ad:f0:6c:ab: 1e:ef:9a:f3:17:89:40:53:61:c6:e5:90:2b:03:3a: 0a:56:79:cb:b3:81:78:8a:37:81:36:ab:48:56:3c: 15:ae:84:10:b4:c8:f5:21:e4:65:2a:14:83:ee:2a: 83:20:b7:93:97:8b:69:3c:bc:eb:32:c1:db:17:d1: b0:e0:9e:59:a8:03:cf:52:90:99:7a:2b:b8:24:16: fe:2c:36:08:c5:7a:70:8e:85:6e:5a:6f:1f:c6:84: a2:f1:c0:67:5d:29:8e:9d:36:36:58:11:45:13:f0: cb:82:50:ba:41:88:88:95:d3:1f:ad:b4:bf:72:ee: 8d:cf:f0:86:62:6a:f3:11:eb:7a:16:80:87:b5:4a: f7:be:ca:ce:aa:9d:17:a8:b7:d8:ef:e1:9b:25:b6: 51:c2:fc:06:84:78:ec:ec:aa:e5:87:bd:32:ce:54: 2c:0e:62:97:3e:45:eb:66:ba:25:fc:c6:d8:53:36: 8d:d9:09:1e:d8:e2:93:66:5a:d6:1b:fd:4e:53:a8: ce:0f:89:03:12:a2:62:2c:32:70:8b:4f:d0:bd:a0: 1d:4d:4f:c1:98:be:e3:84:70:dc:3e:45:53:70:4a: 94:31:d5:f0:89:a5:7b:b6:61:65:a7:96:72:68:54: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3E:79:50:4E:6A:95:E3:CE:48:8F:DA:F6:83:32:83:CC:1C:36:13 X509v3 Authority Key Identifier: keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/WD55UE5qlePOSI_a9oMyg8wcNhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.40.0/21 91.202.104.0/22 176.122.88.0/21 185.11.80.0/22 185.255.48.0/22 193.168.51.0/24 193.168.55.0/24 193.194.112.0/22 195.5.126.0/24 195.18.28.0/22 IPv6: 2a0c:5940::/29 Signature Algorithm: sha256WithRSAEncryption 15:0e:e3:5f:58:e6:40:d1:a6:c7:96:01:c0:12:d7:66:7e:a1: 38:b7:ec:43:15:43:cd:54:f5:69:7c:dd:25:b4:71:f2:33:cf: e3:79:c0:26:c5:1b:6b:f7:fe:65:c6:f0:49:59:d9:f3:20:41: 34:2e:98:43:b8:f2:4b:a0:1d:ae:d6:8b:af:23:b4:8a:ff:96: 7c:20:75:df:71:57:d8:68:c7:0b:ea:9b:4e:d4:4d:40:c3:75: 7e:ad:23:33:91:2a:33:a3:01:2c:74:57:d9:a1:7a:96:c6:33: 36:61:3d:af:71:41:4e:eb:b8:4a:2c:01:f1:bb:2d:89:e8:0d: 1c:f1:88:13:ef:26:f0:b2:b2:e6:62:e6:d3:97:63:31:aa:7f: fb:0e:c5:05:72:cc:1e:5b:73:7a:9d:58:91:50:5e:85:ff:5f: 31:f7:29:f8:a0:71:f7:e8:c8:ed:aa:d4:f5:53:38:14:68:ec: c5:ce:a6:f4:da:9a:ae:48:08:7a:50:27:86:0f:fa:d4:e4:b5: 4a:38:0c:0a:45:23:cc:13:fd:16:2a:5a:a8:ed:8b:b0:ad:43: 0b:e5:05:69:bb:41:80:33:16:98:f4:c9:96:53:6f:5f:d8:35: 32:cf:28:39:e4:85:84:ee:01:08:58:db:68:b7:7b:d5:e9:53: df:77:0f:b1 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt4oxAP8/0GzKVBXKIDo3j/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1 NmQ0NWUwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODNlNzk1MDRlNmE5NWUzY2U0ODhmZGFmNjgzMzI4M2NjMWMzNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+I5r7k6M9rbv63wbKse75rzF4lA U2HG5ZArAzoKVnnLs4F4ijeBNqtIVjwVroQQtMj1IeRlKhSD7iqDILeTl4tpPLzr MsHbF9Gw4J5ZqAPPUpCZeiu4JBb+LDYIxXpwjoVuWm8fxoSi8cBnXSmOnTY2WBFF E/DLglC6QYiIldMfrbS/cu6Nz/CGYmrzEet6FoCHtUr3vsrOqp0XqLfY7+GbJbZR wvwGhHjs7Krlh70yzlQsDmKXPkXrZrol/MbYUzaN2Qke2OKTZlrWG/1OU6jOD4kD EqJiLDJwi0/QvaAdTU/BmL7jhHDcPkVTcEqUMdXwiaV7tmFlp5ZyaFTb6wIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFFg+eVBOapXjzkiP2vaDMoPMHDYTMB8GA1UdIwQY MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt ZGY2ODcxZTJmNzM1LzEvV0Q1NVVFNXFsZVBPU0lfYTlvTXlnOHdjTmhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1 LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDTVcoAwQC W8poAwQDsHpYAwQCuQtQAwQCuf8wAwQAwagzAwQAwag3AwQCwcJwAwQAwwV+AwQC wxIcMA0EAgACMAcDBQMqDFlAMA0GCSqGSIb3DQEBCwUAA4IBAQAVDuNfWOZA0abH lgHAEtdmfqE4t+xDFUPNVPVpfN0ltHHyM8/jecAmxRtr9/5lxvBJWdnzIEE0LphD uPJLoB2u1ouvI7SK/5Z8IHXfcVfYaMcL6ptO1E1Aw3V+rSMzkSozowEsdFfZoXqW xjM2YT2vcUFO67hKLAHxuy2J6A0c8YgT7ybwsrLmYubTl2Mxqn/7DsUFcsweW3N6 nViRUF6F/18x9yn4oHH36MjtqtT1UzgUaOzFzqb02pquSAh6UCeGD/rU5LVKOAwK RSPME/0WKlqo7YuwrUML5QVpu0GAMxaY9MmWU29f2DUyzyg55IWE7gEIWNtot3vV 6VPfdw+x -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:16 2026 by rpki-client