This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa File: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (raw, json) Hash identifier: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck= Subject key identifier: 5A:0F:5E:F3:7E:D0:3A:6A:CF:67:A9:09:04:80:BC:B4:46:8C:11:CE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019B7758958BB6455DCB3E1E0EA7F6A76392 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa Signing time: Thu 01 Jan 2026 02:17:32 +0000 ROA not before: Thu 01 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 185.132.186.0/24 maxlen: 24 185.132.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:95:8b:b6:45:5d:cb:3e:1e:0e:a7:f6:a7:63:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a0f5ef37ed03a6acf67a9090480bcb4468c11ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:1e:da:95:c3:d2:5b:d8:53:ac:5d:c2:2b: bb:e8:3e:89:31:6b:d9:b5:74:3d:da:e8:e1:d1:03: 2d:1c:9b:99:0b:e7:11:e6:68:03:63:72:3b:44:c7: f3:2e:21:2c:c7:21:5c:55:10:85:70:d5:f5:b1:c2: cd:55:22:ec:17:5e:d3:e7:ee:c4:c2:8c:d8:d9:0e: 93:fa:c3:f2:ed:6d:c4:8b:a7:27:78:ba:e9:43:c9: a5:72:38:ef:73:cd:e2:80:34:8d:a0:24:e7:22:77: 2b:c0:bb:af:28:84:2c:fa:d5:7c:58:10:94:c8:43: 2f:de:d2:2d:05:db:a7:11:da:99:5e:c9:9a:6d:91: 3b:90:81:4a:ee:b6:09:b8:be:5e:aa:b5:f1:c9:c5: e7:81:44:30:0d:bc:a5:ea:f9:9f:58:f8:63:b1:38: 46:8e:b1:ed:78:12:da:2a:8c:f0:75:a9:14:a4:7b: 07:1f:4f:5f:29:3f:bf:25:72:d1:bb:db:c9:c7:72: 17:c0:82:55:9f:dc:c8:c7:e9:da:e6:79:b5:a2:0c: 1d:bd:7c:c3:36:53:e8:eb:c0:ae:fa:fd:86:26:48: 3d:f9:98:71:d4:b5:d6:cd:a9:7d:38:17:8b:56:99: 55:1d:d3:29:96:85:a0:5b:cd:7a:9b:b6:e8:1e:77: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0F:5E:F3:7E:D0:3A:6A:CF:67:A9:09:04:80:BC:B4:46:8C:11:CE X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.186.0/23 Signature Algorithm: sha256WithRSAEncryption 13:5a:50:da:db:b1:59:5c:80:b2:e9:6e:4d:5d:a4:cd:78:d5: 21:9f:88:79:7b:51:03:00:a8:60:3c:de:6c:4c:be:4f:8c:fd: 0d:0b:ff:fa:10:78:cb:d6:79:7f:67:7d:bd:f9:ce:4d:cf:57: ae:36:9f:64:0d:e2:7c:1b:3f:68:14:75:8b:33:05:a9:b2:5f: 7a:c2:ee:15:a5:33:63:76:f5:8d:88:b7:b8:05:3d:2f:b6:c5: d5:0d:19:75:fb:a0:c4:50:b0:cd:8e:78:9c:86:de:70:20:52: 30:24:1d:ea:af:fa:29:71:b1:9a:6b:36:f8:4d:04:56:39:93: fe:15:35:7a:1f:0a:f7:8e:c2:e5:9e:d3:c7:09:48:4b:de:76: 5e:3c:61:f4:8d:bf:20:60:76:5e:95:0f:26:75:4e:1d:cb:3f: 60:81:dd:02:3c:d6:01:1d:ff:7a:1f:35:d4:73:d4:8e:60:8a: dd:22:7b:2f:bf:b4:49:8b:65:a4:00:38:d8:e6:6e:5e:06:0a: 59:05:9c:ef:f6:d2:3d:96:a8:b7:92:2d:a0:99:b7:ac:b0:22: 58:f1:f6:4f:f0:ad:62:c1:cc:2c:c5:5c:e5:b0:9d:60:08:b2: b1:18:a9:aa:a6:e6:49:2d:1e:e3:7e:1f:27:9a:c8:7f:2c:fe: 95:f1:a5:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJWLtkVdyz4eDqf2p2OSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTBmNWVmMzdlZDAzYTZhY2Y2N2E5MDkwNDgwYmNiNDQ2OGMxMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCYe2pXD0lvYU6xdwiu76D6JMWvZ tXQ92ujh0QMtHJuZC+cR5mgDY3I7RMfzLiEsxyFcVRCFcNX1scLNVSLsF17T5+7E wozY2Q6T+sPy7W3Ei6cneLrpQ8mlcjjvc83igDSNoCTnIncrwLuvKIQs+tV8WBCU yEMv3tItBdunEdqZXsmabZE7kIFK7rYJuL5eqrXxycXngUQwDbyl6vmfWPhjsThG jrHteBLaKozwdakUpHsHH09fKT+/JXLRu9vJx3IXwIJVn9zIx+na5nm1ogwdvXzD NlPo68Cu+v2GJkg9+Zhx1LXWzal9OBeLVplVHdMploWgW816m7boHneuqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoPXvN+0Dpqz2epCQSAvLRGjBHOMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvV2c5ZTgzN1FPbXJQWjZrSkJJQzh0RWFNRWM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYS6MA0G CSqGSIb3DQEBCwUAA4IBAQATWlDa27FZXICy6W5NXaTNeNUhn4h5e1EDAKhgPN5s TL5PjP0NC//6EHjL1nl/Z329+c5Nz1euNp9kDeJ8Gz9oFHWLMwWpsl96wu4VpTNj dvWNiLe4BT0vtsXVDRl1+6DEULDNjnicht5wIFIwJB3qr/opcbGaazb4TQRWOZP+ FTV6Hwr3jsLlntPHCUhL3nZePGH0jb8gYHZelQ8mdU4dyz9ggd0CPNYBHf96HzXU c9SOYIrdInsvv7RJi2WkADjY5m5eBgpZBZzv9tI9lqi3ki2gmbessCJY8fZP8K1i wcwsxVzlsJ1gCLKxGKmqpuZJLR7jfh8nmsh/LP6V8aXH -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:27 2026 by rpki-client