This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WdGyiL7C87Ti7sAng70k9r3dLQ0.roa File: WdGyiL7C87Ti7sAng70k9r3dLQ0.roa (raw, json) Hash identifier: Sa6zdxMmCPZPKpdruKs/6AhV3hwNufM/YBo909cJ/14= Subject key identifier: 59:D1:B2:88:BE:C2:F3:B4:E2:EE:C0:27:83:BD:24:F6:BD:DD:2D:0D Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6B82C9A0EAA7E9F5383AE66CE1938 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WdGyiL7C87Ti7sAng70k9r3dLQ0.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 95.182.108.0/24 maxlen: 24 95.182.110.0/24 maxlen: 24 109.248.6.0/23 maxlen: 24 109.248.33.0/24 maxlen: 24 109.248.45.0/24 maxlen: 24 188.130.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b8:2c:9a:0e:aa:7e:9f:53:83:ae:66:ce:19:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59d1b288bec2f3b4e2eec02783bd24f6bddd2d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:88:cc:3f:ea:77:ac:4f:37:a3:3c:5b:87:14: 96:c5:b3:a9:11:b0:c2:91:c2:b6:d1:1a:66:e9:6e: b5:82:59:95:b0:88:09:ce:21:39:59:37:19:76:52: 4a:9a:73:78:45:79:47:df:5e:e3:c0:0e:a8:92:73: 4b:d0:2d:7d:06:f5:64:9b:38:20:bd:15:2f:08:2c: 0a:2e:20:74:2c:61:2e:d1:8c:7f:19:1a:0b:6c:9f: 0d:4a:8b:f6:7e:e7:ba:1a:22:27:88:18:c8:f3:8b: 06:7c:d9:53:b0:c9:df:2c:b5:d0:bd:8a:42:d6:73: c7:77:cc:2f:60:45:05:af:42:ef:a2:68:0c:4c:24: 57:25:a1:e1:a1:d8:db:1e:7d:62:7d:3d:ac:77:7e: 15:f6:25:ec:dc:1b:f1:d1:4a:93:de:1a:4b:7c:71: 68:92:ab:f3:7c:b8:46:ea:f7:95:17:11:02:9f:cc: 60:10:66:f0:be:4e:fe:50:2e:92:d8:05:60:bd:1e: 1d:aa:59:14:69:b9:db:75:d1:15:95:5d:0e:92:ba: e8:3a:a5:ed:f5:11:39:e9:2f:74:aa:40:39:22:00: 11:64:c9:2e:a6:3f:09:21:c5:d3:bb:3c:1a:65:1c: 35:90:60:89:e8:df:7c:35:54:1e:fa:65:34:2b:29: aa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D1:B2:88:BE:C2:F3:B4:E2:EE:C0:27:83:BD:24:F6:BD:DD:2D:0D X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WdGyiL7C87Ti7sAng70k9r3dLQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.182.108.0/24 95.182.110.0/24 109.248.6.0/23 109.248.33.0/24 109.248.45.0/24 188.130.209.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:5a:0a:46:a4:3a:ff:fb:eb:98:83:8d:57:3a:04:a9:39:df: 28:b8:ce:eb:a2:b6:a1:0d:14:d8:38:a2:a5:05:57:69:93:6f: 8f:52:fd:85:9e:47:bc:bb:e2:49:6c:90:85:7d:c3:57:0f:d9: a4:46:22:49:84:21:c1:6c:80:e7:c3:67:3a:36:f8:d2:34:40: 40:23:d8:70:92:9f:27:27:d8:b6:04:70:39:9a:01:30:81:2c: a4:9e:82:ee:be:a5:2d:ef:5e:f6:fe:f1:f8:2a:f6:c5:4c:a2: 92:5b:2e:b9:71:3f:60:79:2a:fd:0a:1f:62:c9:87:28:61:5f: 18:be:5e:7f:74:86:11:09:98:03:84:44:71:55:68:5e:d1:18: 00:38:4f:91:0b:c5:d3:0a:2b:f6:38:26:f1:4e:c4:49:c5:cf: 23:7a:a5:a1:db:f1:43:ed:eb:1d:a4:31:e8:00:3f:36:76:ca: d7:39:ee:d1:ce:29:24:4f:1d:f4:55:21:72:19:3a:28:d2:0f: 7a:ca:46:2b:cc:39:72:58:65:89:1f:f0:7b:cd:66:be:8d:8c: d9:5b:5b:45:39:44:ec:9a:cd:05:ef:be:43:f1:88:48:43:92: 4d:43:0f:90:26:3e:75:46:e3:7c:f0:ae:95:5a:43:6c:df:72: c9:d7:6a:38 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3xrgsmg6qfp9Tg65mzhk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWQxYjI4OGJlYzJmM2I0ZTJlZWMwMjc4M2JkMjRmNmJkZGQyZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ojMP+p3rE83ozxbhxSWxbOpEbDC kcK20Rpm6W61glmVsIgJziE5WTcZdlJKmnN4RXlH317jwA6oknNL0C19BvVkmzgg vRUvCCwKLiB0LGEu0Yx/GRoLbJ8NSov2fue6GiIniBjI84sGfNlTsMnfLLXQvYpC 1nPHd8wvYEUFr0LvomgMTCRXJaHhodjbHn1ifT2sd34V9iXs3Bvx0UqT3hpLfHFo kqvzfLhG6veVFxECn8xgEGbwvk7+UC6S2AVgvR4dqlkUabnbddEVlV0OkrroOqXt 9RE56S90qkA5IgARZMkupj8JIcXTuzwaZRw1kGCJ6N98NVQe+mU0KymqgwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFnRsoi+wvO04u7AJ4O9JPa93S0NMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvV2RHeWlMN0M4N1RpN3NBbmc3MGs5cjNkTFEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAX7ZsAwQA X7ZuAwQBbfgGAwQAbfghAwQAbfgtAwQAvILRMA0GCSqGSIb3DQEBCwUAA4IBAQAe WgpGpDr/++uYg41XOgSpOd8ouM7rorahDRTYOKKlBVdpk2+PUv2Fnke8u+JJbJCF fcNXD9mkRiJJhCHBbIDnw2c6NvjSNEBAI9hwkp8nJ9i2BHA5mgEwgSyknoLuvqUt 7172/vH4KvbFTKKSWy65cT9geSr9Ch9iyYcoYV8Yvl5/dIYRCZgDhERxVWhe0RgA OE+RC8XTCiv2OCbxTsRJxc8jeqWh2/FD7esdpDHoAD82dsrXOe7RzikkTx30VSFy GToo0g96ykYrzDlyWGWJH/B7zWa+jYzZW1tFOUTsms0F775D8YhIQ5JNQw+QJj51 RuN88K6VWkNs33LJ12o4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:42 2026 by rpki-client