This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/wdKGQPE-JO5dbISL5xL1WwZtJko.roa File: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (raw, json) Hash identifier: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs= Subject key identifier: C1:D2:86:40:F1:3E:24:EE:5D:6C:84:8B:E7:12:F5:5B:06:6D:26:4A Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311 Certificate serial: 019B7B35C5FBBEE180C2063B2FAF21BB2DC9 Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/wdKGQPE-JO5dbISL5xL1WwZtJko.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51074 IP address blocks: 185.128.80.0/22 maxlen: 22 185.128.80.0/24 maxlen: 24 185.128.81.0/24 maxlen: 24 185.128.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c5:fb:be:e1:80:c2:06:3b:2f:af:21:bb:2d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df798581e73704ee38c9be15e72370f176c60311 Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1d28640f13e24ee5d6c848be712f55b066d264a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:69:39:45:f6:b0:1c:86:e4:4e:ed:eb:b8: c9:e6:e8:00:22:2d:3e:4f:c4:ee:d8:55:6c:4e:51: 6b:49:2b:ea:d7:8e:ec:e8:df:6d:7b:28:3a:f9:1d: 09:2f:ea:e1:8f:51:7b:24:68:71:62:5d:49:4a:fa: fb:08:13:0d:e1:34:b0:20:fc:cd:5f:40:24:0f:4c: 8b:4b:19:81:41:f8:91:75:75:2f:e6:0d:d4:c0:af: e6:5d:1c:77:5c:33:04:51:fd:ff:e6:c9:dc:a1:27: b4:6c:c5:e7:16:97:de:77:4f:9a:e4:e1:a7:80:77: 2c:af:e8:fc:98:e9:d0:14:01:9d:ad:03:92:1a:97: 60:14:c9:ba:14:3a:7f:ab:4b:57:c3:4b:8b:a6:e5: 45:a9:5e:6e:d5:fb:8a:66:dc:0f:5a:c3:1d:8e:a8: d6:3e:d9:27:83:6d:d3:6a:6a:9a:78:ff:53:da:44: 22:7a:fd:e7:83:fa:28:8e:58:90:4f:9c:37:93:84: d9:1c:5f:89:02:aa:e1:9d:05:d1:1b:56:6a:29:64: cd:f7:ef:aa:fe:18:54:32:69:e4:5b:7e:fe:29:bc: 6b:2e:4a:4f:61:18:d8:1b:e8:4b:19:cb:9c:39:f3: 53:8d:24:92:84:b3:9d:c2:c1:96:cb:37:78:1b:96: f6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D2:86:40:F1:3E:24:EE:5D:6C:84:8B:E7:12:F5:5B:06:6D:26:4A X509v3 Authority Key Identifier: keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/wdKGQPE-JO5dbISL5xL1WwZtJko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.80.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:40:79:2f:3e:4e:ee:90:ae:15:31:35:11:07:f1:b0:3b:6f: 56:9a:8d:f2:d5:8e:55:3b:eb:8e:6e:84:68:9b:5f:5f:b1:ec: 64:97:f8:97:5b:73:b8:e3:0e:c9:46:0f:6a:aa:13:fd:b6:dd: 4d:b0:42:dd:25:44:24:18:8a:14:31:c9:57:a0:09:0b:f9:79: 4c:a2:09:75:b0:b3:29:58:5f:d2:da:a1:83:a5:cc:83:29:5c: 8e:fc:d3:67:e6:98:4b:b8:4e:04:f2:99:16:ed:f0:02:29:03: 1f:ad:1a:ea:c8:cd:bc:60:11:bb:86:73:94:19:17:17:8a:02: f7:a3:89:18:0e:fa:59:99:4c:35:f0:97:6a:c9:a0:32:79:0d: 8b:be:9a:bc:c7:11:9a:a2:22:2c:cd:c5:01:e5:bc:00:46:6b: b9:70:3a:21:37:f5:af:7d:df:9c:ff:21:3c:d8:62:f3:b4:b1: fb:f8:ee:d0:37:fa:94:3f:b7:b9:a8:8c:72:e2:e7:55:06:d3: 63:bd:a6:aa:5d:e0:bc:0d:9d:3d:d7:b5:ac:51:02:15:8d:9e: 92:3b:a2:18:8d:09:02:cd:73:5c:63:0f:eb:cc:16:45:5a:65: 08:6a:b4:79:b0:4d:ca:6b:0a:d8:9d:b5:67:84:be:79:62:69: b6:df:b0:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcX7vuGAwgY7L68huy3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj NjAzMTEwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWQyODY0MGYxM2UyNGVlNWQ2Yzg0OGJlNzEyZjU1YjA2NmQyNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPJpOUX2sByG5E7t67jJ5ugAIi0+ T8Tu2FVsTlFrSSvq147s6N9teyg6+R0JL+rhj1F7JGhxYl1JSvr7CBMN4TSwIPzN X0AkD0yLSxmBQfiRdXUv5g3UwK/mXRx3XDMEUf3/5sncoSe0bMXnFpfed0+a5OGn gHcsr+j8mOnQFAGdrQOSGpdgFMm6FDp/q0tXw0uLpuVFqV5u1fuKZtwPWsMdjqjW Ptkng23TamqaeP9T2kQiev3ng/oojliQT5w3k4TZHF+JAqrhnQXRG1ZqKWTN9++q /hhUMmnkW37+KbxrLkpPYRjYG+hLGcucOfNTjSSShLOdwsGWyzd4G5b2NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMHShkDxPiTuXWyEi+cS9VsGbSZKMB8GA1UdIwQY MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt YzRhNTJkY2VlMjNkLzEvd2RLR1FQRS1KTzVkYklTTDV4TDFXd1p0SmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYBQMA0G CSqGSIb3DQEBCwUAA4IBAQB9QHkvPk7ukK4VMTURB/GwO29Wmo3y1Y5VO+uOboRo m19fsexkl/iXW3O44w7JRg9qqhP9tt1NsELdJUQkGIoUMclXoAkL+XlMogl1sLMp WF/S2qGDpcyDKVyO/NNn5phLuE4E8pkW7fACKQMfrRrqyM28YBG7hnOUGRcXigL3 o4kYDvpZmUw18JdqyaAyeQ2Lvpq8xxGaoiIszcUB5bwARmu5cDohN/Wvfd+c/yE8 2GLztLH7+O7QN/qUP7e5qIxy4udVBtNjvaaqXeC8DZ0917WsUQIVjZ6SO6IYjQkC zXNcYw/rzBZFWmUIarR5sE3KawrYnbVnhL55Ymm237C8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:01 2026 by rpki-client