This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/WB6JPDHCA8x04ovSojhszaBWT9g.roa File: WB6JPDHCA8x04ovSojhszaBWT9g.roa (raw, json) Hash identifier: QAX0HjBycS9/LbaCCjqJQ2UJOnAIxeZiVHraC3/UYyE= Subject key identifier: 58:1E:89:3C:31:C2:03:CC:74:E2:8B:D2:A2:38:6C:CD:A0:56:4F:D8 Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6 Certificate serial: 019B7D5C3BC5932F99C5E8FD12B909A39CE6 Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/WB6JPDHCA8x04ovSojhszaBWT9g.roa Signing time: Fri 02 Jan 2026 06:19:15 +0000 ROA not before: Fri 02 Jan 2026 06:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49020 IP address blocks: 185.139.12.0/24 maxlen: 24 185.139.13.0/24 maxlen: 24 185.139.14.0/24 maxlen: 24 185.139.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:3b:c5:93:2f:99:c5:e8:fd:12:b9:09:a3:9c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6 Validity Not Before: Jan 2 06:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=581e893c31c203cc74e28bd2a2386ccda0564fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:45:88:cf:a7:24:3b:5b:14:68:36:89:8d: 8e:d9:39:59:cb:54:75:0c:80:a6:97:66:55:f2:5d: bc:aa:00:90:29:8c:4c:e5:4e:c2:c5:6d:37:d0:2f: 8c:82:a8:6f:85:24:ca:3d:b2:f5:8c:1e:fb:ac:47: eb:ec:10:5d:7f:8f:b0:d6:44:70:15:76:48:31:fd: 5a:ac:57:32:a1:d7:84:e7:4f:f4:63:09:3f:b6:de: 2b:a6:3c:71:0a:65:f8:24:e5:3b:97:00:a1:a8:db: 4a:97:ce:60:d6:83:90:39:b7:7e:d2:52:6b:5b:b1: 19:71:0f:3d:98:c4:57:2a:af:5b:5e:78:1b:b4:1a: 56:3e:1f:6a:94:8d:3c:de:0e:1f:0d:1e:8b:47:6e: c3:05:df:a1:99:98:78:8b:02:94:05:be:b1:34:06: b7:a2:b2:b8:d8:0f:bf:c8:5e:4a:2d:9c:df:df:c3: 36:13:86:17:85:95:d9:3c:0a:08:63:5b:b1:f4:b1: 10:3b:cb:0a:f9:59:50:43:d6:eb:a7:52:4c:7e:67: 01:a1:55:da:8a:e1:14:13:c2:32:2b:7f:d9:bd:35: f3:08:36:ba:9b:8c:19:a9:6e:7c:da:c4:4f:00:23: 74:8e:31:91:ba:7d:d6:ac:a2:eb:04:2a:41:24:62: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1E:89:3C:31:C2:03:CC:74:E2:8B:D2:A2:38:6C:CD:A0:56:4F:D8 X509v3 Authority Key Identifier: keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/WB6JPDHCA8x04ovSojhszaBWT9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.12.0/22 Signature Algorithm: sha256WithRSAEncryption d2:0c:41:72:bf:40:b0:03:e3:d0:2f:14:5d:b3:48:d7:d1:51: da:44:c9:d0:f9:01:8e:23:5d:7a:b6:67:90:93:f4:82:19:d1: 92:38:d6:64:ec:1f:48:3f:aa:51:e0:63:c4:b5:98:b4:22:2e: 60:28:cd:51:cc:84:4a:e5:8d:e8:c8:a8:71:c3:bf:dc:c5:ae: d8:ab:23:ce:8d:f4:3c:b5:df:e7:03:5f:17:4e:de:22:0c:3e: 29:1e:bf:72:00:2c:03:08:31:e6:21:32:15:af:04:2c:63:48: c9:31:49:62:94:1b:ba:a8:06:c4:f5:20:f1:90:04:a8:b5:85: 51:e5:3c:e6:0a:57:b3:08:8c:a1:3e:54:d3:b7:21:29:b9:e5: e6:3f:94:d0:8f:9b:90:39:31:6c:ab:67:cb:18:ce:30:ac:30: d9:49:d1:ed:42:b9:be:9e:90:93:eb:3c:11:8a:e4:6d:83:57: cc:0f:4b:15:b8:86:c4:2d:46:63:3d:2a:2f:6c:98:0c:30:6f: 41:d8:61:ff:f0:f3:c4:0b:a0:3e:f6:f5:44:f7:bf:43:5d:b2: 91:81:7c:45:fc:6c:11:7a:28:96:29:22:5d:af:b7:54:bb:6b: d2:a5:37:cd:a4:d2:93:77:9e:18:61:d8:20:5c:4f:60:f5:4e: 5f:93:bc:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XDvFky+Zxej9ErkJo5zmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDk1OTkzODBjNWM1OWRjMDY2ODQ5MjBiNjk0YzNlYTZk MzA4YTYwHhcNMjYwMTAyMDYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODFlODkzYzMxYzIwM2NjNzRlMjhiZDJhMjM4NmNjZGEwNTY0ZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9FiM+nJDtbFGg2iY2O2TlZy1R1 DICml2ZV8l28qgCQKYxM5U7CxW030C+MgqhvhSTKPbL1jB77rEfr7BBdf4+w1kRw FXZIMf1arFcyodeE50/0Ywk/tt4rpjxxCmX4JOU7lwChqNtKl85g1oOQObd+0lJr W7EZcQ89mMRXKq9bXngbtBpWPh9qlI083g4fDR6LR27DBd+hmZh4iwKUBb6xNAa3 orK42A+/yF5KLZzf38M2E4YXhZXZPAoIY1ux9LEQO8sK+VlQQ9brp1JMfmcBoVXa iuEUE8IyK3/ZvTXzCDa6m4wZqW582sRPACN0jjGRun3WrKLrBCpBJGIXbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgeiTwxwgPMdOKL0qI4bM2gVk/YMB8GA1UdIwQY MBaAFEMJWZOAxcWdwGaEkgtpTD6m0wimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUt N2I1Zjk4MTU1ZmU2LzEvV0I2SlBESENBOHgwNG92U29qaHN6YUJXVDlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUtN2I1Zjk4MTU1ZmU2 LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYsMMA0G CSqGSIb3DQEBCwUAA4IBAQDSDEFyv0CwA+PQLxRds0jX0VHaRMnQ+QGOI116tmeQ k/SCGdGSONZk7B9IP6pR4GPEtZi0Ii5gKM1RzIRK5Y3oyKhxw7/cxa7YqyPOjfQ8 td/nA18XTt4iDD4pHr9yACwDCDHmITIVrwQsY0jJMUlilBu6qAbE9SDxkASotYVR 5TzmClezCIyhPlTTtyEpueXmP5TQj5uQOTFsq2fLGM4wrDDZSdHtQrm+npCT6zwR iuRtg1fMD0sVuIbELUZjPSovbJgMMG9B2GH/8PPEC6A+9vVE979DXbKRgXxF/GwR eiiWKSJdr7dUu2vSpTfNpNKTd54YYdggXE9g9U5fk7zx -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:24 2026 by rpki-client