This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/WUKnpOuz1YWNzQwgRmnwczp9pEw.roa File: WUKnpOuz1YWNzQwgRmnwczp9pEw.roa (raw, json) Hash identifier: 9HAvg6YD7fYg+2tQ0M/R9Qj0qw/VKBUMa2IgqLmrwqg= Subject key identifier: 59:42:A7:A4:EB:B3:D5:85:8D:CD:0C:20:46:69:F0:73:3A:7D:A4:4C Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3 Certificate serial: 019B7C7EF78A62E4DD3ABA76738FC7561ED5 Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/WUKnpOuz1YWNzQwgRmnwczp9pEw.roa Signing time: Fri 02 Jan 2026 02:17:34 +0000 ROA not before: Fri 02 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 37468 IP address blocks: 185.148.112.0/22 maxlen: 24 185.148.112.0/23 maxlen: 24 185.148.113.0/24 maxlen: 24 185.148.114.0/23 maxlen: 24 2a07:6040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f7:8a:62:e4:dd:3a:ba:76:73:8f:c7:56:1e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3 Validity Not Before: Jan 2 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5942a7a4ebb3d5858dcd0c204669f0733a7da44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:2f:c0:05:3b:89:e3:88:77:b2:88:75:7a: 95:42:f0:43:5a:16:2a:81:ec:27:aa:08:22:aa:a3: ef:95:c6:be:a6:0e:82:6b:69:38:91:e3:37:cf:52: b5:9b:6f:b3:c5:4d:63:bb:cc:58:2e:49:0e:4f:98: 04:8e:ac:ba:c8:07:8c:f4:59:50:e9:0d:9c:57:e4: 45:ee:b9:10:92:ad:cc:7c:ce:cb:13:3d:f2:e4:18: 36:83:d7:d3:1b:17:da:0e:3d:ac:c4:d4:81:e7:15: 00:f8:af:54:b1:a9:95:19:91:52:85:40:0f:98:bc: 91:60:5f:37:69:1b:de:ea:e9:8c:b2:f7:2d:21:b7: c1:72:72:ec:ed:33:2a:a7:45:f5:35:fa:93:75:26: f3:79:1d:44:14:e7:86:3d:f7:0f:30:bd:94:3d:39: 7b:78:8b:9a:b2:53:65:9f:ef:9b:69:5a:6c:7d:26: 27:fa:2a:d7:5a:4b:4d:c7:f5:ba:f4:3a:6d:ff:b9: 03:88:49:5f:da:02:ce:32:56:6d:3a:f3:7e:00:8d: 8a:9e:ec:fe:59:94:b9:72:fc:56:53:35:fa:b3:1f: b8:96:95:6f:7f:f0:14:c2:c2:05:a3:7f:59:61:79: 01:22:e2:ac:9e:38:87:26:1c:37:dd:3e:1d:e9:f9: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:42:A7:A4:EB:B3:D5:85:8D:CD:0C:20:46:69:F0:73:3A:7D:A4:4C X509v3 Authority Key Identifier: keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/WUKnpOuz1YWNzQwgRmnwczp9pEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.148.112.0/22 IPv6: 2a07:6040::/29 Signature Algorithm: sha256WithRSAEncryption b9:89:8c:47:a7:c4:ac:e3:d4:ef:90:a8:37:07:d5:67:89:22: bd:e5:54:58:1e:26:69:0a:ac:82:50:cf:87:31:c1:1a:22:74: 28:00:ee:8a:79:ee:0f:d6:c3:a3:30:0d:63:98:78:01:b7:86: 4d:df:1b:49:18:e8:ab:97:aa:87:2f:b9:3b:8b:bd:90:22:c5: 5f:c0:e0:76:1f:07:ee:41:c2:8d:5f:69:3d:ed:c5:70:fb:86: 69:be:12:50:be:1a:e0:47:4d:2c:33:64:75:89:32:a5:53:b9: 66:4c:70:98:22:7e:fc:b6:a5:d5:a7:36:7b:ca:2f:bc:2c:f1: 24:c9:07:19:7d:ef:47:7d:5b:f1:35:6e:49:99:47:51:a4:07: 9d:22:bc:53:9b:30:bf:10:23:e5:b7:a7:e7:63:93:6c:97:95: 47:5c:22:8c:cd:7c:fc:cf:35:33:f7:7b:fd:be:7b:33:c6:7e: 33:67:90:d3:ab:40:b6:0a:a3:13:c2:30:01:2d:b7:d5:73:7f: 08:1a:54:7b:e5:a3:0f:3d:b1:a0:14:03:6d:00:ec:72:b9:8a: f0:e9:ae:61:19:e7:da:6b:b3:c6:6b:58:1b:88:93:ab:71:39: 31:21:83:1d:43:a9:f5:33:98:0e:fd:83:b5:77:a8:a1:e7:e1: 78:d0:78:0c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8fveKYuTdOrp2c4/HVh7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0 YmYxZTMwHhcNMjYwMTAyMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTQyYTdhNGViYjNkNTg1OGRjZDBjMjA0NjY5ZjA3MzNhN2RhNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/UvwAU7ieOId7KIdXqVQvBDWhYq gewnqggiqqPvlca+pg6Ca2k4keM3z1K1m2+zxU1ju8xYLkkOT5gEjqy6yAeM9FlQ 6Q2cV+RF7rkQkq3MfM7LEz3y5Bg2g9fTGxfaDj2sxNSB5xUA+K9UsamVGZFShUAP mLyRYF83aRve6umMsvctIbfBcnLs7TMqp0X1NfqTdSbzeR1EFOeGPfcPML2UPTl7 eIuaslNln++baVpsfSYn+irXWktNx/W69Dpt/7kDiElf2gLOMlZtOvN+AI2Knuz+ WZS5cvxWUzX6sx+4lpVvf/AUwsIFo39ZYXkBIuKsnjiHJhw33T4d6fkXJwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFlCp6Trs9WFjc0MIEZp8HM6faRMMB8GA1UdIwQY MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt ZTk5NzVhMGJkZWE3LzEvV1VLbnBPdXoxWVdOelF3Z1JtbndjenA5cEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3 LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZRwMA0E AgACMAcDBQMqB2BAMA0GCSqGSIb3DQEBCwUAA4IBAQC5iYxHp8Ss49TvkKg3B9Vn iSK95VRYHiZpCqyCUM+HMcEaInQoAO6Kee4P1sOjMA1jmHgBt4ZN3xtJGOirl6qH L7k7i72QIsVfwOB2HwfuQcKNX2k97cVw+4ZpvhJQvhrgR00sM2R1iTKlU7lmTHCY In78tqXVpzZ7yi+8LPEkyQcZfe9HfVvxNW5JmUdRpAedIrxTmzC/ECPlt6fnY5Ns l5VHXCKMzXz8zzUz93v9vnszxn4zZ5DTq0C2CqMTwjABLbfVc38IGlR75aMPPbGg FANtAOxyuYrw6a5hGefaa7PGa1gbiJOrcTkxIYMdQ6n1M5gO/YO1d6ih5+F40HgM -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:00 2026 by rpki-client