This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/WoQboQGGusiNaqyn8jRMBDu3Vvs.roa File: WoQboQGGusiNaqyn8jRMBDu3Vvs.roa (raw, json) Hash identifier: spWQsiuCrGGqTTUZBAQNl/ggbHw2wL+q6jT+X13QEFg= Subject key identifier: 5A:84:1B:A1:01:86:BA:C8:8D:6A:AC:A7:F2:34:4C:04:3B:B7:56:FB Certificate issuer: /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8 Certificate serial: 019B78A3286CAC7DDC5DFC36B9322AC34F88 Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/WoQboQGGusiNaqyn8jRMBDu3Vvs.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44525 IP address blocks: 212.45.68.0/22 maxlen: 22 212.45.68.0/24 maxlen: 24 212.45.69.0/24 maxlen: 24 212.45.70.0/24 maxlen: 24 212.45.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:28:6c:ac:7d:dc:5d:fc:36:b9:32:2a:c3:4f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a841ba10186bac88d6aaca7f2344c043bb756fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:97:e3:ce:37:2a:f9:84:53:a9:d5:11:3d: 54:97:a3:ac:64:57:a8:23:7f:f1:90:49:a1:02:77: 55:a2:b8:2d:2f:d0:36:fe:75:4f:b0:6c:b3:c1:85: a6:cc:d3:a9:ac:bf:ee:89:53:89:86:d2:52:7e:a3: ce:ce:9b:db:30:5d:01:75:56:cd:b8:82:45:bc:27: c9:e6:0a:ff:6e:1a:ba:d4:a3:79:b6:b9:61:4a:a7: 5d:30:37:2e:ce:49:04:3b:5c:b0:4c:50:3c:8d:db: 38:e8:65:37:8f:43:30:a4:11:2d:89:53:6b:c7:45: 60:ab:64:06:0c:d1:bc:6b:de:05:dd:e6:ca:92:72: da:63:ce:5f:5b:be:24:7a:12:cb:a8:dc:59:f0:02: 7d:39:24:54:e8:8d:6a:11:52:dd:b1:d5:2e:70:15: 03:04:ad:b8:40:6d:f2:f1:a6:1c:d6:68:f6:0a:33: 5a:db:b3:bd:82:4e:29:62:42:51:19:55:a8:69:fd: 70:a9:4c:2e:05:fd:4b:49:f9:4e:28:7f:cd:35:98: 71:02:ef:cf:6f:aa:c3:9c:43:44:88:a3:8b:6a:0c: c8:48:03:11:81:df:0a:97:ab:8c:48:94:78:49:e2: 49:38:18:2e:6a:22:51:5e:70:66:dc:54:35:ce:83: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:84:1B:A1:01:86:BA:C8:8D:6A:AC:A7:F2:34:4C:04:3B:B7:56:FB X509v3 Authority Key Identifier: keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/WoQboQGGusiNaqyn8jRMBDu3Vvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.45.68.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:85:42:ff:e9:c6:b9:ac:b8:70:d0:8c:1a:6d:2b:70:19:00: 63:c0:9c:97:bf:a8:03:a2:bf:91:58:2e:8f:97:29:7b:96:cf: 84:54:f5:ca:ad:ae:38:af:9f:a3:06:32:c2:71:e4:86:ed:58: 90:1b:5b:35:a6:56:a4:07:98:0e:24:d0:12:cf:68:08:c9:ce: d2:81:4a:67:f7:c2:a1:01:ca:79:5f:2a:31:91:f1:02:f0:d0: fb:15:be:70:3f:12:71:f8:e6:b4:5e:f7:4b:ea:d1:da:a9:b9: 99:c5:2d:b7:8d:19:fe:0e:f8:be:be:b4:eb:18:3c:81:29:33: 47:b8:02:03:ab:94:75:ea:65:c9:d6:44:9f:05:9a:11:31:77: 7f:f8:a0:74:59:e4:04:c4:a5:f6:ec:1c:0a:de:17:49:04:44: b3:30:95:4e:79:3e:4f:90:d8:23:6c:ac:76:e1:34:84:5f:03: f6:9a:63:5f:00:d0:bc:10:da:db:fe:69:36:d0:c8:f2:47:77: cf:05:0b:14:1b:60:70:62:03:4f:ce:56:95:a6:70:c7:ef:3c: dd:80:78:80:ef:29:43:c3:cf:71:31:51:4f:6f:34:36:1a:e4: 95:1a:d9:58:79:0f:9a:3b:3a:c4:ec:78:de:0d:7c:2a:be:e1: d4:69:2f:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyhsrH3cXfw2uTIqw0+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYmMwZDYwYmQzYTkwYmQ1ZTMxNTA5ZGVhZGY0NDcwNzZi MDc4ZDgwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTg0MWJhMTAxODZiYWM4OGQ2YWFjYTdmMjM0NGMwNDNiYjc1NmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszuX4843KvmEU6nVET1Ul6OsZFeo I3/xkEmhAndVorgtL9A2/nVPsGyzwYWmzNOprL/uiVOJhtJSfqPOzpvbMF0BdVbN uIJFvCfJ5gr/bhq61KN5trlhSqddMDcuzkkEO1ywTFA8jds46GU3j0MwpBEtiVNr x0Vgq2QGDNG8a94F3ebKknLaY85fW74kehLLqNxZ8AJ9OSRU6I1qEVLdsdUucBUD BK24QG3y8aYc1mj2CjNa27O9gk4pYkJRGVWoaf1wqUwuBf1LSflOKH/NNZhxAu/P b6rDnENEiKOLagzISAMRgd8Kl6uMSJR4SeJJOBguaiJRXnBm3FQ1zoNuwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFqEG6EBhrrIjWqsp/I0TAQ7t1b7MB8GA1UdIwQY MBaAFOu8DWC9OpC9XjFQnerfRHB2sHjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMt YTZiOTU5OTFjZDJjLzEvV29RYm9RR0d1c2lOYXF5bjhqUk1CRHUzVnZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMtYTZiOTU5OTFjZDJj LzEvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1C1EMA0G CSqGSIb3DQEBCwUAA4IBAQAOhUL/6ca5rLhw0IwabStwGQBjwJyXv6gDor+RWC6P lyl7ls+EVPXKra44r5+jBjLCceSG7ViQG1s1plakB5gOJNASz2gIyc7SgUpn98Kh Acp5XyoxkfEC8ND7Fb5wPxJx+Oa0XvdL6tHaqbmZxS23jRn+Dvi+vrTrGDyBKTNH uAIDq5R16mXJ1kSfBZoRMXd/+KB0WeQExKX27BwK3hdJBESzMJVOeT5PkNgjbKx2 4TSEXwP2mmNfANC8ENrb/mk20MjyR3fPBQsUG2BwYgNPzlaVpnDH7zzdgHiA7ylD w89xMVFPbzQ2GuSVGtlYeQ+aOzrE7HjeDXwqvuHUaS+W -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:49 2026 by rpki-client