This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa File: wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa (raw, json) Hash identifier: nYzqM3na5q/wwfaIOmk+FxvcOctc4P9IAUI7PFRpl7k= Subject key identifier: C1:B9:02:14:2A:46:38:01:6F:DE:04:1A:E1:D5:F9:75:20:6B:B5:1F Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019B76EB0EF041FB0B3229ACAA8F2D7171C8 Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208050 IP address blocks: 147.204.3.0/25 maxlen: 25 147.204.28.0/24 maxlen: 24 147.204.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0e:f0:41:fb:0b:32:29:ac:aa:8f:2d:71:71:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1b902142a4638016fde041ae1d5f975206bb51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b9:2d:06:8f:ae:e0:a3:b4:4d:84:91:ed:b3: e1:f9:6a:58:a3:43:7b:52:ae:76:dd:87:11:87:5b: 65:dd:da:b5:9a:b3:e1:b3:e9:6d:f2:1e:b1:18:48: 68:a5:d4:a4:cc:1b:b0:12:c7:84:c3:26:53:54:0e: bb:78:f1:eb:a6:0f:7c:ee:6a:26:72:cf:d0:cc:58: e3:33:70:60:76:33:08:87:24:23:81:83:e9:60:fe: 38:e6:8d:da:35:be:c1:f0:c0:8d:f4:13:05:a9:ed: b7:1b:52:7f:2b:aa:43:2b:67:63:37:39:df:c1:1c: ae:a5:63:1e:63:46:db:8a:32:d9:a8:9e:ff:7e:7a: 55:91:64:b7:83:67:e6:02:6b:29:7b:5f:50:49:1e: 81:1b:f4:88:32:6f:2f:47:60:7a:a4:2a:8c:fb:68: 1a:cf:6e:d3:29:9c:b7:9c:fd:91:d0:4c:4b:2d:b6: 57:9b:db:5b:c9:5d:35:2b:28:c8:79:bf:02:ca:d9: 4f:c1:de:54:d8:b3:82:29:5d:68:89:5a:14:3c:74: bf:8c:ae:36:aa:7c:51:5f:60:89:7b:1f:1c:33:62: ed:31:af:8c:50:25:31:11:32:6c:12:10:82:5f:76: 60:36:d5:69:f4:5a:79:e6:94:3a:e4:20:31:c6:48: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B9:02:14:2A:46:38:01:6F:DE:04:1A:E1:D5:F9:75:20:6B:B5:1F X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.204.3.0/25 147.204.28.0/24 147.204.31.0/24 Signature Algorithm: sha256WithRSAEncryption 40:7b:a3:b7:90:41:93:c8:9a:8a:c8:8e:37:85:8d:f8:1b:00: 1e:28:20:9d:71:fd:1a:62:2c:73:1d:92:7b:94:2d:75:65:74: 29:b7:06:22:a5:50:25:be:0f:3f:e8:29:5b:c3:1e:56:6e:84: 04:9e:d3:26:86:b7:c2:5c:20:95:a7:bb:2e:de:50:c5:48:47: b6:38:21:d6:e5:4c:45:db:78:df:c6:af:51:10:10:29:d8:ed: 2a:b8:18:61:e4:13:e6:47:f5:06:5d:24:fb:28:69:c2:da:e3: bb:ba:cc:9a:c4:f3:11:57:ae:88:16:2e:cb:54:53:f0:63:0c: 2d:86:f8:df:58:0c:72:d4:81:23:9a:86:b7:c8:16:83:2a:2a: bd:61:09:05:da:b0:f0:9a:29:28:53:52:ad:14:01:f1:48:ed: df:84:7f:92:90:0b:9a:0f:11:8b:d4:65:3c:bc:ec:bc:9b:7b: 38:c8:77:fe:51:07:40:75:28:cd:b8:59:b9:e1:43:e1:b8:4a: ed:07:84:18:04:85:59:e8:87:16:e5:79:99:5e:df:be:c2:03: aa:b4:74:f7:a0:13:d6:ea:ca:1c:c2:26:ec:f4:4c:82:b9:d8: 9d:9e:89:46:4d:a8:6f:42:d5:3c:05:f4:4c:9e:61:e9:d4:7e: f9:a0:12:62 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt26w7wQfsLMimsqo8tcXHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWI5MDIxNDJhNDYzODAxNmZkZTA0MWFlMWQ1Zjk3NTIwNmJiNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LktBo+u4KO0TYSR7bPh+WpYo0N7 Uq523YcRh1tl3dq1mrPhs+lt8h6xGEhopdSkzBuwEseEwyZTVA67ePHrpg987mom cs/QzFjjM3BgdjMIhyQjgYPpYP445o3aNb7B8MCN9BMFqe23G1J/K6pDK2djNznf wRyupWMeY0bbijLZqJ7/fnpVkWS3g2fmAmspe19QSR6BG/SIMm8vR2B6pCqM+2ga z27TKZy3nP2R0ExLLbZXm9tbyV01KyjIeb8CytlPwd5U2LOCKV1oiVoUPHS/jK42 qnxRX2CJex8cM2LtMa+MUCUxETJsEhCCX3ZgNtVp9Fp55pQ65CAxxkgLrQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFMG5AhQqRjgBb94EGuHV+XUga7UfMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvd2JrQ0ZDcEdPQUZ2M2dRYTRkWDVkU0JydFI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwUHk8wDAAME AJPMHAMEAJPMHzANBgkqhkiG9w0BAQsFAAOCAQEAQHujt5BBk8iaisiON4WN+BsA HiggnXH9GmIscx2Se5QtdWV0KbcGIqVQJb4PP+gpW8MeVm6EBJ7TJoa3wlwglae7 Lt5QxUhHtjgh1uVMRdt438avURAQKdjtKrgYYeQT5kf1Bl0k+yhpwtrju7rMmsTz EVeuiBYuy1RT8GMMLYb431gMctSBI5qGt8gWgyoqvWEJBdqw8JopKFNSrRQB8Ujt 34R/kpALmg8Ri9RlPLzsvJt7OMh3/lEHQHUozbhZueFD4bhK7QeEGASFWeiHFuV5 mV7fvsIDqrR096AT1urKHMIm7PRMgrnYnZ6JRk2ob0LVPAX0TJ5h6dR++aASYg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:38 2026 by rpki-client