This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa File: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (raw, json) Hash identifier: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw= Subject key identifier: 5B:1F:80:89:42:A2:F2:F5:E1:DA:40:5E:DF:F4:9D:1C:50:C5:D6:68 Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBC2D5BE6E8D77381517C53166D4CE Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211701 IP address blocks: 185.216.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c2:d5:be:6e:8d:77:38:15:17:c5:31:66:d4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b1f808942a2f2f5e1da405edff49d1c50c5d668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:5b:43:f6:9d:8c:fc:26:c6:f4:b3:f3:5b: 11:97:b0:1b:49:c3:40:8d:a3:01:a5:b5:ac:b6:d9: 40:3f:4e:cc:7a:8d:6f:49:49:c6:75:26:e5:43:00: 79:28:88:bb:ca:0d:5c:db:b2:93:4e:62:dd:95:d9: d8:da:98:b1:2c:a9:e8:de:f2:ea:89:46:96:da:47: ca:2a:47:4b:e4:4f:3a:4b:27:dd:bf:0d:36:38:32: 4f:13:55:c4:d1:8c:ea:b1:18:80:1f:27:5d:3c:3b: 40:5a:1a:a6:e0:0f:3c:0c:09:0d:4a:90:fd:98:a2: 13:34:5d:a7:1e:c9:3b:92:6d:67:9f:82:62:04:fe: 43:ff:3a:b0:d5:49:7f:f1:34:f3:c7:60:4b:5e:6f: f8:bc:2d:e3:a9:c2:8b:de:4b:fc:f6:86:4e:5f:42: eb:1f:9a:a8:e4:a9:3c:53:86:f9:b6:32:d7:aa:1e: 51:ba:7d:84:23:a4:d2:9d:e0:41:e2:28:d2:08:ca: d8:9b:1a:1e:4a:88:8f:6f:2b:e6:8e:ec:80:ec:57: 48:74:38:59:a6:af:f8:ec:86:aa:61:9e:cd:eb:55: 73:f2:1d:0d:ae:b8:25:c7:ef:73:05:9b:35:19:b6: de:c8:20:8e:79:4c:6c:f6:ac:df:27:98:30:60:b4: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1F:80:89:42:A2:F2:F5:E1:DA:40:5E:DF:F4:9D:1C:50:C5:D6:68 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.190.0/24 Signature Algorithm: sha256WithRSAEncryption 01:39:06:c0:cc:6c:c4:2b:a7:ad:e6:f4:d0:f0:a3:50:86:9f: b5:57:f3:49:28:ff:be:94:07:c9:00:e2:6a:93:84:11:3f:6b: 35:31:59:6c:f6:db:9d:d0:5b:13:f9:a4:ac:38:9f:79:86:52: 8c:78:6c:a7:19:2e:fa:fa:46:61:3d:3f:a5:21:8e:a4:dc:2f: 21:47:02:c5:96:32:14:4c:4e:88:87:ae:38:94:a0:dc:22:5d: 08:f1:3e:92:3d:aa:bd:dc:ea:9c:74:69:0f:8b:02:af:d8:16: d6:a6:7b:4d:a1:2e:4d:cb:9e:63:91:65:7c:f6:37:21:11:d4: e2:73:31:e5:fb:9b:1f:4e:97:1b:59:0b:c9:e5:c1:7a:0f:76: b1:b3:45:1a:14:39:34:e5:83:69:a6:bf:fa:9b:bb:9b:bb:25: d3:fa:06:fb:35:0c:8f:62:a6:38:4d:b3:92:80:77:1f:df:71: 99:16:3c:40:b7:a5:23:7e:a3:34:aa:44:d2:a8:d0:41:38:5d: 9a:b1:d7:dd:f2:a3:1c:dd:ef:8e:0d:a8:44:ae:fc:e6:98:1d: 0d:e8:08:5e:b1:bb:e5:0a:91:fe:94:73:c7:47:a5:63:6e:2b: e9:53:5a:df:94:23:5c:87:ca:79:c1:ee:11:e8:47:16:8d:87: ee:73:24:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568LVvm6NdzgVF8UxZtTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjFmODA4OTQyYTJmMmY1ZTFkYTQwNWVkZmY0OWQxYzUwYzVkNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaBbQ/adjPwmxvSz81sRl7AbScNA jaMBpbWsttlAP07Meo1vSUnGdSblQwB5KIi7yg1c27KTTmLdldnY2pixLKno3vLq iUaW2kfKKkdL5E86Syfdvw02ODJPE1XE0YzqsRiAHyddPDtAWhqm4A88DAkNSpD9 mKITNF2nHsk7km1nn4JiBP5D/zqw1Ul/8TTzx2BLXm/4vC3jqcKL3kv89oZOX0Lr H5qo5Kk8U4b5tjLXqh5Run2EI6TSneBB4ijSCMrYmxoeSoiPbyvmjuyA7FdIdDhZ pq/47IaqYZ7N61Vz8h0Nrrglx+9zBZs1GbbeyCCOeUxs9qzfJ5gwYLTLoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFsfgIlCovL14dpAXt/0nRxQxdZoMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvV3gtQWlVS2k4dlhoMmtCZTNfU2RIRkRGMW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudi+MA0G CSqGSIb3DQEBCwUAA4IBAQABOQbAzGzEK6et5vTQ8KNQhp+1V/NJKP++lAfJAOJq k4QRP2s1MVls9tud0FsT+aSsOJ95hlKMeGynGS76+kZhPT+lIY6k3C8hRwLFljIU TE6Ih644lKDcIl0I8T6SPaq93OqcdGkPiwKv2BbWpntNoS5Ny55jkWV89jchEdTi czHl+5sfTpcbWQvJ5cF6D3axs0UaFDk05YNppr/6m7ubuyXT+gb7NQyPYqY4TbOS gHcf33GZFjxAt6UjfqM0qkTSqNBBOF2asdfd8qMc3e+ODahErvzmmB0N6Ahesbvl CpH+lHPHR6VjbivpU1rflCNch8p5we4R6EcWjYfucySY -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:04 2026 by rpki-client