This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WyBzP1akOaPSMtH83i7cdE8IRJI.roa File: WyBzP1akOaPSMtH83i7cdE8IRJI.roa (raw, json) Hash identifier: xYMkoOWF3Z1or1lZb3hlI7rxmaHJaALyTgSuHbLZoNg= Subject key identifier: 5B:20:73:3F:56:A4:39:A3:D2:32:D1:FC:DE:2E:DC:74:4F:08:44:92 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D1661DC63AE0826EC10E0D57A5027 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WyBzP1akOaPSMtH83i7cdE8IRJI.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16280 IP address blocks: 194.149.48.0/23 maxlen: 23 194.149.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:16:61:dc:63:ae:08:26:ec:10:e0:d5:7a:50:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b20733f56a439a3d232d1fcde2edc744f084492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:d3:c3:02:b0:f9:56:df:45:a4:12:5d:1c: da:8a:79:de:a7:00:5d:fd:e3:6f:22:6d:f7:4c:dc: ea:e6:17:a1:85:7c:81:09:df:63:d4:bb:9b:e4:e4: be:80:a4:54:68:78:1b:3d:0f:66:7d:da:46:2c:a4: 84:5c:6c:6c:49:ac:87:ae:f8:99:54:af:b4:31:1d: 06:49:c4:8a:61:d3:6d:c6:f7:84:cf:cd:4c:04:cb: c5:1e:3b:fb:d9:79:3b:98:d8:a6:94:f1:ac:51:fc: 84:1d:bc:3e:42:e5:2e:c2:b7:18:6a:73:f9:6a:ac: 47:14:de:d8:81:32:64:0a:a6:1c:6f:76:5b:51:ba: a8:f4:07:a2:9d:98:5c:e1:01:c8:be:c8:5d:63:83: 6d:9d:d2:35:a2:b2:3c:ed:78:8d:a5:10:fc:3d:6f: c9:7a:00:57:5f:bf:b5:0e:1d:de:9f:cd:d7:eb:2e: df:bd:27:c0:44:24:4d:5d:05:52:61:a3:55:0a:cc: 4f:52:24:c2:82:d2:0e:b9:ea:a7:35:91:87:87:0c: 86:85:ae:c6:55:97:e6:f4:22:5f:8d:df:3e:0c:cb: 6d:ac:1f:7c:41:f3:c9:f3:8c:ea:44:0e:e6:c1:6b: 2d:44:5f:5d:0b:f9:98:1f:39:7d:be:19:5d:8b:0e: b1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:20:73:3F:56:A4:39:A3:D2:32:D1:FC:DE:2E:DC:74:4F:08:44:92 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WyBzP1akOaPSMtH83i7cdE8IRJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.149.48.0-194.149.50.255 Signature Algorithm: sha256WithRSAEncryption 03:9d:dd:0c:28:a5:52:42:a8:ad:a5:b2:22:40:1c:dd:2e:49: 53:2b:1f:d6:c4:98:e5:cd:1b:c4:33:01:45:d0:3b:89:3e:52: 3c:68:86:e2:71:af:c0:d9:a6:ed:c8:45:4b:7f:7a:ab:b6:80: 17:29:03:dd:0d:c7:e3:23:04:e0:15:05:f7:d1:e0:71:26:30: 0b:a6:1f:db:33:cf:e2:cd:bb:ab:3f:d8:c9:d2:c0:c6:4e:ef: 2f:fd:d0:8a:bb:1e:5b:d9:21:ac:2d:04:53:74:ba:92:11:80: d6:3a:04:cf:bd:32:28:21:08:bb:9f:38:03:9a:b9:79:2d:e4: 9f:f1:3b:74:f0:b8:b4:26:b8:3d:43:a5:ca:a9:11:3f:66:6d: 98:29:91:f3:29:07:38:fe:c4:97:fe:35:e6:73:da:5a:57:ad: ad:71:0d:f6:9e:a0:54:55:f1:8d:91:df:5e:d2:ca:8d:9c:6a: 37:a1:bc:c7:e3:3b:cf:84:38:c7:64:ff:24:3c:73:ef:ca:52: ca:d2:72:5c:5b:92:80:85:85:26:8e:30:5a:1d:11:da:91:36: 28:88:3e:a8:86:b0:fb:28:24:1d:f8:6c:67:b1:98:a3:88:32: b6:24:d9:a4:ca:68:04:19:34:e9:40:d1:31:fe:58:3c:c1:b7: de:d3:78:13 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XRZh3GOuCCbsEODVelAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjIwNzMzZjU2YTQzOWEzZDIzMmQxZmNkZTJlZGM3NDRmMDg0NDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMvTwwKw+VbfRaQSXRzainnepwBd /eNvIm33TNzq5hehhXyBCd9j1Lub5OS+gKRUaHgbPQ9mfdpGLKSEXGxsSayHrviZ VK+0MR0GScSKYdNtxveEz81MBMvFHjv72Xk7mNimlPGsUfyEHbw+QuUuwrcYanP5 aqxHFN7YgTJkCqYcb3ZbUbqo9AeinZhc4QHIvshdY4NtndI1orI87XiNpRD8PW/J egBXX7+1Dh3en83X6y7fvSfARCRNXQVSYaNVCsxPUiTCgtIOueqnNZGHhwyGha7G VZfm9CJfjd8+DMttrB98QfPJ84zqRA7mwWstRF9dC/mYHzl9vhldiw6xDQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFsgcz9WpDmj0jLR/N4u3HRPCESSMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvV3lCelAxYWtPYVBTTXRIODNpN2NkRThJUkpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATClTAD BADClTIwDQYJKoZIhvcNAQELBQADggEBAAOd3QwopVJCqK2lsiJAHN0uSVMrH9bE mOXNG8QzAUXQO4k+UjxohuJxr8DZpu3IRUt/equ2gBcpA90Nx+MjBOAVBffR4HEm MAumH9szz+LNu6s/2MnSwMZO7y/90Iq7HlvZIawtBFN0upIRgNY6BM+9MighCLuf OAOauXkt5J/xO3TwuLQmuD1DpcqpET9mbZgpkfMpBzj+xJf+NeZz2lpXra1xDfae oFRV8Y2R317Syo2cajehvMfjO8+EOMdk/yQ8c+/KUsrSclxbkoCFhSaOMFodEdqR NiiIPqiGsPsoJB34bGexmKOIMrYk2aTKaAQZNOlA0TH+WDzBt97TeBM= -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:13 2026 by rpki-client