This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/wsgq7r0bmgVuGnMWeJq55bfKJ_U.roa File: wsgq7r0bmgVuGnMWeJq55bfKJ_U.roa (raw, json) Hash identifier: TZU5rVeqp7nDnIs3V8dsH2Vbd18ixFe0rwWSFe7vxYo= Subject key identifier: C2:C8:2A:EE:BD:1B:9A:05:6E:1A:73:16:78:9A:B9:E5:B7:CA:27:F5 Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578 Certificate serial: 019B7BA375D00FC1C9046EF302C54DA50BD2 Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/wsgq7r0bmgVuGnMWeJq55bfKJ_U.roa Signing time: Thu 01 Jan 2026 22:17:48 +0000 ROA not before: Thu 01 Jan 2026 22:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 82.146.160.0/19 maxlen: 24 82.146.170.0/24 maxlen: 24 91.245.248.0/22 maxlen: 24 2a0d:b3c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:75:d0:0f:c1:c9:04:6e:f3:02:c5:4d:a5:0b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2c82aeebd1b9a056e1a7316789ab9e5b7ca27f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:cc:f8:09:45:1e:46:a4:63:0b:79:78:62: 59:d6:31:72:98:b6:02:2e:99:a9:77:7c:e4:af:77: dd:aa:ee:23:97:ed:4d:02:7f:0b:61:1f:9a:85:11: 6e:2a:d5:ed:b3:5d:2f:09:09:7c:c9:fe:42:30:14: a4:07:9e:52:7f:2d:fd:7d:f7:e8:5d:68:65:9b:b7: 74:50:ca:68:59:13:b6:fc:e9:f6:0f:57:10:d6:0c: d7:a3:cf:f0:23:36:e8:f9:34:6d:4d:fd:0f:e3:cd: 2b:36:79:9a:b6:7c:97:3d:16:30:d3:22:7d:2e:92: 83:81:05:f3:d7:6c:d4:7e:b0:1d:e5:fd:71:f8:27: 62:fe:7d:78:9b:5e:19:6f:81:b2:a1:56:38:1a:ef: a3:aa:34:15:e6:63:f3:dd:ff:65:54:f7:78:49:34: bc:77:f0:91:46:5b:26:8d:5c:7a:49:05:0e:7c:40: 60:80:53:76:16:e1:7b:49:c7:62:18:18:be:4b:1a: 28:e0:fb:d1:c8:e1:5e:32:73:8a:1c:02:a0:62:85: 91:fa:df:e3:44:d7:90:1a:41:b7:e0:ab:2b:f1:94: c1:e2:71:41:dc:6f:88:31:73:4a:fe:f3:67:df:8e: 13:bc:3c:ed:61:a4:c5:13:ea:5a:d5:12:c2:3e:00: 71:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C8:2A:EE:BD:1B:9A:05:6E:1A:73:16:78:9A:B9:E5:B7:CA:27:F5 X509v3 Authority Key Identifier: keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/wsgq7r0bmgVuGnMWeJq55bfKJ_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.146.160.0/19 91.245.248.0/22 IPv6: 2a0d:b3c0::/29 Signature Algorithm: sha256WithRSAEncryption 6d:11:60:f1:e7:18:ea:fa:10:04:c4:21:6f:87:f2:87:1b:4f: 97:3b:97:38:98:64:63:c3:66:e1:52:f7:76:4a:c8:71:74:10: 39:e4:83:89:d0:f6:80:56:4c:14:75:4a:70:5a:3d:3a:b8:b1: 3c:06:c1:e2:7f:7b:ff:9f:53:af:e1:25:d1:4c:9c:76:1f:d0: f5:7e:0b:03:4e:23:c9:f4:72:20:30:a2:5d:48:d2:1d:6d:46: 3d:44:6b:c6:e3:70:cb:41:5e:62:5e:80:9f:c9:c6:f6:e0:bd: c9:9f:aa:cd:6f:74:e0:2a:1c:0e:19:f0:f8:dc:fa:df:ae:81: 63:6f:56:b6:a1:35:13:46:e0:c2:da:2d:e2:b8:e8:27:71:15: f8:41:03:2b:4c:bc:c8:5e:c3:92:1f:52:96:aa:58:68:73:90: d2:b4:c6:14:3a:62:04:6c:30:c5:3a:84:e3:d7:b6:ac:2c:a8: 32:c6:c0:d3:59:38:4b:d9:a1:55:59:b6:d7:4f:74:7a:aa:df: db:57:11:84:0e:a4:8d:3d:be:a1:77:76:be:30:ca:ef:74:d9: 04:c7:a9:3f:dd:d2:55:8e:12:38:b2:7a:92:93:13:ae:a0:01: 53:d5:7f:fe:5e:9f:d5:41:3c:09:3a:dd:bf:aa:4b:b6:43:26: fc:f3:a8:1a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o3XQD8HJBG7zAsVNpQvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx MzM1NzgwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmM4MmFlZWJkMWI5YTA1NmUxYTczMTY3ODlhYjllNWI3Y2EyN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pfM+AlFHkakYwt5eGJZ1jFymLYC Lpmpd3zkr3fdqu4jl+1NAn8LYR+ahRFuKtXts10vCQl8yf5CMBSkB55Sfy39fffo XWhlm7d0UMpoWRO2/On2D1cQ1gzXo8/wIzbo+TRtTf0P480rNnmatnyXPRYw0yJ9 LpKDgQXz12zUfrAd5f1x+Cdi/n14m14Zb4GyoVY4Gu+jqjQV5mPz3f9lVPd4STS8 d/CRRlsmjVx6SQUOfEBggFN2FuF7ScdiGBi+Sxoo4PvRyOFeMnOKHAKgYoWR+t/j RNeQGkG34Ksr8ZTB4nFB3G+IMXNK/vNn344TvDztYaTFE+pa1RLCPgBxawIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMLIKu69G5oFbhpzFniaueW3yif1MB8GA1UdIwQY MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt YWQ2ZjBiZjg4NDM4LzEvd3NncTdyMGJtZ1Z1R25NV2VKcTU1YmZLSl9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4 LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUpKgAwQC W/X4MA0EAgACMAcDBQMqDbPAMA0GCSqGSIb3DQEBCwUAA4IBAQBtEWDx5xjq+hAE xCFvh/KHG0+XO5c4mGRjw2bhUvd2SshxdBA55IOJ0PaAVkwUdUpwWj06uLE8BsHi f3v/n1Ov4SXRTJx2H9D1fgsDTiPJ9HIgMKJdSNIdbUY9RGvG43DLQV5iXoCfycb2 4L3Jn6rNb3TgKhwOGfD43PrfroFjb1a2oTUTRuDC2i3iuOgncRX4QQMrTLzIXsOS H1KWqlhoc5DStMYUOmIEbDDFOoTj17asLKgyxsDTWThL2aFVWbbXT3R6qt/bVxGE DqSNPb6hd3a+MMrvdNkEx6k/3dJVjhI4snqSkxOuoAFT1X/+Xp/VQTwJOt2/qku2 Qyb886ga -----END CERTIFICATE-----Generated at Mon Jan 26 03:08:13 2026 by rpki-client