This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/0wmiIEGgBNaM0SH3E3jDJzi9lvA.roa File: 0wmiIEGgBNaM0SH3E3jDJzi9lvA.roa (raw, json) Hash identifier: 5FuZkazkiJGDrvBOsL3FrqVNzaE9M0HyAMUTf9d4FZQ= Subject key identifier: D3:09:A2:20:41:A0:04:D6:8C:D1:21:F7:13:78:C3:27:38:BD:96:F0 Certificate issuer: /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a Certificate serial: 019B7CEDA27D261B79CA8D89D16A6D5DC6C1 Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/0wmiIEGgBNaM0SH3E3jDJzi9lvA.roa Signing time: Fri 02 Jan 2026 04:18:27 +0000 ROA not before: Fri 02 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62417 IP address blocks: 185.231.78.0/24 maxlen: 24 185.231.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a2:7d:26:1b:79:ca:8d:89:d1:6a:6d:5d:c6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a Validity Not Before: Jan 2 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d309a22041a004d68cd121f71378c32738bd96f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:e2:13:b5:7d:b3:a8:88:76:c7:59:71:fd: a6:c0:8b:62:c2:47:d4:3e:a5:d3:75:c1:37:e6:cf: 65:7d:ba:33:77:b8:3a:b0:25:9d:7f:00:10:29:3b: c6:cf:b8:af:12:c6:25:63:2d:5a:93:e4:4f:e1:cc: a6:24:de:9f:02:a6:13:5e:2a:33:16:4e:88:64:29: 0f:1b:98:dc:f6:b7:24:c6:1f:f8:fe:4c:32:6b:14: 5c:ed:f7:b5:d6:ba:52:68:5b:ff:5e:b6:91:c8:d6: 34:e8:cb:aa:2b:60:14:ad:8a:61:6e:71:a1:6f:38: 18:92:3e:dd:ff:72:27:19:41:c1:80:36:be:e0:f2: 93:1d:cf:fc:aa:89:5b:fc:be:7f:c7:3f:27:20:f9: 91:da:b8:f8:b5:98:38:2e:da:60:1f:26:80:d4:87: 42:d2:73:2b:6e:8a:ec:9a:ba:19:2e:2d:19:0a:07: cb:40:21:50:9a:fd:d1:69:13:26:8e:8b:9c:04:5f: 1e:ae:0e:bb:ba:29:d9:06:ec:4b:2f:b5:6b:7f:04: 51:62:79:b3:ad:86:c2:ec:de:54:58:a3:3f:58:a6: c4:78:41:82:36:3b:ee:0e:34:a5:dc:73:10:d2:36: cd:c7:19:1b:24:cc:c1:2f:3a:df:8f:2b:03:91:33: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:09:A2:20:41:A0:04:D6:8C:D1:21:F7:13:78:C3:27:38:BD:96:F0 X509v3 Authority Key Identifier: keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/0wmiIEGgBNaM0SH3E3jDJzi9lvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.78.0/23 Signature Algorithm: sha256WithRSAEncryption 12:11:c2:3a:cb:ee:92:71:46:28:27:6f:fe:6b:28:2a:13:7e: 82:8a:78:64:3e:86:ce:b6:44:4a:bf:76:12:f4:ff:1d:7d:4a: 80:90:7e:ed:21:69:49:83:04:a5:ef:e5:f0:52:50:84:a2:66: 1f:a1:fa:3d:a7:73:00:87:9c:d7:11:b7:b7:d7:33:23:14:fa: 25:8e:e8:a4:54:83:80:61:ec:07:49:dc:91:7a:ab:95:bd:29: 64:57:3f:ef:13:ff:f2:41:1f:6b:d5:6c:f8:b0:93:e4:97:db: a0:1f:e7:88:3b:dc:56:c3:30:11:70:72:bc:a8:a1:5f:ba:91: c5:3c:e0:49:eb:f4:50:53:c3:d3:69:b8:8d:1c:ad:c4:6f:45: b0:1d:d8:a6:3c:fc:a1:48:2b:b8:5f:4f:fe:d6:23:4c:de:a9: 7d:8e:3b:c4:77:d2:9c:3d:0f:d9:af:dc:af:db:7a:5c:25:ff: c7:2c:02:90:20:19:0f:06:de:bd:29:30:f8:f7:ba:b5:5d:7e: 14:de:a4:8e:d4:3d:0a:b6:e6:31:e2:f9:47:d9:63:1f:09:68: 3d:b3:35:d2:0c:e3:9e:60:11:16:be:99:90:83:35:77:28:28: a5:f3:eb:00:5f:c3:fa:5d:8b:63:96:15:eb:8b:f3:ab:a4:96: 62:0e:a4:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87aJ9Jht5yo2J0WptXcbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODA0NWY5ZGYwOGM1MzA1N2U5ZGY5ZmI3YjdhNTc1MTAz ZmZmNGEwHhcNMjYwMTAyMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzA5YTIyMDQxYTAwNGQ2OGNkMTIxZjcxMzc4YzMyNzM4YmQ5NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzDiE7V9s6iIdsdZcf2mwItiwkfU PqXTdcE35s9lfbozd7g6sCWdfwAQKTvGz7ivEsYlYy1ak+RP4cymJN6fAqYTXioz Fk6IZCkPG5jc9rckxh/4/kwyaxRc7fe11rpSaFv/XraRyNY06MuqK2AUrYphbnGh bzgYkj7d/3InGUHBgDa+4PKTHc/8qolb/L5/xz8nIPmR2rj4tZg4LtpgHyaA1IdC 0nMrborsmroZLi0ZCgfLQCFQmv3RaRMmjoucBF8erg67uinZBuxLL7VrfwRRYnmz rYbC7N5UWKM/WKbEeEGCNjvuDjSl3HMQ0jbNxxkbJMzBLzrfjysDkTP1kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNMJoiBBoATWjNEh9xN4wyc4vZbwMB8GA1UdIwQY MBaAFI2ARfnfCMUwV+nfn7e3pXUQP/9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNjcxYmYtYWFhMC00ZmQzLTg1ZmMt ODIxZTY5NDEzMTMxLzEvMHdtaUlFR2dCTmFNMFNIM0UzakRKemk5bHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hNjcxYmYtYWFhMC00ZmQzLTg1ZmMtODIxZTY5NDEzMTMx LzEvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuedOMA0G CSqGSIb3DQEBCwUAA4IBAQASEcI6y+6ScUYoJ2/+aygqE36CinhkPobOtkRKv3YS 9P8dfUqAkH7tIWlJgwSl7+XwUlCEomYfofo9p3MAh5zXEbe31zMjFPoljuikVIOA YewHSdyRequVvSlkVz/vE//yQR9r1Wz4sJPkl9ugH+eIO9xWwzARcHK8qKFfupHF POBJ6/RQU8PTabiNHK3Eb0WwHdimPPyhSCu4X0/+1iNM3ql9jjvEd9KcPQ/Zr9yv 23pcJf/HLAKQIBkPBt69KTD497q1XX4U3qSO1D0KtuYx4vlH2WMfCWg9szXSDOOe YBEWvpmQgzV3KCil8+sAX8P6XYtjlhXri/OrpJZiDqQy -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:05 2026 by rpki-client