This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/WMhIoor7Hyuy0wOxrEP3KE2ZBT8.roa File: WMhIoor7Hyuy0wOxrEP3KE2ZBT8.roa (raw, json) Hash identifier: wF/mTYNEBbK6LQa44t3Ab29Zi1DQ3lUoIwP6+TkkiBA= Subject key identifier: 58:C8:48:A2:8A:FB:1F:2B:B2:D3:03:B1:AC:43:F7:28:4D:99:05:3F Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836 Certificate serial: 019B7A5AFDDBBD7D8AAA83BAF762BB1B9EE0 Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/WMhIoor7Hyuy0wOxrEP3KE2ZBT8.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272988 IP address blocks: 185.236.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fd:db:bd:7d:8a:aa:83:ba:f7:62:bb:1b:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58c848a28afb1f2bb2d303b1ac43f7284d99053f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:fa:bd:17:21:42:e1:75:73:c6:b1:fb:c9: a9:08:61:bb:c0:f7:b7:7d:d6:7f:53:32:df:85:56: 90:d9:32:35:62:86:95:7a:40:f9:bc:a2:23:22:53: 17:d4:0d:2b:93:24:0c:4a:75:4c:aa:da:b2:f3:bd: f9:95:5a:58:c6:fa:35:d7:11:e5:84:73:a6:38:0b: 5b:14:fe:6f:8f:35:3e:75:2e:ec:2f:12:c4:54:6c: ec:3b:fc:4f:28:cc:a3:ce:83:da:ce:69:07:41:82: 14:6b:c5:21:d6:70:02:ee:6c:7e:5d:62:ad:f6:23: 66:4c:7e:11:a1:b2:f9:eb:f6:bd:12:57:b6:c5:c6: b6:29:6c:22:f2:50:55:75:06:bb:68:fe:78:39:b9: 90:a1:9f:3d:1a:77:79:20:d5:35:97:37:aa:1a:7d: a4:a2:a0:32:4b:69:e4:ed:e7:1e:28:09:53:1d:90: fc:30:de:fc:7e:1d:78:4e:87:a6:ac:a6:c2:49:c3: 39:9e:ab:24:cb:0f:bf:11:45:8f:e2:0c:af:2a:af: 27:e2:80:e7:df:c0:9a:bf:d6:8c:54:9e:3a:44:9d: a8:ab:07:2f:b0:96:cd:d2:29:a6:41:dc:bf:b2:94: b2:d8:a5:7f:8c:26:d8:60:d1:83:ec:a1:10:89:4e: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C8:48:A2:8A:FB:1F:2B:B2:D3:03:B1:AC:43:F7:28:4D:99:05:3F X509v3 Authority Key Identifier: keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/WMhIoor7Hyuy0wOxrEP3KE2ZBT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.182.0/24 Signature Algorithm: sha256WithRSAEncryption aa:cb:f3:4f:0d:f9:a7:d6:03:6d:3a:3e:e6:f7:db:3c:7f:fc: e3:d7:d1:81:23:64:e4:5a:cb:a5:c1:fc:57:48:eb:eb:18:9c: 62:7d:0c:76:d9:08:e9:36:42:44:ae:28:74:1a:97:b7:a1:ee: ed:89:3f:02:38:eb:6c:d9:89:66:0f:95:7f:d7:10:c3:c3:b3: b9:f6:d7:b1:19:e1:b6:eb:13:32:8e:ae:2c:b1:bc:44:37:15: 2d:46:31:0b:1a:fa:49:6e:d4:fe:ce:df:71:1b:e6:cf:19:30: dc:82:34:6c:3d:79:fe:e7:6e:14:76:8d:50:c3:e1:8d:fa:22: f2:58:6a:2f:0c:cb:86:38:94:5d:c2:d3:fd:50:a7:8d:e8:77: 71:6f:21:61:16:05:71:27:7e:4b:b6:7f:7f:38:12:3c:cc:ee: 0c:4e:ce:16:2d:54:9d:e1:55:3a:b6:94:b1:24:55:a0:e7:d1: df:34:b3:2b:fb:ab:5c:bb:0f:83:a5:56:0b:06:22:44:9b:71: 07:a0:ab:ae:bd:b1:e1:bb:ab:28:4a:26:60:38:f2:51:e3:0f: 72:f4:fb:2c:54:df:40:68:39:df:c3:75:42:5e:a1:46:ab:63: d3:49:c2:64:2d:87:b0:60:df:79:d7:6c:2f:a5:c5:9b:11:54: 8e:2c:df:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wv3bvX2KqoO692K7G57gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWE0MjcwNzJiMzFkNDQ3ODRjMzc1ZGZhZTQyMjc4ZTcx ZmE4MzYwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGM4NDhhMjhhZmIxZjJiYjJkMzAzYjFhYzQzZjcyODRkOTkwNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxr6vRchQuF1c8ax+8mpCGG7wPe3 fdZ/UzLfhVaQ2TI1YoaVekD5vKIjIlMX1A0rkyQMSnVMqtqy8735lVpYxvo11xHl hHOmOAtbFP5vjzU+dS7sLxLEVGzsO/xPKMyjzoPazmkHQYIUa8Uh1nAC7mx+XWKt 9iNmTH4RobL56/a9Ele2xca2KWwi8lBVdQa7aP54ObmQoZ89Gnd5INU1lzeqGn2k oqAyS2nk7eceKAlTHZD8MN78fh14ToemrKbCScM5nqskyw+/EUWP4gyvKq8n4oDn 38Cav9aMVJ46RJ2oqwcvsJbN0immQdy/spSy2KV/jCbYYNGD7KEQiU5tQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjISKKK+x8rstMDsaxD9yhNmQU/MB8GA1UdIwQY MBaAFF8aQnBysx1EeEw3XfrkInjnH6g2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhwQ2NIS3pIVVI0VERkZC11UWllT2NmcURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wNzdmNjQtYjg0My00NjlmLTg1NDct ZGQyMGJiMjA4YmJhLzEvV01oSW9vcjdIeXV5MHdPeHJFUDNLRTJaQlQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8wNzdmNjQtYjg0My00NjlmLTg1NDctZGQyMGJiMjA4YmJh LzEvWHhwQ2NIS3pIVVI0VERkZC11UWllT2NmcURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuey2MA0G CSqGSIb3DQEBCwUAA4IBAQCqy/NPDfmn1gNtOj7m99s8f/zj19GBI2TkWsulwfxX SOvrGJxifQx22QjpNkJErih0Gpe3oe7tiT8COOts2YlmD5V/1xDDw7O59texGeG2 6xMyjq4ssbxENxUtRjELGvpJbtT+zt9xG+bPGTDcgjRsPXn+524Udo1Qw+GN+iLy WGovDMuGOJRdwtP9UKeN6HdxbyFhFgVxJ35Ltn9/OBI8zO4MTs4WLVSd4VU6tpSx JFWg59HfNLMr+6tcuw+DpVYLBiJEm3EHoKuuvbHhu6soSiZgOPJR4w9y9PssVN9A aDnfw3VCXqFGq2PTScJkLYewYN9512wvpcWbEVSOLN8S -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:44 2026 by rpki-client