This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/WKvQQ0vKtpL43A08LcaBXTbj1kM.roa File: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (raw, json) Hash identifier: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag= Subject key identifier: 58:AB:D0:43:4B:CA:B6:92:F8:DC:0D:3C:2D:C6:81:5D:36:E3:D6:43 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019B797EE00E1C9F70F458A3E663CFACC630 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/WKvQQ0vKtpL43A08LcaBXTbj1kM.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 185.145.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e0:0e:1c:9f:70:f4:58:a3:e6:63:cf:ac:c6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58abd0434bcab692f8dc0d3c2dc6815d36e3d643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:7d:94:5d:0c:d8:03:46:e5:90:16:8f:8a: 39:ab:2e:66:14:fd:60:4e:82:4d:e7:69:74:ab:d5: c3:ce:f5:b9:d9:8e:fa:d7:44:00:e5:be:8e:ff:b7: b3:d2:9b:d6:3f:55:97:ed:44:ce:eb:ed:79:08:5e: 20:9d:04:6a:6c:65:28:b6:95:d8:c4:3a:95:78:b9: 99:13:97:6b:8d:2e:d9:30:8b:d6:d3:cd:4f:d3:d7: 84:7f:5e:82:8f:93:e2:e1:f3:66:7f:19:f5:93:79: 57:50:0f:2f:53:ee:61:a8:28:c0:a2:9a:b4:fa:2f: 69:24:04:65:42:0e:fb:02:90:49:b5:91:17:e0:61: 10:38:34:2d:18:9a:4b:4f:21:59:b4:7d:74:cf:1b: 19:9f:fb:1e:76:13:df:5f:d0:e8:7b:7d:30:0f:3d: 30:88:99:5a:4a:ab:80:2f:68:77:c9:11:51:08:fa: 66:4e:31:04:8f:ac:02:45:ce:7c:60:6b:5a:66:50: f0:76:ce:fb:53:5b:84:86:4f:ec:75:e1:e9:b4:21: da:ea:ba:75:f2:c9:a8:a2:02:ef:fd:b1:4f:11:dd: 91:c4:0c:5b:27:16:bd:ea:27:e4:cd:e6:ed:94:c5: 19:e9:b2:86:48:ec:d7:21:8a:ab:6f:f5:2c:4f:c1: 8f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AB:D0:43:4B:CA:B6:92:F8:DC:0D:3C:2D:C6:81:5D:36:E3:D6:43 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/WKvQQ0vKtpL43A08LcaBXTbj1kM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.78.0/24 Signature Algorithm: sha256WithRSAEncryption 02:10:6e:91:30:8d:c7:30:bc:b7:e6:b1:9e:62:17:42:59:ee: 82:fe:66:be:20:a1:b9:4b:e1:5a:9d:97:a5:b6:b5:06:11:06: 8a:2f:ce:de:0b:49:2d:e1:44:ea:f4:d1:a2:f3:53:9c:b7:eb: a1:c2:b8:90:98:4b:b7:dd:2d:57:53:9e:dc:da:e6:51:5f:c2: 22:f2:46:d9:ae:63:a5:02:2e:04:cd:3a:3e:2d:b0:27:59:89: 58:d4:64:ca:ac:05:ae:de:d2:01:64:44:b9:73:19:7d:d3:a4: df:ec:78:89:50:67:e2:48:73:c1:c5:59:d7:4f:fc:67:f2:e8: 11:f4:31:52:a3:20:b2:31:5e:95:dc:ae:ea:a8:f9:0e:ee:b0: cf:46:54:76:19:9d:af:14:20:8a:89:de:fc:3f:7e:32:00:bf: 59:f1:c5:6a:13:d6:50:d0:e5:f5:11:74:44:2d:17:ce:ac:c5: 11:b7:08:1f:6e:08:95:49:a6:eb:01:70:95:4e:61:87:1e:47: f0:24:62:4e:10:af:86:77:50:e7:94:8a:38:25:e8:9b:56:82: f2:07:b2:f1:66:12:e9:be:d0:69:f7:a7:98:2a:1b:0b:d2:00: 86:02:b9:0d:71:59:2a:22:ce:db:09:50:90:38:28:87:60:b6: 95:2e:4c:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuAOHJ9w9Fij5mPPrMYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGFiZDA0MzRiY2FiNjkyZjhkYzBkM2MyZGM2ODE1ZDM2ZTNkNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK19lF0M2ANG5ZAWj4o5qy5mFP1g ToJN52l0q9XDzvW52Y7610QA5b6O/7ez0pvWP1WX7UTO6+15CF4gnQRqbGUotpXY xDqVeLmZE5drjS7ZMIvW081P09eEf16Cj5Pi4fNmfxn1k3lXUA8vU+5hqCjAopq0 +i9pJARlQg77ApBJtZEX4GEQODQtGJpLTyFZtH10zxsZn/sedhPfX9Doe30wDz0w iJlaSquAL2h3yRFRCPpmTjEEj6wCRc58YGtaZlDwds77U1uEhk/sdeHptCHa6rp1 8smoogLv/bFPEd2RxAxbJxa96ifkzebtlMUZ6bKGSOzXIYqrb/UsT8GPIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFir0ENLyraS+NwNPC3GgV0249ZDMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvV0t2UVEwdkt0cEw0M0EwOExjYUJYVGJqMWtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZFOMA0G CSqGSIb3DQEBCwUAA4IBAQACEG6RMI3HMLy35rGeYhdCWe6C/ma+IKG5S+FanZel trUGEQaKL87eC0kt4UTq9NGi81Oct+uhwriQmEu33S1XU57c2uZRX8Ii8kbZrmOl Ai4EzTo+LbAnWYlY1GTKrAWu3tIBZES5cxl906Tf7HiJUGfiSHPBxVnXT/xn8ugR 9DFSoyCyMV6V3K7qqPkO7rDPRlR2GZ2vFCCKid78P34yAL9Z8cVqE9ZQ0OX1EXRE LRfOrMURtwgfbgiVSabrAXCVTmGHHkfwJGJOEK+Gd1DnlIo4JeibVoLyB7LxZhLp vtBp96eYKhsL0gCGArkNcVkqIs7bCVCQOCiHYLaVLkz3 -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:49 2026 by rpki-client