This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/WYkkzBha-wTT67Gvhww1_FOg7QM.roa File: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (raw, json) Hash identifier: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M= Subject key identifier: 59:89:24:CC:18:5A:FB:04:D3:EB:B1:AF:87:0C:35:FC:53:A0:ED:03 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019B797EE1E45FED83FD579C5F759F6E805D Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/WYkkzBha-wTT67Gvhww1_FOg7QM.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60620 IP address blocks: 185.14.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e1:e4:5f:ed:83:fd:57:9c:5f:75:9f:6e:80:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=598924cc185afb04d3ebb1af870c35fc53a0ed03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:08:70:6e:f4:6d:ba:4d:8b:42:1d:ff:ce: 06:e8:42:e9:db:04:fa:25:9b:97:52:8e:d7:bd:df: 5e:fa:24:73:00:5d:3c:01:1b:35:ce:d4:93:3b:27: d2:c1:4a:9c:1b:97:dd:18:f4:d2:0e:5f:34:8b:32: b5:6d:3c:83:7e:ce:95:05:50:0b:3d:e2:ac:de:bd: 4e:19:e9:f7:c6:50:07:47:bb:7d:42:50:2c:35:21: a5:4e:2d:ac:09:d4:77:72:91:fb:75:e1:79:f0:36: 32:a3:03:0a:3e:f3:d1:39:8c:a7:c2:32:e3:8c:d6: 45:8b:0b:c7:c7:3f:c9:ff:d5:72:12:91:00:7c:40: fc:bd:5e:45:ad:42:e8:09:36:3d:64:72:34:2e:e6: 78:20:e7:a0:4f:f6:ad:30:af:3f:3f:10:a5:a6:ac: b8:d4:e7:f8:8b:af:05:3f:e9:9a:41:22:d3:60:ab: 39:2d:63:fe:54:69:9e:d9:e4:dc:a9:9c:60:ca:91: 3c:63:c3:73:0c:5b:93:3e:32:57:37:68:fc:f2:f6: a0:4b:bd:52:f0:e1:bb:ad:6a:28:22:a4:f5:d5:c9: a7:7e:ce:07:68:f6:7f:95:b2:71:91:ac:f9:81:62: eb:b0:c3:a4:4a:53:82:f3:7c:4d:8c:b9:74:66:6d: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:24:CC:18:5A:FB:04:D3:EB:B1:AF:87:0C:35:FC:53:A0:ED:03 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/WYkkzBha-wTT67Gvhww1_FOg7QM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.177.0/24 Signature Algorithm: sha256WithRSAEncryption 83:92:ff:73:57:5f:5f:99:58:b8:e1:89:da:25:ad:e2:82:6a: 14:82:41:c4:53:4a:2e:fa:09:ed:e6:87:57:7a:6e:a5:1b:2c: a7:b5:98:b5:0f:4d:9b:9a:80:c7:6c:54:f2:e1:2b:2d:3f:bf: 5b:a7:c4:f1:5e:5f:c5:01:84:52:63:df:5f:b3:c3:b1:68:82: 39:11:2b:c4:9c:99:68:4e:63:e2:d1:89:7f:6b:7f:f9:9f:46: 43:08:73:8a:ef:85:1c:f9:c0:4f:b7:a3:46:a1:7c:79:30:07: 35:48:d2:d9:7c:39:79:3b:84:ee:d3:77:92:4f:f8:83:bc:c2: be:bd:19:9c:d4:99:98:96:76:29:9a:61:6a:b3:26:c2:f2:b2: 1d:72:6f:d3:55:c8:0a:4f:f7:fc:fd:4d:09:09:e9:40:d6:78: e4:70:a6:dd:93:5b:2b:f6:3a:d6:b3:2f:a4:48:4a:29:9c:23: 5e:94:f5:cd:37:c5:8f:47:4e:04:b6:90:9c:3e:4c:bb:b2:65: 91:68:5f:05:c8:4f:fe:d1:fe:8b:e8:00:86:2a:ae:0a:ac:f9: 08:d2:77:b9:70:4c:96:37:ff:af:52:90:22:ef:00:e1:65:d6: 32:00:d3:38:30:b9:d5:66:c5:12:39:36:20:48:85:f5:e0:ab: 9b:95:65:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuHkX+2D/VecX3WfboBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTg5MjRjYzE4NWFmYjA0ZDNlYmIxYWY4NzBjMzVmYzUzYTBlZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59kIcG70bbpNi0Id/84G6ELp2wT6 JZuXUo7Xvd9e+iRzAF08ARs1ztSTOyfSwUqcG5fdGPTSDl80izK1bTyDfs6VBVAL PeKs3r1OGen3xlAHR7t9QlAsNSGlTi2sCdR3cpH7deF58DYyowMKPvPROYynwjLj jNZFiwvHxz/J/9VyEpEAfED8vV5FrULoCTY9ZHI0LuZ4IOegT/atMK8/PxClpqy4 1Of4i68FP+maQSLTYKs5LWP+VGme2eTcqZxgypE8Y8NzDFuTPjJXN2j88vagS71S 8OG7rWooIqT11cmnfs4HaPZ/lbJxkaz5gWLrsMOkSlOC83xNjLl0Zm38QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFmJJMwYWvsE0+uxr4cMNfxToO0DMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvV1lra3pCaGEtd1RUNjdHdmh3dzFfRk9nN1FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ6xMA0G CSqGSIb3DQEBCwUAA4IBAQCDkv9zV19fmVi44YnaJa3igmoUgkHEU0ou+gnt5odX em6lGyyntZi1D02bmoDHbFTy4SstP79bp8TxXl/FAYRSY99fs8OxaII5ESvEnJlo TmPi0Yl/a3/5n0ZDCHOK74Uc+cBPt6NGoXx5MAc1SNLZfDl5O4Tu03eST/iDvMK+ vRmc1JmYlnYpmmFqsybC8rIdcm/TVcgKT/f8/U0JCelA1njkcKbdk1sr9jrWsy+k SEopnCNelPXNN8WPR04EtpCcPky7smWRaF8FyE/+0f6L6ACGKq4KrPkI0ne5cEyW N/+vUpAi7wDhZdYyANM4MLnVZsUSOTYgSIX14KublWXf -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:50 2026 by rpki-client