This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/re_1WedxziUW08jNtG4jbnB22Hw.roa File: re_1WedxziUW08jNtG4jbnB22Hw.roa (raw, json) Hash identifier: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4= Subject key identifier: AD:EF:F5:59:E7:71:CE:25:16:D3:C8:CD:B4:6E:23:6E:70:76:D8:7C Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F3582B79C6DA9BB14A825C4EA3D4E Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/re_1WedxziUW08jNtG4jbnB22Hw.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208582 IP address blocks: 185.51.8.0/22 maxlen: 24 185.211.60.0/22 maxlen: 24 2a01:aee0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:35:82:b7:9c:6d:a9:bb:14:a8:25:c4:ea:3d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adeff559e771ce2516d3c8cdb46e236e7076d87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:23:97:cd:65:7d:6a:35:c3:be:52:67:e0:43: e0:8e:04:4e:4a:a2:1f:ba:ab:da:5d:0e:d6:c9:58: 48:3a:d7:ec:ae:ea:23:43:bc:49:fe:01:64:ef:68: 94:c4:3e:7e:2f:27:29:8d:76:3c:4a:0d:c4:7e:01: aa:c5:eb:8f:9a:6d:f3:ae:2f:7a:af:2e:df:ef:5d: 93:b2:ce:fb:91:97:0d:db:06:e2:25:4f:63:2c:94: c5:9b:c2:2a:97:b4:40:9c:30:b5:0d:30:e6:37:d1: a3:ec:3f:72:15:5c:fd:01:ee:c1:97:47:0e:61:40: be:a6:48:00:55:42:e4:ba:f3:ef:b7:72:99:9d:13: a9:ce:54:2f:ed:dc:a3:0e:56:85:22:b7:c6:64:2a: f4:6c:e5:2b:47:be:54:92:80:e1:32:cd:e7:33:81: f7:35:55:46:82:57:20:64:4e:42:5a:6a:b7:f0:fc: a0:e0:fd:7c:15:5a:b3:60:b8:be:1d:81:cb:82:2d: 3a:87:49:f8:3a:fd:8d:ed:f2:7b:41:8e:96:b3:4d: bb:9d:10:a3:99:1e:95:b5:c2:c8:b5:4c:c5:5f:d7: 1d:f2:24:88:fb:91:a1:b7:60:70:db:43:a1:0f:c0: 6a:0c:30:44:3b:4f:c4:ea:1a:22:d5:7e:18:03:ed: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EF:F5:59:E7:71:CE:25:16:D3:C8:CD:B4:6E:23:6E:70:76:D8:7C X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/re_1WedxziUW08jNtG4jbnB22Hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.8.0/22 185.211.60.0/22 IPv6: 2a01:aee0::/32 Signature Algorithm: sha256WithRSAEncryption 76:49:1e:c8:0a:a9:5e:9f:8e:87:3a:25:39:44:9b:7d:c6:04: c1:6d:7b:15:fc:f8:74:73:04:2a:ad:01:78:9e:db:32:94:e7: 80:fb:2e:ae:49:65:01:9f:10:f7:fe:58:3a:5b:e9:5e:05:32: aa:13:fa:bd:0f:f8:6b:fc:c6:26:34:29:38:6f:ad:8a:78:cd: c3:8c:98:7c:e3:d8:25:ef:0f:e5:36:ea:ee:a5:04:2e:7a:14: 6d:f2:66:0b:6d:bb:4d:c6:d0:9a:4c:b0:53:74:46:f4:94:fc: 74:ea:87:5e:4a:a0:a4:b2:06:56:22:5a:a6:40:3b:96:17:9b: 60:73:5f:23:80:65:cc:d2:b3:47:99:43:cc:97:6c:2f:8c:07: c4:ee:1a:cb:fe:ee:58:7c:0d:86:84:4d:7b:b5:24:62:fb:78: 26:4a:64:fb:d6:00:ca:a1:88:ef:0e:18:c0:f9:ce:4e:ba:86: 09:ea:7d:e3:c0:2d:18:4c:ea:68:a1:30:33:a9:0a:d2:65:12: db:5d:36:04:b0:4e:55:8a:91:07:40:20:6d:49:89:a8:cc:f7: 21:5c:5e:44:e6:48:d9:16:ea:07:ec:16:32:57:a1:e3:58:38: 2d:93:b5:29:d0:60:29:5a:e8:af:a6:d6:ae:f7:65:ba:bc:4e: e4:15:8e:ee -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fzWCt5xtqbsUqCXE6j1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGVmZjU1OWU3NzFjZTI1MTZkM2M4Y2RiNDZlMjM2ZTcwNzZkODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+yOXzWV9ajXDvlJn4EPgjgROSqIf uqvaXQ7WyVhIOtfsruojQ7xJ/gFk72iUxD5+LycpjXY8Sg3EfgGqxeuPmm3zri96 ry7f712Tss77kZcN2wbiJU9jLJTFm8Iql7RAnDC1DTDmN9Gj7D9yFVz9Ae7Bl0cO YUC+pkgAVULkuvPvt3KZnROpzlQv7dyjDlaFIrfGZCr0bOUrR75UkoDhMs3nM4H3 NVVGglcgZE5CWmq38Pyg4P18FVqzYLi+HYHLgi06h0n4Ov2N7fJ7QY6Ws027nRCj mR6VtcLItUzFX9cd8iSI+5Ght2Bw20OhD8BqDDBEO0/E6hoi1X4YA+1wZQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFK3v9Vnncc4lFtPIzbRuI25wdth8MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvcmVfMVdlZHh6aVVXMDhqTnRHNGpibkIyMkh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuTMIAwQC udM8MA0EAgACMAcDBQAqAa7gMA0GCSqGSIb3DQEBCwUAA4IBAQB2SR7ICqlen46H OiU5RJt9xgTBbXsV/Ph0cwQqrQF4ntsylOeA+y6uSWUBnxD3/lg6W+leBTKqE/q9 D/hr/MYmNCk4b62KeM3DjJh849gl7w/lNurupQQuehRt8mYLbbtNxtCaTLBTdEb0 lPx06odeSqCksgZWIlqmQDuWF5tgc18jgGXM0rNHmUPMl2wvjAfE7hrL/u5YfA2G hE17tSRi+3gmSmT71gDKoYjvDhjA+c5OuoYJ6n3jwC0YTOpooTAzqQrSZRLbXTYE sE5VipEHQCBtSYmozPchXF5E5kjZFuoH7BYyV6HjWDgtk7Up0GApWuivptau92W6 vE7kFY7u -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:55 2026 by rpki-client