This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WrRssx1T7W4FbMdccsG8zhPbvH0.roa File: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (raw, json) Hash identifier: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs= Subject key identifier: 5A:B4:6C:B3:1D:53:ED:6E:05:6C:C7:5C:72:C1:BC:CE:13:DB:BC:7D Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 019B76EB2664372C0E90867125E9A042F4CD Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WrRssx1T7W4FbMdccsG8zhPbvH0.roa Signing time: Thu 01 Jan 2026 00:18:00 +0000 ROA not before: Thu 01 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43332 IP address blocks: 185.187.80.0/23 maxlen: 23 185.187.82.0/24 maxlen: 24 185.187.83.0/24 maxlen: 24 185.220.145.0/24 maxlen: 24 2a0b:9b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:26:64:37:2c:0e:90:86:71:25:e9:a0:42:f4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab46cb31d53ed6e056cc75c72c1bcce13dbbc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:ff:21:86:fb:6a:f9:2a:f7:57:cc:1d:73: f1:e4:12:9d:24:9a:44:3f:6a:01:6e:8c:29:3c:71: 3e:f5:0d:20:c7:80:4b:9f:22:11:04:fb:68:72:3b: 81:ef:04:e0:24:bb:10:28:f5:c7:64:33:86:ad:cd: 09:da:19:d1:ca:e3:14:e2:7f:27:bd:9b:14:35:46: ac:98:13:6c:a4:e7:d0:ef:06:a2:43:4d:7e:de:cd: ab:8e:9a:bf:33:87:bf:cc:5c:78:fa:40:c9:c3:26: 94:1e:cc:fc:ad:2f:ee:de:ea:c6:5c:45:9f:2a:fb: 3b:32:3f:ca:22:ae:76:a0:e3:3d:61:49:32:69:3a: f1:ed:49:52:68:b1:3a:d9:62:4b:c6:77:a2:4e:93: 61:9d:89:a5:ca:10:d3:c1:1c:74:45:1d:1a:32:49: 0d:70:29:83:e1:63:0c:81:7f:37:90:41:4f:5e:24: 7a:4b:3d:c5:b1:9a:53:f2:8b:cf:07:3c:81:86:7e: 38:8b:32:62:1c:11:ef:e6:e0:40:1e:e0:62:8b:1b: bb:73:86:ef:40:df:fb:4e:18:26:9b:30:89:bc:c8: a9:27:9c:03:1d:b2:1a:d9:15:79:4c:ef:ba:4d:18: 09:92:27:f7:3b:90:7d:94:de:6f:02:e5:58:a5:10: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B4:6C:B3:1D:53:ED:6E:05:6C:C7:5C:72:C1:BC:CE:13:DB:BC:7D X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WrRssx1T7W4FbMdccsG8zhPbvH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.80.0/22 185.220.145.0/24 IPv6: 2a0b:9b80::/29 Signature Algorithm: sha256WithRSAEncryption 37:77:af:9c:0e:0a:b2:c4:cd:1f:16:39:9e:f9:52:92:d0:6d: 8b:6d:2f:21:c0:07:a9:9a:06:ca:2c:2f:e0:8c:6f:d0:ab:c3: b6:ae:40:92:86:7c:20:6a:83:11:60:30:da:e6:25:ca:5e:17: 14:69:3b:a3:69:f7:97:a6:3d:20:53:23:8f:1a:36:33:8c:65: 28:e5:db:6b:01:ec:a0:5b:59:9a:b5:97:5d:5f:8d:b5:70:65: 8e:03:a4:d3:a9:6c:62:ed:67:d7:76:1d:ce:79:f7:7d:b6:5a: 50:36:ed:35:89:ec:9a:c0:a4:9e:0c:f4:96:d3:e7:0a:3b:9d: 3b:4c:1a:5e:24:4b:2f:24:7f:7a:db:15:30:b7:5f:20:94:44: c8:79:a4:4a:a0:14:38:1d:f5:ee:26:33:83:07:bc:08:be:49: ae:44:d7:32:00:32:4e:94:79:40:26:66:7e:c2:64:52:8c:35: b6:dc:17:70:4c:3f:dc:52:98:4b:b7:7e:76:45:4c:47:16:07: 77:23:fc:0c:d1:c1:ff:73:a3:26:7c:e3:eb:3b:8a:da:87:bf: 1e:f5:f3:83:6f:99:9e:b2:b9:5c:3a:35:e7:0d:e6:56:cb:0f: df:88:62:3e:74:9c:a9:f1:09:e6:0a:1a:e8:dd:f1:c7:de:8c: d4:f2:1f:e2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26yZkNywOkIZxJemgQvTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWI0NmNiMzFkNTNlZDZlMDU2Y2M3NWM3MmMxYmNjZTEzZGJiYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK//IYb7avkq91fMHXPx5BKdJJpE P2oBbowpPHE+9Q0gx4BLnyIRBPtocjuB7wTgJLsQKPXHZDOGrc0J2hnRyuMU4n8n vZsUNUasmBNspOfQ7waiQ01+3s2rjpq/M4e/zFx4+kDJwyaUHsz8rS/u3urGXEWf Kvs7Mj/KIq52oOM9YUkyaTrx7UlSaLE62WJLxneiTpNhnYmlyhDTwRx0RR0aMkkN cCmD4WMMgX83kEFPXiR6Sz3FsZpT8ovPBzyBhn44izJiHBHv5uBAHuBiixu7c4bv QN/7ThgmmzCJvMipJ5wDHbIa2RV5TO+6TRgJkif3O5B9lN5vAuVYpRATTQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFq0bLMdU+1uBWzHXHLBvM4T27x9MB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV3JSc3N4MVQ3VzRGYk1kY2NzRzh6aFBidkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubtQAwQA udyRMA0EAgACMAcDBQMqC5uAMA0GCSqGSIb3DQEBCwUAA4IBAQA3d6+cDgqyxM0f Fjme+VKS0G2LbS8hwAepmgbKLC/gjG/Qq8O2rkCShnwgaoMRYDDa5iXKXhcUaTuj afeXpj0gUyOPGjYzjGUo5dtrAeygW1matZddX421cGWOA6TTqWxi7WfXdh3Oefd9 tlpQNu01ieyawKSeDPSW0+cKO507TBpeJEsvJH962xUwt18glETIeaRKoBQ4HfXu JjODB7wIvkmuRNcyADJOlHlAJmZ+wmRSjDW23BdwTD/cUphLt352RUxHFgd3I/wM 0cH/c6MmfOPrO4rah78e9fODb5mesrlcOjXnDeZWyw/fiGI+dJyp8QnmChro3fHH 3ozU8h/i -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:50 2026 by rpki-client