This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/WLeIUds8vGLhz-4s-M2BUqMdUmA.roa File: WLeIUds8vGLhz-4s-M2BUqMdUmA.roa (raw, json) Hash identifier: hglr/CP7f/n2MjswXZoxd8g6eFdOlqFrzVobwOixbnE= Subject key identifier: 58:B7:88:51:DB:3C:BC:62:E1:CF:EE:2C:F8:CD:81:52:A3:1D:52:60 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C1237095412BE539F7F98010767CA16 Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/WLeIUds8vGLhz-4s-M2BUqMdUmA.roa Signing time: Fri 02 Jan 2026 00:18:47 +0000 ROA not before: Fri 02 Jan 2026 00:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201632 IP address blocks: 193.140.16.0/21 maxlen: 21 193.140.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:37:09:54:12:be:53:9f:7f:98:01:07:67:ca:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58b78851db3cbc62e1cfee2cf8cd8152a31d5260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:bf:1e:73:89:68:da:3d:f3:86:24:d0:da: bc:ea:1d:31:8d:a9:c7:2a:fa:77:38:6a:00:8f:46: ae:80:cc:63:75:fc:5a:8f:67:e0:93:0d:20:0d:33: e7:f5:ce:ac:94:a1:29:7e:f1:14:c1:09:2f:7c:87: 1e:e9:89:65:66:5a:4d:e8:4e:59:12:ff:a0:d5:ae: b3:70:3f:d4:b5:75:8f:ba:87:71:60:d7:8c:59:6c: 97:02:3b:c5:41:f0:44:3e:b4:31:f0:e0:e2:b1:fe: 85:86:c0:59:e5:d7:da:eb:9b:d4:01:51:f5:04:01: cc:8c:64:ef:64:f5:85:99:69:6e:5f:60:bf:a8:f1: 30:02:65:4b:b5:18:3e:c9:c9:66:b7:17:16:17:8c: 85:e9:59:59:ee:f7:e4:92:8c:78:9c:00:a5:cf:4a: af:4c:7e:70:36:36:fc:1f:b2:b6:40:97:f0:28:a1: 30:e6:a6:be:a4:62:73:16:25:a2:d4:ac:49:6d:08: 96:4f:b0:9f:03:b9:37:f2:93:4a:bb:fd:44:60:9b: ba:5d:db:41:64:3d:ca:df:5a:ec:18:6d:bb:ad:94: 13:e4:7a:76:41:4f:d8:9b:dc:87:e5:01:01:c2:56: a7:de:ac:47:0a:85:4e:b0:60:1c:22:4f:ba:ca:0f: ff:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B7:88:51:DB:3C:BC:62:E1:CF:EE:2C:F8:CD:81:52:A3:1D:52:60 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/WLeIUds8vGLhz-4s-M2BUqMdUmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.140.16.0/21 193.140.184.0/21 Signature Algorithm: sha256WithRSAEncryption 54:84:a2:54:a3:74:f5:ea:9e:28:be:d3:ee:83:20:dd:ac:5a: 1c:30:71:52:0c:db:32:d3:4a:b8:75:27:ad:04:e7:a2:92:7a: 59:e4:e6:87:d6:8d:58:bf:07:bf:2a:02:bd:bb:90:4e:a9:a7: ec:6b:0d:c4:3d:af:16:00:f7:62:7b:33:08:04:23:e3:50:e1: c5:11:ec:bc:4f:57:7d:dd:27:32:50:05:90:ea:5f:68:26:7d: 93:0c:91:98:34:74:75:f7:3b:cc:6c:1e:1e:e7:c6:ea:63:80: 3e:ed:71:8e:52:66:4e:51:36:b3:00:1f:a9:50:dd:74:2c:c8: 24:87:ac:fd:1e:42:24:1f:14:1f:de:1d:45:4e:1a:ca:78:c8: bf:8f:d2:02:c7:61:ec:8f:41:57:4c:84:16:35:93:9a:70:37: f1:e8:f3:21:c4:19:aa:dd:98:bf:0a:96:75:86:1e:58:4f:e0: 7c:0a:fd:1a:c5:ec:d3:68:cb:0c:9c:41:ab:5d:bf:07:ab:2e: f3:bc:90:8d:fd:f1:37:c2:53:c7:86:b9:10:34:a0:ad:e1:2d: 5d:f1:50:7f:47:76:4a:29:0e:0a:a5:4c:c4:f3:7f:62:22:dd: c1:99:13:36:2e:dc:89:6e:aa:98:a0:76:1d:10:b9:fb:99:7e: 28:e8:e7:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EjcJVBK+U59/mAEHZ8oWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGI3ODg1MWRiM2NiYzYyZTFjZmVlMmNmOGNkODE1MmEzMWQ1MjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4C/HnOJaNo984Yk0Nq86h0xjanH Kvp3OGoAj0augMxjdfxaj2fgkw0gDTPn9c6slKEpfvEUwQkvfIce6YllZlpN6E5Z Ev+g1a6zcD/UtXWPuodxYNeMWWyXAjvFQfBEPrQx8ODisf6FhsBZ5dfa65vUAVH1 BAHMjGTvZPWFmWluX2C/qPEwAmVLtRg+yclmtxcWF4yF6VlZ7vfkkox4nAClz0qv TH5wNjb8H7K2QJfwKKEw5qa+pGJzFiWi1KxJbQiWT7CfA7k38pNKu/1EYJu6XdtB ZD3K31rsGG27rZQT5Hp2QU/Ym9yH5QEBwlan3qxHCoVOsGAcIk+6yg//eQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFi3iFHbPLxi4c/uLPjNgVKjHVJgMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvV0xlSVVkczh2R0xoei00cy1NMkJVcU1kVW1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDwYwQAwQD wYy4MA0GCSqGSIb3DQEBCwUAA4IBAQBUhKJUo3T16p4ovtPugyDdrFocMHFSDNsy 00q4dSetBOeiknpZ5OaH1o1Yvwe/KgK9u5BOqafsaw3EPa8WAPdiezMIBCPjUOHF Eey8T1d93ScyUAWQ6l9oJn2TDJGYNHR19zvMbB4e58bqY4A+7XGOUmZOUTazAB+p UN10LMgkh6z9HkIkHxQf3h1FThrKeMi/j9ICx2Hsj0FXTIQWNZOacDfx6PMhxBmq 3Zi/CpZ1hh5YT+B8Cv0axezTaMsMnEGrXb8Hqy7zvJCN/fE3wlPHhrkQNKCt4S1d 8VB/R3ZKKQ4KpUzE839iIt3BmRM2LtyJbqqYoHYdELn7mX4o6Ocw -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:28 2026 by rpki-client