This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/WbuHsYRVEwtxjohFVduo42yY0BA.roa File: WbuHsYRVEwtxjohFVduo42yY0BA.roa (raw, json) Hash identifier: XRpJ203bgOZcZmoeOkpQMh/toy8YP0Drzt5W89I939s= Subject key identifier: 59:BB:87:B1:84:55:13:0B:71:8E:88:45:55:DB:A8:E3:6C:98:D0:10 Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA5193F13CB3122FE63D11CA87310D5 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/WbuHsYRVEwtxjohFVduo42yY0BA.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200679 IP address blocks: 92.255.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:19:3f:13:cb:31:22:fe:63:d1:1c:a8:73:10:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59bb87b18455130b718e884555dba8e36c98d010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:a3:5b:41:2e:bd:27:d7:a0:22:86:4f:77: 8f:98:b3:54:ee:5a:25:f2:cd:b6:7f:16:69:0f:2f: b4:df:db:9a:58:bc:53:9a:f0:69:98:15:3b:bb:f1: 42:ed:bb:f2:cb:60:27:48:31:1c:b4:43:53:76:b0: 8d:9d:af:42:1a:6b:9a:80:c9:a0:c1:e2:03:01:eb: 5b:4c:e0:61:a6:ea:1e:1e:06:49:6d:33:8b:e4:40: 05:70:0b:92:5b:6a:8a:ae:2c:b8:09:7b:9f:f0:7f: 3c:3b:c4:dd:44:dd:2b:53:53:84:b3:4c:9d:7e:97: 80:f0:82:b0:8f:fb:3e:41:8e:b9:d7:b8:7c:6d:47: cd:04:0e:01:dc:10:7a:8e:85:74:16:d1:32:b9:2a: 5d:52:67:61:c0:1b:58:9c:9d:e7:bf:d9:1e:3b:bc: 1c:20:88:48:de:77:81:3e:9c:4b:3e:d0:b1:9e:a7: 2e:bf:b2:29:b9:22:8d:27:da:a5:f4:dd:a5:40:90: 65:8c:cd:1c:d4:a3:68:21:94:eb:6a:6b:15:91:66: a2:6b:f8:4f:66:f5:e3:60:d7:b5:62:e5:2d:af:67: 08:f8:97:32:3c:69:ff:88:83:18:a1:a7:e8:46:67: 45:d6:d9:b2:1d:3e:44:4e:39:3b:23:c2:cc:ee:d3: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BB:87:B1:84:55:13:0B:71:8E:88:45:55:DB:A8:E3:6C:98:D0:10 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/WbuHsYRVEwtxjohFVduo42yY0BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.255.53.0/24 Signature Algorithm: sha256WithRSAEncryption a7:40:ad:e4:17:19:8b:36:2c:22:78:53:df:f5:c5:34:2d:09: 61:af:5e:12:c7:79:a7:0f:da:ee:07:cc:9b:cc:31:dd:91:85: 75:76:20:6c:02:e5:58:0d:fb:76:4d:87:ac:73:4a:1e:59:61: 9f:07:e0:fd:0e:a5:ff:27:40:4d:bd:fb:e3:74:ac:cc:80:0e: 38:d1:48:6d:67:a1:cb:3a:01:8b:0c:6c:9f:e2:6a:74:98:ef: 9d:82:69:91:11:32:00:af:0f:d3:bc:8b:a7:e6:4b:ad:24:d7: dc:44:a9:d9:7e:23:09:7b:2c:d8:8e:6a:74:67:43:92:ca:a3: 0d:85:17:38:2d:09:0c:7a:c0:47:67:02:b7:9f:ac:a1:cb:e8: 5e:24:42:13:5d:98:82:5a:e8:01:96:da:49:67:e7:6f:db:64: ce:54:4a:7b:da:28:31:3c:7d:57:f5:b4:47:bf:58:c9:31:fe: a5:2a:03:ab:06:b8:67:51:1d:e1:d9:65:d7:5a:ad:46:74:28: 33:1b:0c:56:34:17:2f:3c:86:b3:b6:0b:7f:4c:ef:03:67:79: 5f:c9:fc:2c:23:94:42:42:b3:45:08:45:e1:46:fe:7b:44:f6: 86:bc:f8:a4:9e:ee:9b:ad:72:06:f4:e4:ee:ed:ca:4b:d0:6b: 8e:67:ea:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRk/E8sxIv5j0RyocxDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWJiODdiMTg0NTUxMzBiNzE4ZTg4NDU1NWRiYThlMzZjOThkMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhCjW0EuvSfXoCKGT3ePmLNU7lol 8s22fxZpDy+039uaWLxTmvBpmBU7u/FC7bvyy2AnSDEctENTdrCNna9CGmuagMmg weIDAetbTOBhpuoeHgZJbTOL5EAFcAuSW2qKriy4CXuf8H88O8TdRN0rU1OEs0yd fpeA8IKwj/s+QY6517h8bUfNBA4B3BB6joV0FtEyuSpdUmdhwBtYnJ3nv9keO7wc IIhI3neBPpxLPtCxnqcuv7IpuSKNJ9ql9N2lQJBljM0c1KNoIZTramsVkWaia/hP ZvXjYNe1YuUtr2cI+JcyPGn/iIMYoafoRmdF1tmyHT5ETjk7I8LM7tN2kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFm7h7GEVRMLcY6IRVXbqONsmNAQMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvV2J1SHNZUlZFd3R4am9oRlZkdW80MnlZMEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP81MA0G CSqGSIb3DQEBCwUAA4IBAQCnQK3kFxmLNiwieFPf9cU0LQlhr14Sx3mnD9ruB8yb zDHdkYV1diBsAuVYDft2TYesc0oeWWGfB+D9DqX/J0BNvfvjdKzMgA440UhtZ6HL OgGLDGyf4mp0mO+dgmmRETIArw/TvIun5kutJNfcRKnZfiMJeyzYjmp0Z0OSyqMN hRc4LQkMesBHZwK3n6yhy+heJEITXZiCWugBltpJZ+dv22TOVEp72igxPH1X9bRH v1jJMf6lKgOrBrhnUR3h2WXXWq1GdCgzGwxWNBcvPIaztgt/TO8DZ3lfyfwsI5RC QrNFCEXhRv57RPaGvPiknu6brXIG9OTu7cpL0GuOZ+r/ -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:02 2026 by rpki-client