This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/WcEXb1FwWuq7CmZIR_j833VQVLg.roa File: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (raw, json) Hash identifier: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU= Subject key identifier: 59:C1:17:6F:51:70:5A:EA:BB:0A:66:48:47:F8:FC:DF:75:50:54:B8 Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Certificate serial: 019B76EBA1A95C4D3DEFDF66AF37071FED16 Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/WcEXb1FwWuq7CmZIR_j833VQVLg.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29028 IP address blocks: 195.20.143.0/24 maxlen: 24 195.22.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a1:a9:5c:4d:3d:ef:df:66:af:37:07:1f:ed:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59c1176f51705aeabb0a664847f8fcdf755054b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:24:a5:ac:26:06:62:48:0f:c1:5a:bc:26: 60:74:bf:63:4e:eb:79:da:7c:41:46:0d:5f:fd:26: 41:3b:4e:c7:ed:79:77:2a:6a:cf:e2:db:b7:a6:67: 41:d5:78:8a:52:4d:45:1a:fd:b5:d8:43:3d:6b:7e: af:6d:87:45:f7:2e:92:92:46:b3:71:3e:18:27:c5: f0:0d:41:63:fb:fe:71:84:53:c4:db:aa:e4:a9:4f: d8:b1:fa:49:9c:8d:15:a8:c8:82:c6:53:69:8a:29: 3f:8d:fb:15:03:57:e3:e5:74:c4:db:bc:1d:c0:33: cc:5c:45:41:23:aa:6f:07:35:e7:b9:fd:7e:fa:98: 06:a6:13:c3:20:ba:9d:b1:4f:c0:64:75:98:a7:25: e7:8f:1c:65:a3:ee:67:51:ab:9e:0b:50:4a:bf:50: ca:a0:bf:cd:8f:64:e3:fa:8e:65:56:74:60:5a:b2: a2:a4:81:ef:ee:8a:35:57:eb:d0:f3:bb:3a:22:e5: b8:7b:b1:d3:1c:f1:55:7f:5e:99:d3:9d:f2:9d:ac: 62:80:bc:52:20:36:b2:84:78:76:41:25:e0:c1:5f: 94:39:79:66:3c:14:6a:56:84:1e:89:5f:d5:6c:4f: 91:dd:1b:dc:38:cc:10:e1:32:fd:d4:f2:c1:fd:7f: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C1:17:6F:51:70:5A:EA:BB:0A:66:48:47:F8:FC:DF:75:50:54:B8 X509v3 Authority Key Identifier: keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/WcEXb1FwWuq7CmZIR_j833VQVLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.20.143.0/24 195.22.122.0/24 Signature Algorithm: sha256WithRSAEncryption bf:ad:b7:f6:2d:96:4e:59:8e:b5:a7:93:ac:64:c3:1b:34:3f: 65:66:21:e6:b9:af:b9:5c:ae:18:c1:28:44:71:ff:c4:73:e5: 24:b6:48:6d:d6:12:63:e5:67:ea:3a:65:db:96:15:04:1c:68: 5a:f3:f8:d5:87:26:39:d7:41:ef:ae:02:28:cc:4e:0b:dc:c3: cb:be:01:01:82:da:0f:a6:e4:0a:e4:e5:1a:bb:f6:ca:9c:1c: 1c:63:eb:52:31:a7:2a:91:2d:25:f7:d8:31:91:95:c2:59:da: 1e:31:49:6c:b7:dc:6e:cc:db:3e:0f:4c:31:0b:5a:4a:ea:8e: 91:65:23:a4:ce:08:87:dc:aa:6f:71:7d:c8:48:b1:b7:ad:a7: e6:28:db:4b:f9:20:ff:ab:2f:f0:c7:b3:bb:a5:05:3b:bd:f8: 22:52:5e:42:3c:9e:1d:f7:31:be:24:53:56:d0:99:2e:9d:6c: 1d:1e:b1:ab:c5:a8:3e:7f:6e:0c:50:b3:44:ed:b5:85:05:41: a2:e0:27:7f:79:9b:f5:61:83:1d:04:54:82:6d:fa:2e:94:5a: d1:52:8f:49:12:65:f3:04:b2:27:9e:c4:11:66:80:99:f4:7b: d7:f2:02:c7:4a:a6:37:f1:94:60:48:11:c6:c2:0b:e2:ea:ca: dd:7b:9b:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt266GpXE09799mrzcHH+0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh ZGVhZWMwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWMxMTc2ZjUxNzA1YWVhYmIwYTY2NDg0N2Y4ZmNkZjc1NTA1NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMUkpawmBmJID8FavCZgdL9jTut5 2nxBRg1f/SZBO07H7Xl3KmrP4tu3pmdB1XiKUk1FGv212EM9a36vbYdF9y6Skkaz cT4YJ8XwDUFj+/5xhFPE26rkqU/YsfpJnI0VqMiCxlNpiik/jfsVA1fj5XTE27wd wDPMXEVBI6pvBzXnuf1++pgGphPDILqdsU/AZHWYpyXnjxxlo+5nUaueC1BKv1DK oL/Nj2Tj+o5lVnRgWrKipIHv7oo1V+vQ87s6IuW4e7HTHPFVf16Z053ynaxigLxS IDayhHh2QSXgwV+UOXlmPBRqVoQeiV/VbE+R3RvcOMwQ4TL91PLB/X8nTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFnBF29RcFrquwpmSEf4/N91UFS4MB8GA1UdIwQY MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt ODdhYTI4NWY4MDdjLzEvV2NFWGIxRndXdXE3Q21aSVJfajgzM1ZRVkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwxSPAwQA wxZ6MA0GCSqGSIb3DQEBCwUAA4IBAQC/rbf2LZZOWY61p5OsZMMbND9lZiHmua+5 XK4YwShEcf/Ec+Uktkht1hJj5WfqOmXblhUEHGha8/jVhyY510HvrgIozE4L3MPL vgEBgtoPpuQK5OUau/bKnBwcY+tSMacqkS0l99gxkZXCWdoeMUlst9xuzNs+D0wx C1pK6o6RZSOkzgiH3KpvcX3ISLG3rafmKNtL+SD/qy/wx7O7pQU7vfgiUl5CPJ4d 9zG+JFNW0JkunWwdHrGrxag+f24MULNE7bWFBUGi4Cd/eZv1YYMdBFSCbfoulFrR Uo9JEmXzBLInnsQRZoCZ9HvX8gLHSqY38ZRgSBHGwgvi6srde5tH -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:45 2026 by rpki-client