This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/Wcbt97rneJ6uhU8_PT27jnNgfLI.roa File: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (raw, json) Hash identifier: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA= Subject key identifier: 59:C6:ED:F7:BA:E7:78:9E:AE:85:4F:3F:3D:3D:BB:8E:73:60:7C:B2 Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71 Certificate serial: 019B76EB8E5A71017134B3435679054F615E Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/Wcbt97rneJ6uhU8_PT27jnNgfLI.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138971 IP address blocks: 185.228.92.0/22 maxlen: 22 185.228.92.0/24 maxlen: 24 185.228.93.0/24 maxlen: 24 185.228.94.0/24 maxlen: 24 185.228.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8e:5a:71:01:71:34:b3:43:56:79:05:4f:61:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59c6edf7bae7789eae854f3f3d3dbb8e73607cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:bc:05:b9:cf:75:29:a9:e9:36:4c:84:32: ed:de:0f:a5:e5:c0:34:f5:33:94:4f:f8:31:03:32: 05:50:90:26:e8:84:17:ca:bd:ff:6e:f1:a3:5f:62: 73:ac:fa:c0:85:b5:10:5f:6f:9a:f4:3a:ff:86:0a: 71:18:90:dd:15:6f:90:59:72:76:db:86:70:b1:a3: 3b:6c:1f:45:b9:7f:e9:ca:74:df:0d:af:be:4a:33: 7a:70:94:9d:80:c5:76:f7:6c:7f:86:9f:be:bd:9d: 5d:ea:d6:b3:17:76:94:44:61:fa:67:d2:1a:1a:78: e1:71:df:8f:84:3b:92:58:0f:1c:ff:53:4a:e9:ff: 46:82:1c:29:f8:95:88:c2:ac:41:52:42:36:66:28: c3:b1:cb:aa:ae:8a:8b:5d:bc:0a:ce:6b:bc:96:56: 4a:5a:6a:79:44:fa:35:e4:68:23:83:8e:57:91:17: 35:b1:5e:b3:03:bb:60:30:c7:83:e3:f2:3c:ce:19: c7:ec:65:4e:d9:e7:53:08:6d:77:73:82:48:1e:b5: 54:66:0f:84:e4:4a:20:a2:00:66:0a:c2:37:45:79: d9:3f:d0:da:65:5f:2a:59:7b:d3:6d:6d:3e:0c:44: 2f:ea:c9:c0:83:75:ca:82:e3:5f:0d:79:26:de:cc: 28:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C6:ED:F7:BA:E7:78:9E:AE:85:4F:3F:3D:3D:BB:8E:73:60:7C:B2 X509v3 Authority Key Identifier: keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/Wcbt97rneJ6uhU8_PT27jnNgfLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.92.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:a6:f6:69:33:45:7f:e0:61:48:db:d2:c1:08:e4:18:5a:dd: 14:62:a7:0a:16:44:70:9f:94:70:bd:09:06:2d:8d:25:29:6f: f6:b6:df:dd:e3:2d:c7:d0:be:8e:8d:8b:62:b0:99:36:fc:31: e0:91:86:40:29:49:f5:b0:a8:fd:2d:6b:51:04:2b:a9:8b:15: 36:c7:da:9f:79:3b:ab:43:19:f7:ad:95:81:b4:d0:47:d8:3b: 56:d0:f5:6d:41:68:88:28:94:ae:81:e6:5a:aa:18:78:82:56: 9d:e5:0d:43:da:f7:7f:7e:98:1d:4b:e5:e9:26:e8:32:22:7c: e8:00:0c:fa:00:11:df:9c:5b:42:83:90:4c:46:13:2a:70:b7: 40:b7:33:23:34:4c:8e:db:83:55:6a:71:f2:f6:f4:36:08:f7: 63:74:dc:fc:05:d6:98:eb:ec:f5:46:33:28:29:bf:4e:19:73: eb:74:28:c4:36:da:68:b5:16:ca:a5:ed:74:82:ca:db:a7:f6: d7:c6:81:74:fe:75:0c:84:c8:f6:72:47:bd:2f:f5:c7:72:ab: 45:37:3c:60:c1:2d:4a:20:a4:93:08:01:86:27:0e:b3:c2:b3: 40:fc:5c:6a:b5:ec:95:66:54:e8:1b:e9:56:74:0b:15:cc:f2: f8:6e:d0:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2645acQFxNLNDVnkFT2FeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDYwOGExNDExOGIxYThkY2RkZWJiYjQwZjk2ZWNkNDhm ODVjNzEwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWM2ZWRmN2JhZTc3ODllYWU4NTRmM2YzZDNkYmI4ZTczNjA3Y2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEK8BbnPdSmp6TZMhDLt3g+l5cA0 9TOUT/gxAzIFUJAm6IQXyr3/bvGjX2JzrPrAhbUQX2+a9Dr/hgpxGJDdFW+QWXJ2 24ZwsaM7bB9FuX/pynTfDa++SjN6cJSdgMV292x/hp++vZ1d6tazF3aURGH6Z9Ia Gnjhcd+PhDuSWA8c/1NK6f9Gghwp+JWIwqxBUkI2ZijDscuqroqLXbwKzmu8llZK Wmp5RPo15Ggjg45XkRc1sV6zA7tgMMeD4/I8zhnH7GVO2edTCG13c4JIHrVUZg+E 5EogogBmCsI3RXnZP9DaZV8qWXvTbW0+DEQv6snAg3XKguNfDXkm3swo2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFnG7fe653ieroVPPz09u45zYHyyMB8GA1UdIwQY MBaAFIDWCKFBGLGo3N3ru0D5bs1I+FxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEt OTkyOGRkM2YyZjgyLzEvV2NidDk3cm5lSjZ1aFU4X1BUMjdqbk5nZkxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEtOTkyOGRkM2YyZjgy LzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueRcMA0G CSqGSIb3DQEBCwUAA4IBAQBqpvZpM0V/4GFI29LBCOQYWt0UYqcKFkRwn5RwvQkG LY0lKW/2tt/d4y3H0L6OjYtisJk2/DHgkYZAKUn1sKj9LWtRBCupixU2x9qfeTur Qxn3rZWBtNBH2DtW0PVtQWiIKJSugeZaqhh4glad5Q1D2vd/fpgdS+XpJugyInzo AAz6ABHfnFtCg5BMRhMqcLdAtzMjNEyO24NVanHy9vQ2CPdjdNz8BdaY6+z1RjMo Kb9OGXPrdCjENtpotRbKpe10gsrbp/bXxoF0/nUMhMj2cke9L/XHcqtFNzxgwS1K IKSTCAGGJw6zwrNA/FxqteyVZlToG+lWdAsVzPL4btBP -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:41 2026 by rpki-client