This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/wsCCmspEM6WspzHVHs3VS2kVt5s.roa File: wsCCmspEM6WspzHVHs3VS2kVt5s.roa (raw, json) Hash identifier: hed0UXeEzgYWiVtnJDozjUnK8u7srJbOFxteQGQPqbY= Subject key identifier: C2:C0:82:9A:CA:44:33:A5:AC:A7:31:D5:1E:CD:D5:4B:69:15:B7:9B Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Certificate serial: 019B7D5C0504C0E47D51EE86DA24503E6D13 Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/wsCCmspEM6WspzHVHs3VS2kVt5s.roa Signing time: Fri 02 Jan 2026 06:19:01 +0000 ROA not before: Fri 02 Jan 2026 06:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48159 IP address blocks: 185.66.228.0/24 maxlen: 24 185.66.229.0/24 maxlen: 24 185.66.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:05:04:c0:e4:7d:51:ee:86:da:24:50:3e:6d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2c0829aca4433a5aca731d51ecdd54b6915b79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:53:b4:67:14:0f:6f:38:ab:83:52:3b:79: e2:8e:23:11:98:f6:6f:61:25:09:9c:64:df:75:2f: e9:20:1c:d1:32:74:e9:d6:25:5a:6c:19:de:73:74: 8f:f1:c6:8d:81:4b:ec:1f:38:28:80:bc:08:05:33: 87:f7:2b:7b:f9:3f:fa:94:27:00:6f:a0:3b:c9:8d: d8:66:89:03:64:b0:fe:81:45:af:f6:70:c7:9e:1b: b3:be:70:8e:ff:36:32:c4:ec:ad:32:58:67:c1:59: eb:eb:41:53:ac:a0:5c:8c:86:49:4b:8d:69:20:90: 75:71:07:95:70:96:1b:f7:17:f0:76:15:75:67:a7: db:f5:c0:96:af:c3:ec:74:dd:d2:d5:69:f4:03:1b: e4:3a:7b:67:24:7f:55:c4:30:36:25:c4:02:38:54: 3c:b9:77:c2:ba:6e:a5:56:5b:ae:37:e0:d9:9c:96: a8:5b:d3:13:60:c7:9c:40:16:9b:6c:c6:dc:3d:40: a6:cf:c0:69:a3:ae:b1:b6:74:07:64:6d:11:71:da: 4e:ff:a5:43:ad:92:d9:98:da:bd:23:c0:a5:8d:d0: 82:73:00:85:e4:38:2d:e9:e9:08:d4:3c:21:79:95: ec:6f:77:56:3b:a7:49:4a:3e:5d:9f:3d:5e:75:6f: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C0:82:9A:CA:44:33:A5:AC:A7:31:D5:1E:CD:D5:4B:69:15:B7:9B X509v3 Authority Key Identifier: keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/wsCCmspEM6WspzHVHs3VS2kVt5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.228.0/23 185.66.231.0/24 Signature Algorithm: sha256WithRSAEncryption 43:e5:d0:1b:d0:4a:60:c9:5e:ab:0b:2c:b2:b7:bc:c5:3c:18: 78:c3:5d:05:86:06:8f:7e:0b:e3:12:ae:2a:7f:6a:6d:da:f4: 44:0e:b7:f3:b9:34:ed:20:36:a4:31:51:fd:07:b1:d7:6e:ce: 92:77:a6:59:24:87:38:13:50:a9:27:12:e5:21:2c:c9:72:08: d0:69:97:7f:8b:1d:46:f0:fd:39:32:03:27:73:65:76:9e:98: 39:3f:75:9c:50:25:ca:fb:79:a9:08:da:69:d5:ad:8c:44:37: 61:e6:5e:e9:ea:30:50:2f:e7:39:df:0d:a6:c2:42:a4:4b:b2: ab:7e:d7:ab:b9:9c:1e:c5:42:07:7d:e1:4b:19:69:7a:02:b3: 72:55:4f:e9:4a:68:00:ad:68:b3:51:fd:9f:5a:01:de:22:22: 34:38:11:21:26:e7:38:b2:f8:71:ce:60:75:22:24:c4:37:de: 8b:12:61:1d:98:69:40:2e:93:85:b9:29:c9:c5:c4:5a:08:d6: 11:f9:1f:52:5a:87:48:a1:bb:80:6c:22:61:63:a0:c2:16:db: e6:06:1a:eb:25:ff:63:d7:1a:ba:49:68:4f:e3:43:22:92:6f: ee:48:18:64:07:e1:58:45:91:e0:d9:ef:15:5c:ea:70:14:12: f0:b7:db:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XAUEwOR9Ue6G2iRQPm0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl ZDFhZDUwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmMwODI5YWNhNDQzM2E1YWNhNzMxZDUxZWNkZDU0YjY5MTViNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtttTtGcUD284q4NSO3nijiMRmPZv YSUJnGTfdS/pIBzRMnTp1iVabBnec3SP8caNgUvsHzgogLwIBTOH9yt7+T/6lCcA b6A7yY3YZokDZLD+gUWv9nDHnhuzvnCO/zYyxOytMlhnwVnr60FTrKBcjIZJS41p IJB1cQeVcJYb9xfwdhV1Z6fb9cCWr8PsdN3S1Wn0AxvkOntnJH9VxDA2JcQCOFQ8 uXfCum6lVluuN+DZnJaoW9MTYMecQBabbMbcPUCmz8Bpo66xtnQHZG0RcdpO/6VD rZLZmNq9I8CljdCCcwCF5Dgt6ekI1DwheZXsb3dWO6dJSj5dnz1edW9S5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMLAgprKRDOlrKcx1R7N1UtpFbebMB8GA1UdIwQY MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt NzE1ZjA5ODE3MzQxLzEvd3NDQ21zcEVNNldzcHpIVkhzM1ZTMmtWdDVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuULkAwQA uULnMA0GCSqGSIb3DQEBCwUAA4IBAQBD5dAb0EpgyV6rCyyyt7zFPBh4w10FhgaP fgvjEq4qf2pt2vREDrfzuTTtIDakMVH9B7HXbs6Sd6ZZJIc4E1CpJxLlISzJcgjQ aZd/ix1G8P05MgMnc2V2npg5P3WcUCXK+3mpCNpp1a2MRDdh5l7p6jBQL+c53w2m wkKkS7KrfteruZwexUIHfeFLGWl6ArNyVU/pSmgArWizUf2fWgHeIiI0OBEhJuc4 svhxzmB1IiTEN96LEmEdmGlALpOFuSnJxcRaCNYR+R9SWodIobuAbCJhY6DCFtvm BhrrJf9j1xq6SWhP40Mikm/uSBhkB+FYRZHg2e8VXOpwFBLwt9u4 -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:07 2026 by rpki-client