This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/WKCS9E7LsecMwc9xirBl7Kwg-64.roa File: WKCS9E7LsecMwc9xirBl7Kwg-64.roa (raw, json) Hash identifier: G8Y5ZOsiY82ntJ1Y790c2dXR3AiID90GNfs01goPY0k= Subject key identifier: 58:A0:92:F4:4E:CB:B1:E7:0C:C1:CF:71:8A:B0:65:EC:AC:20:FB:AE Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC950EAB895B71D1650B115D33754ED Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/WKCS9E7LsecMwc9xirBl7Kwg-64.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203324 IP address blocks: 5.59.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:50:ea:b8:95:b7:1d:16:50:b1:15:d3:37:54:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a092f44ecbb1e70cc1cf718ab065ecac20fbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:3a:b8:c2:bb:38:60:a7:d6:cd:68:10:d2: 18:95:d9:49:aa:5f:b4:03:32:b4:b2:da:fd:8d:bd: 44:a3:d9:74:ae:25:ad:3f:f9:4a:e6:01:92:a0:e2: f8:38:e0:c2:89:8b:cf:34:1b:2c:d8:ef:0f:df:20: d0:9d:51:45:fb:8b:40:0f:22:15:ff:0b:1d:d8:b1: 2e:0f:f9:1c:bc:7c:f6:29:da:d5:11:0a:50:36:17: 27:39:ce:e7:07:86:37:0c:24:c1:11:6f:a8:66:91: 6b:62:d6:81:37:bf:86:0c:74:e1:e7:dc:c6:dc:88: 1f:00:a6:33:57:e0:57:90:4f:b5:af:fc:51:0c:aa: 08:92:75:49:a0:e1:5c:6b:5d:66:a2:84:47:75:66: f3:13:91:a7:0d:5a:2e:dc:6d:83:92:50:a8:16:60: de:8d:81:a9:4e:91:b8:ae:e4:57:52:e2:f4:85:61: 3a:aa:c7:15:09:f2:be:b7:46:c3:d4:23:d9:29:74: fa:10:c6:b8:8a:f6:3c:9d:ed:cf:4a:a2:58:ba:50: 05:db:7b:4e:c0:86:72:a2:36:cf:8e:34:49:d7:65: c3:36:6e:26:43:6b:44:88:37:c6:ff:1c:91:ba:d2: 57:e0:f2:a7:ff:ca:ee:d7:af:4c:f0:db:44:f2:86: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A0:92:F4:4E:CB:B1:E7:0C:C1:CF:71:8A:B0:65:EC:AC:20:FB:AE X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/WKCS9E7LsecMwc9xirBl7Kwg-64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.118.0/23 Signature Algorithm: sha256WithRSAEncryption 09:84:25:b2:5e:f5:65:24:2c:79:40:bf:f3:3c:6c:48:04:9f: db:1a:45:c2:cd:ef:b9:bd:fc:2a:46:0c:a2:8d:d6:59:20:5b: 6e:79:37:08:f6:db:f4:d1:43:59:76:de:2f:b8:a7:3b:63:a0: e8:5f:e8:77:f1:d5:fe:b3:c5:c6:9e:be:ec:66:82:01:93:b4: c4:98:5f:94:1a:ea:92:07:27:87:9f:74:48:d7:87:71:75:02: a4:06:40:b5:21:55:1a:0e:58:6b:07:c1:ea:6d:af:1b:1f:dd: af:8c:be:c1:9d:67:83:c4:46:ba:f5:6b:b9:33:68:60:49:b7: 8f:e9:7e:3a:5c:47:f8:22:d0:d8:a9:8e:bd:68:dc:97:bd:aa: 19:56:f7:2a:34:2f:4e:f3:0d:ae:85:47:cb:5b:42:1b:e0:de: e7:08:8d:1f:3d:b5:c3:6e:c0:41:ad:d4:c1:33:62:41:31:d6: 2c:71:14:d7:ec:c5:6c:9d:e3:84:1e:b3:c8:a8:30:23:d7:d2: 58:96:87:9b:2c:5c:9b:8a:04:55:2a:2d:32:a9:3c:3b:67:3a: ed:0a:71:45:73:dd:4c:6c:03:48:e2:69:bb:17:6e:42:d9:cb: 4f:26:89:23:5e:c3:cf:bb:11:00:53:f1:99:a2:4f:50:4b:c0: 5b:5b:91:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVDquJW3HRZQsRXTN1TtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGEwOTJmNDRlY2JiMWU3MGNjMWNmNzE4YWIwNjVlY2FjMjBmYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJs6uMK7OGCn1s1oENIYldlJql+0 AzK0str9jb1Eo9l0riWtP/lK5gGSoOL4OODCiYvPNBss2O8P3yDQnVFF+4tADyIV /wsd2LEuD/kcvHz2KdrVEQpQNhcnOc7nB4Y3DCTBEW+oZpFrYtaBN7+GDHTh59zG 3IgfAKYzV+BXkE+1r/xRDKoIknVJoOFca11mooRHdWbzE5GnDVou3G2DklCoFmDe jYGpTpG4ruRXUuL0hWE6qscVCfK+t0bD1CPZKXT6EMa4ivY8ne3PSqJYulAF23tO wIZyojbPjjRJ12XDNm4mQ2tEiDfG/xyRutJX4PKn/8ru169M8NtE8oZ9TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFigkvROy7HnDMHPcYqwZeysIPuuMB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvV0tDUzlFN0xzZWNNd2M5eGlyQmw3S3dnLTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBTt2MA0G CSqGSIb3DQEBCwUAA4IBAQAJhCWyXvVlJCx5QL/zPGxIBJ/bGkXCze+5vfwqRgyi jdZZIFtueTcI9tv00UNZdt4vuKc7Y6DoX+h38dX+s8XGnr7sZoIBk7TEmF+UGuqS ByeHn3RI14dxdQKkBkC1IVUaDlhrB8Hqba8bH92vjL7BnWeDxEa69Wu5M2hgSbeP 6X46XEf4ItDYqY69aNyXvaoZVvcqNC9O8w2uhUfLW0Ib4N7nCI0fPbXDbsBBrdTB M2JBMdYscRTX7MVsneOEHrPIqDAj19JYloebLFybigRVKi0yqTw7ZzrtCnFFc91M bANI4mm7F25C2ctPJokjXsPPuxEAU/GZok9QS8BbW5Gp -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:12 2026 by rpki-client