This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/wemV0d9_X9NASzk5HBev3Xd67ss.roa File: wemV0d9_X9NASzk5HBev3Xd67ss.roa (raw, json) Hash identifier: xfH5MjrkqijIT96yucgZV5bkcjqDyV5OtrwCabRA68Q= Subject key identifier: C1:E9:95:D1:DF:7F:5F:D3:40:4B:39:39:1C:17:AF:DD:77:7A:EE:CB Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c Certificate serial: 019B7B36277976C04510F148E5B749BCD21E Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/wemV0d9_X9NASzk5HBev3Xd67ss.roa Signing time: Thu 01 Jan 2026 20:18:25 +0000 ROA not before: Thu 01 Jan 2026 20:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207203 IP address blocks: 185.190.48.0/24 maxlen: 24 185.190.49.0/24 maxlen: 24 185.190.50.0/24 maxlen: 24 2a0a:440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:27:79:76:c0:45:10:f1:48:e5:b7:49:bc:d2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e995d1df7f5fd3404b39391c17afdd777aeecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:fe:a3:c6:f9:bf:12:90:d3:38:49:96:9b: 4d:2e:61:2d:4c:10:e7:8d:52:f0:40:64:80:0f:cf: 4f:a9:57:f2:86:8d:f9:53:85:13:e2:81:52:5e:53: f4:ad:bd:ca:4a:3f:7f:df:88:b4:89:7b:8a:d8:fc: 7d:fe:ac:75:91:a0:fa:ee:d0:45:b8:39:c6:e8:8d: 59:c5:4c:c6:20:b8:25:ad:2e:97:2a:a0:3f:1f:8b: c2:24:ef:b7:d3:a3:51:6d:ce:41:48:d0:79:bf:8f: 51:cf:7b:bc:59:de:54:d5:68:b0:00:67:ab:0a:2f: e6:7e:d5:22:a2:63:fe:34:68:cb:21:88:5d:cb:1f: b8:4f:46:94:12:e8:3e:8a:33:eb:4f:d0:b4:47:e1: 61:16:1a:5d:73:a4:ef:20:29:7c:64:53:53:59:27: 89:a0:5b:cf:01:18:4d:81:77:2c:23:5a:a1:d2:2f: 41:73:6a:5e:78:f4:cc:a4:ea:f3:5b:91:c8:c5:af: 47:df:5c:e7:15:07:f1:51:e9:58:38:83:84:61:0b: 06:28:60:c1:45:ee:a9:f9:73:fc:34:b9:e8:fa:33: 09:f2:6a:ea:a1:9d:3f:f1:37:d8:ea:5c:7b:80:ef: e2:ec:77:9c:c6:2f:87:a2:b8:de:77:d6:eb:92:5a: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E9:95:D1:DF:7F:5F:D3:40:4B:39:39:1C:17:AF:DD:77:7A:EE:CB X509v3 Authority Key Identifier: keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/wemV0d9_X9NASzk5HBev3Xd67ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.48.0-185.190.50.255 IPv6: 2a0a:440::/29 Signature Algorithm: sha256WithRSAEncryption 50:82:25:b6:9f:6c:5d:b3:9d:c7:62:4b:31:cd:09:21:e4:4f: 01:21:c4:b7:3c:bf:b3:c3:5e:47:84:12:a6:de:82:ef:e5:27: 3e:ba:dd:de:f3:c9:2a:ce:90:8b:f0:6b:f9:d4:5d:11:c8:4a: 61:ba:52:78:31:00:52:75:77:54:56:1b:9a:06:df:9f:b1:48: 7e:c9:0d:4d:18:59:79:81:59:19:3e:22:c7:82:0b:0e:49:87: f8:0b:92:d5:01:58:5a:57:47:85:56:e1:e8:a7:4a:ec:f3:a0: c7:05:7d:b1:8e:93:ee:c5:df:a6:68:70:16:c6:86:b0:a1:bf: 20:23:2f:c9:49:b5:10:90:a5:a2:51:c0:b9:93:a1:d4:aa:cc: d1:ca:32:78:ae:75:e1:85:a3:3c:86:7b:84:46:a5:d9:ef:2f: b6:28:52:8a:d9:4c:53:6c:35:86:22:c7:16:bf:3e:54:01:cd: 4f:5a:b6:50:a2:f9:8b:94:d2:3c:32:4b:04:8f:ea:b7:52:73: e1:e7:9a:36:df:f0:a0:8a:96:eb:ea:b5:7c:85:c5:32:c0:39: 4d:bd:9d:b0:09:70:fb:8f:64:b1:5a:0a:10:91:c3:e5:7d:94: 38:0d:a7:ac:ba:f7:ee:2b:69:43:a1:eb:a5:d3:8c:2c:3a:69: 08:af:60:91 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7Nid5dsBFEPFI5bdJvNIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGM5N2ViOWJhZjU0MjhmNTBmNDVkMzMwMzU3Njc4Yjcz ZTA2MWMwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU5OTVkMWRmN2Y1ZmQzNDA0YjM5MzkxYzE3YWZkZDc3N2FlZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR7+o8b5vxKQ0zhJlptNLmEtTBDn jVLwQGSAD89PqVfyho35U4UT4oFSXlP0rb3KSj9/34i0iXuK2Px9/qx1kaD67tBF uDnG6I1ZxUzGILglrS6XKqA/H4vCJO+306NRbc5BSNB5v49Rz3u8Wd5U1WiwAGer Ci/mftUiomP+NGjLIYhdyx+4T0aUEug+ijPrT9C0R+FhFhpdc6TvICl8ZFNTWSeJ oFvPARhNgXcsI1qh0i9Bc2peePTMpOrzW5HIxa9H31znFQfxUelYOIOEYQsGKGDB Re6p+XP8NLno+jMJ8mrqoZ0/8TfY6lx7gO/i7Hecxi+Horjed9brklqRPQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFMHpldHff1/TQEs5ORwXr913eu7LMB8GA1UdIwQY MBaAFMUMl+ubr1Qo9Q9F0zA1dni3PgYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUt YmVlZWJlZGZmYzk1LzEvd2VtVjBkOV9YOU5BU3prNUhCZXYzWGQ2N3NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUtYmVlZWJlZGZmYzk1 LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAS5vjAD BAC5vjIwDQQCAAIwBwMFAyoKBEAwDQYJKoZIhvcNAQELBQADggEBAFCCJbafbF2z ncdiSzHNCSHkTwEhxLc8v7PDXkeEEqbegu/lJz663d7zySrOkIvwa/nUXRHISmG6 UngxAFJ1d1RWG5oG35+xSH7JDU0YWXmBWRk+IseCCw5Jh/gLktUBWFpXR4VW4ein SuzzoMcFfbGOk+7F36ZocBbGhrChvyAjL8lJtRCQpaJRwLmTodSqzNHKMniudeGF ozyGe4RGpdnvL7YoUorZTFNsNYYixxa/PlQBzU9atlCi+YuU0jwySwSP6rdSc+Hn mjbf8KCKluvqtXyFxTLAOU29nbAJcPuPZLFaChCRw+V9lDgNp6y69+4raUOh66XT jCw6aQivYJE= -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:58 2026 by rpki-client