This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/WUGBWhMtlbuPeSgdJcR9TomYq_g.roa File: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (raw, json) Hash identifier: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y= Subject key identifier: 59:41:81:5A:13:2D:95:BB:8F:79:28:1D:25:C4:7D:4E:89:98:AB:F8 Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558 Certificate serial: 019B797F2319CAEE8FF0DEED832E6103B481 Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/WUGBWhMtlbuPeSgdJcR9TomYq_g.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43824 IP address blocks: 185.252.100.0/24 maxlen: 24 185.252.101.0/24 maxlen: 24 185.252.102.0/24 maxlen: 24 185.252.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:23:19:ca:ee:8f:f0:de:ed:83:2e:61:03:b4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558 Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5941815a132d95bb8f79281d25c47d4e8998abf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:eb:5b:8c:63:cc:4f:8f:94:0f:73:a1:2c: ca:19:d5:f0:75:ef:cd:6b:b0:25:cf:ac:3d:16:f4: da:4b:84:c3:16:77:7d:bb:7b:f1:e5:1c:ac:2d:dd: 9b:05:eb:f8:f6:95:b9:c8:ca:c7:e6:e5:b3:86:ad: f1:2c:26:26:3e:c6:5a:36:b1:84:b8:f5:e9:25:15: 5a:86:19:09:ee:bd:ae:d9:4c:18:39:73:e9:c0:5d: 9b:23:64:23:98:2b:cc:14:94:f8:15:4c:ee:e7:01: 51:35:8c:cc:74:ac:fe:35:15:ee:c0:8f:c8:3c:4d: a1:39:75:41:8f:a6:8a:40:76:37:9f:6f:72:e6:d2: 45:1d:e5:9c:87:17:87:99:6a:dd:e5:3a:00:94:90: 19:c0:f6:9a:c6:7d:58:1c:1c:ff:63:2c:17:f9:fe: 35:22:d1:e4:03:9c:31:75:ae:0e:72:cb:d3:0c:ae: 58:11:51:36:e0:a6:e8:11:0f:e7:9f:3a:8e:cd:a8: de:43:41:df:c6:43:59:f7:d2:e0:6b:bc:eb:02:b2: 92:b9:6f:d3:cb:4d:9c:2f:4a:01:42:a1:e7:f7:7b: 74:a1:21:df:30:7c:dc:65:58:ac:4e:7c:ab:7d:a9: e5:48:86:a4:34:0d:c5:cc:83:c4:8f:4e:93:11:2d: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:41:81:5A:13:2D:95:BB:8F:79:28:1D:25:C4:7D:4E:89:98:AB:F8 X509v3 Authority Key Identifier: keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/WUGBWhMtlbuPeSgdJcR9TomYq_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.100.0/22 Signature Algorithm: sha256WithRSAEncryption c3:66:93:67:ce:05:02:e8:f3:af:e0:db:2b:9a:fc:dc:4f:95: ec:8d:52:7e:2c:cf:26:fa:c9:73:a0:72:a8:ee:95:76:90:b3: 13:73:4b:30:cb:a5:9d:21:f0:04:85:fd:91:5e:6c:0e:0a:01: cd:a0:29:b7:ae:a4:5d:55:60:6e:5f:2a:1b:e0:c4:d3:f0:3a: 43:68:3f:cc:56:bd:fd:8c:c4:0b:a6:a0:29:80:35:e1:32:13: 0d:13:02:96:5e:ef:65:59:c0:4b:79:5f:7b:b6:fa:22:72:8e: cb:63:28:cd:5f:8e:41:13:d3:d1:bd:ea:9a:ae:b0:2f:9e:5c: 85:d0:e9:b9:9d:86:e6:75:08:eb:bf:d3:86:cb:93:cd:05:05: 96:0c:52:3b:d4:35:cd:70:b8:5f:b2:28:99:c5:b1:db:08:c8: 39:86:4a:6c:b8:91:fe:94:a0:fe:e0:b5:d8:ae:8c:a4:0f:7d: cb:c0:30:32:8d:e5:91:48:0a:24:8c:4e:cf:c4:ca:7f:ce:34: 79:6c:9c:06:81:e9:62:55:25:24:c3:07:d5:11:fb:55:94:55: c6:96:ae:85:50:49:9a:f6:d9:e0:15:93:1c:88:96:6b:e2:82: 1a:55:9a:60:9a:68:03:fa:6f:5f:c6:30:22:7a:35:bb:f1:f4: 66:66:49:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyMZyu6P8N7tgy5hA7SBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGVhMmQ0YWIxMzgwZjBhM2I3ZmU3ZDRmYTc4MjhlMWM5 NDM1NTgwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTQxODE1YTEzMmQ5NWJiOGY3OTI4MWQyNWM0N2Q0ZTg5OThhYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZjrW4xjzE+PlA9zoSzKGdXwde/N a7Alz6w9FvTaS4TDFnd9u3vx5RysLd2bBev49pW5yMrH5uWzhq3xLCYmPsZaNrGE uPXpJRVahhkJ7r2u2UwYOXPpwF2bI2QjmCvMFJT4FUzu5wFRNYzMdKz+NRXuwI/I PE2hOXVBj6aKQHY3n29y5tJFHeWchxeHmWrd5ToAlJAZwPaaxn1YHBz/YywX+f41 ItHkA5wxda4OcsvTDK5YEVE24KboEQ/nnzqOzajeQ0HfxkNZ99Lga7zrArKSuW/T y02cL0oBQqHn93t0oSHfMHzcZVisTnyrfanlSIakNA3FzIPEj06TES0ZbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFlBgVoTLZW7j3koHSXEfU6JmKv4MB8GA1UdIwQY MBaAFIveotSrE4Dwo7f+fU+ngo4clDVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQt MWUzMjZkZWJhNGQwLzEvV1VHQldoTXRsYnVQZVNnZEpjUjlUb21ZcV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQtMWUzMjZkZWJhNGQw LzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufxkMA0G CSqGSIb3DQEBCwUAA4IBAQDDZpNnzgUC6POv4NsrmvzcT5XsjVJ+LM8m+slzoHKo 7pV2kLMTc0swy6WdIfAEhf2RXmwOCgHNoCm3rqRdVWBuXyob4MTT8DpDaD/MVr39 jMQLpqApgDXhMhMNEwKWXu9lWcBLeV97tvoico7LYyjNX45BE9PRveqarrAvnlyF 0Om5nYbmdQjrv9OGy5PNBQWWDFI71DXNcLhfsiiZxbHbCMg5hkpsuJH+lKD+4LXY roykD33LwDAyjeWRSAokjE7PxMp/zjR5bJwGgeliVSUkwwfVEftVlFXGlq6FUEma 9tngFZMciJZr4oIaVZpgmmgD+m9fxjAiejW78fRmZkkN -----END CERTIFICATE-----Generated at Mon Jan 26 01:44:09 2026 by rpki-client