This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa File: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (raw, json) Hash identifier: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg= Subject key identifier: 58:38:B4:C7:CF:F6:97:EE:41:87:42:B1:D2:48:0B:BF:15:A7:8B:48 Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268 Certificate serial: 019B79EBCFD6C2CBB35AFF343462CAAC9297 Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa Signing time: Thu 01 Jan 2026 14:17:35 +0000 ROA not before: Thu 01 Jan 2026 14:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59796 IP address blocks: 185.71.64.0/24 maxlen: 24 185.71.66.0/24 maxlen: 24 193.84.85.0/24 maxlen: 24 193.84.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:cf:d6:c2:cb:b3:5a:ff:34:34:62:ca:ac:92:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268 Validity Not Before: Jan 1 14:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5838b4c7cff697ee418742b1d2480bbf15a78b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:a7:24:55:71:2a:ef:4d:10:64:98:23:41: d6:83:0e:73:4e:73:8d:4b:fd:1c:e6:3c:11:fc:5f: 8e:9b:ff:85:d8:63:25:a0:d0:e2:ba:d6:88:5a:0a: 78:ad:ec:82:22:ed:c4:1d:68:26:a6:9b:41:93:d8: e3:c5:d0:98:c0:ff:85:25:e5:5a:d6:27:7c:90:d5: ad:de:58:d7:5d:09:5c:b8:7e:77:9f:c1:81:cd:fe: 9b:f5:07:6a:4c:55:a2:d8:00:98:8f:38:77:18:3c: fa:8d:93:cb:d9:51:ff:f7:95:53:61:b3:3c:39:59: f2:6a:5e:71:ea:07:90:3b:94:ca:2d:ce:14:76:98: 30:3e:61:53:67:5d:6a:88:b3:25:51:a9:30:a6:d7: 8c:46:6e:93:ad:22:90:a4:70:72:70:61:b2:3d:17: 7a:da:4b:0f:de:d9:f5:15:81:e1:33:1f:3a:bf:0c: 66:23:b7:6c:11:5e:a9:2f:f2:5d:d1:20:c9:18:5c: eb:b8:b6:0a:87:bf:a6:c7:6a:39:01:f5:3a:77:ac: 54:d9:13:e7:6f:bd:43:f7:15:c5:cc:b8:9f:a0:60: 59:20:a1:f9:b7:02:72:3f:92:d1:74:9d:f6:9b:48: d0:26:50:3f:40:3d:6b:b2:85:26:35:4e:10:fe:ac: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:38:B4:C7:CF:F6:97:EE:41:87:42:B1:D2:48:0B:BF:15:A7:8B:48 X509v3 Authority Key Identifier: keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.64.0/24 185.71.66.0/24 193.84.85.0/24 193.84.88.0/24 Signature Algorithm: sha256WithRSAEncryption 18:06:59:a0:a4:73:cf:2b:ce:1a:92:4f:09:46:16:39:53:57: 61:a7:40:e9:ec:02:03:b1:76:93:b0:f8:09:69:54:ec:dd:d5: 60:46:e1:95:68:28:66:50:4e:dc:80:9b:57:ff:b4:3d:9e:63: 3d:6e:9d:99:50:c1:18:c2:cc:39:bf:43:fa:08:14:4b:ec:ae: 68:6f:2b:bb:ff:f4:7c:09:cd:72:bd:7b:ca:33:fd:e3:ee:12: b3:af:43:d0:84:83:76:fc:e2:34:fc:64:ad:27:9e:e3:21:a1: f2:3b:7f:8a:3b:27:6c:47:f7:de:20:fa:5e:94:53:39:3c:14: 0e:57:ed:16:18:0b:e0:a1:78:01:3c:6a:3d:84:76:11:74:97: cf:ee:a4:f6:cb:bc:3a:9d:72:0e:25:56:4e:94:f3:c5:a6:1e: 23:41:30:6e:f9:25:26:a1:d3:b8:56:d7:4b:fd:e9:6e:c2:cb: b4:dc:cc:74:de:0e:81:59:43:82:06:41:48:51:9b:46:21:ac: 54:0c:30:f3:66:6e:36:14:e3:b2:da:2d:2e:29:f6:1a:f6:1b: 8d:cd:f3:d0:39:ba:64:64:b3:fa:55:d8:71:8f:35:05:74:1c: 4e:34:af:12:74:9c:2e:9f:51:e6:b9:c6:0b:9a:4b:79:c0:fa: 9a:c3:3a:52 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt568/WwsuzWv80NGLKrJKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3 M2UyNjgwHhcNMjYwMTAxMTQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODM4YjRjN2NmZjY5N2VlNDE4NzQyYjFkMjQ4MGJiZjE1YTc4YjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDOnJFVxKu9NEGSYI0HWgw5zTnON S/0c5jwR/F+Om/+F2GMloNDiutaIWgp4reyCIu3EHWgmpptBk9jjxdCYwP+FJeVa 1id8kNWt3ljXXQlcuH53n8GBzf6b9QdqTFWi2ACYjzh3GDz6jZPL2VH/95VTYbM8 OVnyal5x6geQO5TKLc4UdpgwPmFTZ11qiLMlUakwpteMRm6TrSKQpHBycGGyPRd6 2ksP3tn1FYHhMx86vwxmI7dsEV6pL/Jd0SDJGFzruLYKh7+mx2o5AfU6d6xU2RPn b71D9xXFzLifoGBZIKH5twJyP5LRdJ32m0jQJlA/QD1rsoUmNU4Q/qxUewIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFg4tMfP9pfuQYdCsdJIC78Vp4tIMB8GA1UdIwQY MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt Njg2ZjBhMDYxNmNjLzEvV0RpMHg4XzJsLTVCaDBLeDBrZ0x2eFduaTBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuUdAAwQA uUdCAwQAwVRVAwQAwVRYMA0GCSqGSIb3DQEBCwUAA4IBAQAYBlmgpHPPK84akk8J RhY5U1dhp0Dp7AIDsXaTsPgJaVTs3dVgRuGVaChmUE7cgJtX/7Q9nmM9bp2ZUMEY wsw5v0P6CBRL7K5obyu7//R8Cc1yvXvKM/3j7hKzr0PQhIN2/OI0/GStJ57jIaHy O3+KOydsR/feIPpelFM5PBQOV+0WGAvgoXgBPGo9hHYRdJfP7qT2y7w6nXIOJVZO lPPFph4jQTBu+SUmodO4VtdL/eluwsu03Mx03g6BWUOCBkFIUZtGIaxUDDDzZm42 FOOy2i0uKfYa9huNzfPQObpkZLP6VdhxjzUFdBxONK8SdJwun1HmucYLmkt5wPqa wzpS -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:56 2026 by rpki-client