This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa File: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (raw, json) Hash identifier: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4= Subject key identifier: C0:39:7A:2F:A5:3C:82:D5:C5:F4:FC:46:F9:10:E4:12:1E:EF:B8:00 Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d Certificate serial: 019B79EC49F047898385804AD4FB8E201F4D Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa Signing time: Thu 01 Jan 2026 14:18:07 +0000 ROA not before: Thu 01 Jan 2026 14:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 185.139.48.0/24 maxlen: 24 185.139.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:49:f0:47:89:83:85:80:4a:d4:fb:8e:20:1f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0397a2fa53c82d5c5f4fc46f910e4121eefb800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:8b:e9:87:95:bd:a1:28:96:32:5d:0f:86: 64:98:f6:51:5d:74:4c:39:8a:47:60:c8:ba:70:dc: 37:f5:66:7f:2e:c8:39:49:c4:c2:aa:0d:f7:a9:a4: 87:95:98:0a:e2:88:e7:02:d2:38:d4:bd:de:e3:4a: 82:77:b7:29:14:84:a4:c1:64:ed:bb:03:96:48:cc: b8:2e:ef:09:be:31:a6:bc:b1:d7:46:7b:96:01:f0: 4b:f1:9c:3b:88:e7:dd:6a:c9:41:d7:20:7b:62:e0: a2:bd:6e:51:0f:5c:cf:17:9a:3d:f8:b0:98:2a:0b: 94:93:ad:ad:7a:23:bf:ef:70:f0:60:c9:72:f6:ae: 22:59:74:bc:8e:ac:32:95:70:f5:61:e7:ac:39:82: a8:20:f1:46:d6:b6:59:21:e3:2f:e2:95:84:51:bb: d3:e1:3b:a0:59:55:ec:8e:61:dc:5e:e6:39:1e:63: e2:68:d1:d2:b2:d3:d6:46:f0:c5:91:ae:8e:11:f9: ff:0b:33:47:7a:57:d4:65:42:aa:9b:71:55:20:15: c3:19:a8:7d:93:d7:10:7d:4c:b1:30:21:61:1d:a6: 35:8c:67:50:f0:59:86:32:5a:08:83:57:58:cd:f6: 26:f7:2d:9c:ef:46:c9:56:34:7a:1a:c6:bc:87:5f: 70:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:39:7A:2F:A5:3C:82:D5:C5:F4:FC:46:F9:10:E4:12:1E:EF:B8:00 X509v3 Authority Key Identifier: keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.48.0/23 Signature Algorithm: sha256WithRSAEncryption 24:6d:d4:59:e0:f5:3d:01:63:98:c6:ae:22:a6:8c:58:ee:2b: 2e:c0:70:83:a9:cd:8f:ff:5e:a1:48:91:d8:9d:8a:f9:e4:85: 3c:14:6e:5c:41:f6:1f:80:9d:ee:80:dd:c4:8b:ee:f9:0b:19: 46:2f:8c:23:3b:e0:28:2c:2b:fe:e9:76:46:9a:ea:a8:d8:e9: fd:a4:a0:ed:3e:1e:4e:bc:75:f8:4f:56:b9:fc:1c:5c:83:4d: 7f:ff:bc:6a:cf:7d:f2:26:b4:12:04:77:5f:84:14:74:68:1f: ea:b2:e0:f9:c0:19:a8:02:ac:a4:f6:0f:70:00:35:b6:0b:0d: b4:2f:33:e7:1c:af:76:44:f3:62:dc:32:d1:96:a7:ed:7d:78: 2a:c6:c9:56:5b:18:6b:1f:77:7c:03:bf:54:5b:3e:c4:cf:11: 18:5f:b7:8a:7e:12:c2:42:38:72:90:b3:ee:f9:7b:58:8a:4c: c3:42:e0:46:5a:76:8d:05:10:d5:03:03:fc:02:a7:8c:e4:c4: bc:54:6d:f1:b2:63:a9:e4:45:c0:90:b2:80:3a:e9:49:ff:76: ad:43:36:6f:04:ed:7a:44:4b:28:d7:62:2b:f8:34:a4:5a:5e: bf:a3:8d:23:c1:17:6b:50:2e:cc:a0:0c:3e:6c:e6:63:57:e1: 8e:a3:4f:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57EnwR4mDhYBK1PuOIB9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OWI1ZDdiNTc1OTQwOTkzN2M1YzJjMjJmMGFkYmU4ZTgz MmEwNWQwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDM5N2EyZmE1M2M4MmQ1YzVmNGZjNDZmOTEwZTQxMjFlZWZiODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKGL6YeVvaEoljJdD4ZkmPZRXXRM OYpHYMi6cNw39WZ/Lsg5ScTCqg33qaSHlZgK4ojnAtI41L3e40qCd7cpFISkwWTt uwOWSMy4Lu8JvjGmvLHXRnuWAfBL8Zw7iOfdaslB1yB7YuCivW5RD1zPF5o9+LCY KguUk62teiO/73DwYMly9q4iWXS8jqwylXD1YeesOYKoIPFG1rZZIeMv4pWEUbvT 4TugWVXsjmHcXuY5HmPiaNHSstPWRvDFka6OEfn/CzNHelfUZUKqm3FVIBXDGah9 k9cQfUyxMCFhHaY1jGdQ8FmGMloIg1dYzfYm9y2c70bJVjR6Gsa8h19wQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMA5ei+lPILVxfT8RvkQ5BIe77gAMB8GA1UdIwQY MBaAFIebXXtXWUCZN8XCwi8K2+joMqBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgt NWEwNmY3ODg3ZGJkLzEvd0RsNkw2VThndFhGOVB4Ry1SRGtFaDd2dUFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgtNWEwNmY3ODg3ZGJk LzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYswMA0G CSqGSIb3DQEBCwUAA4IBAQAkbdRZ4PU9AWOYxq4ipoxY7isuwHCDqc2P/16hSJHY nYr55IU8FG5cQfYfgJ3ugN3Ei+75CxlGL4wjO+AoLCv+6XZGmuqo2On9pKDtPh5O vHX4T1a5/Bxcg01//7xqz33yJrQSBHdfhBR0aB/qsuD5wBmoAqyk9g9wADW2Cw20 LzPnHK92RPNi3DLRlqftfXgqxslWWxhrH3d8A79UWz7EzxEYX7eKfhLCQjhykLPu +XtYikzDQuBGWnaNBRDVAwP8AqeM5MS8VG3xsmOp5EXAkLKAOulJ/3atQzZvBO16 REso12Ir+DSkWl6/o40jwRdrUC7MoAw+bOZjV+GOo0/n -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:49 2026 by rpki-client