This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/WfkhMRx1wTZYcucf2qwTH45YfJU.roa File: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (raw, json) Hash identifier: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE= Subject key identifier: 59:F9:21:31:1C:75:C1:36:58:72:E7:1F:DA:AC:13:1F:8E:58:7C:95 Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa Certificate serial: 019B77C6CE162CB5F6713B517A5622E31D06 Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/WfkhMRx1wTZYcucf2qwTH45YfJU.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206524 IP address blocks: 185.248.76.0/24 maxlen: 24 185.248.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ce:16:2c:b5:f6:71:3b:51:7a:56:22:e3:1d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c679522eb892589d7364af579a724040e929f0aa Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59f921311c75c1365872e71fdaac131f8e587c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:aa:43:6b:0c:2a:dc:09:4e:01:42:14:6b: 60:73:3b:79:ab:9f:e9:eb:8e:bc:f9:23:be:1d:7c: 6b:6a:4a:1f:f9:c3:d8:1e:6e:8a:52:07:e4:58:28: da:91:08:63:93:c0:7e:2e:05:70:6d:c1:fa:ca:25: 6a:93:fd:45:c1:86:3f:4e:b7:98:bf:b2:50:0f:23: 8f:70:2f:48:08:6a:3b:54:e2:f4:f4:0a:7a:c5:fa: 81:f1:b3:33:90:2d:8e:55:49:79:16:c5:35:b9:e1: 89:75:d8:b4:63:56:4f:ed:5d:99:33:f7:b1:8c:09: 53:f0:57:55:2b:23:38:6e:53:7c:2b:8b:a6:d6:a7: 44:b6:47:c1:9c:62:38:6e:6c:ce:83:05:6b:5c:50: 54:3e:82:b8:07:b1:fc:30:2f:79:c3:9e:be:98:ff: 33:d3:2e:c4:42:83:54:e1:61:02:78:96:6b:b4:f6: f5:b7:09:b0:56:c8:60:06:06:8f:bc:4d:0b:b8:e2: d6:da:f6:e2:d3:9b:94:b6:86:e3:33:3b:51:97:04: 55:23:e7:13:8a:6a:2b:a1:8f:6d:58:50:06:a8:ac: 56:87:4b:bd:33:a1:74:80:31:04:45:78:ad:95:fa: 0c:4b:5c:b6:01:8d:a6:d0:c7:37:d2:81:09:96:bd: ea:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F9:21:31:1C:75:C1:36:58:72:E7:1F:DA:AC:13:1F:8E:58:7C:95 X509v3 Authority Key Identifier: keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/WfkhMRx1wTZYcucf2qwTH45YfJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.76.0/23 Signature Algorithm: sha256WithRSAEncryption a8:8b:ae:1e:81:ae:5e:65:de:ce:0c:00:90:0d:63:c3:5a:13: 79:4e:1e:66:f8:6d:33:59:68:b7:61:0c:8a:54:e9:27:81:46: 11:1a:9e:5d:46:65:56:43:35:af:8e:ec:08:55:54:76:0d:05: 2a:92:9b:79:ab:e5:34:34:8d:fc:e9:8e:79:d7:34:44:7e:63: e5:38:a5:74:71:17:37:31:20:6a:c4:dd:a8:d7:1e:ec:62:70: 59:9a:de:a1:df:22:12:e4:9f:db:98:e3:9c:d3:9b:cc:fd:a3: d6:d1:54:4e:d9:a3:24:c8:c6:d6:0a:3b:51:7f:6e:c4:12:8d: da:53:3f:c4:e8:31:c4:a3:49:8c:25:35:0b:d6:8f:6d:dc:8c: 0a:49:6a:2b:9b:e7:35:d1:6c:dd:2c:e0:0e:5b:69:1f:10:b6: 5b:5a:d2:ac:a5:9f:f6:40:51:62:fe:66:f3:e1:bb:75:e0:1d: ab:76:3c:2f:a4:93:09:38:3c:d2:3d:97:11:5c:7a:09:6d:87: e4:a7:d8:07:35:4d:94:ed:4c:79:eb:1a:e3:9d:7f:dc:83:82: 7a:f3:dd:6f:4e:83:85:ec:10:01:06:77:ba:d3:f6:e6:07:3a: d0:19:a8:f8:ce:e2:14:3c:dd:39:b2:8a:57:42:36:3b:56:88: da:aa:82:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xs4WLLX2cTtRelYi4x0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Nzk1MjJlYjg5MjU4OWQ3MzY0YWY1NzlhNzI0MDQwZTky OWYwYWEwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWY5MjEzMTFjNzVjMTM2NTg3MmU3MWZkYWFjMTMxZjhlNTg3Yzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspuqQ2sMKtwJTgFCFGtgczt5q5/p 6468+SO+HXxrakof+cPYHm6KUgfkWCjakQhjk8B+LgVwbcH6yiVqk/1FwYY/TreY v7JQDyOPcC9ICGo7VOL09Ap6xfqB8bMzkC2OVUl5FsU1ueGJddi0Y1ZP7V2ZM/ex jAlT8FdVKyM4blN8K4um1qdEtkfBnGI4bmzOgwVrXFBUPoK4B7H8MC95w56+mP8z 0y7EQoNU4WECeJZrtPb1twmwVshgBgaPvE0LuOLW2vbi05uUtobjMztRlwRVI+cT imoroY9tWFAGqKxWh0u9M6F0gDEERXitlfoMS1y2AY2m0Mc30oEJlr3q4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFn5ITEcdcE2WHLnH9qsEx+OWHyVMB8GA1UdIwQY MBaAFMZ5Ui64klidc2SvV5pyQEDpKfCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgt ZGMxMGQ1ZDNiZDgwLzEvV2ZraE1SeDF3VFpZY3VjZjJxd1RINDVZZkpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgtZGMxMGQ1ZDNiZDgw LzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufhMMA0G CSqGSIb3DQEBCwUAA4IBAQCoi64ega5eZd7ODACQDWPDWhN5Th5m+G0zWWi3YQyK VOkngUYRGp5dRmVWQzWvjuwIVVR2DQUqkpt5q+U0NI386Y551zREfmPlOKV0cRc3 MSBqxN2o1x7sYnBZmt6h3yIS5J/bmOOc05vM/aPW0VRO2aMkyMbWCjtRf27EEo3a Uz/E6DHEo0mMJTUL1o9t3IwKSWorm+c10WzdLOAOW2kfELZbWtKspZ/2QFFi/mbz 4bt14B2rdjwvpJMJODzSPZcRXHoJbYfkp9gHNU2U7Ux56xrjnX/cg4J6891vToOF 7BABBne60/bmBzrQGaj4zuIUPN05sopXQjY7VojaqoJw -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:20 2026 by rpki-client