This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/WRBFVNx32sOpjsof22cBqYU1U-g.roa File: WRBFVNx32sOpjsof22cBqYU1U-g.roa (raw, json) Hash identifier: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE= Subject key identifier: 59:10:45:54:DC:77:DA:C3:A9:8E:CA:1F:DB:67:01:A9:85:35:53:E8 Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Certificate serial: 019B7DCAE601E79B7E65767FF23C04D1B6F3 Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/WRBFVNx32sOpjsof22cBqYU1U-g.roa Signing time: Fri 02 Jan 2026 08:20:07 +0000 ROA not before: Fri 02 Jan 2026 08:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20495 IP address blocks: 185.33.116.0/23 maxlen: 23 185.33.116.0/24 maxlen: 32 185.33.117.0/24 maxlen: 32 185.33.118.0/23 maxlen: 23 185.33.118.0/24 maxlen: 32 185.33.119.0/24 maxlen: 32 2a00:cc20::/33 maxlen: 33 2a00:cc20::/34 maxlen: 128 2a00:cc20:4000::/34 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e6:01:e7:9b:7e:65:76:7f:f2:3c:04:d1:b6:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Validity Not Before: Jan 2 08:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59104554dc77dac3a98eca1fdb6701a9853553e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:24:9b:5f:ac:7c:96:94:06:ec:ce:9a:00: e4:f6:a8:21:76:f4:84:15:b1:34:86:85:0f:5a:8f: a5:30:8c:2e:de:75:ce:fc:12:c6:bf:26:0e:03:41: a5:35:42:19:6d:15:f8:b3:b9:63:e7:ad:4a:c0:58: ae:3e:09:ad:dc:6f:c4:9b:02:23:4e:fd:83:79:7f: a1:12:fa:39:e8:07:8b:40:75:74:4d:ed:e3:2e:53: 08:c6:52:2b:24:da:12:a1:c9:1c:36:52:11:a3:87: 8f:7e:40:c8:35:44:67:af:8c:5d:75:c1:89:c5:9d: 5f:6a:21:25:69:72:51:05:e3:e9:51:f5:46:67:e5: 89:a9:5e:8e:36:05:c0:4f:ab:7c:d0:f5:74:95:5d: 38:85:6f:e2:d3:dc:d7:62:a6:e4:c4:89:ec:21:a2: 09:f8:59:65:e3:26:01:07:d7:ef:e2:3b:56:55:eb: 58:98:9a:94:de:90:b9:1d:89:ed:e5:1a:6b:67:b6: e0:0f:a1:4e:b8:47:79:70:be:9f:de:ca:5c:9f:ee: 2b:43:be:ff:e9:c8:78:ce:27:8b:ff:d3:70:4a:0c: 68:62:6d:de:98:73:ac:e2:e4:99:29:84:8b:b3:fb: 5a:73:36:bd:15:a8:f0:d4:ac:74:98:4c:47:16:fb: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:10:45:54:DC:77:DA:C3:A9:8E:CA:1F:DB:67:01:A9:85:35:53:E8 X509v3 Authority Key Identifier: keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/WRBFVNx32sOpjsof22cBqYU1U-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.33.116.0/22 IPv6: 2a00:cc20::/33 Signature Algorithm: sha256WithRSAEncryption 76:2e:f5:d8:9a:22:7c:c8:89:f2:1f:a7:b2:fb:10:e0:c4:8a: 4b:ea:28:95:52:02:9b:e5:95:bf:c0:9b:cf:02:6c:f0:2c:7b: ec:27:59:23:c8:d6:bc:d0:98:df:6c:d0:89:38:a3:70:a2:48: 84:ec:e9:f8:3d:d5:bd:a1:58:f0:db:60:c8:9c:be:f2:92:55: 57:52:cf:93:75:94:e3:98:6b:99:70:6f:88:6d:07:9d:92:a5: 60:0e:96:ba:9d:f4:1b:4d:56:8e:a7:01:be:1c:46:fb:8e:b3: e3:49:17:2c:14:18:dd:ba:7b:4f:48:de:02:9d:40:da:84:41: 96:31:26:2b:e5:13:dd:2c:c2:18:15:56:8d:a3:b2:90:2b:7a: 12:c3:6a:ae:a5:59:12:36:01:14:ca:de:16:7d:e8:76:11:34: 26:86:8a:a6:72:f1:a3:84:7d:d9:a3:d8:0a:5e:be:c5:93:1e: 44:e9:67:84:da:5b:eb:25:4f:f1:22:92:9d:7d:77:6d:a1:f5: 80:26:c3:22:31:8e:46:3b:69:70:ba:0c:75:96:26:e5:02:72: 2d:57:41:0d:ef:90:d0:ac:3b:21:1c:af:2c:1c:a9:36:31:bd: 05:10:38:4a:8d:2d:42:2c:a1:f6:b3:fe:25:77:07:fb:72:2c: 12:07:8c:21 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt9yuYB55t+ZXZ/8jwE0bbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi YTEyNjAwHhcNMjYwMTAyMDgyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTEwNDU1NGRjNzdkYWMzYTk4ZWNhMWZkYjY3MDFhOTg1MzU1M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlIkm1+sfJaUBuzOmgDk9qghdvSE FbE0hoUPWo+lMIwu3nXO/BLGvyYOA0GlNUIZbRX4s7lj561KwFiuPgmt3G/EmwIj Tv2DeX+hEvo56AeLQHV0Te3jLlMIxlIrJNoSockcNlIRo4ePfkDINURnr4xddcGJ xZ1faiElaXJRBePpUfVGZ+WJqV6ONgXAT6t80PV0lV04hW/i09zXYqbkxInsIaIJ +Fll4yYBB9fv4jtWVetYmJqU3pC5HYnt5RprZ7bgD6FOuEd5cL6f3spcn+4rQ77/ 6ch4zieL/9NwSgxoYm3emHOs4uSZKYSLs/tacza9Fajw1Kx0mExHFvs6uwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFFkQRVTcd9rDqY7KH9tnAamFNVPoMB8GA1UdIwQY MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt ZWU1YTY3NDNiZTU2LzEvV1JCRlZOeDMyc09wanNvZjIyY0JxWVUxVS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2 LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuSF0MA4E AgACMAgDBgcqAMwgADANBgkqhkiG9w0BAQsFAAOCAQEAdi712JoifMiJ8h+nsvsQ 4MSKS+oolVICm+WVv8CbzwJs8Cx77CdZI8jWvNCY32zQiTijcKJIhOzp+D3VvaFY 8NtgyJy+8pJVV1LPk3WU45hrmXBviG0HnZKlYA6Wup30G01WjqcBvhxG+46z40kX LBQY3bp7T0jeAp1A2oRBljEmK+UT3SzCGBVWjaOykCt6EsNqrqVZEjYBFMreFn3o dhE0JoaKpnLxo4R92aPYCl6+xZMeROlnhNpb6yVP8SKSnX13baH1gCbDIjGORjtp cLoMdZYm5QJyLVdBDe+Q0Kw7IRyvLBypNjG9BRA4So0tQiyh9rP+JXcH+3IsEgeM IQ== -----END CERTIFICATE-----Generated at Mon Jan 12 04:03:38 2026 by rpki-client