This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/WYvB7z2E3X738_d9cgopMgPJk5I.roa File: WYvB7z2E3X738_d9cgopMgPJk5I.roa (raw, json) Hash identifier: u5beh3Tb2byL/rGs3HaRRLRbrFXqSXUDof4rFMurirU= Subject key identifier: 59:8B:C1:EF:3D:84:DD:7E:F7:F3:F7:7D:72:0A:29:32:03:C9:93:92 Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Certificate serial: 019B7BA4EAEBE30139DE45F0625EFE12825D Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/WYvB7z2E3X738_d9cgopMgPJk5I.roa Signing time: Thu 01 Jan 2026 22:19:24 +0000 ROA not before: Thu 01 Jan 2026 22:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29601 IP address blocks: 139.123.224.0/24 maxlen: 24 193.24.64.0/24 maxlen: 24 193.24.67.0/24 maxlen: 24 193.24.70.0/24 maxlen: 24 193.24.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ea:eb:e3:01:39:de:45:f0:62:5e:fe:12:82:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=598bc1ef3d84dd7ef7f3f77d720a293203c99392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:62:32:48:93:91:72:58:f3:52:cb:96:21: a9:74:b7:8b:e9:10:0a:89:83:49:e6:ca:ec:65:7d: 2b:ee:17:68:ee:39:4f:62:02:7d:36:50:e5:b5:44: 58:08:e0:52:83:02:c0:03:73:af:2b:be:4d:4a:ec: 07:40:58:cf:55:2f:7a:b4:a8:46:aa:22:bc:d2:5b: 9f:91:1f:27:a6:95:b9:b7:1b:ee:21:73:d6:73:46: af:eb:68:29:fc:69:ab:d3:0d:67:c7:b9:48:1c:9d: 03:8f:36:12:73:fe:fc:1b:05:64:95:87:ce:d4:7f: c9:ab:77:85:24:f5:b5:f0:61:0c:df:2f:0e:a0:9b: ce:bb:05:db:e6:fb:f5:c5:c2:c0:ce:b2:ce:cf:c4: 40:68:43:b3:4e:7b:ff:54:d4:fa:bb:cd:06:dc:f1: 7b:c1:f8:df:91:a9:bd:79:21:3d:4e:a9:eb:ba:f2: 82:01:0b:ae:4a:55:d9:52:2c:38:50:4a:5c:a7:19: 16:2c:9f:7c:e9:32:09:b7:15:ff:dc:16:5e:82:d2: 2e:15:43:58:53:b6:2b:e3:53:96:0c:8a:0d:a9:53: 78:c9:6a:b0:84:36:14:93:3e:11:e9:2b:1e:50:80: 28:f7:16:9b:dc:dd:1b:6a:38:ff:eb:8e:28:ab:1d: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8B:C1:EF:3D:84:DD:7E:F7:F3:F7:7D:72:0A:29:32:03:C9:93:92 X509v3 Authority Key Identifier: keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/WYvB7z2E3X738_d9cgopMgPJk5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.123.224.0/24 193.24.64.0/24 193.24.67.0/24 193.24.70.0/23 Signature Algorithm: sha256WithRSAEncryption 94:c3:81:2c:60:46:6b:4d:c5:12:ca:19:9a:67:34:cc:91:2d: 6c:6c:7d:e5:7b:80:14:08:9c:24:c2:b1:5a:4d:44:72:7a:3f: 16:36:00:ef:81:8f:65:90:9a:4d:0a:3f:a4:ca:8a:51:13:66: e8:17:ce:f0:2a:66:92:5e:86:39:9e:88:3d:f4:96:6e:c8:a2: 02:0f:f2:f7:e4:7c:c4:bc:cf:f5:11:5a:8e:38:0b:f9:c8:5b: 00:ea:cc:97:07:ef:1b:10:61:e0:5a:a9:fb:2b:05:a5:e8:5b: d8:1f:9d:61:a5:ed:4e:a9:63:50:cd:9d:f5:2f:18:5e:73:2f: c1:b6:9e:a2:b1:5d:ca:96:d1:9f:a5:53:88:37:21:7f:cb:31: 82:91:25:84:34:4f:95:a8:9c:27:1a:34:e8:90:db:05:64:dd: 53:d1:f6:cd:70:4a:cb:78:86:3e:fd:10:7b:c3:77:4c:3b:6b: 87:8b:61:53:d8:dc:df:f1:1f:86:2c:54:c1:2f:9f:9f:88:9c: 14:75:ec:cc:9b:40:10:fc:6b:eb:58:d1:db:f0:34:7b:47:b6: b2:ad:7d:9d:3d:33:be:15:68:ee:12:b2:07:f9:5e:54:42:b6: 3a:67:15:16:17:4c:1c:b7:19:5a:aa:d3:14:3d:f0:28:7f:29: fd:f6:9f:aa -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pOrr4wE53kXwYl7+EoJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4 YTdkYTYwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OThiYzFlZjNkODRkZDdlZjdmM2Y3N2Q3MjBhMjkzMjAzYzk5MzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOtiMkiTkXJY81LLliGpdLeL6RAK iYNJ5srsZX0r7hdo7jlPYgJ9NlDltURYCOBSgwLAA3OvK75NSuwHQFjPVS96tKhG qiK80lufkR8nppW5txvuIXPWc0av62gp/Gmr0w1nx7lIHJ0DjzYSc/78GwVklYfO 1H/Jq3eFJPW18GEM3y8OoJvOuwXb5vv1xcLAzrLOz8RAaEOzTnv/VNT6u80G3PF7 wfjfkam9eSE9TqnruvKCAQuuSlXZUiw4UEpcpxkWLJ986TIJtxX/3BZegtIuFUNY U7Yr41OWDIoNqVN4yWqwhDYUkz4R6SseUIAo9xab3N0bajj/644oqx3HLwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFmLwe89hN1+9/P3fXIKKTIDyZOSMB8GA1UdIwQY MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt MzMzYmVlY2ZmNmY0LzEvV1l2Qjd6MkUzWDczOF9kOWNnb3BNZ1BKazVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0 LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAi3vgAwQA wRhAAwQAwRhDAwQBwRhGMA0GCSqGSIb3DQEBCwUAA4IBAQCUw4EsYEZrTcUSyhma ZzTMkS1sbH3le4AUCJwkwrFaTURyej8WNgDvgY9lkJpNCj+kyopRE2boF87wKmaS XoY5nog99JZuyKICD/L35HzEvM/1EVqOOAv5yFsA6syXB+8bEGHgWqn7KwWl6FvY H51hpe1OqWNQzZ31Lxhecy/Btp6isV3KltGfpVOINyF/yzGCkSWENE+VqJwnGjTo kNsFZN1T0fbNcErLeIY+/RB7w3dMO2uHi2FT2Nzf8R+GLFTBL5+fiJwUdezMm0AQ /GvrWNHb8DR7R7ayrX2dPTO+FWjuErIH+V5UQrY6ZxUWF0wctxlaqtMUPfAofyn9 9p+q -----END CERTIFICATE-----Generated at Sun Jan 11 18:14:11 2026 by rpki-client