This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/WpRWO2EVlSv_D7W5fcevKIcX17g.roa File: WpRWO2EVlSv_D7W5fcevKIcX17g.roa (raw, json) Hash identifier: dwm8si4Ivv7QjBLEYqxtuHlmWwLaHZym07JUqJNzM8w= Subject key identifier: 5A:94:56:3B:61:15:95:2B:FF:0F:B5:B9:7D:C7:AF:28:87:17:D7:B8 Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e Certificate serial: 019B7C7F4DE22F6A528E5EEE223BA5A32421 Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/WpRWO2EVlSv_D7W5fcevKIcX17g.roa Signing time: Fri 02 Jan 2026 02:17:56 +0000 ROA not before: Fri 02 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212020 IP address blocks: 185.232.96.0/24 maxlen: 24 2a10:d280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:4d:e2:2f:6a:52:8e:5e:ee:22:3b:a5:a3:24:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e Validity Not Before: Jan 2 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a94563b6115952bff0fb5b97dc7af288717d7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:0d:8c:9d:c5:66:a4:50:a4:9e:bf:d0:47: 8c:bf:fe:94:bf:10:33:5e:b9:ef:57:9c:cd:2e:3d: 26:e5:fc:0a:d3:a0:8a:a0:4b:18:45:b0:a9:b1:9f: 9b:56:dd:9d:ae:20:3f:a7:a3:30:d4:69:c5:c4:86: 5d:b1:e1:22:4b:45:f7:a6:7b:1e:ba:17:45:72:00: 37:e1:0f:f3:9b:c8:f6:e3:21:d2:b7:a1:ae:3c:af: 61:5e:f1:98:9b:16:8e:a4:5c:7c:9f:39:95:65:f2: 51:3b:73:4f:ec:e2:a3:1e:85:65:2e:9e:f6:00:5e: 77:8e:5a:b0:93:f6:ee:95:f1:36:b0:79:a2:ac:03: 4a:39:65:86:24:a3:7a:16:75:3d:8f:87:93:0d:19: 01:d5:90:24:1d:7f:ab:78:63:0b:8d:c3:db:bc:b6: 91:59:06:e2:b1:56:62:85:59:a0:c3:7d:a4:64:49: 3e:a1:b8:ad:b9:d5:d8:6a:77:48:4e:df:3f:40:82: 9f:b8:e4:09:f0:39:55:1d:d0:a2:07:70:4e:3a:33: 78:c0:25:fb:14:62:b7:ca:8b:98:a4:48:36:79:fd: af:b2:bf:36:91:d1:5c:4b:aa:d3:93:a6:82:9a:00: 5e:8f:af:be:a6:b6:cf:06:ee:bb:58:f6:99:f8:41: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:94:56:3B:61:15:95:2B:FF:0F:B5:B9:7D:C7:AF:28:87:17:D7:B8 X509v3 Authority Key Identifier: keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/WpRWO2EVlSv_D7W5fcevKIcX17g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.96.0/24 IPv6: 2a10:d280::/29 Signature Algorithm: sha256WithRSAEncryption 7d:fc:38:ca:d5:e3:f6:06:e0:35:cc:ae:40:e2:6c:e9:96:d4: 95:e2:7b:65:6f:3b:44:ee:21:57:5d:6e:c1:c6:58:02:89:30: a9:fb:d1:1c:8c:ec:8c:b2:c1:e4:ca:01:56:f8:91:d4:fe:e4: 98:9d:cd:80:3f:4b:c2:f0:b4:6b:9f:7e:99:e1:c2:b5:08:cd: 86:82:6f:7c:f1:6f:27:6d:29:bf:b6:a7:71:fc:de:84:05:dc: 2a:9f:eb:81:5f:ac:02:0a:ea:99:34:ec:df:6a:1c:9a:bf:1f: 14:65:4c:b3:6f:82:95:67:f1:ac:76:62:5c:83:87:3f:49:09: 34:ca:8a:41:bc:23:69:03:81:c5:10:21:ea:d8:94:97:c9:25: 53:32:58:50:31:f9:a2:69:75:d8:0b:7a:69:15:30:27:e5:c7: 8c:45:e5:7b:b7:6e:d2:e9:67:51:1e:ba:9f:3f:1c:74:2c:80: 76:1e:e2:9f:43:a4:59:0f:b9:1c:60:4b:27:a5:ee:bb:e1:3e: e0:82:f9:3b:de:60:2a:a9:b7:e1:0c:d9:34:5b:5a:01:0f:5e: 4e:71:6e:a1:6d:53:91:19:72:4c:7f:0b:db:b4:c5:d9:04:88: 59:ad:2c:25:53:b4:3c:c7:12:9b:6c:39:8d:91:f9:b6:ae:ca: be:58:ac:50 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f03iL2pSjl7uIjuloyQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNmM2MDM1MDQyY2M1MzI1MTZlYmMxOTY4ZjQxYmZmZjRi ODUzN2UwHhcNMjYwMTAyMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTk0NTYzYjYxMTU5NTJiZmYwZmI1Yjk3ZGM3YWYyODg3MTdkN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ENjJ3FZqRQpJ6/0EeMv/6UvxAz XrnvV5zNLj0m5fwK06CKoEsYRbCpsZ+bVt2driA/p6Mw1GnFxIZdseEiS0X3pnse uhdFcgA34Q/zm8j24yHSt6GuPK9hXvGYmxaOpFx8nzmVZfJRO3NP7OKjHoVlLp72 AF53jlqwk/bulfE2sHmirANKOWWGJKN6FnU9j4eTDRkB1ZAkHX+reGMLjcPbvLaR WQbisVZihVmgw32kZEk+obitudXYandITt8/QIKfuOQJ8DlVHdCiB3BOOjN4wCX7 FGK3youYpEg2ef2vsr82kdFcS6rTk6aCmgBej6++prbPBu67WPaZ+EGg3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFqUVjthFZUr/w+1uX3HryiHF9e4MB8GA1UdIwQY MBaAFN5sYDUELMUyUW68GWj0G//0uFN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEt ZjVmNDkwZDJjMTYzLzEvV3BSV08yRVZsU3ZfRDdXNWZjZXZLSWNYMTdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEtZjVmNDkwZDJjMTYz LzEvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuehgMA0E AgACMAcDBQMqENKAMA0GCSqGSIb3DQEBCwUAA4IBAQB9/DjK1eP2BuA1zK5A4mzp ltSV4ntlbztE7iFXXW7BxlgCiTCp+9EcjOyMssHkygFW+JHU/uSYnc2AP0vC8LRr n36Z4cK1CM2Ggm988W8nbSm/tqdx/N6EBdwqn+uBX6wCCuqZNOzfahyavx8UZUyz b4KVZ/GsdmJcg4c/SQk0yopBvCNpA4HFECHq2JSXySVTMlhQMfmiaXXYC3ppFTAn 5ceMReV7t27S6WdRHrqfPxx0LIB2HuKfQ6RZD7kcYEsnpe674T7ggvk73mAqqbfh DNk0W1oBD15OcW6hbVORGXJMfwvbtMXZBIhZrSwlU7Q8xxKbbDmNkfm2rsq+WKxQ -----END CERTIFICATE-----Generated at Fri Jan 9 09:19:25 2026 by rpki-client