This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/wJ7n4Cyv5yi0Et0DPQ-gsfgO2yA.roa File: wJ7n4Cyv5yi0Et0DPQ-gsfgO2yA.roa (raw, json) Hash identifier: IbL7Tybn/7IrpAUwdY0EY1Zj+ryr0LEOO468Ffn+V/E= Subject key identifier: C0:9E:E7:E0:2C:AF:E7:28:B4:12:DD:03:3D:0F:A0:B1:F8:0E:DB:20 Certificate issuer: /CN=58c57c079e795a796b47a7ed32f072b058a93a6e Certificate serial: 019B7759020A9C2F9B2052A8A6DA8B9401BA Authority key identifier: 58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/wJ7n4Cyv5yi0Et0DPQ-gsfgO2yA.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50784 IP address blocks: 185.159.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:02:0a:9c:2f:9b:20:52:a8:a6:da:8b:94:01:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58c57c079e795a796b47a7ed32f072b058a93a6e Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c09ee7e02cafe728b412dd033d0fa0b1f80edb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:54:06:52:f1:a0:6d:d1:e4:b7:1f:32:e6:da: 39:96:ea:b3:e9:18:31:32:f9:96:dc:0e:62:34:07: 94:26:12:2c:a3:91:5e:d4:b2:0d:d6:de:29:a5:70: 2c:cb:8a:43:0b:f8:07:1c:43:f8:0e:e6:b2:e6:46: f5:02:5e:73:98:e9:ac:48:74:41:99:ef:1c:23:76: e0:56:8d:75:b7:32:ad:15:52:45:a5:cd:5e:33:78: 91:7a:18:7d:76:de:73:28:c3:7a:f0:77:dc:e8:ad: 06:b1:64:b0:28:55:86:da:5a:76:2e:8f:7f:54:22: 9b:ed:d5:96:44:6f:53:aa:ef:41:f7:9e:48:a8:25: 4c:f4:74:9f:d7:f6:a4:e0:01:a0:85:ab:64:a3:be: dc:8e:02:ef:a3:4e:56:77:f4:05:91:d1:29:fd:fe: 1a:c2:1b:45:d6:78:8c:f3:9a:b6:b7:52:59:13:04: 92:99:32:9c:db:e6:13:a5:8d:7a:cd:d6:ea:9b:11: 58:76:1d:72:7a:56:13:9c:21:8a:cf:d5:eb:0e:37: da:cd:2e:9e:ab:11:93:81:d4:29:de:67:e2:1d:35: 64:af:d0:a0:76:d1:f2:26:19:23:b7:1b:91:b2:0a: 96:fb:ce:99:97:9e:d7:e4:10:9e:b2:a3:2e:d5:a3: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9E:E7:E0:2C:AF:E7:28:B4:12:DD:03:3D:0F:A0:B1:F8:0E:DB:20 X509v3 Authority Key Identifier: keyid:58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/wJ7n4Cyv5yi0Et0DPQ-gsfgO2yA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.168.0/22 Signature Algorithm: sha256WithRSAEncryption 16:de:f2:61:24:04:30:0c:eb:1e:d2:2e:30:1d:5c:89:e5:59: 0a:9b:c3:79:31:28:07:af:f8:af:cd:bc:dd:28:5d:94:0a:06: ad:38:1d:e5:2e:2c:b2:d0:36:92:b0:a7:d7:3b:9e:33:67:06: 8e:40:14:7b:cb:7e:d4:87:79:3f:61:2b:9b:f6:61:22:3e:87: 79:2e:90:86:08:3d:b6:62:23:f3:a9:08:13:9e:a2:42:5d:f7: d3:5b:e1:08:a5:3a:27:20:e9:8c:3f:c2:81:fc:f7:8d:1c:25: 82:76:29:ba:67:0e:e7:91:ae:24:3e:36:2e:e7:e7:d8:33:7c: 8f:b0:45:19:79:08:4f:eb:8b:f9:e4:c1:23:44:8c:1e:a3:b0: c6:70:e4:32:3b:af:7e:7d:7f:80:96:24:c8:3a:76:b7:af:29: 09:50:1b:06:6b:4b:f5:0e:df:40:8a:e5:7e:f9:d5:31:f0:7a: a4:92:f4:cc:be:29:e0:0e:c4:5f:9e:69:9f:b5:27:ff:e2:fe: 86:5a:ec:b3:d9:2e:19:9c:fa:c8:3b:99:d2:da:06:f7:38:a7: c0:3e:0b:35:ee:1b:e8:51:50:87:a1:0d:95:c9:aa:d9:89:a7: 78:65:c8:42:71:19:37:b4:b0:92:22:70:6a:0a:91:ee:8c:4f: 49:b8:f7:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQIKnC+bIFKoptqLlAG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YzU3YzA3OWU3OTVhNzk2YjQ3YTdlZDMyZjA3MmIwNThh OTNhNmUwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDllZTdlMDJjYWZlNzI4YjQxMmRkMDMzZDBmYTBiMWY4MGVkYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21QGUvGgbdHktx8y5to5luqz6Rgx MvmW3A5iNAeUJhIso5Fe1LIN1t4ppXAsy4pDC/gHHEP4Duay5kb1Al5zmOmsSHRB me8cI3bgVo11tzKtFVJFpc1eM3iRehh9dt5zKMN68Hfc6K0GsWSwKFWG2lp2Lo9/ VCKb7dWWRG9Tqu9B955IqCVM9HSf1/ak4AGghatko77cjgLvo05Wd/QFkdEp/f4a whtF1niM85q2t1JZEwSSmTKc2+YTpY16zdbqmxFYdh1yelYTnCGKz9XrDjfazS6e qxGTgdQp3mfiHTVkr9CgdtHyJhkjtxuRsgqW+86Zl57X5BCesqMu1aOHmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMCe5+Asr+cotBLdAz0PoLH4DtsgMB8GA1UdIwQY MBaAFFjFfAeeeVp5a0en7TLwcrBYqTpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV01WOEI1NTVXbmxyUjZmdE12QnlzRmlwT200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMzU3NDYtOGU0Mi00ZDgwLWI3NmQt NTc1MjkyYmMzOTQxLzEvd0o3bjRDeXY1eWkwRXQwRFBRLWdzZmdPMnlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iMzU3NDYtOGU0Mi00ZDgwLWI3NmQtNTc1MjkyYmMzOTQx LzEvV01WOEI1NTVXbmxyUjZmdE12QnlzRmlwT200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ+oMA0G CSqGSIb3DQEBCwUAA4IBAQAW3vJhJAQwDOse0i4wHVyJ5VkKm8N5MSgHr/ivzbzd KF2UCgatOB3lLiyy0DaSsKfXO54zZwaOQBR7y37Uh3k/YSub9mEiPod5LpCGCD22 YiPzqQgTnqJCXffTW+EIpTonIOmMP8KB/PeNHCWCdim6Zw7nka4kPjYu5+fYM3yP sEUZeQhP64v55MEjRIweo7DGcOQyO69+fX+AliTIOna3rykJUBsGa0v1Dt9AiuV+ +dUx8HqkkvTMvingDsRfnmmftSf/4v6GWuyz2S4ZnPrIO5nS2gb3OKfAPgs17hvo UVCHoQ2VyarZiad4ZchCcRk3tLCSInBqCpHujE9JuPfV -----END CERTIFICATE-----Generated at Fri Jan 2 21:42:17 2026 by rpki-client