This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/wgpETV0ctXLiN05hA1XO5_ljpco.roa File: wgpETV0ctXLiN05hA1XO5_ljpco.roa (raw, json) Hash identifier: 7QpaMI3uEfsgVOxk023whBWoxJwTMZppePWCn+pGin0= Subject key identifier: C2:0A:44:4D:5D:1C:B5:72:E2:37:4E:61:03:55:CE:E7:F9:63:A5:CA Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019BA0471FF750DE4391FE276508551FB118 Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/wgpETV0ctXLiN05hA1XO5_ljpco.roa Signing time: Fri 09 Jan 2026 01:02:54 +0000 ROA not before: Fri 09 Jan 2026 01:02:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 87.58.64.0/24 maxlen: 24 87.58.65.0/24 maxlen: 24 159.254.0.0/24 maxlen: 24 159.254.1.0/24 maxlen: 24 159.254.2.0/24 maxlen: 24 159.254.3.0/24 maxlen: 24 159.254.4.0/24 maxlen: 24 159.254.5.0/24 maxlen: 24 159.254.6.0/24 maxlen: 24 159.254.7.0/24 maxlen: 24 159.254.8.0/24 maxlen: 24 159.254.9.0/24 maxlen: 24 159.254.10.0/24 maxlen: 24 159.254.11.0/24 maxlen: 24 159.254.12.0/24 maxlen: 24 159.254.80.0/24 maxlen: 24 159.254.81.0/24 maxlen: 24 159.254.82.0/24 maxlen: 24 159.254.186.0/24 maxlen: 24 159.254.187.0/24 maxlen: 24 159.254.188.0/24 maxlen: 24 159.254.189.0/24 maxlen: 24 159.254.190.0/24 maxlen: 24 159.254.191.0/24 maxlen: 24 159.254.200.0/24 maxlen: 24 159.254.201.0/24 maxlen: 24 159.254.207.0/24 maxlen: 24 159.254.208.0/24 maxlen: 24 194.9.116.0/24 maxlen: 24 2a03:eec0:3601::/48 maxlen: 48 2a03:eec0:3602::/48 maxlen: 48 2a03:eec0:3603::/48 maxlen: 48 2a03:eec0:3604::/48 maxlen: 48 2a03:eec0:3605::/48 maxlen: 48 2a03:eec0:3606::/48 maxlen: 48 2a03:eec0:3607::/48 maxlen: 48 2a03:eec0:3608::/48 maxlen: 48 2a03:eec0:3609::/48 maxlen: 48 2a03:eec0:360a::/48 maxlen: 48 2a03:eec0:360b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a0:47:1f:f7:50:de:43:91:fe:27:65:08:55:1f:b1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Jan 9 01:02:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20a444d5d1cb572e2374e610355cee7f963a5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:94:7b:cd:bb:e4:6c:f8:e6:3b:1a:58:12: 75:bd:07:7b:ca:d4:14:cc:14:ab:c3:da:60:a7:a1: 6d:06:9f:d4:22:75:b1:c1:cd:0e:c1:2b:df:c8:2e: b1:52:6f:14:57:60:c9:d5:45:ea:8a:27:06:7c:ce: 5d:8f:b1:ec:6d:7d:93:a5:eb:60:dc:0c:da:ad:d1: 21:3c:3a:38:2d:70:a0:17:18:9e:23:35:d7:1f:20: a6:45:fb:2a:0e:a4:6d:d7:e0:95:d7:88:9c:b2:4d: f2:0f:7d:2e:2f:b3:13:ef:13:80:46:05:de:88:62: 16:8d:d8:5c:5b:5e:af:9e:7a:d5:8a:4b:8b:ee:ad: d8:f5:5a:78:83:4e:e8:dc:21:ed:51:f3:1c:99:7e: e5:a6:34:90:f2:dc:ac:94:08:cf:72:2a:54:1a:9a: a6:df:97:af:0c:73:50:23:25:28:22:34:bc:2d:e5: ac:b5:a7:24:80:4b:95:84:d9:dc:b8:63:9e:56:92: a4:59:ff:f5:c3:a3:a1:14:de:bf:2e:2a:6d:f1:fe: e9:8d:c6:8c:a2:67:c2:3f:1c:7a:db:7a:e6:cf:83: 11:0c:f5:8f:bc:31:f9:f0:57:83:1f:2c:54:4d:61: ad:ac:f1:5c:85:a5:7c:36:83:60:66:35:4b:32:bd: 8e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0A:44:4D:5D:1C:B5:72:E2:37:4E:61:03:55:CE:E7:F9:63:A5:CA X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/wgpETV0ctXLiN05hA1XO5_ljpco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.58.64.0/23 159.254.0.0-159.254.12.255 159.254.80.0-159.254.82.255 159.254.186.0-159.254.191.255 159.254.200.0/23 159.254.207.0-159.254.208.255 194.9.116.0/24 IPv6: 2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0e:6f:c2:bb:98:5e:da:a8:c3:5d:94:74:5d:cc:0a:45:ee:d7: 4e:b6:ec:fb:75:6f:15:f7:9c:12:25:01:5e:11:f8:ec:45:40: 1f:f4:d3:c7:03:48:c6:27:35:8e:96:5f:ae:c5:36:0b:c2:bd: cd:5a:dc:e8:73:82:37:fc:2d:44:33:8a:25:a1:54:a8:7b:61: 11:19:fd:bf:45:f0:b7:d9:69:51:0f:b7:cf:05:96:25:39:c6: 0a:70:08:42:22:3a:35:13:e8:00:f1:aa:02:6e:60:65:ec:ac: d2:26:7a:8c:1b:47:61:96:1a:5d:05:41:34:79:ce:64:8c:d1: 71:1e:92:16:ff:31:d0:02:a2:b3:0b:50:33:19:57:6a:99:49: 83:71:4b:e3:b1:85:4b:7d:47:d0:70:83:53:24:5e:ad:67:6e: 1c:e6:03:2a:1c:a9:47:1a:f3:78:3d:e8:f1:c7:aa:4a:c9:35: 35:51:56:c2:37:61:cc:c6:b9:c1:cc:19:1d:6e:71:fd:1f:cd: e3:17:5d:43:8e:fa:3b:69:3d:bc:b2:53:d9:f5:bb:0d:ea:8d: 5d:2e:9b:de:95:cd:02:0f:f4:68:1f:6b:55:54:82:dc:7d:9c: a0:7c:9f:ad:be:87:72:4a:55:c6:54:10:f8:8f:e3:b6:09:d3: 63:ad:cd:6d -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZugRx/3UN5Dkf4nZQhVH7EYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjYwMTA5MDEwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjBhNDQ0ZDVkMWNiNTcyZTIzNzRlNjEwMzU1Y2VlN2Y5NjNhNWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY2Ue8275Gz45jsaWBJ1vQd7ytQU zBSrw9pgp6FtBp/UInWxwc0OwSvfyC6xUm8UV2DJ1UXqiicGfM5dj7HsbX2Tpetg 3AzardEhPDo4LXCgFxieIzXXHyCmRfsqDqRt1+CV14icsk3yD30uL7MT7xOARgXe iGIWjdhcW16vnnrVikuL7q3Y9Vp4g07o3CHtUfMcmX7lpjSQ8tyslAjPcipUGpqm 35evDHNQIyUoIjS8LeWstackgEuVhNncuGOeVpKkWf/1w6OhFN6/Lipt8f7pjcaM omfCPxx623rmz4MRDPWPvDH58FeDHyxUTWGtrPFchaV8NoNgZjVLMr2OtwIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFMIKRE1dHLVy4jdOYQNVzuf5Y6XKMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvd2dwRVRWMGN0WExpTjA1aEExWE81X2xqcGNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBPBAIAATBJAwQBVzpAMAsD AwGf/gMEAJ/+DDAMAwQEn/5QAwQAn/5SMAwDBAGf/roDBAaf/oADBAGf/sgwDAME AJ/+zwMEAJ/+0AMEAMIJdDAaBAIAAjAUMBIDBwAqA+7ANgEDBwIqA+7ANggwDQYJ KoZIhvcNAQELBQADggEBAA5vwruYXtqow12UdF3MCkXu10627Pt1bxX3nBIlAV4R +OxFQB/008cDSMYnNY6WX67FNgvCvc1a3Ohzgjf8LUQziiWhVKh7YREZ/b9F8LfZ aVEPt88FliU5xgpwCEIiOjUT6ADxqgJuYGXsrNImeowbR2GWGl0FQTR5zmSM0XEe khb/MdACorMLUDMZV2qZSYNxS+OxhUt9R9Bwg1MkXq1nbhzmAyocqUca83g96PHH qkrJNTVRVsI3YczGucHMGR1ucf0fzeMXXUOO+jtpPbyyU9n1uw3qjV0um96VzQIP 9Ggfa1VUgtx9nKB8n62+h3JKVcZUEPiP47YJ02OtzW0= -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:23 2026 by rpki-client