This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WgnuXE270YSFkUTZerhz7u124Yc.roa File: WgnuXE270YSFkUTZerhz7u124Yc.roa (raw, json) Hash identifier: xSMnrVPYfL2SFQRkeEf+E4qQWFPZwzKg7tH4A/0uG94= Subject key identifier: 5A:09:EE:5C:4D:BB:D1:84:85:91:44:D9:7A:B8:73:EE:ED:76:E1:87 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019BBD3D7E1286649B8B19ADDF2E51FCD03A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WgnuXE270YSFkUTZerhz7u124Yc.roa Signing time: Wed 14 Jan 2026 16:01:22 +0000 ROA not before: Wed 14 Jan 2026 16:01:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.74.0/23 maxlen: 24 93.123.109.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.73.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 16:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:3d:7e:12:86:64:9b:8b:19:ad:df:2e:51:fc:d0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 14 16:01:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a09ee5c4dbbd184859144d97ab873eeed76e187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:d8:f5:d6:2f:e6:ea:5c:23:5b:6d:e6:3e: ff:57:25:b1:49:32:8f:58:16:61:fa:15:b6:ff:09: a0:9e:73:85:0a:69:69:f0:14:7a:26:05:27:33:16: 98:b2:ea:76:98:ca:37:5c:9e:a1:b0:a6:07:b4:39: b4:8d:50:b5:0d:ec:fb:eb:b3:26:2c:b5:e8:be:42: 13:f3:c1:b7:3c:96:2a:73:c6:e1:bf:4d:6d:a6:b5: 9f:22:f0:12:39:91:fb:a3:1f:96:b0:c5:e6:24:ac: ba:05:95:86:e9:a9:5d:fc:cd:1d:d3:3e:59:47:15: 57:5a:b1:e3:0c:9e:02:32:65:51:35:db:8d:3e:53: 62:da:63:a1:fd:32:5a:d0:fe:9d:c1:bd:fb:0e:3d: 43:aa:e4:44:f5:30:6c:6b:61:8d:5c:ff:7a:5a:a2: 00:3f:c7:b2:18:6d:29:fc:64:73:d0:83:77:37:bd: 1a:2e:e4:1e:91:14:6b:fd:85:fc:1b:23:3c:46:bb: 1d:55:eb:43:4a:b4:20:df:99:32:83:00:49:00:13: 48:7b:24:22:0d:dd:1e:21:0b:64:07:a6:de:85:d8: f8:aa:a1:51:a7:0e:57:4f:f9:ee:51:40:6d:ff:88: 2a:29:91:d0:c7:41:5c:b7:32:4f:5a:57:c2:d7:11: e2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:09:EE:5C:4D:BB:D1:84:85:91:44:D9:7A:B8:73:EE:ED:76:E1:87 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WgnuXE270YSFkUTZerhz7u124Yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.121.60.0/23 87.121.132.0/22 87.121.165.0/24 92.119.196.0/23 92.249.50.0/24 93.123.74.0/23 93.123.109.0/24 185.222.160.0/24 193.25.216.0/24 194.55.186.0/24 194.169.175.0/24 212.73.149.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b3:bd:0a:51:2f:b4:e8:02:1b:7a:ef:81:3c:a8:1e:1c:38: d2:ef:4c:a1:e6:36:c7:3c:70:47:c6:4e:7a:9e:73:3b:0b:a7: 5a:d5:18:54:5b:f7:67:ed:84:d1:92:6e:76:ed:86:c8:47:2c: c8:ce:16:ba:cf:9e:22:f1:b9:fb:23:51:78:44:3e:1c:6c:10: 0d:6f:a9:ae:5c:4e:92:d7:fd:ac:f2:c2:b7:0f:c2:c1:0f:85: 75:dd:a6:0d:4b:8d:a0:5b:b9:fa:62:bf:a6:ec:ed:ff:b2:9d: 28:20:13:cb:e0:56:92:9b:b6:6c:cf:09:1e:28:dd:20:cf:7f: f5:62:2e:73:06:14:0f:87:ee:12:cc:8d:5d:99:e0:60:69:ec: ce:1a:bf:7d:6c:d8:56:61:40:cd:d6:5e:8b:a3:1c:b2:b9:a7: e9:c4:62:84:36:d3:3d:d2:a1:49:05:34:f6:60:30:dd:aa:87: 9d:4e:09:ea:78:66:52:8c:ef:9d:1d:97:bd:83:59:27:c7:64: b4:1d:2e:2b:20:0d:b4:51:96:8b:6d:5a:2a:5a:4a:05:1d:ed: 4d:03:5d:92:19:dc:35:65:67:f0:5a:45:5c:3e:20:e0:c7:d0: 01:90:4c:34:2a:21:ad:92:b7:ff:bc:75:d3:b7:27:6b:17:30: dc:75:16:00 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZu9PX4ShmSbixmt3y5R/NA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTE0MTYwMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTA5ZWU1YzRkYmJkMTg0ODU5MTQ0ZDk3YWI4NzNlZWVkNzZlMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFHY9dYv5upcI1tt5j7/VyWxSTKP WBZh+hW2/wmgnnOFCmlp8BR6JgUnMxaYsup2mMo3XJ6hsKYHtDm0jVC1Dez767Mm LLXovkIT88G3PJYqc8bhv01tprWfIvASOZH7ox+WsMXmJKy6BZWG6ald/M0d0z5Z RxVXWrHjDJ4CMmVRNduNPlNi2mOh/TJa0P6dwb37Dj1DquRE9TBsa2GNXP96WqIA P8eyGG0p/GRz0IN3N70aLuQekRRr/YX8GyM8RrsdVetDSrQg35kygwBJABNIeyQi Dd0eIQtkB6behdj4qqFRpw5XT/nuUUBt/4gqKZHQx0FctzJPWlfC1xHiiwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFFoJ7lxNu9GEhZFE2Xq4c+7tduGHMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvV2dudVhFMjcwWVNGa1VUWmVyaHo3dTEyNFljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAC1C 5AMEAC1C5wMEAC1Z9wMEAC2NngMEAFGh7gMEAVXZggMEAFd4VwMEAFd4fgMEAFd4 pgMEAVd5PAMEAld5hAMEAFd5pQMEAVx3xAMEAFz5MgMEAV17SgMEAF17bQMEALne oAMEAMEZ2AMEAMI3ugMEAMKprwMEANRJlTANBgkqhkiG9w0BAQsFAAOCAQEACLO9 ClEvtOgCG3rvgTyoHhw40u9MoeY2xzxwR8ZOep5zOwunWtUYVFv3Z+2E0ZJudu2G yEcsyM4Wus+eIvG5+yNReEQ+HGwQDW+prlxOktf9rPLCtw/CwQ+Fdd2mDUuNoFu5 +mK/puzt/7KdKCATy+BWkpu2bM8JHijdIM9/9WIucwYUD4fuEsyNXZngYGnszhq/ fWzYVmFAzdZei6Mcsrmn6cRihDbTPdKhSQU09mAw3aqHnU4J6nhmUozvnR2XvYNZ J8dktB0uKyANtFGWi21aKlpKBR3tTQNdkhncNWVn8FpFXD4g4MfQAZBMNCohrZK3 /7x107cnaxcw3HUWAA== -----END CERTIFICATE-----Generated at Thu Jan 15 01:32:48 2026 by rpki-client