This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/WXwPoRCbPqeE9PVP8z3V258rpMo.roa File: WXwPoRCbPqeE9PVP8z3V258rpMo.roa (raw, json) Hash identifier: plbJpqwh1XwCDwZThguZTHp1pk+o9N71tabRf4ITG0w= Subject key identifier: 59:7C:0F:A1:10:9B:3E:A7:84:F4:F5:4F:F3:3D:D5:DB:9F:2B:A4:CA Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b Certificate serial: 019B78A30415885644D361E8BB977C4ADE7D Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/WXwPoRCbPqeE9PVP8z3V258rpMo.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212190 IP address blocks: 45.90.239.0/24 maxlen: 24 213.232.217.0/24 maxlen: 24 2a14:7940::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:04:15:88:56:44:d3:61:e8:bb:97:7c:4a:de:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=597c0fa1109b3ea784f4f54ff33dd5db9f2ba4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:9a:a3:f2:bf:23:12:64:6c:6c:db:72:fd: d8:bf:f1:b3:5d:5e:c8:b8:96:32:fd:26:c7:6e:d2: d5:84:e2:c5:5d:a3:87:2c:b3:b1:43:09:c5:bc:28: c7:da:54:5d:a8:b7:86:59:26:a9:08:74:2b:93:83: 17:24:ab:08:6c:9a:d7:f4:70:6f:48:02:21:6c:08: 6b:56:1f:8d:9d:a8:a5:6a:1a:23:50:a7:16:ba:a6: 5f:96:dc:7f:4d:72:a9:7f:a1:33:a9:ba:fa:68:1f: f2:7c:93:76:bb:f4:18:f7:a1:ec:ce:83:9e:82:8f: 09:8f:9e:97:4e:b2:70:74:a1:1c:39:0e:98:d8:1f: 27:22:da:cd:29:ef:70:22:5f:48:69:c1:3d:ba:63: 07:f2:0e:4e:88:40:c2:06:9c:ec:55:af:66:9e:d1: c2:89:dd:3e:f4:0b:04:57:ed:71:39:ca:a6:2e:3a: 22:60:99:bc:a5:35:4f:af:de:a3:7d:4a:2c:d8:0b: 70:77:03:26:59:f0:1c:52:15:1a:f1:34:07:d4:6d: 8c:6d:5a:b6:4c:9d:79:5e:1c:c6:74:a8:d2:5b:12: 7a:64:3c:dc:c5:74:f8:3a:b9:29:a5:69:b2:75:a9: 0e:1f:c3:51:a1:80:84:86:76:13:c3:4e:2f:25:19: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7C:0F:A1:10:9B:3E:A7:84:F4:F5:4F:F3:3D:D5:DB:9F:2B:A4:CA X509v3 Authority Key Identifier: keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/WXwPoRCbPqeE9PVP8z3V258rpMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.239.0/24 213.232.217.0/24 IPv6: 2a14:7940::/31 Signature Algorithm: sha256WithRSAEncryption 15:fe:55:0e:2f:54:84:85:38:56:7a:fd:4e:30:39:a8:f2:81: 3c:9f:c8:59:a2:17:e3:32:98:14:a0:e8:60:ef:8e:a9:5d:66: 4a:12:20:7c:f9:42:07:e8:e5:5b:7c:bf:31:49:ec:cb:2f:c7: 4e:8a:14:78:05:56:26:7e:46:48:28:35:9d:9c:6f:c0:a2:94: 19:d5:9a:b1:c9:19:56:2a:6f:6a:37:b2:5f:6a:93:5e:e9:62: 67:72:d3:8e:3d:23:17:92:34:5c:69:08:33:fc:a9:00:00:1f: 21:72:fa:02:5e:3f:20:8f:ac:25:ff:4b:1f:95:3d:d7:a3:6d: 53:31:02:b4:f6:8e:e8:ae:0b:de:ec:1f:20:d8:ee:70:c2:39: 82:22:90:ac:9f:21:89:6b:85:a4:b6:ba:8c:5e:b2:e1:1a:0e: ac:15:9c:1a:20:30:36:b2:f3:a5:2a:66:26:65:5e:f3:40:c7: 02:b0:93:45:17:db:1c:7d:ee:51:a6:e5:5f:cc:4f:a9:64:4d: 36:98:b4:b5:41:21:a0:bb:6e:ec:23:0e:ea:e0:69:7f:0c:4b: 54:6f:f0:76:24:2c:20:67:5f:c4:ef:86:ce:8f:e9:7b:7c:55: 53:9b:5f:bf:a9:07:33:e7:5e:36:73:cd:39:0b:5c:5b:7a:10: a9:1e:40:90 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4owQViFZE02Hou5d8St59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDljMDczYjRmNzA2OTdlMjE3NWMxYTk1NWY2Y2E4YzNh NjI0NmIwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTdjMGZhMTEwOWIzZWE3ODRmNGY1NGZmMzNkZDVkYjlmMmJhNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodmao/K/IxJkbGzbcv3Yv/GzXV7I uJYy/SbHbtLVhOLFXaOHLLOxQwnFvCjH2lRdqLeGWSapCHQrk4MXJKsIbJrX9HBv SAIhbAhrVh+NnailahojUKcWuqZfltx/TXKpf6Ezqbr6aB/yfJN2u/QY96HszoOe go8Jj56XTrJwdKEcOQ6Y2B8nItrNKe9wIl9IacE9umMH8g5OiEDCBpzsVa9mntHC id0+9AsEV+1xOcqmLjoiYJm8pTVPr96jfUos2AtwdwMmWfAcUhUa8TQH1G2MbVq2 TJ15XhzGdKjSWxJ6ZDzcxXT4OrkppWmydakOH8NRoYCEhnYTw04vJRnKwwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFl8D6EQmz6nhPT1T/M91dufK6TKMB8GA1UdIwQY MBaAFHTZwHO09waX4hdcGpVfbKjDpiRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQt YzE5MTQxMGRjODg5LzEvV1h3UG9SQ2JQcWVFOVBWUDh6M1YyNThycE1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQtYzE5MTQxMGRjODg5 LzEvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALVrvAwQA 1ejZMA0EAgACMAcDBQEqFHlAMA0GCSqGSIb3DQEBCwUAA4IBAQAV/lUOL1SEhThW ev1OMDmo8oE8n8hZohfjMpgUoOhg746pXWZKEiB8+UIH6OVbfL8xSezLL8dOihR4 BVYmfkZIKDWdnG/AopQZ1ZqxyRlWKm9qN7JfapNe6WJnctOOPSMXkjRcaQgz/KkA AB8hcvoCXj8gj6wl/0sflT3Xo21TMQK09o7orgve7B8g2O5wwjmCIpCsnyGJa4Wk trqMXrLhGg6sFZwaIDA2svOlKmYmZV7zQMcCsJNFF9scfe5RpuVfzE+pZE02mLS1 QSGgu27sIw7q4Gl/DEtUb/B2JCwgZ1/E74bOj+l7fFVTm1+/qQcz5142c805C1xb ehCpHkCQ -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:01 2026 by rpki-client