This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/WgYeh4GgBuSiaPnAnkmSr-Hazow.roa File: WgYeh4GgBuSiaPnAnkmSr-Hazow.roa (raw, json) Hash identifier: fg0SZFme2av1Va6EZECGVdTlPVjqOkeycpV3DcHpZs0= Subject key identifier: 5A:06:1E:87:81:A0:06:E4:A2:68:F9:C0:9E:49:92:AF:E1:DA:CE:8C Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a Certificate serial: 019B7CEE5524968DF821EB7372A701590DDE Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/WgYeh4GgBuSiaPnAnkmSr-Hazow.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35539 IP address blocks: 31.134.192.0/21 maxlen: 21 46.160.192.0/18 maxlen: 18 46.160.192.0/19 maxlen: 19 46.160.224.0/19 maxlen: 19 93.95.160.0/21 maxlen: 21 93.95.160.0/22 maxlen: 22 93.95.164.0/22 maxlen: 22 93.123.128.0/17 maxlen: 17 93.123.128.0/18 maxlen: 18 93.123.192.0/18 maxlen: 18 95.131.208.0/21 maxlen: 21 95.131.208.0/22 maxlen: 22 95.131.212.0/22 maxlen: 22 217.194.240.0/20 maxlen: 20 217.194.240.0/21 maxlen: 21 217.194.248.0/21 maxlen: 21 2a01:5fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:55:24:96:8d:f8:21:eb:73:72:a7:01:59:0d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a061e8781a006e4a268f9c09e4992afe1dace8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:59:59:2e:67:3e:91:b6:b7:61:e2:97:6d:ea: 07:54:92:51:0b:be:30:f3:36:20:ef:fb:9f:13:3a: 53:75:3b:87:d1:83:a7:d3:fa:af:a5:85:5c:42:3d: 19:b1:aa:3e:9b:bc:93:11:c5:94:7d:21:fe:c9:4d: 05:84:39:46:d0:eb:4a:1d:2a:40:13:3c:4a:05:cb: 4e:c2:24:c8:e7:19:23:10:d7:10:f9:f9:25:53:b0: 9d:c7:b0:a3:7b:40:c9:8f:a9:4c:29:02:83:c5:3e: 87:08:28:72:a7:9f:fe:30:9c:72:10:a9:cf:f5:25: c7:4e:89:dc:fc:35:0e:ef:ce:2f:96:87:bc:37:79: 6a:65:fb:30:39:0f:b5:e1:6f:dd:cb:b5:32:c4:80: 6e:92:a3:7d:12:7c:7e:3e:89:dd:58:13:82:21:cd: 51:6f:21:71:15:c8:21:49:1d:de:77:cf:0a:c0:16: b3:ea:15:e7:2a:78:c0:b0:6e:14:86:18:9a:66:f0: 14:f6:3e:6c:3e:de:b8:43:62:a6:cc:af:b5:12:1c: ed:0b:53:d3:6c:3d:76:6d:15:1b:d7:cb:e2:79:e5: 44:86:fc:72:5d:35:17:87:85:c0:7b:bf:bf:89:6d: 62:1e:cb:61:c2:7b:f5:b0:da:eb:77:67:97:b2:c8: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:06:1E:87:81:A0:06:E4:A2:68:F9:C0:9E:49:92:AF:E1:DA:CE:8C X509v3 Authority Key Identifier: keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/WgYeh4GgBuSiaPnAnkmSr-Hazow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.134.192.0/21 46.160.192.0/18 93.95.160.0/21 93.123.128.0/17 95.131.208.0/21 217.194.240.0/20 IPv6: 2a01:5fc0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:f4:1b:c1:c1:24:6f:b2:e7:c1:48:87:d9:d2:2e:da:4b:ab: 1e:02:ae:50:ff:04:3a:ee:45:19:1c:9e:fb:ab:df:68:41:42: 05:db:47:8b:98:4d:71:06:95:18:06:4a:be:6b:27:7c:7a:78: ec:5d:7b:67:69:07:09:c5:cc:a0:fc:22:43:05:5e:54:b0:79: 90:f1:75:29:db:be:b9:00:70:66:7a:46:9e:e9:d4:cb:e5:75: 70:4e:76:22:a4:e5:d3:ca:e1:a2:f7:4b:0b:4d:97:4e:9c:28: 75:d9:21:69:e3:83:6a:7d:93:7a:33:07:c0:05:e1:5e:5f:5f: 8d:ad:3f:d1:65:14:e3:e5:c7:98:1f:da:26:2e:33:4e:1d:47: 9d:df:94:d5:c7:b8:5c:02:73:c4:24:36:91:9e:9a:4f:80:54: 73:a4:37:97:0a:a4:91:5a:e4:55:be:12:77:ee:3e:15:03:54: fd:73:bb:c4:e5:42:58:79:da:12:f3:97:37:58:4f:55:43:10: 64:f3:96:a1:2a:a0:ae:fd:1c:b2:29:99:a9:9a:85:8c:09:7a: 38:2b:8f:3e:3c:19:ac:b5:0e:6f:f8:60:cc:5b:84:8b:08:4d: e0:ce:58:38:bd:8d:ca:72:1c:37:12:bc:7d:ab:ac:b9:6e:87: 8b:98:df:bb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt87lUklo34IetzcqcBWQ3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MjA0NDZmNzlmZmMyZDdjM2E5ZWYzNDBjZTlkZTI1NzIz YTcxOWEwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTA2MWU4NzgxYTAwNmU0YTI2OGY5YzA5ZTQ5OTJhZmUxZGFjZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVlZLmc+kba3YeKXbeoHVJJRC74w 8zYg7/ufEzpTdTuH0YOn0/qvpYVcQj0Zsao+m7yTEcWUfSH+yU0FhDlG0OtKHSpA EzxKBctOwiTI5xkjENcQ+fklU7Cdx7Cje0DJj6lMKQKDxT6HCChyp5/+MJxyEKnP 9SXHTonc/DUO784vloe8N3lqZfswOQ+14W/dy7UyxIBukqN9Enx+PondWBOCIc1R byFxFcghSR3ed88KwBaz6hXnKnjAsG4UhhiaZvAU9j5sPt64Q2KmzK+1EhztC1PT bD12bRUb18vieeVEhvxyXTUXh4XAe7+/iW1iHsthwnv1sNrrd2eXssghfQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFFoGHoeBoAbkomj5wJ5Jkq/h2s6MMB8GA1UdIwQY MBaAFOUgRG95/8LXw6nvNAzp3iVyOnGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMt MGUwZTEzN2U1NTkxLzEvV2dZZWg0R2dCdVNpYVBuQW5rbVNyLUhhem93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMtMGUwZTEzN2U1NTkx LzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDH4bAAwQG LqDAAwQDXV+gAwQHXXuAAwQDX4PQAwQE2cLwMA0EAgACMAcDBQAqAV/AMA0GCSqG SIb3DQEBCwUAA4IBAQAP9BvBwSRvsufBSIfZ0i7aS6seAq5Q/wQ67kUZHJ77q99o QUIF20eLmE1xBpUYBkq+ayd8enjsXXtnaQcJxcyg/CJDBV5UsHmQ8XUp2765AHBm ekae6dTL5XVwTnYipOXTyuGi90sLTZdOnCh12SFp44NqfZN6MwfABeFeX1+NrT/R ZRTj5ceYH9omLjNOHUed35TVx7hcAnPEJDaRnppPgFRzpDeXCqSRWuRVvhJ37j4V A1T9c7vE5UJYedoS85c3WE9VQxBk85ahKqCu/RyyKZmpmoWMCXo4K48+PBmstQ5v +GDMW4SLCE3gzlg4vY3Kchw3Erx9q6y5boeLmN+7 -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:37 2026 by rpki-client