This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WXDDnLp-lNXSafgmrkcLnxLOBlw.roa File: WXDDnLp-lNXSafgmrkcLnxLOBlw.roa (raw, json) Hash identifier: 6JlmG4AGYa914ulkLURz8kbr4sZRCMUh+neu9P68Gm0= Subject key identifier: 59:70:C3:9C:BA:7E:94:D5:D2:69:F8:26:AE:47:0B:9F:12:CE:06:5C Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37E43580D457F27F2A3D20263086E0 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WXDDnLp-lNXSafgmrkcLnxLOBlw.roa Signing time: Fri 02 Jan 2026 10:19:10 +0000 ROA not before: Fri 02 Jan 2026 10:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 62.244.237.0/24 maxlen: 24 195.87.92.0/24 maxlen: 24 212.133.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e4:35:80:d4:57:f2:7f:2a:3d:20:26:30:86:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5970c39cba7e94d5d269f826ae470b9f12ce065c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:10:89:ff:40:08:7f:20:58:33:d3:3f:a7:05: 8f:d3:0a:4b:91:3c:ef:e1:f9:82:7f:12:4a:1d:28: 8b:97:03:37:1c:89:09:3a:76:bf:76:1a:a8:40:19: 57:9d:4e:d4:4c:7b:d5:c1:0d:17:5f:29:45:8a:fd: 19:2d:d6:90:2b:55:b8:48:cd:4c:6e:57:92:71:34: 5c:29:83:b0:0e:44:f7:5b:35:56:ba:0a:c6:8e:83: 1f:6a:a4:d4:2d:56:02:db:f0:29:7a:f3:55:8d:93: d5:68:5c:da:0a:e0:6b:4f:6c:d4:dd:ef:15:3d:ef: cd:72:82:f5:58:57:46:b5:05:dc:9b:ae:27:ad:57: 66:bb:e9:7c:d3:3e:22:2f:6a:2c:24:cb:22:cc:63: 8d:0d:04:b4:13:11:a6:7b:9a:f4:ea:aa:e0:43:81: 16:46:9b:e5:ef:81:e3:33:61:0a:02:37:94:e8:c0: 54:43:b0:66:87:c9:68:f8:f4:c2:75:32:2d:31:7e: 06:87:86:ec:04:0a:1b:a8:71:3a:73:35:45:6c:57: f7:c9:14:5f:94:ad:d9:20:1a:6b:e2:35:6b:9e:c6: 29:d5:a5:d9:20:fb:7c:73:77:09:cf:86:99:f7:35: d1:36:47:51:a1:51:bb:80:af:9c:b0:da:d0:ed:06: 10:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:70:C3:9C:BA:7E:94:D5:D2:69:F8:26:AE:47:0B:9F:12:CE:06:5C X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WXDDnLp-lNXSafgmrkcLnxLOBlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.237.0/24 195.87.92.0/24 212.133.164.0/24 Signature Algorithm: sha256WithRSAEncryption a2:e6:23:a8:2e:68:d7:e5:2f:9e:57:ba:fe:80:12:58:17:87: 34:9e:f9:e7:8e:94:45:00:16:a0:ef:ec:54:12:e3:97:92:33: 7b:7a:0c:ba:74:c9:ab:55:bb:11:92:49:45:29:bb:18:c5:6b: a0:5a:52:10:c1:64:d7:c5:d7:c7:5e:96:ab:49:f6:51:47:46: 1d:f1:e5:53:91:80:31:3b:4d:28:ec:5c:6d:a0:e6:3b:07:8e: 0c:6c:40:7c:9c:1e:37:a6:fb:a5:06:a2:c7:0d:be:9a:32:9a: 7f:fc:ba:e2:c8:a3:5c:b5:16:19:00:9a:18:5e:9d:3c:27:a1: c6:7e:98:9d:11:2d:15:6e:77:73:5d:80:9c:ee:7e:0f:83:f9: d6:23:4e:29:62:8e:55:2b:2e:22:10:59:49:cd:a5:66:af:a2: 33:cb:2e:f0:aa:79:7d:6b:a8:74:2d:58:c2:aa:63:b1:79:82: dd:6a:d0:2c:b8:61:cc:ee:ef:a7:26:8a:7a:a3:18:a8:29:9c: 8e:73:07:0a:08:93:86:d5:5b:11:1b:ef:12:fd:f5:bf:74:42: 94:8c:ff:eb:c6:c1:0f:f3:71:b8:85:47:63:5d:1e:8d:75:7f: 47:8a:de:92:85:16:71:5c:5b:38:3c:b0:57:c9:8c:1f:c8:ea: 8b:57:a8:b7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N+Q1gNRX8n8qPSAmMIbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTcwYzM5Y2JhN2U5NGQ1ZDI2OWY4MjZhZTQ3MGI5ZjEyY2UwNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhCJ/0AIfyBYM9M/pwWP0wpLkTzv 4fmCfxJKHSiLlwM3HIkJOna/dhqoQBlXnU7UTHvVwQ0XXylFiv0ZLdaQK1W4SM1M bleScTRcKYOwDkT3WzVWugrGjoMfaqTULVYC2/ApevNVjZPVaFzaCuBrT2zU3e8V Pe/NcoL1WFdGtQXcm64nrVdmu+l80z4iL2osJMsizGONDQS0ExGme5r06qrgQ4EW Rpvl74HjM2EKAjeU6MBUQ7Bmh8lo+PTCdTItMX4Gh4bsBAobqHE6czVFbFf3yRRf lK3ZIBpr4jVrnsYp1aXZIPt8c3cJz4aZ9zXRNkdRoVG7gK+csNrQ7QYQkwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFlww5y6fpTV0mn4Jq5HC58SzgZcMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvV1hERG5McC1sTlhTYWZnbXJrY0xueExPQmx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPvTtAwQA w1dcAwQA1IWkMA0GCSqGSIb3DQEBCwUAA4IBAQCi5iOoLmjX5S+eV7r+gBJYF4c0 nvnnjpRFABag7+xUEuOXkjN7egy6dMmrVbsRkklFKbsYxWugWlIQwWTXxdfHXpar SfZRR0Yd8eVTkYAxO00o7FxtoOY7B44MbEB8nB43pvulBqLHDb6aMpp//LriyKNc tRYZAJoYXp08J6HGfpidES0VbndzXYCc7n4Pg/nWI04pYo5VKy4iEFlJzaVmr6Iz yy7wqnl9a6h0LVjCqmOxeYLdatAsuGHM7u+nJop6oxioKZyOcwcKCJOG1VsRG+8S /fW/dEKUjP/rxsEP83G4hUdjXR6NdX9Hit6ShRZxXFs4PLBXyYwfyOqLV6i3 -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:52 2026 by rpki-client