This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/WkUE5TtDSY0qUMHRVPnjHcODIrA.roa File: WkUE5TtDSY0qUMHRVPnjHcODIrA.roa (raw, json) Hash identifier: 7KfXEZ987lAvPil502fNFkfEV1D1Y8iJROoMhWkSDa8= Subject key identifier: 5A:45:04:E5:3B:43:49:8D:2A:50:C1:D1:54:F9:E3:1D:C3:83:22:B0 Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7 Certificate serial: 019B7F82F8F1C740D798FA3CAF94AA770527 Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/WkUE5TtDSY0qUMHRVPnjHcODIrA.roa Signing time: Fri 02 Jan 2026 16:20:48 +0000 ROA not before: Fri 02 Jan 2026 16:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204151 IP address blocks: 46.32.144.0/21 maxlen: 21 78.31.252.0/22 maxlen: 22 87.104.128.0/18 maxlen: 18 87.104.240.0/20 maxlen: 20 185.107.12.0/22 maxlen: 22 185.107.13.0/24 maxlen: 24 185.107.14.0/24 maxlen: 24 185.161.77.0/24 maxlen: 24 185.233.252.0/22 maxlen: 22 194.45.76.0/22 maxlen: 22 212.237.176.0/21 maxlen: 21 2a00:8200::/32 maxlen: 32 2a06:4000::/29 maxlen: 29 2a0c:f900::/29 maxlen: 29 2a12:3d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f8:f1:c7:40:d7:98:fa:3c:af:94:aa:77:05:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7 Validity Not Before: Jan 2 16:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a4504e53b43498d2a50c1d154f9e31dc38322b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:7f:74:6f:d3:4d:1d:0c:96:20:a6:14:c7: 30:7a:13:41:b1:30:2b:e5:88:b5:3d:e8:d7:75:4a: a4:61:8c:24:96:63:98:48:b0:3e:3a:40:9d:1a:fa: 46:4b:10:05:3d:ec:f7:52:21:34:3e:dd:2e:c0:54: 0c:7d:6c:5c:2e:70:44:48:99:94:c3:ab:63:db:77: 1d:b9:4b:a2:5b:1e:38:3c:cd:f1:31:f0:e2:42:21: 00:fb:f2:5e:d8:87:73:1d:4a:9a:4f:e4:43:4d:52: 3c:df:7c:73:b8:b5:d7:49:06:10:0d:3d:5e:8c:bf: f1:40:a8:18:e7:b5:95:3d:bc:63:e6:66:43:9e:f3: 21:a7:5f:d8:1f:3b:cf:66:47:b2:78:35:c1:01:ac: f4:28:94:ae:d3:2b:06:98:9d:23:47:60:98:e3:b0: 80:a9:aa:4c:ed:a7:d8:36:37:6e:a5:14:1d:3e:1a: f5:9b:d1:55:bb:64:d1:24:f9:cc:32:3e:c8:76:88: 48:34:49:fc:ec:bd:d5:21:5b:ec:b7:98:21:f5:69: 09:d8:c4:16:c5:2a:2b:52:fe:cc:0f:30:04:24:31: 3d:18:72:9b:06:63:8c:37:13:81:cf:4c:e6:c2:e2: c0:e1:70:0f:29:ff:5d:5a:62:d0:8f:c8:0c:99:36: e9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:45:04:E5:3B:43:49:8D:2A:50:C1:D1:54:F9:E3:1D:C3:83:22:B0 X509v3 Authority Key Identifier: keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/WkUE5TtDSY0qUMHRVPnjHcODIrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.144.0/21 78.31.252.0/22 87.104.128.0/18 87.104.240.0/20 185.107.12.0/22 185.161.77.0/24 185.233.252.0/22 194.45.76.0/22 212.237.176.0/21 IPv6: 2a00:8200::/32 2a06:4000::/29 2a0c:f900::/29 2a12:3d80::/29 Signature Algorithm: sha256WithRSAEncryption 34:25:57:0a:a3:1b:56:37:9c:85:73:9e:fb:38:f1:f1:8f:94: 08:4e:58:7c:54:7b:5d:1c:4a:52:33:01:c1:01:b2:41:03:17: 0c:0b:64:42:a5:02:b8:18:36:21:03:94:e4:9f:47:cc:a1:93: 1f:73:99:8e:23:3a:35:32:cf:62:5f:5f:04:66:7c:08:16:05: 3b:11:e5:c6:7d:c0:5f:e7:bf:b6:27:b8:0f:46:13:d0:ee:3c: 75:48:0e:28:49:be:e9:f5:66:67:d8:8c:55:26:26:ef:12:58: 02:82:00:24:2c:34:06:9d:d9:b1:dc:5f:1a:37:2f:39:e6:3b: 24:25:0a:e1:e1:20:5e:22:da:57:7e:bb:68:d7:03:c3:8c:3e: 54:83:13:88:46:12:6b:ce:35:94:7e:c5:aa:1f:71:54:04:c0: 58:66:9a:34:6d:d2:65:8f:66:96:90:88:7f:79:4a:4c:df:22: 28:aa:26:58:bb:61:30:08:9c:fb:2b:33:f5:38:f6:0a:4a:57: 88:80:d6:e7:33:67:ce:a7:ec:54:44:1f:5d:c7:2d:ab:7a:ce: 34:b4:a1:ef:91:68:91:bd:c4:92:b4:6e:31:43:81:29:9b:85: e0:78:14:3c:44:c3:a8:50:52:d2:26:60:79:d2:9f:8b:35:76: 41:54:c6:61 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt/gvjxx0DXmPo8r5SqdwUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTdlYjk2NzQzOGZmYzRlYjY2NjMzZGQ4YzAzNTAxODkz NjY3ZjcwHhcNMjYwMTAyMTYyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTQ1MDRlNTNiNDM0OThkMmE1MGMxZDE1NGY5ZTMxZGMzODMyMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv5/dG/TTR0MliCmFMcwehNBsTAr 5Yi1PejXdUqkYYwklmOYSLA+OkCdGvpGSxAFPez3UiE0Pt0uwFQMfWxcLnBESJmU w6tj23cduUuiWx44PM3xMfDiQiEA+/Je2IdzHUqaT+RDTVI833xzuLXXSQYQDT1e jL/xQKgY57WVPbxj5mZDnvMhp1/YHzvPZkeyeDXBAaz0KJSu0ysGmJ0jR2CY47CA qapM7afYNjdupRQdPhr1m9FVu2TRJPnMMj7IdohINEn87L3VIVvst5gh9WkJ2MQW xSorUv7MDzAEJDE9GHKbBmOMNxOBz0zmwuLA4XAPKf9dWmLQj8gMmTbpFQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFFpFBOU7Q0mNKlDB0VT54x3DgyKwMB8GA1UdIwQY MBaAFKyX65Z0OP/E62ZjPdjANQGJNmf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEt Y2YxOTk3YzAyNTBkLzEvV2tVRTVUdERTWTBxVU1IUlZQbmpIY09ESXJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEtY2YxOTk3YzAyNTBk LzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjA8BAIAATA2AwQDLiCQAwQC Th/8AwQGV2iAAwQEV2jwAwQCuWsMAwQAuaFNAwQCuen8AwQCwi1MAwQD1O2wMCIE AgACMBwDBQAqAIIAAwUDKgZAAAMFAyoM+QADBQMqEj2AMA0GCSqGSIb3DQEBCwUA A4IBAQA0JVcKoxtWN5yFc577OPHxj5QITlh8VHtdHEpSMwHBAbJBAxcMC2RCpQK4 GDYhA5Tkn0fMoZMfc5mOIzo1Ms9iX18EZnwIFgU7EeXGfcBf57+2J7gPRhPQ7jx1 SA4oSb7p9WZn2IxVJibvElgCggAkLDQGndmx3F8aNy855jskJQrh4SBeItpXfrto 1wPDjD5UgxOIRhJrzjWUfsWqH3FUBMBYZpo0bdJlj2aWkIh/eUpM3yIoqiZYu2Ew CJz7KzP1OPYKSleIgNbnM2fOp+xURB9dxy2res40tKHvkWiRvcSStG4xQ4Epm4Xg eBQ8RMOoUFLSJmB50p+LNXZBVMZh -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:01 2026 by rpki-client