This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Wz06gXIhuhxbEEKni6w_gHB7fwY.roa File: Wz06gXIhuhxbEEKni6w_gHB7fwY.roa (raw, json) Hash identifier: OCp/vybdikRmO2crjK5WJEoEkNcCMljGhE97xh6MTg4= Subject key identifier: 5B:3D:3A:81:72:21:BA:1C:5B:10:42:A7:8B:AC:3F:80:70:7B:7F:06 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C802960DB9220B6C55A60B16607BB1C Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Wz06gXIhuhxbEEKni6w_gHB7fwY.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212508 IP address blocks: 152.89.254.0/24 maxlen: 24 152.89.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:29:60:db:92:20:b6:c5:5a:60:b1:66:07:bb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b3d3a817221ba1c5b1042a78bac3f80707b7f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:89:04:c1:08:9d:00:a4:a0:8d:4f:44:bf:e8: da:97:0e:d1:2f:09:38:92:f0:59:cd:19:07:21:6e: fc:42:7a:91:f9:cc:11:b0:65:9a:f2:16:4c:94:68: 68:11:f2:17:8d:43:e8:76:b0:9c:56:f4:d6:c6:06: 5a:06:ae:c7:6d:50:9f:56:2d:01:57:6f:72:73:f0: fb:af:d5:52:c2:02:db:21:cb:5c:d3:fe:0e:a7:79: ed:47:22:c0:8a:59:85:6e:d4:3c:17:e7:40:5c:d3: c6:25:24:a2:be:ec:75:24:85:17:3e:4d:0f:3b:69: eb:fe:aa:9f:d3:b4:13:f0:cf:ae:1c:81:ca:51:09: a9:61:b5:bb:df:c8:c8:5e:d8:bb:e4:25:00:90:1c: 39:95:02:d8:90:b8:4a:67:8c:27:cd:42:83:ff:3c: 5c:c9:20:c3:20:2a:7f:51:92:d4:39:bc:c8:a3:d8: ee:f9:c0:6b:28:fe:00:b3:8b:cf:46:d5:b0:09:a6: a3:60:00:1b:f2:98:3e:14:19:f6:d6:ec:18:7b:8e: 02:3c:2f:f1:b1:2c:00:f0:ec:e0:c8:a7:8a:3a:e4: 5d:fc:09:6d:51:0f:ae:8d:18:46:98:74:3b:33:55: ee:c3:62:ee:6a:79:0d:0c:cc:1c:3a:0e:d6:78:8c: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3D:3A:81:72:21:BA:1C:5B:10:42:A7:8B:AC:3F:80:70:7B:7F:06 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Wz06gXIhuhxbEEKni6w_gHB7fwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.254.0/23 Signature Algorithm: sha256WithRSAEncryption 28:87:02:aa:99:a5:b9:68:fc:4a:5e:37:46:ea:10:1d:26:13: b0:5b:aa:4c:b6:d3:69:99:30:5a:93:bf:e6:36:1c:80:b0:13: 6b:56:3f:5e:4b:df:bc:26:97:1c:a9:65:b6:04:7a:ea:1b:55: 67:63:84:d2:12:51:85:74:e1:ba:d9:15:46:7e:fb:b7:75:b5: d0:cb:ce:3f:12:d4:ae:34:e1:f5:a1:0a:e1:5e:14:36:ee:e7: 57:b7:f1:35:de:39:38:e6:be:a9:56:3b:68:a4:b4:4c:5d:36: de:4b:7c:71:5c:41:ee:1b:dd:4a:a7:e9:6f:dd:80:38:74:2c: 9e:c6:c6:6c:59:79:4c:4e:91:07:99:9a:21:af:bd:77:0c:53: 94:8e:f0:d8:fb:9d:dd:82:e1:25:46:d0:e5:68:80:92:e2:27: bf:74:b7:07:bd:12:03:75:10:37:69:81:ff:88:a5:6c:58:6e: 73:fd:b4:dd:ef:81:0d:dd:e3:03:b4:18:61:c5:ce:d4:b3:46: 4d:03:c1:da:56:78:04:68:0c:77:4c:fe:e4:82:01:22:a2:0d: b1:a8:3f:7b:33:11:fb:02:ae:0b:29:2f:6c:e3:51:3d:68:e6: ca:6b:26:6a:7c:77:9a:9f:3e:c7:2b:3f:05:4b:4b:e0:8d:92: e3:e1:be:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gClg25IgtsVaYLFmB7scMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjNkM2E4MTcyMjFiYTFjNWIxMDQyYTc4YmFjM2Y4MDcwN2I3ZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9okEwQidAKSgjU9Ev+jalw7RLwk4 kvBZzRkHIW78QnqR+cwRsGWa8hZMlGhoEfIXjUPodrCcVvTWxgZaBq7HbVCfVi0B V29yc/D7r9VSwgLbIctc0/4Op3ntRyLAilmFbtQ8F+dAXNPGJSSivux1JIUXPk0P O2nr/qqf07QT8M+uHIHKUQmpYbW738jIXti75CUAkBw5lQLYkLhKZ4wnzUKD/zxc ySDDICp/UZLUObzIo9ju+cBrKP4As4vPRtWwCaajYAAb8pg+FBn21uwYe44CPC/x sSwA8OzgyKeKOuRd/AltUQ+ujRhGmHQ7M1Xuw2LuankNDMwcOg7WeIwnSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFs9OoFyIbocWxBCp4usP4Bwe38GMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvV3owNmdYSWh1aHhiRUVLbmk2d19nSEI3ZndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmFn+MA0G CSqGSIb3DQEBCwUAA4IBAQAohwKqmaW5aPxKXjdG6hAdJhOwW6pMttNpmTBak7/m NhyAsBNrVj9eS9+8JpccqWW2BHrqG1VnY4TSElGFdOG62RVGfvu3dbXQy84/EtSu NOH1oQrhXhQ27udXt/E13jk45r6pVjtopLRMXTbeS3xxXEHuG91Kp+lv3YA4dCye xsZsWXlMTpEHmZohr713DFOUjvDY+53dguElRtDlaICS4ie/dLcHvRIDdRA3aYH/ iKVsWG5z/bTd74EN3eMDtBhhxc7Us0ZNA8HaVngEaAx3TP7kggEiog2xqD97MxH7 Aq4LKS9s41E9aObKayZqfHeanz7HKz8FS0vgjZLj4b68 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:52 2026 by rpki-client