This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/WgyWXzUsbTmY_1RP05v7gzecvkE.roa File: WgyWXzUsbTmY_1RP05v7gzecvkE.roa (raw, json) Hash identifier: 21qhAR+umq3QUHZh7Y6Cu4mrPcpjOq1CbtvmUgC6mpY= Subject key identifier: 5A:0C:96:5F:35:2C:6D:39:98:FF:54:4F:D3:9B:FB:83:37:9C:BE:41 Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8 Certificate serial: 019B7F815E2241BAA1E4316DBCC73D7C4D23 Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/WgyWXzUsbTmY_1RP05v7gzecvkE.roa Signing time: Fri 02 Jan 2026 16:19:03 +0000 ROA not before: Fri 02 Jan 2026 16:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33796 IP address blocks: 194.8.242.0/23 maxlen: 23 194.28.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:5e:22:41:ba:a1:e4:31:6d:bc:c7:3d:7c:4d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8 Validity Not Before: Jan 2 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a0c965f352c6d3998ff544fd39bfb83379cbe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:1f:a1:5d:b1:f7:9a:71:ee:e8:74:ab:93: ec:26:96:25:67:b4:0f:b3:f5:ac:81:25:12:ba:4a: 7a:3a:8e:45:79:10:de:0d:da:39:0f:60:46:03:ef: 1c:88:bc:0a:77:75:74:85:20:8d:ad:8c:e2:13:d7: 19:6c:b1:61:db:53:12:30:fc:36:6e:69:b8:16:95: c4:ac:38:30:ba:da:cb:fb:95:75:86:b5:50:b5:61: db:de:37:ed:ec:27:d6:72:34:d3:cd:68:dc:58:1b: 03:63:f0:52:9b:8e:35:28:75:4b:d5:46:55:b0:a5: a4:ac:96:f9:f3:1f:6c:6d:9b:ce:4f:65:77:76:48: 95:de:70:47:06:7c:9e:d9:80:57:02:c9:83:1a:64: f3:de:3b:e5:14:51:ef:44:d9:75:78:94:e0:b0:79: c5:21:84:40:ab:2b:c7:a5:a5:ed:8e:d4:1c:88:a2: db:14:e2:33:5c:a7:9d:a8:e1:ab:ed:db:71:07:e3: 8d:55:d6:44:c6:d9:ae:91:1f:c7:ba:05:a2:b2:71: de:19:48:98:ff:14:21:3b:a1:4f:98:f6:7f:80:04: 1a:37:9c:aa:49:6e:86:af:3c:d1:1d:a9:fb:ae:05: 3d:d9:81:fb:21:b0:93:5f:3d:ec:ba:e9:05:7f:08: 76:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0C:96:5F:35:2C:6D:39:98:FF:54:4F:D3:9B:FB:83:37:9C:BE:41 X509v3 Authority Key Identifier: keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/WgyWXzUsbTmY_1RP05v7gzecvkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.242.0/23 194.28.24.0/22 Signature Algorithm: sha256WithRSAEncryption 36:66:f3:fb:0e:e3:77:45:b6:b7:1e:d5:41:13:bc:57:53:8c: 41:03:f2:54:46:f0:41:df:1f:f7:bd:2d:5d:14:b4:2f:d6:08: 0a:2f:ef:74:75:65:4e:18:ba:f9:9d:4e:60:ab:f9:6d:56:28: fa:0a:1b:f7:cd:40:4f:ba:83:8e:77:c2:bf:cf:a9:28:36:f5: 94:73:66:f4:46:19:05:5d:76:a1:12:e1:5d:f6:1c:c3:bc:53: 14:ba:d4:12:51:53:f5:57:43:e6:03:2b:92:9b:e4:6a:15:7e: b6:58:1e:50:46:c1:b9:30:13:b9:56:57:2e:a8:25:9d:41:18: 11:89:7b:1f:8d:66:ba:22:f8:79:5d:c7:b9:e1:7b:9b:4e:27: 81:84:b5:a8:09:17:ff:e6:65:00:5d:55:3d:ad:5b:c7:a5:c4: 84:48:e1:08:9a:03:32:fe:b6:8b:e3:1b:ba:fe:ea:68:09:ef: 7d:03:f7:46:21:92:06:5d:eb:fc:04:92:81:5d:8c:ac:21:3f: 37:2b:dd:eb:05:a9:48:52:aa:63:05:4c:97:8d:54:b7:7b:0f: 88:38:2c:77:70:db:76:4d:56:4c:75:4d:ee:af:25:e5:dd:38: 6d:3b:23:ff:4f:bc:d0:4f:1f:8f:d4:ae:d6:ba:18:ac:37:90: 05:02:76:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gV4iQbqh5DFtvMc9fE0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzM2ZWRlYjkyZjkzN2VhNDU4OTNlYTliY2Y0ZWY4M2Yx NWZmYzgwHhcNMjYwMTAyMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTBjOTY1ZjM1MmM2ZDM5OThmZjU0NGZkMzliZmI4MzM3OWNiZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/QfoV2x95px7uh0q5PsJpYlZ7QP s/WsgSUSukp6Oo5FeRDeDdo5D2BGA+8ciLwKd3V0hSCNrYziE9cZbLFh21MSMPw2 bmm4FpXErDgwutrL+5V1hrVQtWHb3jft7CfWcjTTzWjcWBsDY/BSm441KHVL1UZV sKWkrJb58x9sbZvOT2V3dkiV3nBHBnye2YBXAsmDGmTz3jvlFFHvRNl1eJTgsHnF IYRAqyvHpaXtjtQciKLbFOIzXKedqOGr7dtxB+ONVdZExtmukR/HugWisnHeGUiY /xQhO6FPmPZ/gAQaN5yqSW6GrzzRHan7rgU92YH7IbCTXz3suukFfwh2XwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFoMll81LG05mP9UT9Ob+4M3nL5BMB8GA1UdIwQY MBaAFMdzbt65L5N+pFiT6pvPTvg/Ff/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYt NjY5NmRhZGI0NWViLzEvV2d5V1h6VXNiVG1ZXzFSUDA1djdnemVjdmtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYtNjY5NmRhZGI0NWVi LzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwgjyAwQC whwYMA0GCSqGSIb3DQEBCwUAA4IBAQA2ZvP7DuN3Rba3HtVBE7xXU4xBA/JURvBB 3x/3vS1dFLQv1ggKL+90dWVOGLr5nU5gq/ltVij6Chv3zUBPuoOOd8K/z6koNvWU c2b0RhkFXXahEuFd9hzDvFMUutQSUVP1V0PmAyuSm+RqFX62WB5QRsG5MBO5Vlcu qCWdQRgRiXsfjWa6Ivh5Xce54XubTieBhLWoCRf/5mUAXVU9rVvHpcSESOEImgMy /raL4xu6/upoCe99A/dGIZIGXev8BJKBXYysIT83K93rBalIUqpjBUyXjVS3ew+I OCx3cNt2TVZMdU3uryXl3ThtOyP/T7zQTx+P1K7WuhisN5AFAnZL -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:43 2026 by rpki-client