This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa File: Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa (raw, json) Hash identifier: G7MUAWNXEqs1+UqwYpVfJPda6fWT1l1YlfUSrCkPCOs= Subject key identifier: 59:F7:66:F2:20:C3:C3:49:48:F5:5F:44:60:6B:43:8B:34:A9:34:24 Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d Certificate serial: 019B7D5C901A7930549C0768876824FFCF61 Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa Signing time: Fri 02 Jan 2026 06:19:36 +0000 ROA not before: Fri 02 Jan 2026 06:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 37.205.8.0/22 maxlen: 22 37.205.12.0/22 maxlen: 22 185.8.164.0/23 maxlen: 23 185.8.166.0/23 maxlen: 24 2a03:3b40::/40 maxlen: 40 2a03:3b40:100::/40 maxlen: 40 2a03:3b40:200::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:90:1a:79:30:54:9c:07:68:87:68:24:ff:cf:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d Validity Not Before: Jan 2 06:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59f766f220c3c34948f55f44606b438b34a93424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:07:9c:c6:50:24:78:cf:fa:d9:27:5a:2e:99: 0c:71:58:2e:0d:2e:d8:c0:43:90:95:0b:5a:04:39: 07:03:8b:fe:f8:1f:08:24:1f:1e:6b:73:43:3a:b3: be:19:2b:61:0d:0d:82:4e:d3:53:26:85:75:84:2b: ad:dd:c8:b7:3f:7c:81:9f:e4:38:ea:9f:95:95:f2: bf:4c:7b:22:fb:c6:dc:0e:0c:fc:20:14:c4:5a:b2: 74:34:18:df:9e:56:c2:90:85:fa:a4:6e:c7:3f:2c: 46:23:96:ad:38:a2:c8:50:6e:4c:c6:73:47:a1:dd: 38:5f:27:2d:d7:88:ce:be:ad:0c:d2:bc:38:af:f6: 96:ef:23:25:94:82:7a:37:c4:c5:4e:70:45:6b:38: fb:8e:37:e0:cb:9e:8b:6b:3b:39:35:f2:a2:e3:72: c6:7c:7d:ec:76:34:0b:6a:cc:19:ae:03:b9:07:73: 46:a9:95:46:cd:4b:f2:33:df:66:2f:0b:7b:4e:e6: 77:bd:d1:d7:83:f7:79:c1:2d:d2:22:fd:8d:14:4b: af:6a:a7:91:25:7a:08:47:c5:15:e8:3f:ce:71:26: 51:d3:94:4b:cc:be:f7:0d:dc:c0:f3:13:04:80:68: 84:66:48:d1:4e:01:79:c0:e0:7d:0e:c9:aa:6c:64: 04:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F7:66:F2:20:C3:C3:49:48:F5:5F:44:60:6B:43:8B:34:A9:34:24 X509v3 Authority Key Identifier: keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.205.8.0/21 185.8.164.0/22 IPv6: 2a03:3b40::/38 Signature Algorithm: sha256WithRSAEncryption 67:a4:3d:2c:32:b0:12:cd:40:2d:48:7c:0f:cf:1e:33:26:bd: 08:3f:eb:b3:df:a3:73:b7:56:b1:5e:0f:43:05:8d:eb:a5:62: 6c:75:b6:fb:f5:ec:29:a9:93:3f:76:a1:29:1f:67:4c:6d:5f: 60:81:ee:73:4f:cb:42:5f:9c:f3:4b:68:14:40:6e:8f:90:31: de:8a:b3:18:1c:99:70:58:ac:8e:90:85:c4:cc:e4:fa:e5:33: a3:c9:88:31:67:6b:5b:b5:16:2a:86:bf:89:99:4b:ce:e9:ff: 97:2f:8a:30:62:e3:60:ff:b2:41:59:46:fe:bb:ff:13:39:e7: 4c:26:6e:d6:08:5e:7c:47:44:64:37:08:60:30:4f:fa:f1:56: 91:ac:31:3e:7e:7f:01:7c:9c:dc:cc:1d:2f:3d:54:a5:91:92: 51:20:77:73:ae:f4:1e:8b:90:21:d5:7f:64:8c:69:1d:76:a2: 5f:d8:da:63:15:b1:b3:a3:70:c3:5d:92:c8:7d:03:90:75:9c: d2:4f:56:3b:31:60:a5:57:ce:9d:33:1a:97:6e:d9:67:01:da: ec:43:f0:0e:08:72:8f:f9:f5:dd:6b:b2:05:38:c4:17:b8:9c: db:5c:84:c0:5c:d8:d2:41:f6:35:34:0a:29:c9:39:43:5b:b2: b9:b5:7c:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9XJAaeTBUnAdoh2gk/89hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj OGJjNGQwHhcNMjYwMTAyMDYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWY3NjZmMjIwYzNjMzQ5NDhmNTVmNDQ2MDZiNDM4YjM0YTkzNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gecxlAkeM/62SdaLpkMcVguDS7Y wEOQlQtaBDkHA4v++B8IJB8ea3NDOrO+GSthDQ2CTtNTJoV1hCut3ci3P3yBn+Q4 6p+VlfK/THsi+8bcDgz8IBTEWrJ0NBjfnlbCkIX6pG7HPyxGI5atOKLIUG5MxnNH od04Xyct14jOvq0M0rw4r/aW7yMllIJ6N8TFTnBFazj7jjfgy56Lazs5NfKi43LG fH3sdjQLaswZrgO5B3NGqZVGzUvyM99mLwt7TuZ3vdHXg/d5wS3SIv2NFEuvaqeR JXoIR8UV6D/OcSZR05RLzL73DdzA8xMEgGiEZkjRTgF5wOB9DsmqbGQEpQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFFn3ZvIgw8NJSPVfRGBrQ4s0qTQkMB8GA1UdIwQY MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt NmNkNTFjODRjMDE1LzEvV2ZkbThpRER3MGxJOVY5RVlHdERpelNwTkNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1 LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDJc0IAwQC uQikMA4EAgACMAgDBgIqAztAADANBgkqhkiG9w0BAQsFAAOCAQEAZ6Q9LDKwEs1A LUh8D88eMya9CD/rs9+jc7dWsV4PQwWN66VibHW2+/XsKamTP3ahKR9nTG1fYIHu c0/LQl+c80toFEBuj5Ax3oqzGByZcFisjpCFxMzk+uUzo8mIMWdrW7UWKoa/iZlL zun/ly+KMGLjYP+yQVlG/rv/EznnTCZu1ghefEdEZDcIYDBP+vFWkawxPn5/AXyc 3MwdLz1UpZGSUSB3c670HouQIdV/ZIxpHXaiX9jaYxWxs6Nww12SyH0DkHWc0k9W OzFgpVfOnTMal27ZZwHa7EPwDghyj/n13WuyBTjEF7ic21yEwFzY0kH2NTQKKck5 Q1uyubV8kw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:35 2026 by rpki-client