This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/WgVuaq8pi4PEvuwDOmYyXIWprRU.roa File: WgVuaq8pi4PEvuwDOmYyXIWprRU.roa (raw, json) Hash identifier: oOdve/P3iAIAYO1Vt2jG8C9dlYkYXKP6wSYOHPb5U5c= Subject key identifier: 5A:05:6E:6A:AF:29:8B:83:C4:BE:EC:03:3A:66:32:5C:85:A9:AD:15 Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409 Certificate serial: 019B7AC945191126FF436C8B9A3E1516C358 Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/WgVuaq8pi4PEvuwDOmYyXIWprRU.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13043 IP address blocks: 164.59.128.0/23 maxlen: 24 164.59.130.0/24 maxlen: 24 164.59.136.0/21 maxlen: 24 164.60.0.0/16 maxlen: 24 212.64.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:45:19:11:26:ff:43:6c:8b:9a:3e:15:16:c3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a056e6aaf298b83c4beec033a66325c85a9ad15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0c:a4:60:99:41:36:fd:ec:ef:60:08:5a:77: 44:7a:e1:90:d3:20:79:cc:b7:c2:d5:09:c1:47:90: 2e:09:b9:e9:33:84:30:c9:1e:aa:ea:1d:34:1f:83: a3:fd:db:28:7b:8e:1e:23:59:17:72:57:82:7d:ee: 72:e1:38:f4:14:4a:63:a7:9b:41:f6:52:c8:4c:89: 2f:96:dc:cd:53:ee:1b:0d:1e:52:04:57:09:04:2c: f3:ef:aa:df:8c:68:32:67:06:85:27:82:bf:bd:9c: d1:77:1f:99:76:2c:e1:6a:5e:e9:6c:d0:3e:dd:35: a1:df:9a:15:0b:ef:af:2e:fe:88:9d:af:ea:28:8d: 50:48:f9:35:98:ba:b0:c0:b1:ca:eb:80:75:d7:8a: a2:5f:fc:fe:d3:89:08:51:75:b1:50:16:8e:44:b2: 03:2b:dc:4c:2e:ee:84:71:d6:58:78:55:a1:04:a9: ab:73:f4:f6:b9:ee:fd:67:a4:a0:0f:0f:ba:1d:22: c7:50:5c:9d:9f:02:8b:34:64:d4:15:50:aa:61:04: 24:e5:63:cb:08:19:e1:f3:45:b9:c8:e9:0b:77:9f: cf:2d:4e:07:e2:ba:a4:37:72:94:7c:a7:80:ee:68: da:51:34:c1:ca:7d:84:0b:f4:ee:ee:1d:b0:e5:a3: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:05:6E:6A:AF:29:8B:83:C4:BE:EC:03:3A:66:32:5C:85:A9:AD:15 X509v3 Authority Key Identifier: keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/WgVuaq8pi4PEvuwDOmYyXIWprRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.59.128.0-164.59.130.255 164.59.136.0/21 164.60.0.0/16 212.64.225.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:e1:ee:5c:2b:63:3c:4e:53:c3:99:c7:fc:28:a3:de:1e:d1: 65:ab:7c:0d:42:30:93:0d:f6:02:63:4a:48:a6:a4:ad:0a:30: bf:c3:15:93:fd:02:9e:9d:dd:25:aa:6d:60:b4:ab:a6:ec:8e: 3d:ec:29:a2:6a:86:e9:bb:ad:0f:2b:7b:69:a1:54:9c:9b:54: c2:ce:19:bb:26:57:48:d5:c0:7a:55:4e:cb:60:48:5d:8e:61: 4a:01:0e:95:ce:2a:ae:7e:8d:fc:bf:34:a6:62:69:84:c1:d5: 5b:f6:e0:e8:3a:ba:b0:51:9a:b7:fd:a7:0b:71:a2:8e:9a:45: bf:b4:3e:f6:7d:75:82:6f:e5:f1:26:69:ed:4c:d2:77:05:7e: 14:64:51:66:cc:d6:c6:09:dd:b3:87:02:97:82:76:3f:9b:27: ce:11:59:00:89:2c:81:bb:62:e4:7a:ff:4a:43:08:2c:06:e9: a8:8c:44:73:32:ff:50:14:cc:59:91:f0:a7:46:7f:4f:1d:26: 0d:a1:b3:34:03:a8:04:02:cf:21:0f:0f:65:c4:67:d7:85:84: 55:46:68:04:68:30:be:d0:ad:fb:98:d8:8c:c6:d4:b4:c7:bc: e3:08:01:21:6b:3d:f1:19:23:12:5c:81:57:01:b8:47:78:47: 9c:41:94:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6yUUZESb/Q2yLmj4VFsNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDNhMmQ2ZmFkNjUxNjc4ZTk2ZDI0ZTI0ZDE5ZDcxZmUz ODA0MDkwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTA1NmU2YWFmMjk4YjgzYzRiZWVjMDMzYTY2MzI1Yzg1YTlhZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QykYJlBNv3s72AIWndEeuGQ0yB5 zLfC1QnBR5AuCbnpM4QwyR6q6h00H4Oj/dsoe44eI1kXcleCfe5y4Tj0FEpjp5tB 9lLITIkvltzNU+4bDR5SBFcJBCzz76rfjGgyZwaFJ4K/vZzRdx+Zdizhal7pbNA+ 3TWh35oVC++vLv6Ina/qKI1QSPk1mLqwwLHK64B114qiX/z+04kIUXWxUBaORLID K9xMLu6EcdZYeFWhBKmrc/T2ue79Z6SgDw+6HSLHUFydnwKLNGTUFVCqYQQk5WPL CBnh80W5yOkLd5/PLU4H4rqkN3KUfKeA7mjaUTTByn2EC/Tu7h2w5aOCxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoFbmqvKYuDxL7sAzpmMlyFqa0VMB8GA1UdIwQY MBaAFJnTotb61lFnjpbSTiTRnXH+OAQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUt NDhkNzM4YzU5NDdkLzEvV2dWdWFxOHBpNFBFdnV3RE9tWXlYSVdwclJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUtNDhkNzM4YzU5NDdk LzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfMAwDBAekO4AD BACkO4IDBAOkO4gDAwCkPAMEANRA4TANBgkqhkiG9w0BAQsFAAOCAQEAL+HuXCtj PE5Tw5nH/Cij3h7RZat8DUIwkw32AmNKSKakrQowv8MVk/0Cnp3dJaptYLSrpuyO PewpomqG6butDyt7aaFUnJtUws4ZuyZXSNXAelVOy2BIXY5hSgEOlc4qrn6N/L80 pmJphMHVW/bg6Dq6sFGat/2nC3GijppFv7Q+9n11gm/l8SZp7UzSdwV+FGRRZszW xgnds4cCl4J2P5snzhFZAIksgbti5Hr/SkMILAbpqIxEczL/UBTMWZHwp0Z/Tx0m DaGzNAOoBALPIQ8PZcRn14WEVUZoBGgwvtCt+5jYjMbUtMe84wgBIWs98RkjElyB VwG4R3hHnEGUWA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:53 2026 by rpki-client