This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/WejJJbiVIVBvqcAo9H2Ft-eq30w.roa File: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (raw, json) Hash identifier: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk= Subject key identifier: 59:E8:C9:25:B8:95:21:50:6F:A9:C0:28:F4:7D:85:B7:E7:AA:DF:4C Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019B7F83490B3D62F57D19993199C70418EF Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/WejJJbiVIVBvqcAo9H2Ft-eq30w.roa Signing time: Fri 02 Jan 2026 16:21:08 +0000 ROA not before: Fri 02 Jan 2026 16:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201011 IP address blocks: 2.59.28.0/22 maxlen: 22 5.56.16.0/21 maxlen: 21 31.7.176.0/20 maxlen: 24 31.7.177.0/24 maxlen: 24 80.255.0.0/20 maxlen: 20 81.95.0.0/20 maxlen: 24 82.199.128.0/19 maxlen: 24 82.199.128.0/24 maxlen: 24 82.199.130.0/24 maxlen: 24 82.199.131.0/24 maxlen: 24 82.199.138.0/24 maxlen: 24 82.199.141.0/24 maxlen: 24 82.199.147.0/24 maxlen: 24 82.199.148.0/24 maxlen: 24 82.199.149.0/24 maxlen: 24 82.199.153.0/24 maxlen: 24 82.199.157.0/24 maxlen: 24 82.199.158.0/24 maxlen: 24 82.199.159.0/24 maxlen: 24 83.142.80.0/21 maxlen: 21 92.43.104.0/21 maxlen: 24 185.89.36.0/22 maxlen: 22 193.104.251.0/24 maxlen: 24 195.138.248.0/21 maxlen: 21 195.138.249.0/24 maxlen: 24 195.138.250.0/24 maxlen: 24 2a01:4a0::/29 maxlen: 48 2a01:4a0:b::/48 maxlen: 48 2a01:4a0:e::/48 maxlen: 48 2a01:4a0:12::/48 maxlen: 48 2a01:4a0:17::/48 maxlen: 48 2a01:4a0:30::/48 maxlen: 48 2a01:4a0:38::/48 maxlen: 48 2a01:4a0:42::/48 maxlen: 48 2a01:4a0:43::/48 maxlen: 48 2a01:4a0:45::/48 maxlen: 48 2a01:4a0:46::/48 maxlen: 48 2a01:4a0:47::/48 maxlen: 48 2a01:4a0:48::/48 maxlen: 48 2a01:4a0:50::/48 maxlen: 48 2a01:4a0:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:49:0b:3d:62:f5:7d:19:99:31:99:c7:04:18:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Jan 2 16:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59e8c925b89521506fa9c028f47d85b7e7aadf4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:91:74:4b:b3:37:48:78:bd:05:70:7d:30: 97:b4:e7:b7:98:fd:8d:c9:6d:70:47:e9:a9:ed:aa: 81:c9:a9:ff:6a:28:f0:74:86:a8:a0:74:da:0d:b5: 43:ea:fb:7a:f5:ac:40:e6:61:70:5a:bc:a7:96:22: 03:a5:26:af:3e:93:69:53:92:3c:c3:b8:b7:07:49: 4e:23:c1:4e:9e:f6:0f:db:33:5d:96:55:4c:38:08: 50:fe:a0:d8:c8:eb:35:65:85:a0:b3:56:ed:31:4c: c7:46:e3:70:a3:c6:97:48:4b:1b:ae:bc:37:8a:22: 80:f4:04:e9:1e:89:14:f6:8e:8b:dd:bf:b8:d0:93: c1:26:17:0a:a8:e0:85:83:2a:c9:4f:8a:c8:bd:12: 37:a4:bf:57:5f:2e:ed:2b:77:2a:92:46:0a:10:2e: f0:b4:e8:3b:c0:bc:bc:e2:f5:dd:87:e3:18:f2:49: e7:c0:a4:56:7b:5d:b0:bd:d1:9a:21:fe:c5:74:f3: 1f:e5:2c:90:33:91:0d:c1:86:1b:cd:ff:c9:2b:f2: c0:cc:8e:2d:08:39:b9:02:83:8a:b2:be:9a:0b:8a: df:16:9b:e9:e1:17:b2:8f:31:3f:a3:50:bd:99:a5: 31:2a:5a:0a:d3:18:c4:f9:a2:2f:14:06:4e:21:9c: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E8:C9:25:B8:95:21:50:6F:A9:C0:28:F4:7D:85:B7:E7:AA:DF:4C X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/WejJJbiVIVBvqcAo9H2Ft-eq30w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.28.0/22 5.56.16.0/21 31.7.176.0/20 80.255.0.0/20 81.95.0.0/20 82.199.128.0/19 83.142.80.0/21 92.43.104.0/21 185.89.36.0/22 193.104.251.0/24 195.138.248.0/21 IPv6: 2a01:4a0::/29 Signature Algorithm: sha256WithRSAEncryption 79:f2:67:b9:0f:3b:d6:5e:58:3b:ed:fe:35:ae:02:54:1e:19: 4c:8b:e7:bb:e3:0b:48:fb:41:a5:20:09:61:43:57:d3:8a:4a: 4b:3c:0d:af:2f:ed:b5:f3:e9:69:26:46:fd:fe:97:55:2d:95: 98:7b:e9:35:5e:75:db:b8:a9:04:f6:ea:6a:03:42:d3:ce:e1: cc:bc:6d:ba:15:3a:48:c1:0b:61:59:01:af:ab:80:5b:9e:ba: 83:73:36:81:06:db:f8:09:16:cc:69:5e:ed:75:b1:ed:ea:07: ea:8e:22:e0:16:43:21:2f:e5:72:de:39:4f:0c:bd:31:85:2f: 5a:dd:44:8c:4f:e4:ea:4d:96:33:81:42:b0:aa:bf:6e:a1:ae: 54:62:d5:05:43:45:32:2f:cf:b4:c1:ab:0d:f5:eb:13:db:9a: 14:0b:b6:47:ad:18:07:59:6f:69:95:e8:a2:03:a7:65:c0:6a: a0:78:9a:9b:67:24:32:46:66:0a:d1:bf:5f:08:e1:5d:e0:a2: f6:98:b0:90:81:b4:ac:8d:26:e5:13:25:22:91:9b:2a:04:d6: d9:fa:25:12:4e:d1:19:96:c7:00:ac:43:0e:36:4f:98:86:a0: 52:4c:27:6c:ca:7a:65:fd:4d:92:99:00:74:6c:95:2c:28:af: 87:e9:1a:8e -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt/g0kLPWL1fRmZMZnHBBjvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwMTAyMTYyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWU4YzkyNWI4OTUyMTUwNmZhOWMwMjhmNDdkODViN2U3YWFkZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqreRdEuzN0h4vQVwfTCXtOe3mP2N yW1wR+mp7aqByan/aijwdIaooHTaDbVD6vt69axA5mFwWrynliIDpSavPpNpU5I8 w7i3B0lOI8FOnvYP2zNdllVMOAhQ/qDYyOs1ZYWgs1btMUzHRuNwo8aXSEsbrrw3 iiKA9ATpHokU9o6L3b+40JPBJhcKqOCFgyrJT4rIvRI3pL9XXy7tK3cqkkYKEC7w tOg7wLy84vXdh+MY8knnwKRWe12wvdGaIf7FdPMf5SyQM5ENwYYbzf/JK/LAzI4t CDm5AoOKsr6aC4rfFpvp4ReyjzE/o1C9maUxKloK0xjE+aIvFAZOIZydnQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFFnoySW4lSFQb6nAKPR9hbfnqt9MMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvV2VqSkpiaVZJVkJ2cWNBbzlIMkZ0LWVxMzB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQCAjscAwQD BTgQAwQEHwewAwQEUP8AAwQEUV8AAwQFUseAAwQDU45QAwQDXCtoAwQCuVkkAwQA wWj7AwQDw4r4MA0EAgACMAcDBQMqAQSgMA0GCSqGSIb3DQEBCwUAA4IBAQB58me5 DzvWXlg77f41rgJUHhlMi+e74wtI+0GlIAlhQ1fTikpLPA2vL+218+lpJkb9/pdV LZWYe+k1XnXbuKkE9upqA0LTzuHMvG26FTpIwQthWQGvq4BbnrqDczaBBtv4CRbM aV7tdbHt6gfqjiLgFkMhL+Vy3jlPDL0xhS9a3USMT+TqTZYzgUKwqr9uoa5UYtUF Q0UyL8+0wasN9esT25oUC7ZHrRgHWW9pleiiA6dlwGqgeJqbZyQyRmYK0b9fCOFd 4KL2mLCQgbSsjSblEyUikZsqBNbZ+iUSTtEZlscArEMONk+YhqBSTCdsynpl/U2S mQB0bJUsKK+H6RqO -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:24 2026 by rpki-client