This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/WWNIYacMJoEIRfEav5J1OWOX504.roa File: WWNIYacMJoEIRfEav5J1OWOX504.roa (raw, json) Hash identifier: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8= Subject key identifier: 59:63:48:61:A7:0C:26:81:08:45:F1:1A:BF:92:75:39:63:97:E7:4E Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378 Certificate serial: 019B7CED1CF9C3C8BC2BC339AA9E163690A2 Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/WWNIYacMJoEIRfEav5J1OWOX504.roa Signing time: Fri 02 Jan 2026 04:17:52 +0000 ROA not before: Fri 02 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49010 IP address blocks: 91.236.210.0/23 maxlen: 23 185.147.144.0/22 maxlen: 22 2a0a:5400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:1c:f9:c3:c8:bc:2b:c3:39:aa:9e:16:36:90:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378 Validity Not Before: Jan 2 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59634861a70c26810845f11abf9275396397e74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:39:d2:81:be:68:d9:3b:9d:cb:11:5f:e2: e7:ab:39:59:01:1b:b1:23:a4:b0:12:6e:5b:c8:76: 9a:b0:4c:66:5e:9d:00:44:ca:a4:a0:38:74:e2:58: e3:47:d8:33:cc:a6:ad:f1:bf:0d:92:22:6e:b9:c3: ad:de:3a:dc:e7:ee:aa:a2:0b:6d:2a:cd:97:b1:11: 7d:ff:5b:17:04:78:af:fa:91:02:d8:17:cb:d3:68: ff:54:95:45:9d:3c:f5:f8:84:4b:46:4c:b5:a2:2f: 09:da:02:a1:cd:11:34:6b:c3:0e:f5:6a:77:8c:c3: fe:d9:ab:50:e7:94:a3:fb:34:aa:dd:01:ee:f5:f4: 3e:96:26:da:a9:35:5b:11:40:39:0b:23:64:c2:41: 4e:8b:33:31:e6:61:29:74:76:93:89:ea:5e:cf:f8: db:c7:21:b1:70:e8:d8:ee:72:ea:bf:7a:c9:09:c2: cc:ff:80:15:0b:b7:e2:47:d0:5b:bd:65:a1:38:b5: 0c:2d:4f:10:7e:40:60:11:b2:d3:e5:75:34:62:bd: 53:12:4e:20:94:ac:2a:10:7f:01:3f:97:e4:5d:f5: 19:8e:6e:bc:3e:cf:4b:5b:8c:09:d5:6b:f8:63:81: 63:5f:31:b6:18:c6:46:1b:9a:15:c7:1d:50:00:05: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:63:48:61:A7:0C:26:81:08:45:F1:1A:BF:92:75:39:63:97:E7:4E X509v3 Authority Key Identifier: keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/WWNIYacMJoEIRfEav5J1OWOX504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.210.0/23 185.147.144.0/22 IPv6: 2a0a:5400::/29 Signature Algorithm: sha256WithRSAEncryption 50:8b:41:a8:93:d9:0a:e4:c0:fc:4a:76:8b:68:50:68:d3:fe: 52:ac:d8:71:3f:86:11:e9:32:ea:98:80:8b:0f:fe:6e:c8:45: aa:76:53:d2:ed:fd:1a:ee:17:67:2f:e1:7c:31:2e:31:4c:16: 05:30:7d:4a:1a:6f:ff:0a:c5:2b:a6:d7:1a:37:07:0c:30:b6: 20:31:de:48:a7:7f:3e:11:0e:49:34:1b:67:10:76:01:5c:f5: 4d:a6:27:b0:8f:2b:c0:a7:94:c4:8f:58:7e:6b:dd:23:5b:1d: dc:8a:b8:18:2a:6c:d9:6d:ad:23:2d:86:f9:18:6e:0a:65:1e: 82:54:b6:82:4d:9c:62:32:0d:3e:6f:8e:96:ce:ff:9f:f0:5a: 77:94:3c:f1:70:f8:aa:47:04:1b:2a:67:9e:63:1c:fa:7e:2f: 4f:65:b4:33:d0:b5:6a:39:d1:a5:0a:f8:b0:d4:f2:b9:74:76: 6a:08:ce:ef:3e:9e:b4:a1:6f:cc:e6:d9:3f:4b:71:50:d3:da: 4a:b2:3f:fe:9c:7f:09:68:2b:88:50:47:2c:1b:0a:cb:c8:a5: a8:7c:f4:c8:e2:9a:50:1a:cd:fa:9c:b7:83:08:e0:d2:85:34: ab:98:4e:70:67:68:33:1c:48:ea:9a:22:8f:9b:b8:6a:0a:6c: bc:dc:d8:c0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87Rz5w8i8K8M5qp4WNpCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2 YjIzNzgwHhcNMjYwMTAyMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTYzNDg2MWE3MGMyNjgxMDg0NWYxMWFiZjkyNzUzOTYzOTdlNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQo50oG+aNk7ncsRX+LnqzlZARux I6SwEm5byHaasExmXp0ARMqkoDh04ljjR9gzzKat8b8NkiJuucOt3jrc5+6qogtt Ks2XsRF9/1sXBHiv+pEC2BfL02j/VJVFnTz1+IRLRky1oi8J2gKhzRE0a8MO9Wp3 jMP+2atQ55Sj+zSq3QHu9fQ+libaqTVbEUA5CyNkwkFOizMx5mEpdHaTiepez/jb xyGxcOjY7nLqv3rJCcLM/4AVC7fiR9BbvWWhOLUMLU8QfkBgEbLT5XU0Yr1TEk4g lKwqEH8BP5fkXfUZjm68Ps9LW4wJ1Wv4Y4FjXzG2GMZGG5oVxx1QAAUqJwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFljSGGnDCaBCEXxGr+SdTljl+dOMB8GA1UdIwQY MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt NGFiNDk4YjU5NmEzLzEvV1dOSVlhY01Kb0VJUmZFYXY1SjFPV09YNTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+zSAwQC uZOQMA0EAgACMAcDBQMqClQAMA0GCSqGSIb3DQEBCwUAA4IBAQBQi0Gok9kK5MD8 SnaLaFBo0/5SrNhxP4YR6TLqmICLD/5uyEWqdlPS7f0a7hdnL+F8MS4xTBYFMH1K Gm//CsUrptcaNwcMMLYgMd5Ip38+EQ5JNBtnEHYBXPVNpiewjyvAp5TEj1h+a90j Wx3cirgYKmzZba0jLYb5GG4KZR6CVLaCTZxiMg0+b46Wzv+f8Fp3lDzxcPiqRwQb KmeeYxz6fi9PZbQz0LVqOdGlCviw1PK5dHZqCM7vPp60oW/M5tk/S3FQ09pKsj/+ nH8JaCuIUEcsGwrLyKWofPTI4ppQGs36nLeDCODShTSrmE5wZ2gzHEjqmiKPm7hq Cmy83NjA -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:13 2026 by rpki-client