This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/WJQDqjdU85qKX_z9ajXtlIeeqwc.roa File: WJQDqjdU85qKX_z9ajXtlIeeqwc.roa (raw, json) Hash identifier: mlb+3yfxZjm9N1+YQt1lMML9aFyHgMQVkXXsZICY1yU= Subject key identifier: 58:94:03:AA:37:54:F3:9A:8A:5F:FC:FD:6A:35:ED:94:87:9E:AB:07 Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Certificate serial: 019B78355CD521859BA9CA141C6E08E776C9 Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/WJQDqjdU85qKX_z9ajXtlIeeqwc.roa Signing time: Thu 01 Jan 2026 06:18:41 +0000 ROA not before: Thu 01 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 77.69.128.0/17 maxlen: 17 77.69.148.0/24 maxlen: 24 82.194.32.0/19 maxlen: 19 88.201.0.0/17 maxlen: 17 88.201.37.0/24 maxlen: 24 88.201.99.0/24 maxlen: 24 89.148.0.0/18 maxlen: 18 185.165.176.0/22 maxlen: 22 193.188.96.0/19 maxlen: 19 193.188.107.0/24 maxlen: 24 217.17.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5c:d5:21:85:9b:a9:ca:14:1c:6e:08:e7:76:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=589403aa3754f39a8a5ffcfd6a35ed94879eab07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:0e:51:1f:ee:d0:2e:a7:95:22:3b:f9:9d: 8a:8c:d2:64:f5:24:9b:e7:ef:d0:be:9e:0b:14:4c: 5b:83:72:77:4c:5b:e7:e6:d4:a8:41:53:8f:37:d3: e6:c9:f4:4c:34:2e:ce:2d:5a:fe:9c:13:e7:98:19: 3a:63:84:e1:aa:be:cf:44:d8:95:e9:91:22:d0:c2: 1d:9d:f9:c0:dd:ac:34:ad:0a:1a:6b:03:98:0a:55: 9e:87:2b:f9:ff:cf:d0:1f:74:93:6d:28:a9:1d:f4: 61:56:f4:2d:fa:2e:ff:46:3c:e6:7d:e5:61:b5:48: 52:11:a4:f3:e8:38:dc:78:32:8d:12:75:be:9b:46: 83:84:3a:a8:bd:91:cd:03:93:a4:51:0a:55:e3:3f: 8d:c2:7d:03:80:55:c0:48:88:5c:e8:82:28:50:ec: 7b:4a:13:46:68:f0:6c:48:55:ca:11:63:4e:d0:46: d6:72:ce:12:da:7c:d0:00:75:f8:88:f9:82:d5:a0: e4:12:b4:f8:e1:16:6f:3f:51:9f:13:71:a8:b1:a2: 99:05:2b:98:cc:82:f0:6a:b7:f8:bd:d3:b4:3e:9c: 9b:2d:a3:5f:ce:84:b0:1d:42:32:14:f6:14:ee:83: 2e:c2:26:4b:57:b1:de:bd:00:50:44:a5:9c:9e:a6: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:94:03:AA:37:54:F3:9A:8A:5F:FC:FD:6A:35:ED:94:87:9E:AB:07 X509v3 Authority Key Identifier: keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/WJQDqjdU85qKX_z9ajXtlIeeqwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.69.128.0/17 82.194.32.0/19 88.201.0.0/17 89.148.0.0/18 185.165.176.0/22 193.188.96.0/19 217.17.224.0/19 Signature Algorithm: sha256WithRSAEncryption 57:2e:2d:ec:dc:46:00:b5:1c:ec:d2:c3:21:a8:60:82:6f:88: a5:c5:20:94:ec:08:65:fa:2a:fb:cb:a6:9c:df:ba:cd:b4:76: fb:51:37:35:a8:94:75:c9:73:a9:40:d6:71:93:0d:cb:5f:db: 32:9b:5d:29:6b:6d:d5:f3:21:52:b2:35:ea:3b:0c:f3:40:c0: ce:9e:06:bc:34:db:0e:83:82:f7:1c:72:d9:47:fa:93:42:c1: 59:b6:52:14:99:af:3e:2b:ea:d9:2f:ed:7c:09:64:3f:24:b7: 68:1b:2f:24:ce:d3:cc:b1:66:5a:a9:8b:94:ac:be:de:b7:14: 88:ea:a8:d1:85:ca:3b:cd:e1:58:17:6f:18:a1:90:ad:8c:49: 35:00:92:27:fc:e1:d4:65:81:98:4e:b9:94:10:0b:9b:6a:5f: 37:35:a7:49:30:49:ea:d1:b7:79:c0:73:9d:42:c2:de:3c:e0: 42:a8:1a:dd:5c:1e:f6:6a:0f:2b:94:a7:a6:56:79:10:6c:5a: 6f:b4:51:62:e2:64:7b:77:73:a1:b7:e0:68:ca:2a:08:6e:15: b1:ea:ce:ba:e4:c0:d6:c9:08:13:da:66:67:3b:3b:11:c6:b0: 88:10:44:28:8b:b3:86:83:5f:76:aa:5c:d7:df:84:1d:a6:e8: c7:6d:cd:cb -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4NVzVIYWbqcoUHG4I53bJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMmJjZDQwYzY3NzQ2NzdkMmMzNzAyZWY1OWVkZjQ5ZDBi MzZjNmMwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODk0MDNhYTM3NTRmMzlhOGE1ZmZjZmQ2YTM1ZWQ5NDg3OWVhYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAsOUR/u0C6nlSI7+Z2KjNJk9SSb 5+/Qvp4LFExbg3J3TFvn5tSoQVOPN9PmyfRMNC7OLVr+nBPnmBk6Y4Thqr7PRNiV 6ZEi0MIdnfnA3aw0rQoaawOYClWehyv5/8/QH3STbSipHfRhVvQt+i7/RjzmfeVh tUhSEaTz6DjceDKNEnW+m0aDhDqovZHNA5OkUQpV4z+Nwn0DgFXASIhc6IIoUOx7 ShNGaPBsSFXKEWNO0EbWcs4S2nzQAHX4iPmC1aDkErT44RZvP1GfE3GosaKZBSuY zILwarf4vdO0PpybLaNfzoSwHUIyFPYU7oMuwiZLV7HevQBQRKWcnqZdYQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFFiUA6o3VPOail/8/Wo17ZSHnqsHMB8GA1UdIwQY MBaAFOMrzUDGd0Z30sNwLvWe30nQs2xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEt MDc0MDExNWI1YTUyLzEvV0pRRHFqZFU4NXFLWF96OWFqWHRsSWVlcXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEtMDc0MDExNWI1YTUy LzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQHTUWAAwQF UsIgAwQHWMkAAwQGWZQAAwQCuaWwAwQFwbxgAwQF2RHgMA0GCSqGSIb3DQEBCwUA A4IBAQBXLi3s3EYAtRzs0sMhqGCCb4ilxSCU7Ahl+ir7y6ac37rNtHb7UTc1qJR1 yXOpQNZxkw3LX9sym10pa23V8yFSsjXqOwzzQMDOnga8NNsOg4L3HHLZR/qTQsFZ tlIUma8+K+rZL+18CWQ/JLdoGy8kztPMsWZaqYuUrL7etxSI6qjRhco7zeFYF28Y oZCtjEk1AJIn/OHUZYGYTrmUEAubal83NadJMEnq0bd5wHOdQsLePOBCqBrdXB72 ag8rlKemVnkQbFpvtFFi4mR7d3Oht+BoyioIbhWx6s665MDWyQgT2mZnOzsRxrCI EEQoi7OGg192qlzX34QdpujHbc3L -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:04 2026 by rpki-client