This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa File: WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa (raw, json) Hash identifier: ieYhP55/ISwvI2Q5dlwCNbQyWY0xH0nyLmu75b3vMPU= Subject key identifier: 58:D3:57:D1:53:6C:60:E9:CE:B7:BF:F9:61:EF:0C:C4:C1:C5:32:E5 Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7 Certificate serial: 019B783530DA7C75CBAC3E4F9D9FD073DEA9 Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204645 IP address blocks: 185.94.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:30:da:7c:75:cb:ac:3e:4f:9d:9f:d0:73:de:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7 Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58d357d1536c60e9ceb7bff961ef0cc4c1c532e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:2d:41:b3:91:60:19:63:40:18:d8:67:1f: c8:d2:f5:da:66:e8:02:6e:62:7d:f0:a6:20:26:35: a3:3a:16:b8:52:9d:fc:86:3d:5c:ec:f7:0a:64:6a: fa:83:d3:6f:ef:17:b5:52:cd:de:98:60:eb:ab:f9: 56:81:cc:b4:32:4a:c9:94:7b:4c:ac:4a:ed:5d:f6: 2b:23:55:02:09:7b:2a:82:1c:c9:fe:b0:f4:2b:5d: b0:83:ad:09:d5:74:c5:ff:84:e8:9e:a6:89:c4:46: 6f:1c:01:3a:f1:96:29:4d:7e:04:0f:a4:29:1a:7c: 23:7b:d5:e6:e7:74:73:23:93:53:00:07:48:56:c0: cd:5d:73:61:c7:d6:f4:b7:bb:58:e7:dc:35:ab:6e: 4e:6e:7c:ff:bf:f7:c7:91:e0:57:b7:82:d0:86:16: 9a:f3:01:30:ed:a8:64:f8:e0:90:f8:28:e8:05:b0: d2:b4:9d:aa:91:d8:c7:f1:ab:46:9a:31:37:3d:f9: 82:fe:7f:d0:7e:66:28:01:b0:ab:68:f0:09:be:09: 8b:f5:92:07:84:ff:69:90:41:7f:ee:9a:33:8c:09: 73:26:7d:77:6c:2a:0f:bd:c0:21:f9:85:85:01:0f: a9:12:7e:a2:d5:09:7c:8e:11:3b:5f:dd:bb:5a:a0: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D3:57:D1:53:6C:60:E9:CE:B7:BF:F9:61:EF:0C:C4:C1:C5:32:E5 X509v3 Authority Key Identifier: keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.220.0/22 Signature Algorithm: sha256WithRSAEncryption d9:8c:24:61:4c:21:07:2a:d7:8b:02:b9:42:df:fd:e0:dc:0b: af:b6:80:91:eb:f0:88:08:cc:92:3d:d5:66:e6:4f:b4:1d:8b: d6:35:6e:96:17:2a:bf:6d:0e:5c:d7:9f:17:e3:82:74:e4:ee: 7e:0f:9f:4a:50:fd:85:f6:b2:bd:ae:82:51:0f:c5:26:45:a9: 26:d0:da:4b:dc:cf:87:b5:4c:12:4b:4a:60:8f:45:fd:57:d8: 8f:a1:1b:a2:11:ce:67:74:f1:3a:4e:88:2e:5a:39:43:ed:76: ff:8a:ae:86:0a:29:03:c9:16:e2:ae:f0:1a:a2:bc:79:01:a4: 94:a5:fb:4d:fb:f4:63:98:b4:c0:0e:7f:6a:ea:84:87:d8:4a: c1:46:77:29:34:9c:d1:cb:25:ad:61:fe:5f:a8:df:69:b4:0d: ba:b4:36:8b:f9:09:25:62:25:2d:21:45:58:76:19:be:13:3b: 5b:e9:3a:fd:8e:10:89:a4:3d:ab:18:c5:62:f3:c4:57:ac:8a: 03:37:22:04:f0:c9:11:3e:69:d7:ce:5a:59:87:fc:77:b6:d6: 4c:07:48:22:0d:44:d5:32:cb:fb:4c:31:ac:e6:3b:a8:a6:4a: 43:b0:49:34:d5:6f:6c:25:1f:78:db:85:21:38:ae:67:68:15: 9c:41:d6:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTDafHXLrD5PnZ/Qc96pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2RlZWQ4ODNjMmE2OTBjZTU0ODI5YjQ4ZjlkNzhjZDdi MjVmZDcwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGQzNTdkMTUzNmM2MGU5Y2ViN2JmZjk2MWVmMGNjNGMxYzUzMmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW8tQbORYBljQBjYZx/I0vXaZugC bmJ98KYgJjWjOha4Up38hj1c7PcKZGr6g9Nv7xe1Us3emGDrq/lWgcy0MkrJlHtM rErtXfYrI1UCCXsqghzJ/rD0K12wg60J1XTF/4TonqaJxEZvHAE68ZYpTX4ED6Qp Gnwje9Xm53RzI5NTAAdIVsDNXXNhx9b0t7tY59w1q25Obnz/v/fHkeBXt4LQhhaa 8wEw7ahk+OCQ+CjoBbDStJ2qkdjH8atGmjE3PfmC/n/QfmYoAbCraPAJvgmL9ZIH hP9pkEF/7pozjAlzJn13bCoPvcAh+YWFAQ+pEn6i1Ql8jhE7X927WqDNBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjTV9FTbGDpzre/+WHvDMTBxTLlMB8GA1UdIwQY MBaAFBM97tiDwqaQzlSCm0j514zXsl/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEt NGJlZGQzYmQ2ZWExLzEvV05OWDBWTnNZT25PdDdfNVllOE14TUhGTXVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEtNGJlZGQzYmQ2ZWEx LzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV7cMA0G CSqGSIb3DQEBCwUAA4IBAQDZjCRhTCEHKteLArlC3/3g3AuvtoCR6/CICMySPdVm 5k+0HYvWNW6WFyq/bQ5c158X44J05O5+D59KUP2F9rK9roJRD8UmRakm0NpL3M+H tUwSS0pgj0X9V9iPoRuiEc5ndPE6ToguWjlD7Xb/iq6GCikDyRbirvAaorx5AaSU pftN+/RjmLTADn9q6oSH2ErBRncpNJzRyyWtYf5fqN9ptA26tDaL+QklYiUtIUVY dhm+Eztb6Tr9jhCJpD2rGMVi88RXrIoDNyIE8MkRPmnXzlpZh/x3ttZMB0giDUTV Msv7TDGs5juopkpDsEk01W9sJR9424UhOK5naBWcQdar -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:05 2026 by rpki-client