This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/WTosev28vey7PdFKL1WZrUA91xA.roa File: WTosev28vey7PdFKL1WZrUA91xA.roa (raw, json) Hash identifier: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc= Subject key identifier: 59:3A:2C:7A:FD:BC:BD:EC:BB:3D:D1:4A:2F:55:99:AD:40:3D:D7:10 Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c Certificate serial: 019B7CED7E1C5E40675F88CC3878A52BE819 Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/WTosev28vey7PdFKL1WZrUA91xA.roa Signing time: Fri 02 Jan 2026 04:18:17 +0000 ROA not before: Fri 02 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34087 IP address blocks: 84.16.192.0/19 maxlen: 19 84.52.192.0/18 maxlen: 18 84.52.224.0/19 maxlen: 19 85.89.0.0/19 maxlen: 19 89.151.192.0/19 maxlen: 19 89.151.224.0/19 maxlen: 19 94.246.0.0/18 maxlen: 18 148.252.64.0/18 maxlen: 18 148.252.64.0/19 maxlen: 19 148.252.96.0/19 maxlen: 19 152.65.0.0/19 maxlen: 19 152.65.32.0/19 maxlen: 19 152.65.64.0/19 maxlen: 19 152.65.96.0/19 maxlen: 19 178.164.0.0/17 maxlen: 17 178.164.0.0/19 maxlen: 19 178.164.32.0/19 maxlen: 19 178.164.64.0/19 maxlen: 19 178.164.96.0/19 maxlen: 19 185.161.56.0/22 maxlen: 22 185.161.56.0/23 maxlen: 23 217.168.80.0/20 maxlen: 20 2a01:560::/29 maxlen: 29 2a01:560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7e:1c:5e:40:67:5f:88:cc:38:78:a5:2b:e8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c Validity Not Before: Jan 2 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=593a2c7afdbcbdecbb3dd14a2f5599ad403dd710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:08:c4:29:4f:e4:ef:57:68:bb:65:35:67:d9: 2a:d5:65:2d:73:85:c5:a7:ee:81:55:e4:d7:f8:aa: 5b:45:d7:8b:ed:85:37:4f:41:56:f5:4d:1a:98:be: ef:0a:cb:fb:79:6c:b1:0e:4f:d1:79:6b:18:1f:bc: 74:cc:68:48:60:1f:c3:e0:7d:29:16:f5:08:93:66: 1b:ab:6a:e6:6f:3e:e1:47:ab:5e:59:76:32:f6:2b: 64:41:92:c2:cb:14:bf:2a:f2:45:2e:41:a6:0e:fb: be:cc:5a:ce:fd:0d:06:63:04:6a:12:55:43:2b:aa: f2:04:21:1b:eb:26:f0:87:f1:95:db:1b:4a:de:f9: 35:17:90:d5:60:ca:3e:37:c6:de:ae:73:34:a8:53: 4d:83:c0:b2:b6:99:89:87:b1:f0:ec:a9:ea:be:fb: 95:58:51:f8:26:e3:3a:3f:4d:b1:57:73:e4:20:6d: 77:be:b4:50:e6:59:d3:90:f4:36:c5:12:26:d5:6d: 68:36:c1:19:a1:70:94:dd:93:83:cb:01:00:6d:3b: 15:c8:04:ec:9a:18:be:5e:47:78:72:95:1b:54:b4: 73:3a:1c:1d:ff:a6:c8:c6:86:c6:c5:b0:bb:47:80: 23:b2:d4:12:3b:7e:dc:d2:c0:65:9e:b6:69:28:78: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:2C:7A:FD:BC:BD:EC:BB:3D:D1:4A:2F:55:99:AD:40:3D:D7:10 X509v3 Authority Key Identifier: keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/WTosev28vey7PdFKL1WZrUA91xA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.16.192.0/19 84.52.192.0/18 85.89.0.0/19 89.151.192.0/18 94.246.0.0/18 148.252.64.0/18 152.65.0.0/17 178.164.0.0/17 185.161.56.0/22 217.168.80.0/20 IPv6: 2a01:560::/29 Signature Algorithm: sha256WithRSAEncryption 4a:0c:eb:5f:d8:d2:bb:c6:a6:82:ef:ac:6e:d2:28:6c:39:92: 3d:5c:1f:4c:f2:5e:42:66:9a:c1:a3:3c:31:03:7b:db:d7:b9: 31:9c:0f:82:f9:97:cd:c8:84:9c:9c:02:2a:27:ba:db:d8:54: 3c:fb:4a:e7:37:94:f2:4b:55:9d:4d:12:9c:97:4b:03:96:e2: 50:fe:3c:33:70:81:3b:80:b7:b1:b2:12:26:7a:94:19:2e:66: 17:77:06:b6:b2:81:4c:a7:21:b3:ee:b0:29:f8:4b:54:cb:b1: dc:66:cc:c0:3e:6d:a5:f8:83:46:cb:ae:d2:f7:c9:60:00:dd: d6:98:8b:f3:00:c4:3b:33:ab:c9:d6:6a:e3:96:b8:6a:8e:31: 02:7b:a6:46:2c:d4:86:72:85:e6:07:c7:63:08:93:c1:09:e6: 34:08:82:29:61:24:bd:37:9c:19:69:14:b8:21:8c:a1:14:f0: e0:2a:1a:78:c1:5b:07:4d:af:60:62:54:ac:6f:43:3e:58:f7: 44:3c:7a:78:e4:14:35:7b:56:bd:86:95:97:97:1e:7d:90:31: f4:36:64:8b:77:2f:a3:f9:05:ea:38:1f:2f:28:0f:1b:d0:fe: 0e:5e:c9:fd:bd:79:25:99:79:88:bf:a6:4f:16:70:05:cb:e2: 7e:9b:38:a6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt87X4cXkBnX4jMOHilK+gZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3N2Y0YjZlYzQzNDcxNTdjNGQxM2VmMGU3YWJlMTI5MGEw YmY1N2MwHhcNMjYwMTAyMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTNhMmM3YWZkYmNiZGVjYmIzZGQxNGEyZjU1OTlhZDQwM2RkNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQjEKU/k71dou2U1Z9kq1WUtc4XF p+6BVeTX+KpbRdeL7YU3T0FW9U0amL7vCsv7eWyxDk/ReWsYH7x0zGhIYB/D4H0p FvUIk2Ybq2rmbz7hR6teWXYy9itkQZLCyxS/KvJFLkGmDvu+zFrO/Q0GYwRqElVD K6ryBCEb6ybwh/GV2xtK3vk1F5DVYMo+N8bernM0qFNNg8CytpmJh7Hw7KnqvvuV WFH4JuM6P02xV3PkIG13vrRQ5lnTkPQ2xRIm1W1oNsEZoXCU3ZODywEAbTsVyATs mhi+Xkd4cpUbVLRzOhwd/6bIxobGxbC7R4AjstQSO37c0sBlnrZpKHgCcwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFFk6LHr9vL3suz3RSi9Vma1APdcQMB8GA1UdIwQY MBaAFEd/S27ENHFXxNE+8Oer4SkKC/V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzIt ZDhiZDI1MGI2NGY5LzEvV1Rvc2V2Mjh2ZXk3UGRGS0wxV1pyVUE5MXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzItZDhiZDI1MGI2NGY5 LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQFVBDAAwQG VDTAAwQFVVkAAwQGWZfAAwQGXvYAAwQGlPxAAwQHmEEAAwQHsqQAAwQCuaE4AwQE 2ahQMA0EAgACMAcDBQMqAQVgMA0GCSqGSIb3DQEBCwUAA4IBAQBKDOtf2NK7xqaC 76xu0ihsOZI9XB9M8l5CZprBozwxA3vb17kxnA+C+ZfNyIScnAIqJ7rb2FQ8+0rn N5TyS1WdTRKcl0sDluJQ/jwzcIE7gLexshImepQZLmYXdwa2soFMpyGz7rAp+EtU y7HcZszAPm2l+INGy67S98lgAN3WmIvzAMQ7M6vJ1mrjlrhqjjECe6ZGLNSGcoXm B8djCJPBCeY0CIIpYSS9N5wZaRS4IYyhFPDgKhp4wVsHTa9gYlSsb0M+WPdEPHp4 5BQ1e1a9hpWXlx59kDH0NmSLdy+j+QXqOB8vKA8b0P4OXsn9vXklmXmIv6ZPFnAF y+J+mzim -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:08 2026 by rpki-client