This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa File: Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa (raw, json) Hash identifier: cZtiNM6cLkvlj8Xffx4NcYQbnFqHjPh0HKv5ikzsU+A= Subject key identifier: 5A:3B:74:FB:49:28:CB:5A:99:CD:2B:98:84:9C:97:70:3E:8A:5C:43 Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84 Certificate serial: 019B7C122AB980E05E04DD488B1277315F0B Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa Signing time: Fri 02 Jan 2026 00:18:43 +0000 ROA not before: Fri 02 Jan 2026 00:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48903 IP address blocks: 185.92.4.0/22 maxlen: 22 185.140.4.0/22 maxlen: 22 185.140.4.0/24 maxlen: 24 185.140.5.0/24 maxlen: 24 185.140.6.0/24 maxlen: 24 185.140.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2a:b9:80:e0:5e:04:dd:48:8b:12:77:31:5f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84 Validity Not Before: Jan 2 00:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a3b74fb4928cb5a99cd2b98849c97703e8a5c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a2:3f:cb:a1:f8:1c:b9:32:32:8b:05:a2:a3: 2b:4d:c3:f8:60:89:6f:1f:54:98:f6:25:bf:78:58: 80:d2:34:eb:3e:dc:bc:6d:f0:f7:c3:24:5b:47:01: 57:6c:a9:70:01:c7:9f:57:ff:82:bb:c0:6b:f0:d0: fa:3f:37:20:a1:d8:0c:84:63:a4:83:c2:97:ab:f4: ac:c7:47:86:69:c4:14:b6:ee:dd:0a:ca:1a:4a:65: b8:2a:80:6c:10:7c:8d:a9:84:1f:cb:19:58:af:72: d9:99:e2:79:56:a6:c3:8c:0e:89:01:81:fd:da:78: 00:8d:c9:b8:0f:87:77:17:d9:09:26:6a:17:a7:7d: 68:f7:c5:69:ed:14:a6:bb:97:a2:e5:7f:b3:15:c8: 53:5e:2e:98:c5:3a:9b:d1:72:c4:b1:01:13:8a:3f: 65:e2:45:58:80:9f:e3:d5:66:94:55:4d:82:9a:30: 98:fc:c8:4d:f3:6e:de:b3:91:61:00:18:e6:ea:57: 92:e0:2e:c8:9c:c8:f4:9d:ec:39:3d:2b:71:cd:f2: 75:75:b3:f3:1a:e6:9d:f2:ba:cd:4a:e6:a7:ab:65: 6c:52:f7:1e:80:5f:d1:78:e2:26:77:0e:df:fb:37: 71:ac:a8:ef:18:67:8a:75:ee:07:2f:23:96:2f:41: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3B:74:FB:49:28:CB:5A:99:CD:2B:98:84:9C:97:70:3E:8A:5C:43 X509v3 Authority Key Identifier: keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.4.0/22 185.140.4.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:04:fc:d7:6f:e8:cc:58:b3:b6:af:b6:95:11:60:14:59:8f: e9:f8:fe:e9:4d:bb:84:a7:bb:6e:e0:08:44:74:2f:0f:d4:6a: 8a:48:8a:ad:91:ff:d7:5b:e1:44:a8:fc:1d:c6:ea:a1:cd:a3: 0c:c8:ef:f1:3f:e6:97:60:9a:ea:b9:17:cd:0e:1d:ea:a3:2c: ea:d9:93:32:85:52:f6:9e:ff:58:ae:a6:21:b2:77:7f:31:63: f7:85:dc:80:c6:d3:56:16:72:a7:4f:60:e2:89:87:ad:db:97: 8b:e0:ef:86:6a:2c:5b:56:ad:72:50:0e:8a:f5:13:cc:12:11: c0:c8:ce:9e:d2:c4:35:01:16:a2:aa:f7:79:10:5d:80:f0:17: 49:c1:7c:8b:f1:44:6e:7c:fb:56:c2:17:92:76:4e:c7:aa:c6: 6b:a6:de:23:c9:4e:70:26:7a:10:de:e4:6f:22:2e:ea:23:96: 5f:2a:ce:01:c8:50:ff:82:d1:00:a1:bf:d7:9a:62:f4:00:3a: 0f:86:50:51:f7:05:7c:78:ab:29:0d:7c:9c:ba:ab:47:cc:29: fb:0d:52:62:c2:72:58:c1:34:24:42:f5:37:fe:60:c9:36:5c: dd:4a:1d:64:03:42:ab:76:02:9d:49:b0:6b:94:aa:4f:1a:f7: 11:ca:d4:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eiq5gOBeBN1IixJ3MV8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YzM0NjlkMWU3MzVhZTRkNjA4MzdiNzcwOWMzM2ZmNDI3 YzhlODQwHhcNMjYwMTAyMDAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTNiNzRmYjQ5MjhjYjVhOTljZDJiOTg4NDljOTc3MDNlOGE1YzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KI/y6H4HLkyMosFoqMrTcP4YIlv H1SY9iW/eFiA0jTrPty8bfD3wyRbRwFXbKlwAcefV/+Cu8Br8ND6PzcgodgMhGOk g8KXq/Ssx0eGacQUtu7dCsoaSmW4KoBsEHyNqYQfyxlYr3LZmeJ5VqbDjA6JAYH9 2ngAjcm4D4d3F9kJJmoXp31o98Vp7RSmu5ei5X+zFchTXi6YxTqb0XLEsQETij9l 4kVYgJ/j1WaUVU2CmjCY/MhN827es5FhABjm6leS4C7InMj0new5PStxzfJ1dbPz Guad8rrNSuanq2VsUvcegF/ReOImdw7f+zdxrKjvGGeKde4HLyOWL0FS4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFo7dPtJKMtamc0rmIScl3A+ilxDMB8GA1UdIwQY MBaAFOjDRp0ec1rk1gg3t3CcM/9CfI6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NTA1ZWUtNWZlMC00NDhjLWI2MjEt ODkyNDg1MGQ5NWQ2LzEvV2p0MC0wa295MXFaelN1WWhKeVhjRDZLWEVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS80NTA1ZWUtNWZlMC00NDhjLWI2MjEtODkyNDg1MGQ5NWQ2 LzEvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuVwEAwQC uYwEMA0GCSqGSIb3DQEBCwUAA4IBAQAfBPzXb+jMWLO2r7aVEWAUWY/p+P7pTbuE p7tu4AhEdC8P1GqKSIqtkf/XW+FEqPwdxuqhzaMMyO/xP+aXYJrquRfNDh3qoyzq 2ZMyhVL2nv9YrqYhsnd/MWP3hdyAxtNWFnKnT2DiiYet25eL4O+GaixbVq1yUA6K 9RPMEhHAyM6e0sQ1ARaiqvd5EF2A8BdJwXyL8URufPtWwheSdk7HqsZrpt4jyU5w JnoQ3uRvIi7qI5ZfKs4ByFD/gtEAob/XmmL0ADoPhlBR9wV8eKspDXycuqtHzCn7 DVJiwnJYwTQkQvU3/mDJNlzdSh1kA0KrdgKdSbBrlKpPGvcRytRb -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:36 2026 by rpki-client