This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/WgXn9G5ryVcoOunG4ZvkrJdWw94.roa File: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (raw, json) Hash identifier: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg= Subject key identifier: 5A:05:E7:F4:6E:6B:C9:57:28:3A:E9:C6:E1:9B:E4:AC:97:56:C3:DE Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422 Certificate serial: 019B78A280A41B844FC34A8ACF3FC1D56B7E Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/WgXn9G5ryVcoOunG4ZvkrJdWw94.roa Signing time: Thu 01 Jan 2026 08:17:54 +0000 ROA not before: Thu 01 Jan 2026 08:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 155.185.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:80:a4:1b:84:4f:c3:4a:8a:cf:3f:c1:d5:6b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422 Validity Not Before: Jan 1 08:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a05e7f46e6bc957283ae9c6e19be4ac9756c3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:d4:00:e2:e6:ac:9e:08:eb:d1:d2:93:ad: 3a:3d:a8:f3:b8:32:af:d1:3c:f9:89:40:76:eb:d1: cf:e5:52:36:4c:eb:21:dc:70:b7:a4:51:cf:fe:49: 9b:de:28:67:8e:25:58:e4:f5:52:f1:a3:55:dd:22: f3:5b:ec:07:54:1a:e8:a0:51:74:db:34:ca:58:0f: 51:5e:9c:cb:8a:c9:c1:43:b5:3b:1b:4c:2e:d0:0b: cb:77:3c:e3:c4:f0:a1:67:bf:7e:ee:ba:7e:c6:85: 74:67:eb:0e:ab:49:37:bd:6e:b5:7e:12:e5:06:34: f6:63:ea:2e:bd:43:57:31:f3:96:5d:6d:82:15:bd: 4c:21:a4:cc:6c:03:1a:36:09:b3:ae:4e:a9:18:da: 18:94:de:5b:0f:38:d2:bb:b7:01:4b:e8:48:83:09: b3:5e:66:a6:44:26:9b:0a:c1:f3:32:ed:86:05:e4: 1b:70:a2:1d:10:9f:60:7d:2b:55:bf:66:ce:b7:01: 7f:53:42:4b:a9:d4:4f:1d:8b:1e:4f:34:ef:5a:90: de:4e:40:2e:d9:71:fd:16:79:22:46:19:e4:24:c4: 10:41:55:20:9f:cc:f7:b7:17:cd:59:fe:8f:8e:97: cb:05:e3:90:91:74:5f:10:4e:d4:98:44:87:dd:36: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:05:E7:F4:6E:6B:C9:57:28:3A:E9:C6:E1:9B:E4:AC:97:56:C3:DE X509v3 Authority Key Identifier: keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/WgXn9G5ryVcoOunG4ZvkrJdWw94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.185.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:78:91:38:ec:47:aa:bb:2b:6f:96:1e:cb:18:18:48:b6:73: 76:4a:f3:fc:2b:2b:ae:38:f1:6d:e3:51:42:9a:12:17:eb:c8: f1:c7:d8:9f:01:79:c5:66:10:89:69:cb:de:c7:f8:a7:59:9f: 61:8a:ab:17:2e:c9:4a:16:e1:29:12:f0:c9:71:0e:cd:b3:68: ca:5e:df:e8:d4:cb:1e:b7:d1:11:22:bd:e1:76:99:aa:da:f2: ba:3a:e7:6a:13:de:8a:22:97:10:63:52:5d:cc:7f:9a:12:29: f9:7c:1d:9f:f5:da:62:b9:44:4c:e4:35:b8:00:89:68:2b:38: a7:23:04:26:29:84:ac:dd:4a:9c:11:92:b5:8b:f1:06:0c:69: be:ab:b0:10:62:e4:96:d7:87:42:fe:d0:d6:90:19:29:0b:3a: 25:93:58:a3:28:88:76:3c:09:a3:db:e3:52:30:80:8b:83:8a: 00:63:4e:49:6a:6d:23:19:51:07:c5:82:f0:db:59:53:0b:6d: f3:b6:c9:43:97:a4:9b:5b:67:2b:28:4e:95:b3:3b:78:08:65: 4e:ea:1f:0f:52:44:cd:c3:5f:10:c5:1c:cc:6c:09:72:88:10: 80:26:e8:bf:0b:42:17:9c:80:21:c8:b2:85:6b:e7:15:d1:0c: 22:4a:63:d9 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt4ooCkG4RPw0qKzz/B1Wt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlN2E4ZDdkYjMyYTQwZDRlMWQwMDI4YTdjZmQwODE0YjY1 MGY0MjIwHhcNMjYwMTAxMDgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTA1ZTdmNDZlNmJjOTU3MjgzYWU5YzZlMTliZTRhYzk3NTZjM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmTUAOLmrJ4I69HSk606PajzuDKv 0Tz5iUB269HP5VI2TOsh3HC3pFHP/kmb3ihnjiVY5PVS8aNV3SLzW+wHVBrooFF0 2zTKWA9RXpzLisnBQ7U7G0wu0AvLdzzjxPChZ79+7rp+xoV0Z+sOq0k3vW61fhLl BjT2Y+ouvUNXMfOWXW2CFb1MIaTMbAMaNgmzrk6pGNoYlN5bDzjSu7cBS+hIgwmz XmamRCabCsHzMu2GBeQbcKIdEJ9gfStVv2bOtwF/U0JLqdRPHYseTzTvWpDeTkAu 2XH9FnkiRhnkJMQQQVUgn8z3txfNWf6PjpfLBeOQkXRfEE7UmESH3TaHnQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFFoF5/Rua8lXKDrpxuGb5KyXVsPeMB8GA1UdIwQY MBaAFP56jX2zKkDU4dACinz9CBS2UPQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmIt YjEyYTY5MzNmODI5LzEvV2dYbjlHNXJ5VmNvT3VuRzRadmtySmRXdzk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmItYjEyYTY5MzNmODI5 LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm7kwDQYJ KoZIhvcNAQELBQADggEBAJZ4kTjsR6q7K2+WHssYGEi2c3ZK8/wrK6448W3jUUKa EhfryPHH2J8BecVmEIlpy97H+KdZn2GKqxcuyUoW4SkS8MlxDs2zaMpe3+jUyx63 0REiveF2mara8ro652oT3ooilxBjUl3Mf5oSKfl8HZ/12mK5REzkNbgAiWgrOKcj BCYphKzdSpwRkrWL8QYMab6rsBBi5JbXh0L+0NaQGSkLOiWTWKMoiHY8CaPb41Iw gIuDigBjTklqbSMZUQfFgvDbWVMLbfO2yUOXpJtbZysoTpWzO3gIZU7qHw9SRM3D XxDFHMxsCXKIEIAm6L8LQhecgCHIsoVr5xXRDCJKY9k= -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:35 2026 by rpki-client