This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/wl-AAhVVhWvtdovU9mg259dWJpg.roa File: wl-AAhVVhWvtdovU9mg259dWJpg.roa (raw, json) Hash identifier: wqWUpo2k9/ZcdbHlkdu5rR8nTaIDwLNuX9nKSfsHr1o= Subject key identifier: C2:5F:80:02:15:55:85:6B:ED:76:8B:D4:F6:68:36:E7:D7:56:26:98 Certificate issuer: /CN=3da59e76ee8f79909dc3694c9a8539d383ec830b Certificate serial: 019BB6F9F9C0DFCDCD18B230E26C182E0D55 Authority key identifier: 3D:A5:9E:76:EE:8F:79:90:9D:C3:69:4C:9A:85:39:D3:83:EC:83:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaWedu6PeZCdw2lMmoU504Psgws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/wl-AAhVVhWvtdovU9mg259dWJpg.roa Signing time: Tue 13 Jan 2026 10:49:54 +0000 ROA not before: Tue 13 Jan 2026 10:49:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50335 IP address blocks: 91.216.218.0/24 maxlen: 24 193.104.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/PaWedu6PeZCdw2lMmoU504Psgws.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/PaWedu6PeZCdw2lMmoU504Psgws.mft rsync://rpki.ripe.net/repository/DEFAULT/PaWedu6PeZCdw2lMmoU504Psgws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:f9:f9:c0:df:cd:cd:18:b2:30:e2:6c:18:2e:0d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3da59e76ee8f79909dc3694c9a8539d383ec830b Validity Not Before: Jan 13 10:49:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c25f80021555856bed768bd4f66836e7d7562698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:f3:b8:6e:f9:8a:d7:88:59:ed:9a:c8:9e: f8:84:99:74:c8:b8:37:3c:d7:e7:de:4a:1e:7b:52: 00:0c:22:a1:9f:e7:00:33:de:ef:0d:3d:25:ab:4b: 21:6a:0a:40:05:82:67:62:bd:c8:ec:e0:b4:0e:9f: 3c:2f:ab:62:d8:e1:24:92:f6:21:2d:28:56:11:d9: 47:8b:d5:33:bd:d9:e3:91:40:56:bd:7b:e5:e1:21: 37:b5:33:3d:7c:3f:0b:d6:05:4e:e1:8f:9b:5e:4f: 7d:56:34:93:50:00:2b:82:b0:02:d9:f0:13:03:28: 8d:5e:c4:d3:63:40:84:e4:fa:ca:9f:0f:c3:8e:ca: 25:01:f8:85:94:e1:c0:19:d8:27:16:bd:ab:be:9a: ff:0f:84:9b:6f:59:d0:f5:14:5f:49:78:40:f8:74: 27:20:90:9c:79:51:04:e0:f6:5a:26:ba:e0:f8:80: 5b:f7:4c:8d:ba:ff:f2:5b:e2:fe:49:97:fc:19:3a: db:e0:ba:99:b9:e8:d7:0e:da:d8:af:80:71:02:a4: eb:6b:2c:ca:57:ad:87:41:4b:da:34:73:33:a5:62: dd:66:b6:78:e9:7b:cb:95:bd:d3:b8:f8:c4:81:b5: 72:61:d1:0c:f4:f9:30:c4:1f:0e:f5:3b:79:31:21: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5F:80:02:15:55:85:6B:ED:76:8B:D4:F6:68:36:E7:D7:56:26:98 X509v3 Authority Key Identifier: keyid:3D:A5:9E:76:EE:8F:79:90:9D:C3:69:4C:9A:85:39:D3:83:EC:83:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaWedu6PeZCdw2lMmoU504Psgws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/wl-AAhVVhWvtdovU9mg259dWJpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/PaWedu6PeZCdw2lMmoU504Psgws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.218.0/24 193.104.218.0/24 Signature Algorithm: sha256WithRSAEncryption 12:b5:e1:e5:d1:c6:a1:fb:16:14:78:00:cb:58:7c:4b:53:71: 9e:ff:0c:8c:fa:21:14:42:eb:d6:c4:a1:94:fd:39:ec:2c:85: a2:be:fc:df:dc:49:5c:d5:33:13:5b:99:f3:ff:34:9c:96:b1: 0b:c0:1f:92:60:e8:c9:43:fc:0e:85:08:8e:87:b4:4f:c3:24: 76:db:09:72:59:48:52:8c:8b:73:d8:3f:0c:89:9b:ac:41:9d: 0f:aa:57:00:46:8f:be:1f:d6:07:38:e7:72:40:04:82:1a:e7: e5:12:5e:98:05:02:cc:a0:39:b4:b7:40:00:99:de:e5:af:e6: fb:b1:d8:1f:a5:73:2e:2b:d5:9c:c6:7f:57:ac:23:8d:e7:04: c0:f2:96:2b:51:42:7d:25:fb:fc:58:71:b5:b2:c5:c6:ca:73: 41:fd:c7:3c:9f:85:76:73:9a:1e:e8:6f:4a:b0:b9:ac:47:1e: 76:2d:97:36:33:1c:a7:db:e4:67:19:67:cd:9f:55:a6:6d:96: cc:de:1a:c6:6f:b8:5a:8f:a9:19:da:0d:01:29:12:08:f2:e2: 4e:b8:fe:3f:c8:0d:14:fe:f6:bf:3e:f3:e3:67:22:d6:fd:3d: 2c:39:08:8c:18:d7:b9:54:43:d3:31:76:83:80:7f:b5:bc:a7: e4:3f:09:7c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZu2+fnA383NGLIw4mwYLg1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYTU5ZTc2ZWU4Zjc5OTA5ZGMzNjk0YzlhODUzOWQzODNl YzgzMGIwHhcNMjYwMTEzMTA0OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjVmODAwMjE1NTU4NTZiZWQ3NjhiZDRmNjY4MzZlN2Q3NTYyNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzILzuG75iteIWe2ayJ74hJl0yLg3 PNfn3koee1IADCKhn+cAM97vDT0lq0shagpABYJnYr3I7OC0Dp88L6ti2OEkkvYh LShWEdlHi9UzvdnjkUBWvXvl4SE3tTM9fD8L1gVO4Y+bXk99VjSTUAArgrAC2fAT AyiNXsTTY0CE5PrKnw/DjsolAfiFlOHAGdgnFr2rvpr/D4Sbb1nQ9RRfSXhA+HQn IJCceVEE4PZaJrrg+IBb90yNuv/yW+L+SZf8GTrb4LqZuejXDtrYr4BxAqTrayzK V62HQUvaNHMzpWLdZrZ46XvLlb3TuPjEgbVyYdEM9PkwxB8O9Tt5MSF/uwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMJfgAIVVYVr7XaL1PZoNufXViaYMB8GA1UdIwQY MBaAFD2lnnbuj3mQncNpTJqFOdOD7IMLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGFXZWR1NlBlWkNkdzJsTW1vVTUwNFBzZ3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMjY1ZjUtODNjMC00MTU1LTgwMDkt ZDAzODM0NTU4ZjJjLzEvd2wtQUFoVlZoV3Z0ZG92VTltZzI1OWRXSnBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMjY1ZjUtODNjMC00MTU1LTgwMDktZDAzODM0NTU4ZjJj LzEvUGFXZWR1NlBlWkNkdzJsTW1vVTUwNFBzZ3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9jaAwQA wWjaMA0GCSqGSIb3DQEBCwUAA4IBAQASteHl0cah+xYUeADLWHxLU3Ge/wyM+iEU QuvWxKGU/TnsLIWivvzf3Elc1TMTW5nz/zSclrELwB+SYOjJQ/wOhQiOh7RPwyR2 2wlyWUhSjItz2D8MiZusQZ0PqlcARo++H9YHOOdyQASCGuflEl6YBQLMoDm0t0AA md7lr+b7sdgfpXMuK9Wcxn9XrCON5wTA8pYrUUJ9Jfv8WHG1ssXGynNB/cc8n4V2 c5oe6G9KsLmsRx52LZc2Mxyn2+RnGWfNn1WmbZbM3hrGb7haj6kZ2g0BKRII8uJO uP4/yA0U/va/PvPjZyLW/T0sOQiMGNe5VEPTMXaDgH+1vKfkPwl8 -----END CERTIFICATE-----Generated at Mon Feb 9 20:48:43 2026 by rpki-client