This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/WgW7_1NWoWpm4jNdRh3wAV6b-iQ.roa File: WgW7_1NWoWpm4jNdRh3wAV6b-iQ.roa (raw, json) Hash identifier: VRgHLs3EnvMZ31H9FL0qZ2OCVPVRz1uxVc4Bjt1PMc0= Subject key identifier: 5A:05:BB:FF:53:56:A1:6A:66:E2:33:5D:46:1D:F0:01:5E:9B:FA:24 Certificate issuer: /CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1 Certificate serial: 019B7E38C90FB23EF42FFFAE32659CD94930 Authority key identifier: 1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/WgW7_1NWoWpm4jNdRh3wAV6b-iQ.roa Signing time: Fri 02 Jan 2026 10:20:09 +0000 ROA not before: Fri 02 Jan 2026 10:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209743 IP address blocks: 62.3.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c9:0f:b2:3e:f4:2f:ff:ae:32:65:9c:d9:49:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1 Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a05bbff5356a16a66e2335d461df0015e9bfa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:d9:43:2a:a9:05:ea:e9:6d:d2:e4:b5:20: 68:bf:08:f2:18:7a:a7:74:65:26:ca:c4:64:7b:97: bf:e2:dd:c8:7b:21:10:53:34:63:18:df:ed:51:f1: 5d:4c:26:d6:b3:75:31:f8:6d:77:0f:cf:2f:30:ca: c7:da:8f:49:cd:cf:c0:d8:93:94:f6:81:9a:d2:01: cd:4a:f9:ec:41:6c:89:d8:64:e3:14:57:05:9a:04: cd:65:86:52:5f:43:46:0b:64:29:46:66:25:31:eb: 9a:e9:e7:60:6f:50:fe:e6:91:d5:b6:22:fd:ae:ee: b9:35:7d:17:fb:4f:d7:ce:16:14:18:ad:f2:df:21: f8:3d:62:fb:29:17:f4:c3:2c:16:b4:e5:87:35:d6: 59:d5:53:17:ff:69:84:0d:3c:be:f2:e4:3c:b0:d7: 5b:fe:ab:4c:9c:6a:b6:8d:32:bb:b3:c8:31:5c:52: 1f:b7:3c:04:12:2d:e1:14:08:3f:f8:e7:34:f4:3d: 2a:d9:bb:97:30:8c:42:b2:68:7a:12:d4:c7:6d:1a: 29:15:c8:7b:08:71:f4:93:a3:59:92:1f:fd:10:76: b9:5d:28:2d:46:a1:b8:39:f1:42:28:e8:0d:76:34: 73:d8:88:b1:41:8f:9a:df:1c:de:3a:2d:58:e0:43: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:05:BB:FF:53:56:A1:6A:66:E2:33:5D:46:1D:F0:01:5E:9B:FA:24 X509v3 Authority Key Identifier: keyid:1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/WgW7_1NWoWpm4jNdRh3wAV6b-iQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.30.0/24 Signature Algorithm: sha256WithRSAEncryption 87:6b:ab:f3:ab:b7:e9:3d:41:89:a4:4e:18:1c:75:3c:c5:31: 72:16:11:e9:1e:b1:ff:eb:96:ab:4b:45:57:f7:13:fb:6b:df: e0:42:50:9a:8b:5a:02:80:7b:10:b3:cc:ac:86:38:0a:79:c1: 51:25:98:42:9b:a4:f4:77:f7:24:cb:ff:3f:4f:c8:31:96:62: 3e:75:96:82:e2:29:15:8d:7e:7d:26:8d:53:85:2d:9c:d5:17: 76:4a:5b:55:a0:9c:73:17:3c:b5:3d:54:dd:8c:b5:47:96:3e: 08:a8:fc:08:d1:76:00:a0:ef:9b:36:af:7f:88:7f:a3:bc:6c: 0c:0e:5f:c7:98:83:b1:06:3b:0b:0a:5c:75:8a:c3:83:d8:a8: f7:5a:31:4a:93:01:53:d3:e9:48:f4:ae:61:a3:cb:33:c2:8a: 52:59:08:84:76:e4:06:51:7e:e9:a4:5b:c9:33:e7:70:5d:06: ec:b7:87:68:91:15:b2:e5:33:98:6f:9e:38:b6:fe:bd:84:5b: 0c:90:ae:c4:cc:79:81:bd:61:4c:e2:de:f9:84:f7:ba:54:cc: 4e:4e:13:71:d4:d1:e0:bd:f8:7b:93:45:2a:e0:c5:ca:56:d1: 00:fc:87:f2:20:d5:e5:27:0d:93:a6:77:4b:24:c8:74:06:da: 95:9b:f6:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMkPsj70L/+uMmWc2UkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNTcxZTJiZGI0MTEyZWM1ZDZiM2E2NGJiMTdiZjBiMjgw ZmU2ZTEwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTA1YmJmZjUzNTZhMTZhNjZlMjMzNWQ0NjFkZjAwMTVlOWJmYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh/ZQyqpBerpbdLktSBovwjyGHqn dGUmysRke5e/4t3IeyEQUzRjGN/tUfFdTCbWs3Ux+G13D88vMMrH2o9Jzc/A2JOU 9oGa0gHNSvnsQWyJ2GTjFFcFmgTNZYZSX0NGC2QpRmYlMeua6edgb1D+5pHVtiL9 ru65NX0X+0/XzhYUGK3y3yH4PWL7KRf0wywWtOWHNdZZ1VMX/2mEDTy+8uQ8sNdb /qtMnGq2jTK7s8gxXFIftzwEEi3hFAg/+Oc09D0q2buXMIxCsmh6EtTHbRopFch7 CHH0k6NZkh/9EHa5XSgtRqG4OfFCKOgNdjRz2IixQY+a3xzeOi1Y4EM5iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoFu/9TVqFqZuIzXUYd8AFem/okMB8GA1UdIwQY MBaAFB1XHivbQRLsXWs6ZLsXvwsoD+bhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFZjZUs5dEJFdXhkYXpwa3V4ZV9DeWdQNXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzY4ZWUtYjU5MC00NmFjLWI1MmUt ZGIyNTcyZGFjYjQ1LzEvV2dXN18xTldvV3BtNGpOZFJoM3dBVjZiLWlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hYzY4ZWUtYjU5MC00NmFjLWI1MmUtZGIyNTcyZGFjYjQ1 LzEvSFZjZUs5dEJFdXhkYXpwa3V4ZV9DeWdQNXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMeMA0G CSqGSIb3DQEBCwUAA4IBAQCHa6vzq7fpPUGJpE4YHHU8xTFyFhHpHrH/65arS0VX 9xP7a9/gQlCai1oCgHsQs8yshjgKecFRJZhCm6T0d/cky/8/T8gxlmI+dZaC4ikV jX59Jo1ThS2c1Rd2SltVoJxzFzy1PVTdjLVHlj4IqPwI0XYAoO+bNq9/iH+jvGwM Dl/HmIOxBjsLClx1isOD2Kj3WjFKkwFT0+lI9K5ho8szwopSWQiEduQGUX7ppFvJ M+dwXQbst4dokRWy5TOYb544tv69hFsMkK7EzHmBvWFM4t75hPe6VMxOThNx1NHg vfh7k0Uq4MXKVtEA/IfyINXlJw2TpndLJMh0BtqVm/ZG -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:14 2026 by rpki-client