This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/wJhBirIGDG5CpWVFPtacVacZOVI.roa File: wJhBirIGDG5CpWVFPtacVacZOVI.roa (raw, json) Hash identifier: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys= Subject key identifier: C0:98:41:8A:B2:06:0C:6E:42:A5:65:45:3E:D6:9C:55:A7:19:39:52 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D24091DBB99FEFB5DD618B701E407 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/wJhBirIGDG5CpWVFPtacVacZOVI.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 2.59.161.0/24 maxlen: 24 62.133.60.0/22 maxlen: 24 62.133.61.0/24 maxlen: 24 194.156.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:24:09:1d:bb:99:fe:fb:5d:d6:18:b7:01:e4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c098418ab2060c6e42a565453ed69c55a7193952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:ef:c5:1a:24:8b:d0:cb:62:d6:22:18:de: f4:3c:80:04:93:44:54:e7:03:89:77:66:01:67:f1: 08:96:79:47:53:d4:ea:32:da:7d:a2:06:79:3c:9b: 09:96:2a:61:07:07:22:12:ac:3f:a2:f9:8a:44:72: ee:c2:8a:91:4d:23:a6:09:1f:2b:10:15:92:52:42: c8:5e:4c:99:d2:59:2f:5f:90:96:e0:66:c1:ab:9c: 2f:5d:8c:a0:df:56:3c:9d:bf:7c:ec:cd:2f:78:a7: 82:8f:8e:dd:b7:18:55:92:08:72:5e:ac:df:cf:ce: b3:a9:10:83:14:1b:b9:c4:06:16:67:79:bd:34:48: 14:79:df:15:13:fc:35:a7:a4:e9:ae:ab:e0:2b:5d: 68:3b:ef:e0:cc:f2:52:5d:0a:a4:0b:cb:e9:ad:b7: 93:cf:d0:1e:0d:b2:8b:ce:d7:90:28:2a:e0:99:e7: f7:41:2b:af:92:3b:31:81:b1:a6:e7:36:17:41:dd: a6:2e:e8:e1:9d:16:76:6c:fd:ca:07:ef:1f:85:d9: 64:af:32:70:e8:a8:c2:9c:91:2d:a9:cf:3c:7d:82: ae:5f:53:db:04:06:9f:aa:b4:58:53:a1:1e:74:aa: 0a:7d:67:73:b9:c4:06:fe:4f:a0:43:0e:36:38:4a: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:98:41:8A:B2:06:0C:6E:42:A5:65:45:3E:D6:9C:55:A7:19:39:52 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/wJhBirIGDG5CpWVFPtacVacZOVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.161.0/24 62.133.60.0/22 194.156.102.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:34:b1:46:30:ad:e2:b6:6f:73:8e:bf:11:af:1c:58:84:be: 28:86:7d:2b:4a:6b:0d:23:3a:b8:ea:e4:bb:d5:7f:8d:43:ba: 15:72:7c:85:41:d1:3a:15:77:0b:34:e9:80:cb:77:c6:64:02: ea:4a:7e:f4:45:98:6b:5c:5e:87:f1:6a:b1:72:9a:6c:12:19: 45:3f:4b:1f:4e:49:52:13:cb:a4:46:68:db:ba:db:f9:3b:24: 1d:0b:8a:a0:1f:5f:72:cf:b9:39:78:40:6d:d2:fc:d5:4d:52: bd:7d:69:76:12:87:b0:62:e8:ee:1a:5a:bd:48:16:7c:5e:f4: c4:3c:87:f3:56:b9:2d:40:2f:29:46:c8:aa:d7:9e:da:4f:19: 14:0f:80:a9:c7:2f:1c:db:16:8d:1d:bd:95:fc:4f:75:01:c3: fd:e3:e8:69:1d:72:5b:bf:14:78:04:77:ec:cf:cb:93:8e:3d: 1a:fd:7b:77:76:b3:2a:e2:d5:69:91:cd:70:a5:42:50:37:76: fb:1a:de:e5:de:43:fd:48:ab:d7:22:da:0c:bb:12:2c:a4:1c: 0b:ef:16:4f:f6:99:0e:99:e0:1d:fd:01:2b:0f:de:3e:bf:1d: 35:d4:40:7b:72:7d:30:ca:8c:1f:38:7e:c0:f8:7b:47:9e:c2: cd:27:7a:03 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XSQJHbuZ/vtd1hi3AeQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDk4NDE4YWIyMDYwYzZlNDJhNTY1NDUzZWQ2OWM1NWE3MTkzOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2TvxRoki9DLYtYiGN70PIAEk0RU 5wOJd2YBZ/EIlnlHU9TqMtp9ogZ5PJsJliphBwciEqw/ovmKRHLuwoqRTSOmCR8r EBWSUkLIXkyZ0lkvX5CW4GbBq5wvXYyg31Y8nb987M0veKeCj47dtxhVkghyXqzf z86zqRCDFBu5xAYWZ3m9NEgUed8VE/w1p6TprqvgK11oO+/gzPJSXQqkC8vprbeT z9AeDbKLzteQKCrgmef3QSuvkjsxgbGm5zYXQd2mLujhnRZ2bP3KB+8fhdlkrzJw 6KjCnJEtqc88fYKuX1PbBAafqrRYU6EedKoKfWdzucQG/k+gQw42OEp+5QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMCYQYqyBgxuQqVlRT7WnFWnGTlSMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvd0poQmlySUdERzVDcFdWRlB0YWNWYWNaT1ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjuhAwQC PoU8AwQAwpxmMA0GCSqGSIb3DQEBCwUAA4IBAQBqNLFGMK3itm9zjr8RrxxYhL4o hn0rSmsNIzq46uS71X+NQ7oVcnyFQdE6FXcLNOmAy3fGZALqSn70RZhrXF6H8Wqx cppsEhlFP0sfTklSE8ukRmjbutv5OyQdC4qgH19yz7k5eEBt0vzVTVK9fWl2Eoew YujuGlq9SBZ8XvTEPIfzVrktQC8pRsiq157aTxkUD4Cpxy8c2xaNHb2V/E91AcP9 4+hpHXJbvxR4BHfsz8uTjj0a/Xt3drMq4tVpkc1wpUJQN3b7Gt7l3kP9SKvXItoM uxIspBwL7xZP9pkOmeAd/QErD94+vx011EB7cn0wyowfOH7A+HtHnsLNJ3oD -----END CERTIFICATE-----Generated at Sat Jan 10 03:15:25 2026 by rpki-client