This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/wlxifpAvi3KnZGmbDR-ny66_Gks.roa File: wlxifpAvi3KnZGmbDR-ny66_Gks.roa (raw, json) Hash identifier: T7gVPusKxBgkDKZBte1yrg8sQCBMVaEOfioHHj0VULo= Subject key identifier: C2:5C:62:7E:90:2F:8B:72:A7:64:69:9B:0D:1F:A7:CB:AE:BF:1A:4B Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b Certificate serial: 019B7911248FF552008BEB530081C4D50DD3 Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/wlxifpAvi3KnZGmbDR-ny66_Gks.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200272 IP address blocks: 84.39.196.0/23 maxlen: 23 84.39.198.0/24 maxlen: 24 84.39.199.0/24 maxlen: 24 2a09:ee00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:24:8f:f5:52:00:8b:eb:53:00:81:c4:d5:0d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c25c627e902f8b72a764699b0d1fa7cbaebf1a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:61:55:fc:69:d1:c0:5b:44:ee:a5:50:df:f7: 29:27:92:de:ef:c0:1b:92:af:4c:c4:ff:d5:1a:d3: d9:31:b1:d2:98:10:61:a4:8c:cc:87:24:05:80:ac: c6:59:1e:30:a9:73:b0:82:ca:64:21:42:50:56:9f: fa:22:4f:04:9e:ec:92:af:67:a2:ef:97:3d:84:3b: 37:0d:98:23:bf:d6:22:f7:55:c3:71:16:03:fe:f2: 9d:48:5d:42:63:e7:88:74:c6:03:48:1e:cb:0a:89: d0:1f:e8:63:0d:da:93:44:df:a4:63:41:c8:78:a0: 2c:2c:f5:fd:0d:44:b2:4a:6b:81:b5:73:7c:85:23: b3:e6:d2:53:7a:90:2c:fa:7c:72:93:e5:53:4c:e3: 50:a5:01:10:55:5f:11:93:6a:07:18:a7:38:98:b4: d6:f0:b9:d8:30:17:4c:69:55:dc:5b:ee:aa:c5:f0: 6e:3c:03:1f:e6:d0:e8:f6:84:4b:1f:65:ba:26:87: 7f:5c:08:8d:b9:18:9f:e9:69:ab:9a:5f:2a:a5:66: a3:ed:7c:2a:3a:46:09:7e:ca:78:ac:bf:82:a7:ee: 04:2f:fe:a6:14:95:f3:bb:75:b2:47:d2:68:60:1c: 3d:1f:ac:90:29:7d:35:d8:55:f0:5f:cc:a7:42:18: 48:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5C:62:7E:90:2F:8B:72:A7:64:69:9B:0D:1F:A7:CB:AE:BF:1A:4B X509v3 Authority Key Identifier: keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/wlxifpAvi3KnZGmbDR-ny66_Gks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.39.196.0/22 IPv6: 2a09:ee00::/29 Signature Algorithm: sha256WithRSAEncryption 98:05:c2:74:31:45:34:5f:3f:dd:7b:b5:51:e8:a9:1a:9f:ba: a3:bf:84:29:e5:8d:ef:87:d3:72:cd:36:ea:80:17:0d:8d:53: 64:05:05:60:94:0f:95:22:f8:32:a9:85:40:f0:ab:18:1b:47: a9:91:f9:5e:55:5b:2f:74:93:b6:17:6c:ce:a5:3f:90:f6:c9: f4:0c:a1:7b:d9:fe:d6:c3:bf:a8:79:c9:07:b8:78:70:33:07: 55:07:f8:5f:a0:28:2e:4f:6f:b0:55:44:c7:32:01:74:6f:c7: de:5b:95:2b:a7:68:6b:5b:a3:4c:96:b4:b7:ac:da:20:de:b3: bc:57:92:cc:81:9b:73:f8:86:a8:05:9a:c7:81:b1:38:80:bd: 9e:55:ce:c3:16:6f:09:1d:aa:13:c7:0d:34:4c:f1:d1:ce:be: 4c:b7:4d:bf:bc:be:07:8f:c1:e3:ac:59:e7:a6:0a:7c:61:02: 97:47:75:f5:a9:89:40:fd:5f:2f:5c:68:b6:29:2a:f2:28:ce: fd:90:61:a0:ea:d7:62:a2:25:33:86:87:fe:26:ee:64:4f:9f: 5d:4d:02:4b:fe:c8:d8:18:7c:de:0f:3d:d7:42:db:bf:94:36: 7a:3e:bf:19:57:0a:45:af:ae:6f:a4:7b:2b:59:53:8a:31:b8: 3f:82:6f:26 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ESSP9VIAi+tTAIHE1Q3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlN2NjODM3MWVkMjRiYWNmNjdhY2E4YjkwMmNlZTcwNmFm YzYyNGIwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjVjNjI3ZTkwMmY4YjcyYTc2NDY5OWIwZDFmYTdjYmFlYmYxYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12FV/GnRwFtE7qVQ3/cpJ5Le78Ab kq9MxP/VGtPZMbHSmBBhpIzMhyQFgKzGWR4wqXOwgspkIUJQVp/6Ik8EnuySr2ei 75c9hDs3DZgjv9Yi91XDcRYD/vKdSF1CY+eIdMYDSB7LConQH+hjDdqTRN+kY0HI eKAsLPX9DUSySmuBtXN8hSOz5tJTepAs+nxyk+VTTONQpQEQVV8Rk2oHGKc4mLTW 8LnYMBdMaVXcW+6qxfBuPAMf5tDo9oRLH2W6Jod/XAiNuRif6Wmrml8qpWaj7Xwq OkYJfsp4rL+Cp+4EL/6mFJXzu3WyR9JoYBw9H6yQKX012FXwX8ynQhhI/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMJcYn6QL4typ2Rpmw0fp8uuvxpLMB8GA1UdIwQY MBaAFE58yDce0kus9nrKi5As7nBq/GJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQt OGVkNWE3OWRlODM1LzEvd2x4aWZwQXZpM0tuWkdtYkRSLW55NjZfR2tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQtOGVkNWE3OWRlODM1 LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVCfEMA0E AgACMAcDBQMqCe4AMA0GCSqGSIb3DQEBCwUAA4IBAQCYBcJ0MUU0Xz/de7VR6Kka n7qjv4Qp5Y3vh9NyzTbqgBcNjVNkBQVglA+VIvgyqYVA8KsYG0epkfleVVsvdJO2 F2zOpT+Q9sn0DKF72f7Ww7+oeckHuHhwMwdVB/hfoCguT2+wVUTHMgF0b8feW5Ur p2hrW6NMlrS3rNog3rO8V5LMgZtz+IaoBZrHgbE4gL2eVc7DFm8JHaoTxw00TPHR zr5Mt02/vL4Hj8HjrFnnpgp8YQKXR3X1qYlA/V8vXGi2KSryKM79kGGg6tdioiUz hof+Ju5kT59dTQJL/sjYGHzeDz3XQtu/lDZ6Pr8ZVwpFr65vpHsrWVOKMbg/gm8m -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:11 2026 by rpki-client