This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/WL12YdHQF4v--TkqLhD3Ng1t2wY.roa File: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (raw, json) Hash identifier: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA= Subject key identifier: 58:BD:76:61:D1:D0:17:8B:FE:F9:39:2A:2E:10:F7:36:0D:6D:DB:06 Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414 Certificate serial: 019B7C807727BFA8572C68319431211CCABC Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/WL12YdHQF4v--TkqLhD3Ng1t2wY.roa Signing time: Fri 02 Jan 2026 02:19:12 +0000 ROA not before: Fri 02 Jan 2026 02:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58222 IP address blocks: 89.43.116.0/22 maxlen: 24 156.67.8.0/22 maxlen: 24 185.2.200.0/22 maxlen: 24 185.16.172.0/22 maxlen: 24 212.237.208.0/22 maxlen: 24 2a03:da40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:77:27:bf:a8:57:2c:68:31:94:31:21:1c:ca:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414 Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58bd7661d1d0178bfef9392a2e10f7360d6ddb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:75:a6:ad:5a:25:93:76:16:9d:fb:83:a7: 8c:50:7d:5a:6a:88:6c:dd:07:b4:29:29:fb:e7:95: 7a:7b:ca:41:96:75:ca:cd:ff:de:64:59:18:fc:3f: 09:9b:f0:56:7b:1a:95:31:7b:5a:aa:46:bb:bc:02: c3:ce:70:8f:f9:bc:fa:1c:d8:84:a1:ce:4d:3f:cf: 47:8e:b6:0c:30:e5:e7:04:e6:17:a5:a8:d7:94:b7: 77:19:63:65:ea:38:e5:bf:88:96:9f:ad:77:c6:8f: de:2b:82:3e:a3:26:e0:3a:98:b6:7d:45:ac:af:b0: fa:31:65:08:75:da:ee:a6:a3:7f:33:3a:9e:ce:6a: db:9d:dd:d2:8c:db:5a:48:df:c4:2d:f2:89:56:5b: 8a:79:04:36:53:c7:91:b7:a6:15:4f:25:0f:1d:2f: 84:10:00:23:55:5d:09:d5:53:71:b9:64:6b:72:30: c6:75:f6:1f:f2:37:ac:d7:b9:a5:73:eb:28:20:b9: 45:9a:b6:df:36:3a:62:72:3f:a4:7f:08:c6:30:63: 99:d7:18:b3:3f:90:57:d0:15:b0:ec:96:0d:0d:59: 49:67:8c:3e:cc:7f:a3:23:76:05:6a:55:37:de:0b: 16:ac:56:a9:39:eb:ae:4d:4f:32:90:68:f9:e7:8f: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BD:76:61:D1:D0:17:8B:FE:F9:39:2A:2E:10:F7:36:0D:6D:DB:06 X509v3 Authority Key Identifier: keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/WL12YdHQF4v--TkqLhD3Ng1t2wY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.116.0/22 156.67.8.0/22 185.2.200.0/22 185.16.172.0/22 212.237.208.0/22 IPv6: 2a03:da40::/29 Signature Algorithm: sha256WithRSAEncryption ae:ac:eb:68:a2:48:11:2f:a4:be:a2:cb:53:30:4d:5a:6a:de: 91:4e:b1:43:dd:54:d9:15:77:ed:51:79:a1:5f:23:84:a7:76: 20:b1:09:99:eb:13:7e:b7:e2:6e:d5:f4:6d:b2:f8:04:f6:c5: d7:83:38:ca:41:ec:8b:62:e4:88:fa:2e:3b:72:93:28:a7:c6: 0d:f1:05:43:b0:59:15:34:82:f0:92:e3:a2:93:39:48:ad:77: f9:3e:bf:98:4b:b7:13:c9:ca:ae:68:51:f9:99:cf:14:40:88: 11:f3:6a:74:5e:5f:3f:3c:b9:1f:dd:01:21:3d:5c:fd:6b:af: 31:d0:c8:09:4e:88:02:6e:45:60:4c:71:b9:3e:34:22:71:7d: 34:8a:7a:65:58:f0:cc:64:98:0f:39:ee:62:fe:c2:b7:a3:1e: 28:62:e8:c9:0a:54:86:5c:d8:5e:e5:fd:0d:72:4f:3d:d3:fb: 54:01:6a:91:5d:62:fa:09:0c:38:2e:09:16:43:1f:cc:18:5b: 52:6e:83:73:04:9e:47:25:a2:19:ec:c7:db:2a:89:16:88:6b: bd:81:5b:f3:92:c2:cb:69:54:eb:a3:6a:b3:df:5d:45:93:b7: ad:eb:52:12:31:0e:35:0c:2a:7a:54:2e:25:a2:55:36:75:5d: b3:4b:f8:ff -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8gHcnv6hXLGgxlDEhHMq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0 NzM0MTQwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGJkNzY2MWQxZDAxNzhiZmVmOTM5MmEyZTEwZjczNjBkNmRkYjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWd1pq1aJZN2Fp37g6eMUH1aaohs 3Qe0KSn755V6e8pBlnXKzf/eZFkY/D8Jm/BWexqVMXtaqka7vALDznCP+bz6HNiE oc5NP89HjrYMMOXnBOYXpajXlLd3GWNl6jjlv4iWn613xo/eK4I+oybgOpi2fUWs r7D6MWUIddrupqN/Mzqezmrbnd3SjNtaSN/ELfKJVluKeQQ2U8eRt6YVTyUPHS+E EAAjVV0J1VNxuWRrcjDGdfYf8jes17mlc+soILlFmrbfNjpicj+kfwjGMGOZ1xiz P5BX0BWw7JYNDVlJZ4w+zH+jI3YFalU33gsWrFapOeuuTU8ykGj5549GrwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFFi9dmHR0BeL/vk5Ki4Q9zYNbdsGMB8GA1UdIwQY MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et Yjg0NzdmNTA3M2MxLzEvV0wxMllkSFFGNHYtLVRrcUxoRDNOZzF0MndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCWSt0AwQC nEMIAwQCuQLIAwQCuRCsAwQC1O3QMA0EAgACMAcDBQMqA9pAMA0GCSqGSIb3DQEB CwUAA4IBAQCurOtookgRL6S+ostTME1aat6RTrFD3VTZFXftUXmhXyOEp3YgsQmZ 6xN+t+Ju1fRtsvgE9sXXgzjKQeyLYuSI+i47cpMop8YN8QVDsFkVNILwkuOikzlI rXf5Pr+YS7cTycquaFH5mc8UQIgR82p0Xl8/PLkf3QEhPVz9a68x0MgJTogCbkVg THG5PjQicX00inplWPDMZJgPOe5i/sK3ox4oYujJClSGXNhe5f0Nck890/tUAWqR XWL6CQw4LgkWQx/MGFtSboNzBJ5HJaIZ7MfbKokWiGu9gVvzksLLaVTro2qz311F k7et61ISMQ41DCp6VC4lolU2dV2zS/j/ -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:19 2026 by rpki-client