This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa File: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (raw, json) Hash identifier: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA= Subject key identifier: C1:E5:96:B9:5E:A3:7E:CB:B6:D0:ED:4A:A7:C3:D9:FF:BC:39:FB:A2 Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c Certificate serial: 019B76EB883B4F4EE5C2DDCE94298B6C7B77 Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2872 IP address blocks: 2.58.40.0/24 maxlen: 24 2.58.41.0/24 maxlen: 24 2.58.42.0/24 maxlen: 24 45.115.92.0/24 maxlen: 24 45.115.93.0/24 maxlen: 24 45.115.94.0/24 maxlen: 24 45.115.95.0/24 maxlen: 24 89.43.206.0/24 maxlen: 24 89.43.207.0/24 maxlen: 24 185.123.0.0/22 maxlen: 22 185.123.0.0/24 maxlen: 24 185.123.1.0/24 maxlen: 24 185.123.2.0/24 maxlen: 24 185.123.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:88:3b:4f:4e:e5:c2:dd:ce:94:29:8b:6c:7b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e596b95ea37ecbb6d0ed4aa7c3d9ffbc39fba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:02:d6:55:7c:18:7f:a8:94:56:a9:9e:78: 92:1b:d6:d1:06:33:72:d4:3f:27:95:f5:09:80:7b: 1f:4e:c9:05:73:9c:36:e3:02:d6:5c:f1:6e:4e:5c: 65:a9:ac:d3:63:38:14:ca:52:4b:99:bb:d7:52:36: d4:a3:cb:f8:c1:30:da:23:6d:a5:84:19:eb:db:4b: 51:ec:9c:19:2f:3c:f5:f7:35:c9:aa:94:96:a1:a3: 36:d4:4d:57:93:fc:ec:dd:6a:6b:46:19:1c:ad:11: b7:cd:95:1f:8b:43:47:e3:dc:cb:26:c0:25:bb:59: 4d:13:88:4f:68:fc:58:ad:85:58:45:37:ac:76:50: af:86:df:80:1c:f4:0e:77:ef:69:7c:08:80:21:c7: 78:24:b9:aa:b9:77:4b:a8:a8:4e:c4:1f:a2:e4:fd: e5:81:c4:7e:67:7d:98:55:fb:1e:03:cc:91:be:77: 40:70:c9:7c:49:fa:c8:83:da:2d:b9:cb:ce:e8:ba: 89:3a:52:37:d7:18:52:c0:2f:8c:b0:c0:10:29:4d: da:b2:58:48:e1:21:f7:e9:2f:d5:9e:5b:b4:1d:0c: 1e:07:57:05:5b:7e:d7:a3:c0:3c:93:b2:92:2c:54: 40:d8:98:4e:ac:4b:4d:b8:48:2d:bc:30:ee:c3:be: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E5:96:B9:5E:A3:7E:CB:B6:D0:ED:4A:A7:C3:D9:FF:BC:39:FB:A2 X509v3 Authority Key Identifier: keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.40.0-2.58.42.255 45.115.92.0/22 89.43.206.0/23 185.123.0.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:03:b5:01:d0:72:01:ab:a9:91:93:e2:3a:e6:f5:40:5c:c8: da:0c:5d:cb:3b:74:f4:de:c4:75:f3:1c:c6:c8:fb:3c:e3:c1: 20:82:65:52:e2:92:de:cf:a0:ca:bd:f1:cf:8f:ba:b2:96:e7: 9d:33:14:55:15:66:3d:1a:e3:cd:27:3b:8e:cc:b0:e4:30:9f: 8a:5b:d3:8c:3b:ea:b9:f4:fa:16:33:d0:00:b7:9d:a5:1d:98: b0:3a:5f:53:53:8b:00:df:26:bb:50:90:e1:5e:35:f1:a1:8b: 28:1e:50:b7:8f:9a:b6:fa:e1:b3:56:d6:19:cc:4b:b5:16:3f: a2:94:1d:82:7c:cd:a8:ae:36:53:c3:d2:d7:85:af:49:1d:32: 64:48:40:8b:17:df:4d:81:0f:94:ab:58:3f:43:f0:96:b7:66: c3:a9:b1:d4:60:74:ad:69:81:a5:ca:73:36:1b:ec:25:a4:fb: cd:79:70:e2:cc:fb:b8:70:e6:46:f9:52:5f:db:fa:d1:34:b8: ad:b1:cf:ed:53:78:e1:15:fc:54:11:7a:75:6a:cb:60:bb:39: 98:84:66:72:c3:64:8b:a2:a9:a9:ec:37:b2:ff:80:f6:26:84: 18:10:e6:c2:6c:82:af:2f:ce:af:7e:18:40:6c:3a:89:09:b9: b0:fd:a0:19 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt264g7T07lwt3OlCmLbHt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOGY1NDM4MDczYTYyMWFlYTc3MmY1Y2I3YTRlZmQ1OGM2 Yjc3NGMwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU1OTZiOTVlYTM3ZWNiYjZkMGVkNGFhN2MzZDlmZmJjMzlmYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+IC1lV8GH+olFapnniSG9bRBjNy 1D8nlfUJgHsfTskFc5w24wLWXPFuTlxlqazTYzgUylJLmbvXUjbUo8v4wTDaI22l hBnr20tR7JwZLzz19zXJqpSWoaM21E1Xk/zs3WprRhkcrRG3zZUfi0NH49zLJsAl u1lNE4hPaPxYrYVYRTesdlCvht+AHPQOd+9pfAiAIcd4JLmquXdLqKhOxB+i5P3l gcR+Z32YVfseA8yRvndAcMl8SfrIg9otucvO6LqJOlI31xhSwC+MsMAQKU3aslhI 4SH36S/Vnlu0HQweB1cFW37Xo8A8k7KSLFRA2JhOrEtNuEgtvDDuw77qeQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFMHllrleo37LttDtSqfD2f+8OfuiMB8GA1UdIwQY MBaAFK2PVDgHOmIa6ncvXLek79WMa3dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2Yt MTc3OGJhMjVkOGI5LzEvd2VXV3VWNmpmc3UyME8xS3A4UFpfN3c1LTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2YtMTc3OGJhMjVkOGI5 LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAMCOigD BAACOioDBAItc1wDBAFZK84DBAK5ewAwDQYJKoZIhvcNAQELBQADggEBAE0DtQHQ cgGrqZGT4jrm9UBcyNoMXcs7dPTexHXzHMbI+zzjwSCCZVLikt7PoMq98c+PurKW 550zFFUVZj0a480nO47MsOQwn4pb04w76rn0+hYz0AC3naUdmLA6X1NTiwDfJrtQ kOFeNfGhiygeULePmrb64bNW1hnMS7UWP6KUHYJ8zaiuNlPD0teFr0kdMmRIQIsX 302BD5SrWD9D8Ja3ZsOpsdRgdK1pgaXKczYb7CWk+815cOLM+7hw5kb5Ul/b+tE0 uK2xz+1TeOEV/FQRenVqy2C7OZiEZnLDZIuiqansN7L/gPYmhBgQ5sJsgq8vzq9+ GEBsOokJubD9oBk= -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:41 2026 by rpki-client