This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/WX9t0xmXDR4uM2A7AQHLj3QPI_4.roa File: WX9t0xmXDR4uM2A7AQHLj3QPI_4.roa (raw, json) Hash identifier: juszrqxHpM/25SYd4SpIiGanqn2fYHKuBqSkrqz21Rw= Subject key identifier: 59:7F:6D:D3:19:97:0D:1E:2E:33:60:3B:01:01:CB:8F:74:0F:23:FE Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876 Certificate serial: 019B7E38E537A7145825840F0FFCF01C505F Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/WX9t0xmXDR4uM2A7AQHLj3QPI_4.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205584 IP address blocks: 2.57.156.0/22 maxlen: 24 185.215.28.0/22 maxlen: 24 185.215.28.0/24 maxlen: 24 185.215.29.0/24 maxlen: 24 185.215.30.0/24 maxlen: 24 185.215.31.0/24 maxlen: 24 193.105.168.0/24 maxlen: 24 195.78.98.0/23 maxlen: 24 2a0b:a2c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e5:37:a7:14:58:25:84:0f:0f:fc:f0:1c:50:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20eee05da183dee2b8118141956462c9240d7876 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=597f6dd319970d1e2e33603b0101cb8f740f23fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:38:d4:8d:c1:12:78:37:71:5b:36:6f:28: 7d:70:61:d2:45:0f:06:a8:42:4d:e2:f3:73:18:1c: 64:fd:c5:59:6f:b7:a0:ef:c1:0d:2a:93:c1:f0:bd: d1:de:92:da:5f:93:7b:6b:96:cf:2e:9d:06:24:4b: ac:06:94:fd:be:e8:87:ae:c4:79:69:6a:88:cc:a6: c5:17:76:9e:18:06:26:40:70:99:21:86:25:81:ef: a8:04:26:74:10:10:ae:dc:90:f2:1c:39:69:16:15: ea:8d:a6:f7:6f:e2:cc:4e:1b:26:a7:94:1a:13:70: 8d:59:ba:e7:9f:91:d9:f6:7c:1d:4f:1c:f6:15:fd: 24:26:7f:7f:6b:34:fa:fe:7c:ac:62:c7:fd:7c:85: a0:fe:62:8b:e6:ba:ff:a3:29:c2:d1:6f:49:3a:4d: 73:de:22:ac:32:c3:7a:65:f7:18:0d:25:e9:83:12: 4f:a2:79:af:eb:6c:b8:d0:02:2f:92:41:ee:25:61: 4f:0f:76:c1:aa:a2:f1:0e:91:2a:71:24:61:29:2f: a6:65:85:e2:fb:0e:3b:85:79:1f:d7:c9:aa:f0:00: 6b:ae:82:e8:b9:00:1a:df:34:9c:e3:7a:47:65:25: 60:14:24:69:5c:ff:ef:16:ae:41:f1:e2:3a:f3:43: 1b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7F:6D:D3:19:97:0D:1E:2E:33:60:3B:01:01:CB:8F:74:0F:23:FE X509v3 Authority Key Identifier: keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/WX9t0xmXDR4uM2A7AQHLj3QPI_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.156.0/22 185.215.28.0/22 193.105.168.0/24 195.78.98.0/23 IPv6: 2a0b:a2c0::/29 Signature Algorithm: sha256WithRSAEncryption 25:22:5d:92:04:30:85:85:0d:76:3a:b4:c6:c9:9b:f7:1f:72: 09:95:f2:e4:75:93:cc:87:46:f3:f4:bb:55:27:66:83:f4:30: 5c:fb:02:fe:ea:08:e8:6e:55:67:de:cd:42:63:a3:e7:a1:fe: 1e:f6:a6:d5:52:d3:ff:14:a4:d8:54:00:f0:6f:06:ad:7b:55: 0f:38:f2:50:aa:ae:e7:46:a1:02:32:6c:e4:10:09:26:18:97: 1b:3b:9d:a1:2e:a2:1a:85:79:9c:21:30:85:84:9d:a1:0c:cb: 5b:dc:24:ed:59:d2:a0:2c:24:3f:d7:57:6d:85:d9:12:d9:8f: 3c:7e:8e:99:af:c6:69:3b:b1:25:0d:13:c0:c1:bf:09:a0:f6: 6c:c3:7b:f7:87:c2:6b:14:a6:21:c1:95:ec:76:d9:51:bc:f9: f9:c3:5c:1e:14:32:38:f6:3f:28:43:0f:f8:17:05:d4:ae:20: 94:02:cb:62:d9:62:29:48:29:f4:46:4a:74:d4:53:0a:dd:75: 67:df:08:17:24:78:52:83:13:e3:c8:8b:68:97:dd:a5:e5:a0: 50:4d:a6:4f:5f:fd:d1:f5:0a:b0:d9:84:ca:24:ab:ed:74:10: 9b:f8:21:46:fb:b7:d1:eb:ee:01:ad:59:e1:00:6b:0a:2a:1a: 48:6d:86:81 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+OOU3pxRYJYQPD/zwHFBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZWVlMDVkYTE4M2RlZTJiODExODE0MTk1NjQ2MmM5MjQw ZDc4NzYwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTdmNmRkMzE5OTcwZDFlMmUzMzYwM2IwMTAxY2I4Zjc0MGYyM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQQ41I3BEng3cVs2byh9cGHSRQ8G qEJN4vNzGBxk/cVZb7eg78ENKpPB8L3R3pLaX5N7a5bPLp0GJEusBpT9vuiHrsR5 aWqIzKbFF3aeGAYmQHCZIYYlge+oBCZ0EBCu3JDyHDlpFhXqjab3b+LMThsmp5Qa E3CNWbrnn5HZ9nwdTxz2Ff0kJn9/azT6/nysYsf9fIWg/mKL5rr/oynC0W9JOk1z 3iKsMsN6ZfcYDSXpgxJPonmv62y40AIvkkHuJWFPD3bBqqLxDpEqcSRhKS+mZYXi +w47hXkf18mq8ABrroLouQAa3zSc43pHZSVgFCRpXP/vFq5B8eI680MbgQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFFl/bdMZlw0eLjNgOwEBy490DyP+MB8GA1UdIwQY MBaAFCDu4F2hg97iuBGBQZVkYskkDXh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQt Mzk4NTI5OWZhZDZkLzEvV1g5dDB4bVhEUjR1TTJBN0FRSExqM1FQSV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQtMzk4NTI5OWZhZDZk LzEvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCAjmcAwQC udccAwQAwWmoAwQBw05iMA0EAgACMAcDBQMqC6LAMA0GCSqGSIb3DQEBCwUAA4IB AQAlIl2SBDCFhQ12OrTGyZv3H3IJlfLkdZPMh0bz9LtVJ2aD9DBc+wL+6gjoblVn 3s1CY6Pnof4e9qbVUtP/FKTYVADwbwate1UPOPJQqq7nRqECMmzkEAkmGJcbO52h LqIahXmcITCFhJ2hDMtb3CTtWdKgLCQ/11dthdkS2Y88fo6Zr8ZpO7ElDRPAwb8J oPZsw3v3h8JrFKYhwZXsdtlRvPn5w1weFDI49j8oQw/4FwXUriCUAsti2WIpSCn0 Rkp01FMK3XVn3wgXJHhSgxPjyItol92l5aBQTaZPX/3R9Qqw2YTKJKvtdBCb+CFG +7fR6+4BrVnhAGsKKhpIbYaB -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:29 2026 by rpki-client