This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/WxQ64uv-zX-eye9sRlN7C2cRqwI.roa File: WxQ64uv-zX-eye9sRlN7C2cRqwI.roa (raw, json) Hash identifier: H3Nchr9jYSxejrjh37X3oEL6arcb0RjMrAm9O9pSwMM= Subject key identifier: 5B:14:3A:E2:EB:FE:CD:7F:9E:C9:EF:6C:46:53:7B:0B:67:11:AB:02 Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976 Certificate serial: 019B77C763BC5F48328C250D0EBC94EEDEAB Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/WxQ64uv-zX-eye9sRlN7C2cRqwI.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200319 IP address blocks: 194.48.224.0/22 maxlen: 24 2a0c:f440::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:63:bc:5f:48:32:8c:25:0d:0e:bc:94:ee:de:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b143ae2ebfecd7f9ec9ef6c46537b0b6711ab02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:41:54:70:ec:79:aa:c2:dd:8f:ed:a8:48: a0:81:22:b8:3e:0e:95:9d:e0:36:34:fb:94:1e:71: eb:cc:57:05:82:c0:91:b7:8f:29:a6:6d:05:08:98: dd:a0:0a:fd:fc:80:5e:47:17:0f:a6:34:1f:b3:87: ad:51:a6:3b:41:41:e2:76:60:5c:22:b0:43:20:52: 95:78:65:ba:ea:c1:72:fa:6c:c8:5b:8d:3b:69:ba: fb:71:cc:15:11:63:94:ca:4b:f7:89:fb:00:32:e8: b4:44:9b:7a:90:e4:37:8c:c7:05:6b:1c:80:40:26: 95:b4:a1:27:6e:3f:c8:3b:21:c6:89:1c:24:15:71: e3:15:cd:57:cf:a4:3d:ed:26:fb:d2:39:f0:3c:48: b4:1d:27:a2:a9:b7:ba:f0:f6:2a:4e:57:6a:32:43: 74:89:29:2e:de:1a:14:fd:01:ba:d5:de:97:53:31: f9:8d:26:cd:f9:98:e5:84:d4:49:9f:b5:a1:17:4d: f8:34:6b:84:6e:97:8a:74:5a:17:e8:2f:08:cd:14: 6f:8a:26:93:59:86:62:b6:37:56:3c:47:ce:3b:d0: d7:55:0f:a5:51:f2:28:a6:5b:39:ba:eb:c8:01:45: 57:c3:1d:5b:1a:79:67:3e:e4:f2:53:89:14:48:5f: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:14:3A:E2:EB:FE:CD:7F:9E:C9:EF:6C:46:53:7B:0B:67:11:AB:02 X509v3 Authority Key Identifier: keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/WxQ64uv-zX-eye9sRlN7C2cRqwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.224.0/22 IPv6: 2a0c:f440::/29 Signature Algorithm: sha256WithRSAEncryption 9b:1d:b7:29:f0:0f:8d:fe:25:c1:ec:cb:da:67:6a:26:47:b2: 47:ba:ac:74:52:75:f3:65:2a:2c:55:c9:50:61:63:ba:c4:45: 17:9a:ba:d2:89:fd:fd:27:2d:dc:d5:bb:d8:44:98:9c:28:db: eb:92:89:8d:63:82:38:3d:e8:4b:b3:b3:2b:f7:98:be:7c:41: d7:94:df:48:ab:fc:c9:dc:58:f8:fc:ef:1b:e3:06:0f:ae:ff: 1b:c2:9f:e0:94:94:36:02:fc:cb:e7:16:5a:81:62:0a:72:ef: 0c:b4:db:45:21:b9:6c:22:20:a8:4a:9f:01:1d:a6:32:2e:6c: 7b:0d:05:7c:d1:5b:fa:57:ed:af:e5:9c:c1:5c:de:82:46:2a: 6f:70:2d:c0:57:34:5f:15:52:43:78:fe:5f:2e:f9:31:fa:78: 9d:da:0f:a9:05:45:b4:61:ef:f5:4d:1e:b4:b5:9b:de:09:89: fb:eb:b7:d5:c7:be:de:41:39:a8:0d:e2:89:d1:f1:21:e7:43: 0d:cb:af:af:2e:7f:7e:ff:a9:f4:18:9a:46:8a:64:b5:0d:04: 12:ee:99:99:5a:82:dd:f4:e2:d9:8b:1e:7f:b0:f3:81:1f:b2: e3:48:75:b3:80:eb:e5:59:ff:f5:2c:da:3a:10:ef:40:cf:f4: 23:68:60:ac -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x2O8X0gyjCUNDryU7t6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYWUwMTg2YzY4MjMwMTRiYzJjNDJkMDRlYTY1MGJmNWNj Yjk5NzYwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjE0M2FlMmViZmVjZDdmOWVjOWVmNmM0NjUzN2IwYjY3MTFhYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua9BVHDsearC3Y/tqEiggSK4Pg6V neA2NPuUHnHrzFcFgsCRt48ppm0FCJjdoAr9/IBeRxcPpjQfs4etUaY7QUHidmBc IrBDIFKVeGW66sFy+mzIW407abr7ccwVEWOUykv3ifsAMui0RJt6kOQ3jMcFaxyA QCaVtKEnbj/IOyHGiRwkFXHjFc1Xz6Q97Sb70jnwPEi0HSeiqbe68PYqTldqMkN0 iSku3hoU/QG61d6XUzH5jSbN+ZjlhNRJn7WhF034NGuEbpeKdFoX6C8IzRRviiaT WYZitjdWPEfOO9DXVQ+lUfIopls5uuvIAUVXwx1bGnlnPuTyU4kUSF96MwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFsUOuLr/s1/nsnvbEZTewtnEasCMB8GA1UdIwQY MBaAFO2uAYbGgjAUvCxC0E6mUL9cy5l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yOWE1MmUtNThhMC00MjM4LWFlYjEt OGI3YTRhYmYxY2EyLzEvV3hRNjR1di16WC1leWU5c1JsTjdDMmNScXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yOWE1MmUtNThhMC00MjM4LWFlYjEtOGI3YTRhYmYxY2Ey LzEvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwjDgMA0E AgACMAcDBQMqDPRAMA0GCSqGSIb3DQEBCwUAA4IBAQCbHbcp8A+N/iXB7MvaZ2om R7JHuqx0UnXzZSosVclQYWO6xEUXmrrSif39Jy3c1bvYRJicKNvrkomNY4I4PehL s7Mr95i+fEHXlN9Iq/zJ3Fj4/O8b4wYPrv8bwp/glJQ2AvzL5xZagWIKcu8MtNtF IblsIiCoSp8BHaYyLmx7DQV80Vv6V+2v5ZzBXN6CRipvcC3AVzRfFVJDeP5fLvkx +nid2g+pBUW0Ye/1TR60tZveCYn767fVx77eQTmoDeKJ0fEh50MNy6+vLn9+/6n0 GJpGimS1DQQS7pmZWoLd9OLZix5/sPOBH7LjSHWzgOvlWf/1LNo6EO9Az/QjaGCs -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:25 2026 by rpki-client