This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/wflbDoADYAsK4GD1fsBz6TdNDNU.roa File: wflbDoADYAsK4GD1fsBz6TdNDNU.roa (raw, json) Hash identifier: 0r3hdg4G+H0uIyPzUPDcBYqQLBzzIsPKqLy64umuAXw= Subject key identifier: C1:F9:5B:0E:80:03:60:0B:0A:E0:60:F5:7E:C0:73:E9:37:4D:0C:D5 Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659 Certificate serial: 019B77596C25F457A4ED507C2136BF16448C Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/wflbDoADYAsK4GD1fsBz6TdNDNU.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199811 IP address blocks: 109.237.60.0/22 maxlen: 22 185.43.244.0/22 maxlen: 22 185.74.32.0/22 maxlen: 22 185.74.32.0/24 maxlen: 24 185.74.35.0/24 maxlen: 24 185.214.152.0/22 maxlen: 22 2a01:71e0::/32 maxlen: 32 2a05:4880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6c:25:f4:57:a4:ed:50:7c:21:36:bf:16:44:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1f95b0e8003600b0ae060f57ec073e9374d0cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:af:cf:d2:a0:22:39:78:da:5f:2e:08:d7: de:5a:8e:ce:a4:e5:d2:bf:42:41:36:f3:3e:4e:9a: e9:a1:46:3b:8f:71:93:16:fe:90:4a:7b:8f:06:01: 36:f2:3c:dc:64:8d:23:6b:ea:41:07:28:2e:ca:d2: 29:16:99:c2:01:b8:6b:af:fe:ff:3e:40:27:fb:b9: 62:51:f4:5a:e9:3e:f0:ef:01:6c:0f:7d:ef:cc:26: f7:a4:3a:f0:2e:78:5b:5a:08:bc:61:28:99:7f:c5: 1d:09:f8:a1:ad:8b:17:b8:db:43:a9:91:49:ff:1d: e0:85:b1:4b:bb:09:16:b7:23:48:b3:a6:78:a4:8e: 04:ff:52:ec:34:c2:c3:70:68:e9:51:6a:51:e4:09: 35:b9:fc:ad:23:8c:c1:33:bd:d5:49:59:da:39:65: 4d:03:e2:cf:1b:9a:f7:a3:23:2a:ca:88:a7:fd:c7: b3:c3:a2:08:8a:89:62:09:72:94:12:18:dd:f7:49: 98:4f:85:a2:aa:6e:25:86:e9:61:14:5e:ed:05:01: c4:5b:9e:6a:21:ed:8e:de:c1:47:c8:24:08:8c:85: 0e:4e:d7:5a:aa:f6:7c:46:ba:26:63:3f:1e:f7:61: e8:d1:4d:41:22:7c:56:69:e0:bf:13:39:72:8b:fe: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F9:5B:0E:80:03:60:0B:0A:E0:60:F5:7E:C0:73:E9:37:4D:0C:D5 X509v3 Authority Key Identifier: keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/wflbDoADYAsK4GD1fsBz6TdNDNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.237.60.0/22 185.43.244.0/22 185.74.32.0/22 185.214.152.0/22 IPv6: 2a01:71e0::/32 2a05:4880::/29 Signature Algorithm: sha256WithRSAEncryption 02:5a:9a:03:d2:0b:ef:cf:4b:97:cb:38:5d:cf:3f:52:ae:4f: b3:ed:74:1d:51:91:08:21:4b:b1:3b:22:e2:80:dc:3c:b9:72: 8f:aa:85:02:ba:bb:fa:c7:ef:59:89:e5:3d:3c:f1:30:bb:8e: 3c:2a:78:8b:6b:85:42:a0:b2:5a:dc:1b:39:d0:c3:18:5b:b5: 9e:8c:f2:83:c1:25:b2:ef:d4:2e:79:2d:34:63:0c:cd:22:b8: 0c:20:fb:ec:53:aa:35:21:68:30:3c:33:25:55:0c:23:15:22: 10:c3:db:a7:17:14:6e:e4:83:12:de:85:5c:b3:db:1a:16:37: b1:f1:f6:f5:46:e0:74:8c:19:20:76:dc:3d:69:41:0e:d8:6e: 00:6f:68:d5:7d:8a:10:fc:73:03:86:80:ce:9a:79:5e:ce:32: f1:74:f5:af:26:97:2e:9f:ac:22:f6:8c:b1:01:f2:10:04:3d: f0:cd:87:c1:a1:ec:d0:40:6e:17:96:4e:64:60:43:1c:79:6a: 9b:4a:89:1b:b8:f9:fb:11:67:3f:b8:a4:b7:22:cf:03:e7:de: ff:7f:39:db:e0:0c:e2:fd:56:c0:3a:7c:5f:ef:b4:53:5a:8d: e6:3a:74:55:92:f9:fc:8c:85:eb:06:bd:5b:da:03:95:ad:de: 0b:6b:55:3b -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt3WWwl9Fek7VB8ITa/FkSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTNlYjhhN2QxOWZmZDc4MDQ3NjVhY2ZkY2YyMjYwYzZj MGQ2NTkwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWY5NWIwZTgwMDM2MDBiMGFlMDYwZjU3ZWMwNzNlOTM3NGQwY2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApACvz9KgIjl42l8uCNfeWo7OpOXS v0JBNvM+TprpoUY7j3GTFv6QSnuPBgE28jzcZI0ja+pBByguytIpFpnCAbhrr/7/ PkAn+7liUfRa6T7w7wFsD33vzCb3pDrwLnhbWgi8YSiZf8UdCfihrYsXuNtDqZFJ /x3ghbFLuwkWtyNIs6Z4pI4E/1LsNMLDcGjpUWpR5Ak1ufytI4zBM73VSVnaOWVN A+LPG5r3oyMqyoin/cezw6IIioliCXKUEhjd90mYT4Wiqm4lhulhFF7tBQHEW55q Ie2O3sFHyCQIjIUOTtdaqvZ8RromYz8e92Ho0U1BInxWaeC/Ezlyi/64mwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFMH5Ww6AA2ALCuBg9X7Ac+k3TQzVMB8GA1UdIwQY MBaAFJyT64p9Gf/XgEdlrP3PImDGwNZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQt Mzk2YWQ3MDEyMzBlLzEvd2ZsYkRvQURZQXNLNEdEMWZzQno2VGRORE5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQtMzk2YWQ3MDEyMzBl LzEvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCbe08AwQC uSv0AwQCuUogAwQCudaYMBQEAgACMA4DBQAqAXHgAwUDKgVIgDANBgkqhkiG9w0B AQsFAAOCAQEAAlqaA9IL789Ll8s4Xc8/Uq5Ps+10HVGRCCFLsTsi4oDcPLlyj6qF Arq7+sfvWYnlPTzxMLuOPCp4i2uFQqCyWtwbOdDDGFu1nozyg8Elsu/ULnktNGMM zSK4DCD77FOqNSFoMDwzJVUMIxUiEMPbpxcUbuSDEt6FXLPbGhY3sfH29UbgdIwZ IHbcPWlBDthuAG9o1X2KEPxzA4aAzpp5Xs4y8XT1ryaXLp+sIvaMsQHyEAQ98M2H waHs0EBuF5ZOZGBDHHlqm0qJG7j5+xFnP7iktyLPA+fe/3852+AM4v1WwDp8X++0 U1qN5jp0VZL5/IyF6wa9W9oDla3eC2tVOw== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:32 2026 by rpki-client