This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa File: WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa (raw, json) Hash identifier: YcgwHssC0IerMr07yjE5xNvbp7mTIbDmtcrXLuP8XiQ= Subject key identifier: 59:9A:32:06:72:17:0A:A9:66:64:98:36:7E:F6:4B:D3:B5:99:F9:C3 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE3F51ABCBDCD9BE8183927A60CD15 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa Signing time: Fri 02 Jan 2026 04:19:07 +0000 ROA not before: Fri 02 Jan 2026 04:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211936 IP address blocks: 31.186.176.0/22 maxlen: 24 92.114.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3f:51:ab:cb:dc:d9:be:81:83:92:7a:60:cd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=599a320672170aa9666498367ef64bd3b599f9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3b:f9:b3:0d:e6:8d:f7:98:65:30:41:fb:6f: 92:82:ae:65:98:48:0e:41:22:e5:e4:6d:56:ff:9e: 39:f2:92:16:80:e2:3f:a5:f2:29:de:f7:04:c6:90: b2:79:83:8d:93:d7:8d:96:49:9d:13:dc:dc:2f:ac: c2:26:c5:45:b6:dc:52:8d:89:b9:a8:26:22:dc:15: f1:4f:28:d9:20:03:69:13:90:ed:7f:16:3a:71:09: 38:c3:24:f9:1c:44:cd:e2:20:3c:d0:6b:e8:c3:13: ea:23:b8:7a:5b:df:dd:d5:b0:dc:a8:45:a2:51:2d: 22:9c:66:ef:cd:4b:81:c9:7e:79:94:65:76:b5:da: 04:f9:2b:a0:78:96:08:09:61:ab:0f:d0:ea:13:0d: 93:a9:b8:0d:48:d7:bd:ac:f3:34:d0:a8:08:8f:5f: 8f:ab:e8:12:45:17:98:d1:96:74:02:a0:bb:50:46: 43:d7:7f:97:0f:37:3e:3d:19:7d:c2:24:c3:fe:0b: 3b:66:23:2b:ce:66:df:6c:fc:14:d4:71:47:30:89: 7d:84:6a:c6:ac:89:bf:22:1d:3b:e6:58:97:cd:57: e0:25:e5:fa:ed:ec:fa:53:2f:07:6e:c1:82:68:4a: 11:14:28:22:09:12:07:ed:b0:b7:d1:5a:f7:10:49: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9A:32:06:72:17:0A:A9:66:64:98:36:7E:F6:4B:D3:B5:99:F9:C3 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.176.0/22 92.114.44.0/22 Signature Algorithm: sha256WithRSAEncryption 09:32:b4:31:70:c0:29:ea:19:80:48:8a:3a:aa:4c:c3:ce:34: 2c:3e:7b:5d:a7:73:b4:a4:47:4a:f7:19:8f:1b:e0:cc:17:bd: 75:43:bf:f4:04:85:f0:b6:1b:32:fc:1d:51:d1:7b:3c:6d:50: c7:79:b7:6d:69:20:bf:b4:f2:76:b0:c5:5d:bf:80:da:e7:2a: 04:c9:1d:33:03:12:84:24:6f:3a:29:3d:95:d8:00:ff:73:3f: 2b:6e:0a:6d:86:31:95:81:06:7e:cc:5f:3c:70:ca:9e:9d:92: 64:70:3b:73:40:3a:da:ef:93:bc:27:70:ad:be:7e:5e:66:9e: b3:e7:39:08:af:95:2c:05:e5:61:93:45:b5:5f:27:ea:aa:63: de:d9:de:5d:0f:1a:df:d4:cb:c1:14:2f:75:0f:af:68:89:b7: 8e:b3:83:85:4f:ed:c4:39:be:ac:38:d1:51:4a:65:7b:d9:33: 4b:69:8f:71:76:33:d1:27:d4:6b:e9:c2:3d:77:f6:99:c8:20: f9:ea:15:8b:13:3a:d7:82:e9:78:eb:de:21:92:1a:93:5c:40: 71:4a:0d:1f:1d:58:87:ef:d4:44:d1:ae:b3:1c:d4:48:7c:7e: b2:88:8d:3e:8c:8d:84:e0:c0:73:e5:d0:9d:2f:0f:d9:08:cc: 2e:e1:e5:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87j9Rq8vc2b6Bg5J6YM0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTlhMzIwNjcyMTcwYWE5NjY2NDk4MzY3ZWY2NGJkM2I1OTlmOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dv5sw3mjfeYZTBB+2+Sgq5lmEgO QSLl5G1W/5458pIWgOI/pfIp3vcExpCyeYONk9eNlkmdE9zcL6zCJsVFttxSjYm5 qCYi3BXxTyjZIANpE5DtfxY6cQk4wyT5HETN4iA80GvowxPqI7h6W9/d1bDcqEWi US0inGbvzUuByX55lGV2tdoE+SugeJYICWGrD9DqEw2TqbgNSNe9rPM00KgIj1+P q+gSRReY0ZZ0AqC7UEZD13+XDzc+PRl9wiTD/gs7ZiMrzmbfbPwU1HFHMIl9hGrG rIm/Ih075liXzVfgJeX67ez6Uy8HbsGCaEoRFCgiCRIH7bC30Vr3EEmLkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFmaMgZyFwqpZmSYNn72S9O1mfnDMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvV1pveUJuSVhDcWxtWkpnMmZ2WkwwN1daLWNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH7qwAwQC XHIsMA0GCSqGSIb3DQEBCwUAA4IBAQAJMrQxcMAp6hmASIo6qkzDzjQsPntdp3O0 pEdK9xmPG+DMF711Q7/0BIXwthsy/B1R0Xs8bVDHebdtaSC/tPJ2sMVdv4Da5yoE yR0zAxKEJG86KT2V2AD/cz8rbgpthjGVgQZ+zF88cMqenZJkcDtzQDra75O8J3Ct vn5eZp6z5zkIr5UsBeVhk0W1XyfqqmPe2d5dDxrf1MvBFC91D69oibeOs4OFT+3E Ob6sONFRSmV72TNLaY9xdjPRJ9Rr6cI9d/aZyCD56hWLEzrXgul4694hkhqTXEBx Sg0fHViH79RE0a6zHNRIfH6yiI0+jI2E4MBz5dCdLw/ZCMwu4eVk -----END CERTIFICATE-----Generated at Wed Jan 21 10:50:00 2026 by rpki-client