This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/WtgXE39DdCE223Yp5cqwRF2OpRc.roa File: WtgXE39DdCE223Yp5cqwRF2OpRc.roa (raw, json) Hash identifier: WSh6Jbx8iIE9YysODbpQ1Bnbl7VrRIsF4AcffIwuVtI= Subject key identifier: 5A:D8:17:13:7F:43:74:21:36:DB:76:29:E5:CA:B0:44:5D:8E:A5:17 Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a Certificate serial: 019B7C1242E457C5579A4B3057132EC768D0 Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/WtgXE39DdCE223Yp5cqwRF2OpRc.roa Signing time: Fri 02 Jan 2026 00:18:50 +0000 ROA not before: Fri 02 Jan 2026 00:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44832 IP address blocks: 185.148.92.0/22 maxlen: 22 199.255.112.0/22 maxlen: 22 206.225.20.0/22 maxlen: 22 212.24.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:42:e4:57:c5:57:9a:4b:30:57:13:2e:c7:68:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ad817137f43742136db7629e5cab0445d8ea517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b5:41:cd:bb:fd:53:d2:7f:d4:24:86:8b:17: 2a:8d:88:0b:42:63:04:b1:ad:2c:db:8d:f1:07:90: 20:a0:f9:fa:59:14:2b:46:f1:80:4b:5f:6d:30:a9: 74:f7:ab:61:f0:b9:f1:eb:5f:10:ff:1e:31:ee:9a: 22:61:3f:41:c9:ec:ba:b9:1c:41:c4:a1:ac:3f:0c: 07:5e:6e:f9:0d:61:89:44:8a:82:68:e8:8b:69:10: aa:76:1c:5d:a5:bf:67:b3:eb:16:c2:49:76:a3:9e: ea:1d:a1:53:d8:bd:31:4c:55:ef:f0:a2:89:39:07: ab:e8:9c:ad:94:21:d5:e4:65:d8:4e:8b:24:f8:82: 29:fd:b3:1f:45:d2:4c:67:61:5b:87:81:18:e6:98: 7a:2b:82:b1:66:6d:3b:16:e5:14:a1:a5:68:bf:4f: 41:11:de:28:ec:06:cf:cb:b4:9d:5d:54:49:00:4b: 7f:d8:07:43:6d:af:4b:a0:94:b2:c4:3c:38:87:7d: 2d:a3:78:13:a0:d3:ee:aa:83:60:8d:3a:62:6f:e2: 74:d4:37:ee:52:51:c4:f8:36:07:22:5f:3d:e6:aa: 0c:e4:27:a5:20:0b:6e:0c:18:2f:e9:2f:a0:a2:2a: 74:d1:8d:ea:e5:05:d1:0e:75:01:f3:7a:74:70:2d: 94:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:17:13:7F:43:74:21:36:DB:76:29:E5:CA:B0:44:5D:8E:A5:17 X509v3 Authority Key Identifier: keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/WtgXE39DdCE223Yp5cqwRF2OpRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.148.92.0/22 199.255.112.0/22 206.225.20.0/22 212.24.116.0/22 Signature Algorithm: sha256WithRSAEncryption 47:2c:ec:7c:95:d4:00:a4:64:5d:92:2a:e2:1a:57:c7:9b:76: cd:0a:62:17:e8:6c:be:82:27:f7:a6:2f:52:ac:ea:70:b1:9e: de:94:e1:32:f8:59:61:bf:69:bd:6c:2a:95:3d:75:ab:fc:df: 19:0b:67:7d:e8:b5:d5:a0:7d:3c:6e:50:84:be:7e:38:79:0a: c6:0e:23:be:15:69:46:2b:4f:b2:bb:ef:d8:b5:39:d5:1d:f6: a4:1c:ae:91:f4:1c:b9:13:10:3b:a9:c5:46:31:cb:0c:9c:a0: c2:cd:60:53:a2:30:fc:4a:ab:8a:32:cf:56:86:21:04:ff:68: 9b:ee:04:f9:53:c6:10:32:10:42:01:63:de:75:dc:4a:26:c8: a2:bf:c9:1e:63:bd:ad:38:0f:59:d4:7c:d4:69:c2:40:66:1d: 34:bb:81:9c:6a:09:9d:6a:3b:88:55:fd:bf:0c:87:e2:8a:21: 8f:08:51:dc:39:76:10:a1:3b:bc:53:59:0e:53:9d:ef:cb:be: 98:1c:44:7e:69:e8:6d:6a:e1:e8:35:de:4a:d0:44:c1:b8:d4: 0e:01:67:fd:91:86:fc:f0:0a:e0:ae:ab:11:c6:93:75:39:1d: 5a:f0:4b:3a:d3:91:aa:19:60:01:b9:6b:50:3f:e4:d5:38:17: ba:56:02:d5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EkLkV8VXmkswVxMux2jQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MzZhNGUxNGE3MWRkZDUxMDE2NGI4NjMxYWQ5OWJiZmM3 NTk1M2EwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ4MTcxMzdmNDM3NDIxMzZkYjc2MjllNWNhYjA0NDVkOGVhNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7VBzbv9U9J/1CSGixcqjYgLQmME sa0s243xB5AgoPn6WRQrRvGAS19tMKl096th8Lnx618Q/x4x7poiYT9Byey6uRxB xKGsPwwHXm75DWGJRIqCaOiLaRCqdhxdpb9ns+sWwkl2o57qHaFT2L0xTFXv8KKJ OQer6JytlCHV5GXYTosk+IIp/bMfRdJMZ2Fbh4EY5ph6K4KxZm07FuUUoaVov09B Ed4o7AbPy7SdXVRJAEt/2AdDba9LoJSyxDw4h30to3gToNPuqoNgjTpib+J01Dfu UlHE+DYHIl895qoM5CelIAtuDBgv6S+goip00Y3q5QXRDnUB83p0cC2U8QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFrYFxN/Q3QhNtt2KeXKsERdjqUXMB8GA1UdIwQY MBaAFIY2pOFKcd3VEBZLhjGtmbv8dZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjIt MmY3Y2Y4NDQ2YTMxLzEvV3RnWEUzOURkQ0UyMjNZcDVjcXdSRjJPcFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjItMmY3Y2Y4NDQ2YTMx LzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuZRcAwQC x/9wAwQCzuEUAwQC1Bh0MA0GCSqGSIb3DQEBCwUAA4IBAQBHLOx8ldQApGRdkiri GlfHm3bNCmIX6Gy+gif3pi9SrOpwsZ7elOEy+Flhv2m9bCqVPXWr/N8ZC2d96LXV oH08blCEvn44eQrGDiO+FWlGK0+yu+/YtTnVHfakHK6R9By5ExA7qcVGMcsMnKDC zWBTojD8SquKMs9WhiEE/2ib7gT5U8YQMhBCAWPeddxKJsiiv8keY72tOA9Z1HzU acJAZh00u4GcagmdajuIVf2/DIfiiiGPCFHcOXYQoTu8U1kOU53vy76YHER+aeht auHoNd5K0ETBuNQOAWf9kYb88ArgrqsRxpN1OR1a8Es605GqGWABuWtQP+TVOBe6 VgLV -----END CERTIFICATE-----Generated at Tue Feb 10 06:23:34 2026 by rpki-client