This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/WAYxT6h3bPx0EvSJhZYAgnvPC84.roa File: WAYxT6h3bPx0EvSJhZYAgnvPC84.roa (raw, json) Hash identifier: 4h3kI+RTbednBJqHrl+7GV+OqILosW/4RmxaS4vsC00= Subject key identifier: 58:06:31:4F:A8:77:6C:FC:74:12:F4:89:85:96:00:82:7B:CF:0B:CE Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462 Certificate serial: 019B7A5AF385E4987A522BF90C4AAD0CE692 Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/WAYxT6h3bPx0EvSJhZYAgnvPC84.roa Signing time: Thu 01 Jan 2026 16:18:59 +0000 ROA not before: Thu 01 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51234 IP address blocks: 176.117.0.0/21 maxlen: 21 176.117.0.0/24 maxlen: 24 176.117.2.0/24 maxlen: 24 195.191.78.0/23 maxlen: 23 195.191.78.0/24 maxlen: 24 195.191.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f3:85:e4:98:7a:52:2b:f9:0c:4a:ad:0c:e6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462 Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5806314fa8776cfc7412f489859600827bcf0bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:46:fe:ad:9f:f8:c4:40:af:69:d0:43:9f: 17:95:55:fb:a5:62:9f:28:0b:28:18:68:2c:7a:22: 8a:f5:59:97:e2:d6:a0:54:39:dd:12:03:f3:e9:fe: 21:0c:06:d8:95:ea:d1:87:91:6f:7d:ad:d0:dc:41: c3:40:17:5b:82:20:8c:9a:ef:df:f7:f5:6d:d6:ba: 72:86:3a:28:a5:d3:0d:06:f8:83:2b:9d:19:3b:c6: 8c:b3:5d:87:56:47:6d:05:3a:7c:fc:aa:46:58:44: 50:34:8d:88:73:41:69:8e:bf:fd:4d:31:98:19:3d: 9b:b2:42:74:b8:e6:36:6f:a1:ad:95:bc:42:42:43: 72:8a:e9:17:42:b0:e6:87:15:64:5f:e2:9d:2c:30: 3f:bb:64:77:a6:26:31:79:83:b5:49:f5:22:a7:b3: 5c:8b:ce:f3:ac:68:46:85:83:e7:8e:f3:19:35:dd: 0e:3a:e0:8d:33:82:2d:a6:09:06:ee:84:97:64:74: b5:36:c8:f8:4b:0c:f7:3a:c4:c8:6a:bf:a1:b0:bb: 87:63:6c:c6:78:c2:41:d0:82:ea:b7:88:34:1f:6f: c2:67:98:27:14:6b:86:9e:9f:d9:1b:46:0c:2e:b3: 71:19:30:f5:17:99:bf:27:36:1a:cd:55:05:8a:6e: 5d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:06:31:4F:A8:77:6C:FC:74:12:F4:89:85:96:00:82:7B:CF:0B:CE X509v3 Authority Key Identifier: keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/WAYxT6h3bPx0EvSJhZYAgnvPC84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.0.0/21 195.191.78.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:67:b1:5c:80:4d:cc:10:9b:31:f2:c4:b5:ff:a0:13:c1:23: a5:be:c4:73:96:60:1c:63:9f:9f:a6:bb:62:b6:14:a2:2f:9b: bc:77:66:f3:97:ac:32:65:15:06:46:5a:73:15:cd:f7:93:d7: 5b:73:94:b6:08:6a:b9:28:13:6a:e8:5c:6d:7e:9d:f2:81:2f: e6:66:93:de:0b:07:7a:2e:ed:b0:d0:03:17:07:af:87:92:5d: be:fe:d8:e8:2a:78:95:d1:2d:a4:4d:f3:2e:bc:74:c9:01:6c: bc:69:df:37:a6:f1:1b:ef:a5:21:e7:c0:4f:ff:fc:6a:ae:76: 75:ab:f2:38:37:84:ea:9e:f9:16:da:3d:3a:87:3a:d1:02:d0: 55:59:13:f4:f5:04:b6:c6:f1:ab:14:61:59:05:9a:10:e5:b8: ca:00:6b:98:1e:2c:d1:2b:ab:9e:bf:14:ee:32:c0:93:b9:69: cd:60:e3:88:d4:f5:73:8d:4a:57:1b:63:cd:14:40:54:d2:3c: 30:57:31:72:49:3a:0f:23:3e:38:66:f0:be:7e:dc:87:71:13: a7:0c:25:8e:3c:bb:1f:f0:2a:a0:84:50:f7:10:76:b4:af:bd: 8c:f4:b3:dd:6e:fa:fc:73:2e:a1:b6:9e:6e:b0:9a:27:23:a3: e6:ac:b2:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WvOF5Jh6Uiv5DEqtDOaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliODY4YTc2ZjViNDc0OGUxZTRiYmE4MzQ3MDFhNjg1Nzdj NjM0NjIwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODA2MzE0ZmE4Nzc2Y2ZjNzQxMmY0ODk4NTk2MDA4MjdiY2YwYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPZG/q2f+MRAr2nQQ58XlVX7pWKf KAsoGGgseiKK9VmX4tagVDndEgPz6f4hDAbYlerRh5Fvfa3Q3EHDQBdbgiCMmu/f 9/Vt1rpyhjoopdMNBviDK50ZO8aMs12HVkdtBTp8/KpGWERQNI2Ic0Fpjr/9TTGY GT2bskJ0uOY2b6GtlbxCQkNyiukXQrDmhxVkX+KdLDA/u2R3piYxeYO1SfUip7Nc i87zrGhGhYPnjvMZNd0OOuCNM4ItpgkG7oSXZHS1Nsj4Swz3OsTIar+hsLuHY2zG eMJB0ILqt4g0H2/CZ5gnFGuGnp/ZG0YMLrNxGTD1F5m/JzYazVUFim5dRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFgGMU+od2z8dBL0iYWWAIJ7zwvOMB8GA1UdIwQY MBaAFJuGinb1tHSOHku6g0cBpoV3xjRiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTRhS2R2VzBkSTRlUzdxRFJ3R21oWGZHTkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYjBkODItZmE2MC00NGNiLWI4M2Yt NmEzNGU0NmFhYTU2LzEvV0FZeFQ2aDNiUHgwRXZTSmhaWUFnbnZQQzg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYjBkODItZmE2MC00NGNiLWI4M2YtNmEzNGU0NmFhYTU2 LzEvbTRhS2R2VzBkSTRlUzdxRFJ3R21oWGZHTkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsHUAAwQB w79OMA0GCSqGSIb3DQEBCwUAA4IBAQB+Z7FcgE3MEJsx8sS1/6ATwSOlvsRzlmAc Y5+fprtithSiL5u8d2bzl6wyZRUGRlpzFc33k9dbc5S2CGq5KBNq6Fxtfp3ygS/m ZpPeCwd6Lu2w0AMXB6+Hkl2+/tjoKniV0S2kTfMuvHTJAWy8ad83pvEb76Uh58BP //xqrnZ1q/I4N4TqnvkW2j06hzrRAtBVWRP09QS2xvGrFGFZBZoQ5bjKAGuYHizR K6uevxTuMsCTuWnNYOOI1PVzjUpXG2PNFEBU0jwwVzFySToPIz44ZvC+ftyHcROn DCWOPLsf8CqghFD3EHa0r72M9LPdbvr8cy6htp5usJonI6PmrLLy -----END CERTIFICATE-----Generated at Tue Feb 10 06:00:52 2026 by rpki-client