This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/wLjgY2YgiPJPNkwqWCfj8Fua7KE.roa File: wLjgY2YgiPJPNkwqWCfj8Fua7KE.roa (raw, json) Hash identifier: DmNGe8jEay8LOtA+IZOJs6FHJm88udn1LG9+DVbdkxA= Subject key identifier: C0:B8:E0:63:66:20:88:F2:4F:36:4C:2A:58:27:E3:F0:5B:9A:EC:A1 Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39 Certificate serial: 019B7BA4C882D4540DBDC2548CC1935E6010 Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/wLjgY2YgiPJPNkwqWCfj8Fua7KE.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8851 IP address blocks: 91.84.0.0/18 maxlen: 24 91.84.128.0/17 maxlen: 24 91.85.32.0/19 maxlen: 24 91.85.64.0/18 maxlen: 24 91.85.128.0/19 maxlen: 24 91.85.192.0/18 maxlen: 24 194.46.36.0/24 maxlen: 24 194.46.37.0/24 maxlen: 24 194.46.39.0/24 maxlen: 24 194.46.40.0/24 maxlen: 24 194.46.41.0/24 maxlen: 24 194.46.43.0/24 maxlen: 24 194.46.44.0/24 maxlen: 24 194.46.45.0/24 maxlen: 24 194.46.46.0/24 maxlen: 24 194.46.48.0/21 maxlen: 24 194.46.56.0/24 maxlen: 24 194.46.61.0/24 maxlen: 24 194.46.64.0/22 maxlen: 24 194.46.68.0/23 maxlen: 24 194.46.72.0/22 maxlen: 24 194.46.76.0/23 maxlen: 24 194.46.78.0/24 maxlen: 24 194.46.80.0/23 maxlen: 24 194.46.81.0/24 maxlen: 24 194.46.82.0/24 maxlen: 24 212.104.129.0/24 maxlen: 24 212.104.130.0/24 maxlen: 24 212.104.132.0/24 maxlen: 24 212.104.136.0/24 maxlen: 24 212.104.143.0/24 maxlen: 24 212.104.149.0/24 maxlen: 24 212.104.150.0/24 maxlen: 24 212.104.152.0/24 maxlen: 24 212.104.155.0/24 maxlen: 24 212.104.156.0/24 maxlen: 24 212.104.159.0/24 maxlen: 24 212.108.80.0/23 maxlen: 24 212.108.84.0/24 maxlen: 24 212.108.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c8:82:d4:54:0d:bd:c2:54:8c:c1:93:5e:60:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0b8e063662088f24f364c2a5827e3f05b9aeca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:a8:29:0d:ec:90:ed:56:d2:5b:b8:09:80: 64:72:be:64:98:ac:03:95:1c:85:df:16:97:98:4f: db:78:66:fe:d3:0e:b6:d1:9b:86:42:59:42:bf:93: 55:d0:e5:56:ef:ca:50:52:11:be:2a:08:92:10:1f: d9:58:88:9c:6f:f5:e9:ad:d9:7c:7e:cb:78:aa:50: 59:d1:99:28:1a:94:9f:f3:73:91:34:d9:5b:2c:75: e5:0a:38:6d:54:4a:3c:9e:b5:98:47:1c:b6:03:0f: 97:f2:0a:44:9e:ba:d3:86:35:e0:91:87:a9:2a:e6: 54:26:3e:80:d4:88:5e:1d:39:65:6f:37:ef:b3:e9: 67:82:47:c8:3b:8e:f8:ac:9f:2a:0f:19:51:9d:73: ea:c2:48:a8:f1:2d:7b:3c:dd:83:10:6b:fe:f8:1e: ad:15:e6:24:fd:2b:2a:b4:12:3a:9c:53:48:2e:98: 84:07:f5:aa:08:4b:df:6a:72:ad:b0:59:1d:2c:97: 23:c8:f8:e1:74:8f:f9:00:08:5d:e9:0c:23:2d:73: be:77:50:67:68:4e:9e:e6:12:fe:e6:bf:65:ba:b0: 54:6e:8a:c2:d7:f2:c2:c3:52:43:11:55:1e:d1:8e: c1:ed:22:e6:62:0c:39:3f:01:49:53:91:f7:ee:7e: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B8:E0:63:66:20:88:F2:4F:36:4C:2A:58:27:E3:F0:5B:9A:EC:A1 X509v3 Authority Key Identifier: keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/wLjgY2YgiPJPNkwqWCfj8Fua7KE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.84.0.0/18 91.84.128.0/17 91.85.32.0-91.85.159.255 91.85.192.0/18 194.46.36.0/23 194.46.39.0-194.46.41.255 194.46.43.0-194.46.46.255 194.46.48.0-194.46.56.255 194.46.61.0/24 194.46.64.0-194.46.69.255 194.46.72.0-194.46.78.255 194.46.80.0-194.46.82.255 212.104.129.0-212.104.130.255 212.104.132.0/24 212.104.136.0/24 212.104.143.0/24 212.104.149.0-212.104.150.255 212.104.152.0/24 212.104.155.0-212.104.156.255 212.104.159.0/24 212.108.80.0/23 212.108.84.0/24 212.108.88.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:7e:c2:fa:55:07:2d:24:b9:20:82:20:a8:8a:c0:b2:65:14: 0c:8c:2e:69:94:0d:6e:6f:69:4c:15:ec:cb:fc:2e:a9:95:10: 76:d3:c4:2e:35:0c:7d:c2:ff:24:d2:12:cf:dc:76:f0:73:5a: 85:9d:6f:f8:ce:1e:ce:ce:a1:14:fc:a7:7b:d8:f4:ee:68:78: 8c:e6:d3:b7:4f:eb:b1:9d:5a:8e:bf:b9:3e:6a:63:24:66:9c: e5:63:ff:fd:99:82:e4:d5:23:f2:8e:1c:05:2c:0f:70:03:4d: 21:52:9b:f2:45:07:51:e5:79:a3:26:1c:e9:a3:3e:60:14:28: 1c:a4:50:d1:3f:cd:64:f3:3f:0a:40:81:4e:05:dd:1c:21:c9: e2:b7:8b:71:ba:c9:b7:a1:67:6c:a6:53:17:41:81:6f:e6:45: c4:a5:6e:74:ac:d9:86:73:46:b2:78:3b:f5:d9:ff:25:74:4e: 38:0d:60:ec:4d:64:ed:54:42:11:71:aa:07:fa:a0:95:53:2e: e8:cc:db:dc:93:b4:d9:8e:2f:d1:03:ac:1c:dd:6c:c0:bf:f7: cf:1f:44:b7:64:a1:73:94:47:18:b9:62:ee:d0:61:9e:3d:c2: 15:1b:67:95:97:20:1d:db:b5:6f:1d:c5:d5:57:de:5b:55:5d: 2b:b4:75:65 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt7pMiC1FQNvcJUjMGTXmAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDM1MzkzMzY3NGE1NjA4ZjZkMWVlMmRhYjRmNjRjOGJm ZjhmMzkwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGI4ZTA2MzY2MjA4OGYyNGYzNjRjMmE1ODI3ZTNmMDViOWFlY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArteoKQ3skO1W0lu4CYBkcr5kmKwD lRyF3xaXmE/beGb+0w620ZuGQllCv5NV0OVW78pQUhG+KgiSEB/ZWIicb/Xprdl8 fst4qlBZ0ZkoGpSf83ORNNlbLHXlCjhtVEo8nrWYRxy2Aw+X8gpEnrrThjXgkYep KuZUJj6A1IheHTllbzfvs+lngkfIO474rJ8qDxlRnXPqwkio8S17PN2DEGv++B6t FeYk/SsqtBI6nFNILpiEB/WqCEvfanKtsFkdLJcjyPjhdI/5AAhd6QwjLXO+d1Bn aE6e5hL+5r9lurBUborC1/LCw1JDEVUe0Y7B7SLmYgw5PwFJU5H37n7i8wIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFMC44GNmIIjyTzZMKlgn4/BbmuyhMB8GA1UdIwQY MBaAFK3TU5M2dKVgj20e4tq09kyL/485MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgt NzJjODMxMjg3NjFiLzEvd0xqZ1kyWWdpUEpQTmt3cVdDZmo4RnVhN0tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgtNzJjODMxMjg3NjFi LzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCB4QQCAAEwgdoDBAZb VAADBAdbVIAwDAMEBVtVIAMEBVtVgAMEBltVwAMEAcIuJDAMAwQAwi4nAwQBwi4o MAwDBADCLisDBADCLi4wDAMEBMIuMAMEAMIuOAMEAMIuPTAMAwQGwi5AAwQBwi5E MAwDBAPCLkgDBADCLk4wDAMEBMIuUAMEAMIuUjAMAwQA1GiBAwQA1GiCAwQA1GiE AwQA1GiIAwQA1GiPMAwDBADUaJUDBADUaJYDBADUaJgwDAMEANRomwMEANRonAME ANRonwMEAdRsUAMEANRsVAMEAdRsWDANBgkqhkiG9w0BAQsFAAOCAQEAS37C+lUH LSS5IIIgqIrAsmUUDIwuaZQNbm9pTBXsy/wuqZUQdtPELjUMfcL/JNISz9x28HNa hZ1v+M4ezs6hFPyne9j07mh4jObTt0/rsZ1ajr+5PmpjJGac5WP//ZmC5NUj8o4c BSwPcANNIVKb8kUHUeV5oyYc6aM+YBQoHKRQ0T/NZPM/CkCBTgXdHCHJ4reLcbrJ t6FnbKZTF0GBb+ZFxKVudKzZhnNGsng79dn/JXROOA1g7E1k7VRCEXGqB/qglVMu 6Mzb3JO02Y4v0QOsHN1swL/3zx9Et2Shc5RHGLli7tBhnj3CFRtnlZcgHdu1bx3F 1VfeW1VdK7R1ZQ== -----END CERTIFICATE-----Generated at Fri Jan 9 18:43:03 2026 by rpki-client