This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/WAXt2WMEO5cBuMrwsGsqVBjWUPA.roa File: WAXt2WMEO5cBuMrwsGsqVBjWUPA.roa (raw, json) Hash identifier: GlzXILsF+JcJcxfYLpToMyEOPpjWZmyYuo748X7dvz0= Subject key identifier: 58:05:ED:D9:63:04:3B:97:01:B8:CA:F0:B0:6B:2A:54:18:D6:50:F0 Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019C01F6633F9D0EA6F156AFC0646756CA5B Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/WAXt2WMEO5cBuMrwsGsqVBjWUPA.roa Signing time: Wed 28 Jan 2026 00:17:30 +0000 ROA not before: Wed 28 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198981 IP address blocks: 194.153.135.0/24 maxlen: 24 2a01:ecc0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:f6:63:3f:9d:0e:a6:f1:56:af:c0:64:67:56:ca:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jan 28 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5805edd963043b9701b8caf0b06b2a5418d650f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:e5:ea:08:fe:7e:b7:e4:34:15:4a:34:f8: 8a:1a:00:6a:a2:3c:62:9c:52:81:b4:7f:6c:a4:52: 9c:e5:21:07:39:83:ec:8a:f1:4e:01:a9:f2:09:37: 06:d4:35:3c:f3:e2:be:9a:23:dd:4c:0b:bb:76:b1: 57:0b:01:70:be:ba:73:6e:5f:4e:58:e6:c2:8b:27: 83:16:48:87:29:ce:0c:e6:57:ae:ec:fb:5b:79:67: 3b:51:d0:43:eb:d9:e7:59:b2:c2:fc:4a:f5:4d:89: 6d:7c:1e:87:8a:64:8a:ba:19:82:48:73:ef:7d:e3: 8e:94:e8:4d:25:33:7b:dd:54:b7:d7:09:58:49:cd: 4a:05:d3:b8:d9:09:13:29:7e:ea:f0:cc:dc:e9:59: da:3e:41:ad:ec:38:45:61:82:d6:33:9b:3e:36:2a: 64:12:c7:fe:f1:10:7d:d0:ad:cd:73:a0:65:6b:f5: cb:f5:73:2e:17:b3:49:25:e7:79:f4:7f:91:80:96: ba:a7:d3:3b:89:05:ef:a9:e0:f7:b7:49:92:8d:09: 00:6d:2e:43:29:4e:c2:03:99:cb:71:a5:03:5a:99: 63:6b:dc:69:09:51:4b:95:bb:fc:61:61:c6:b9:18: e8:b0:f5:64:0e:bc:b5:12:6e:5a:61:34:2c:11:54: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:05:ED:D9:63:04:3B:97:01:B8:CA:F0:B0:6B:2A:54:18:D6:50:F0 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/WAXt2WMEO5cBuMrwsGsqVBjWUPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.135.0/24 IPv6: 2a01:ecc0:2000::/36 Signature Algorithm: sha256WithRSAEncryption a8:12:c2:36:05:eb:81:6c:40:46:b7:4d:5d:69:a0:81:7e:08: 7f:61:ad:8f:8a:53:97:a4:93:c7:75:8e:85:5c:09:fb:69:a5: 32:3b:06:14:5e:18:de:8a:d4:7a:5c:d5:c1:e4:e0:69:b1:f0: 2c:45:d4:3e:1e:81:9a:88:65:c4:5e:60:62:4f:da:64:04:49: b8:0b:1b:02:b7:03:58:40:ab:60:72:96:ee:e1:ff:2f:65:ac: e1:fb:d3:fc:32:f1:87:db:68:22:3b:d7:79:c1:b9:7b:e0:86: 59:68:e8:b0:39:70:d3:76:bd:87:dd:d5:e1:61:c3:02:02:2e: b0:94:58:57:89:90:b4:bd:00:4c:b0:65:f0:4a:09:d0:f2:86: d8:94:47:47:d2:02:bc:ed:0e:ae:99:8e:e6:f1:45:fc:e1:94: 7d:10:ab:73:91:4e:4f:d9:df:64:ce:6d:ac:0c:76:68:c6:9f: a3:cc:a3:10:73:51:2c:89:e0:ca:42:62:9a:d3:b0:09:40:53: 60:73:85:1e:41:e3:04:14:f3:f6:60:b3:80:0a:92:93:98:a0: 2c:5b:fe:74:a8:1e:2a:a5:33:6c:cb:5b:9b:a3:f1:9e:7f:dc: e4:fd:64:b6:b3:9a:26:a7:0c:40:38:cb:00:20:3c:c2:3d:19: 52:61:bb:90 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZwB9mM/nQ6m8VavwGRnVspbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMTI4MDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODA1ZWRkOTYzMDQzYjk3MDFiOGNhZjBiMDZiMmE1NDE4ZDY1MGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOTl6gj+frfkNBVKNPiKGgBqojxi nFKBtH9spFKc5SEHOYPsivFOAanyCTcG1DU88+K+miPdTAu7drFXCwFwvrpzbl9O WObCiyeDFkiHKc4M5leu7PtbeWc7UdBD69nnWbLC/Er1TYltfB6HimSKuhmCSHPv feOOlOhNJTN73VS31wlYSc1KBdO42QkTKX7q8Mzc6VnaPkGt7DhFYYLWM5s+Nipk Esf+8RB90K3Nc6Bla/XL9XMuF7NJJed59H+RgJa6p9M7iQXvqeD3t0mSjQkAbS5D KU7CA5nLcaUDWplja9xpCVFLlbv8YWHGuRjosPVkDry1Em5aYTQsEVQu0QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFFgF7dljBDuXAbjK8LBrKlQY1lDwMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvV0FYdDJXTUVPNWNCdU1yd3NHc3FWQmpXVVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwpmHMA4E AgACMAgDBgQqAezAIDANBgkqhkiG9w0BAQsFAAOCAQEAqBLCNgXrgWxARrdNXWmg gX4If2Gtj4pTl6STx3WOhVwJ+2mlMjsGFF4Y3orUelzVweTgabHwLEXUPh6Bmohl xF5gYk/aZARJuAsbArcDWECrYHKW7uH/L2Ws4fvT/DLxh9toIjvXecG5e+CGWWjo sDlw03a9h93V4WHDAgIusJRYV4mQtL0ATLBl8EoJ0PKG2JRHR9ICvO0OrpmO5vFF /OGUfRCrc5FOT9nfZM5trAx2aMafo8yjEHNRLIngykJimtOwCUBTYHOFHkHjBBTz 9mCzgAqSk5igLFv+dKgeKqUzbMtbm6Pxnn/c5P1ktrOaJqcMQDjLACA8wj0ZUmG7 kA== -----END CERTIFICATE-----Generated at Mon Feb 2 07:59:58 2026 by rpki-client