This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WJ0PcmZhrUHOBXD2AiV-791a1us.roa File: WJ0PcmZhrUHOBXD2AiV-791a1us.roa (raw, json) Hash identifier: IxIVvojLZIR7RokBDSnWLcCkx/Ei9k+QD7DbnhZ+ed8= Subject key identifier: 58:9D:0F:72:66:61:AD:41:CE:05:70:F6:02:25:7E:EF:DD:5A:D6:EB Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78344625ED90EEEC3701597043B749B1 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WJ0PcmZhrUHOBXD2AiV-791a1us.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.136.184.0/22 maxlen: 24 62.106.75.0/24 maxlen: 24 62.133.34.0/24 maxlen: 24 77.75.225.0/24 maxlen: 24 79.110.231.0/24 maxlen: 24 91.213.17.0/24 maxlen: 24 146.19.112.0/24 maxlen: 24 178.212.76.0/24 maxlen: 24 185.255.54.0/24 maxlen: 24 193.3.174.0/24 maxlen: 24 212.23.197.0/24 maxlen: 24 213.232.238.0/24 maxlen: 24 2a0b:4080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:25:ed:90:ee:ec:37:01:59:70:43:b7:49:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=589d0f726661ad41ce0570f602257eefdd5ad6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:32:fa:00:61:22:54:ca:be:1f:d3:67:3e:f1: 71:a0:9b:a7:46:f4:5d:8d:63:67:18:aa:9e:b2:fe: 1e:91:ff:fa:e9:2d:61:71:12:e4:66:ba:e4:af:66: 8c:00:cb:f8:cd:89:63:2a:c9:ea:50:73:6c:30:bd: ca:0e:eb:b8:bc:90:f6:e2:91:1a:b7:02:e6:51:e2: c3:b2:96:b1:2f:fb:97:a5:af:f4:c3:c3:1a:34:5b: 51:57:99:23:48:7b:cb:f3:16:2c:e3:6c:3a:40:7f: 43:d8:7c:f8:a7:e5:45:b7:80:49:51:ac:cb:fc:d5: 64:63:90:84:c0:c3:50:9a:0a:0b:82:55:d3:48:b4: a2:24:2e:06:dd:5b:87:b1:24:e7:9b:08:3d:91:f0: 65:d1:c0:b5:2e:25:f9:b5:d6:46:e2:36:a3:26:81: ea:45:a0:9c:91:c4:90:d6:89:88:c9:9d:07:c7:de: 51:c2:a0:fd:49:72:88:e9:d6:2e:58:fd:c9:ed:23: fa:04:b2:89:70:6e:1a:08:d3:eb:94:23:bb:77:c0: c0:20:a2:d4:c2:37:b5:c5:10:a3:c5:f1:63:bc:e3: 1c:f5:9f:63:dc:7a:22:a0:47:1a:b3:4e:7f:22:5f: 92:4f:41:cd:b7:69:e3:b7:ab:7a:26:65:9d:29:31: 2e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9D:0F:72:66:61:AD:41:CE:05:70:F6:02:25:7E:EF:DD:5A:D6:EB X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WJ0PcmZhrUHOBXD2AiV-791a1us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.184.0/22 62.106.75.0/24 62.133.34.0/24 77.75.225.0/24 79.110.231.0/24 91.213.17.0/24 146.19.112.0/24 178.212.76.0/24 185.255.54.0/24 193.3.174.0/24 212.23.197.0/24 213.232.238.0/24 IPv6: 2a0b:4080::/32 Signature Algorithm: sha256WithRSAEncryption 45:b5:7b:f8:b8:67:0e:b7:4c:ad:0f:38:78:8e:43:a3:23:a1: 88:9b:78:f1:4e:b2:74:02:3e:fe:62:fd:17:90:56:60:1d:a3: 89:a1:ab:ec:c6:d5:34:70:e4:f2:e3:05:a2:67:5d:c0:87:5c: f9:f2:b1:8b:ed:21:19:2c:c7:5c:ff:bd:c3:fd:c1:6c:a8:8e: 61:a2:3b:be:2b:c2:cf:55:87:e6:6f:cf:7c:d9:f4:c2:77:4f: 54:b3:03:14:73:cd:80:3c:42:69:46:36:d8:ee:02:7f:a3:ce: d5:40:f3:c9:e5:dd:e0:22:3a:18:70:a1:d4:84:ed:f9:6b:79: 4f:06:21:52:c0:33:4a:fd:0e:19:a3:e6:81:1f:88:78:8c:cb: 22:ce:de:fe:f3:e1:3e:c9:3e:02:0b:f3:67:bb:5a:a0:8f:41: b3:56:a1:bf:69:c2:a6:ac:cb:79:78:ec:06:9a:90:63:94:75: 00:c0:c5:a4:1f:a2:6e:52:2d:c9:ab:71:fb:b9:fb:04:c2:45: 1a:fb:2e:6f:62:24:cc:90:68:50:d2:6a:81:02:eb:29:a5:8f: b0:9a:93:da:d1:ed:c6:8c:8e:72:63:f0:9d:c4:1d:dd:b0:93: 42:0f:99:94:6b:c0:61:dd:38:7e:9b:44:9f:65:b6:1a:b5:cf: 22:f9:9c:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt4NEYl7ZDu7DcBWXBDt0mxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODlkMGY3MjY2NjFhZDQxY2UwNTcwZjYwMjI1N2VlZmRkNWFkNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzL6AGEiVMq+H9NnPvFxoJunRvRd jWNnGKqesv4ekf/66S1hcRLkZrrkr2aMAMv4zYljKsnqUHNsML3KDuu4vJD24pEa twLmUeLDspaxL/uXpa/0w8MaNFtRV5kjSHvL8xYs42w6QH9D2Hz4p+VFt4BJUazL /NVkY5CEwMNQmgoLglXTSLSiJC4G3VuHsSTnmwg9kfBl0cC1LiX5tdZG4jajJoHq RaCckcSQ1omIyZ0Hx95RwqD9SXKI6dYuWP3J7SP6BLKJcG4aCNPrlCO7d8DAIKLU wje1xRCjxfFjvOMc9Z9j3HoioEcas05/Il+ST0HNt2njt6t6JmWdKTEuHQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFFidD3JmYa1BzgVw9gIlfu/dWtbrMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvV0owUGNtWmhyVUhPQlhEMkFpVi03OTFhMXVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQCLYi4AwQA PmpLAwQAPoUiAwQATUvhAwQAT27nAwQAW9URAwQAkhNwAwQAstRMAwQAuf82AwQA wQOuAwQA1BfFAwQA1ejuMA0EAgACMAcDBQAqC0CAMA0GCSqGSIb3DQEBCwUAA4IB AQBFtXv4uGcOt0ytDzh4jkOjI6GIm3jxTrJ0Aj7+Yv0XkFZgHaOJoavsxtU0cOTy 4wWiZ13Ah1z58rGL7SEZLMdc/73D/cFsqI5hoju+K8LPVYfmb8982fTCd09UswMU c82APEJpRjbY7gJ/o87VQPPJ5d3gIjoYcKHUhO35a3lPBiFSwDNK/Q4Zo+aBH4h4 jMsizt7+8+E+yT4CC/Nnu1qgj0GzVqG/acKmrMt5eOwGmpBjlHUAwMWkH6JuUi3J q3H7ufsEwkUa+y5vYiTMkGhQ0mqBAusppY+wmpPa0e3GjI5yY/CdxB3dsJNCD5mU a8Bh3Th+m0SfZbYatc8i+Zwm -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:25 2026 by rpki-client