This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wjg-AgMbFgVNOEGs-Fe4DnFwqCQ.roa File: wjg-AgMbFgVNOEGs-Fe4DnFwqCQ.roa (raw, json) Hash identifier: PewkMq7Y4hQ2037ig+asoMC+QmuvbWaZ7qWBFbMLq0k= Subject key identifier: C2:38:3E:02:03:1B:16:05:4D:38:41:AC:F8:57:B8:0E:71:70:A8:24 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC64E117630E8BC66C20FB4495837 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wjg-AgMbFgVNOEGs-Fe4DnFwqCQ.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211415 IP address blocks: 109.176.29.0/24 maxlen: 24 109.176.31.0/24 maxlen: 24 213.218.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c6:4e:11:76:30:e8:bc:66:c2:0f:b4:49:58:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2383e02031b16054d3841acf857b80e7170a824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:d8:72:8b:52:0d:ec:84:b2:2e:a5:ac:db:46: 62:68:e1:4e:9e:e3:a8:2d:71:19:a8:b9:bd:84:6a: 51:50:b0:df:ba:b5:97:3f:38:fe:5e:0d:92:e4:c5: ee:74:a7:ff:e9:dc:d2:3f:2d:de:5c:ca:39:8f:00: 09:98:54:f0:15:40:72:d3:c7:62:13:3d:69:ba:4d: 85:f7:76:98:cc:a2:d0:5b:c1:97:5d:cb:4a:38:05: 5f:b1:10:51:e9:fe:7c:06:1e:4d:23:5c:f3:78:fb: cd:8f:fb:a3:1d:96:53:47:79:fd:88:c4:06:e8:ab: 2a:cb:a0:3b:e6:25:00:86:ea:e5:7d:c5:84:cc:30: fb:fb:cc:63:9c:e9:c7:4e:ae:78:92:d3:32:16:32: 4a:eb:67:99:b8:2e:9f:f4:fc:ec:67:5f:73:59:b5: fe:f5:9c:5f:06:b9:a6:9d:a6:67:af:7c:e2:12:c3: 31:18:f6:74:51:52:c3:11:45:f6:90:74:a4:01:2a: 0b:b2:4f:21:cd:71:dc:8e:c2:ae:1a:6c:e4:ce:c6: 21:74:ab:22:fb:2b:a0:6c:77:87:3f:fa:0d:5d:a9: e6:7a:c7:11:2d:54:de:2d:ba:73:7d:80:f8:2d:8b: 89:55:b0:53:2e:e3:e8:32:0b:84:56:e7:1c:d2:f0: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:38:3E:02:03:1B:16:05:4D:38:41:AC:F8:57:B8:0E:71:70:A8:24 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wjg-AgMbFgVNOEGs-Fe4DnFwqCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.29.0/24 109.176.31.0/24 213.218.242.0/24 Signature Algorithm: sha256WithRSAEncryption 85:4a:e5:36:e5:25:64:cf:27:e8:e6:6c:44:66:5a:d3:3f:d6: 46:fc:e4:8f:64:5b:78:18:11:45:d8:7d:f7:2d:50:4a:a1:40: 62:59:7f:47:8f:fe:53:5f:27:5e:60:5d:ab:7f:e1:f7:0e:56: f3:0d:b5:81:fc:4a:09:2c:85:78:30:dd:ce:8d:76:6c:1f:ac: 34:8b:ee:bb:3b:e8:8b:85:05:c2:9e:38:ff:50:73:b7:a6:69: 1f:79:93:bd:1f:aa:ab:90:40:69:3f:ff:99:27:5c:47:fc:77: 06:ea:cb:8c:58:59:48:2a:fe:8a:36:dc:bd:58:89:23:07:ac: 5b:85:70:ca:96:a7:65:06:7f:20:4e:b1:62:f8:04:4e:cd:eb: 62:a8:52:c6:90:d7:3a:e4:d4:cb:61:54:60:1d:b7:09:2a:79: c7:e4:25:82:48:5a:2b:c4:df:04:7c:24:3c:33:a7:8c:bb:f8: 1a:cd:79:33:3b:5a:6c:80:84:d6:79:bf:5b:66:65:2b:9a:c1: c9:93:8f:89:34:55:a2:8e:b5:05:e9:10:a8:ba:56:f4:7d:7d: 6f:bd:b2:d8:40:ed:2b:5d:d1:fd:13:e9:6c:26:79:d2:79:02: 75:37:48:7c:cc:49:3f:90:d3:1e:51:09:1e:64:d9:c8:34:b7: 97:79:c0:dc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WsZOEXYw6Lxmwg+0SVg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjM4M2UwMjAzMWIxNjA1NGQzODQxYWNmODU3YjgwZTcxNzBhODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Nhyi1IN7ISyLqWs20ZiaOFOnuOo LXEZqLm9hGpRULDfurWXPzj+Xg2S5MXudKf/6dzSPy3eXMo5jwAJmFTwFUBy08di Ez1puk2F93aYzKLQW8GXXctKOAVfsRBR6f58Bh5NI1zzePvNj/ujHZZTR3n9iMQG 6Ksqy6A75iUAhurlfcWEzDD7+8xjnOnHTq54ktMyFjJK62eZuC6f9PzsZ19zWbX+ 9ZxfBrmmnaZnr3ziEsMxGPZ0UVLDEUX2kHSkASoLsk8hzXHcjsKuGmzkzsYhdKsi +yugbHeHP/oNXanmescRLVTeLbpzfYD4LYuJVbBTLuPoMguEVucc0vBtgQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMI4PgIDGxYFTThBrPhXuA5xcKgkMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvd2pnLUFnTWJGZ1ZOT0VHcy1GZTREbkZ3cUNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbbAdAwQA bbAfAwQA1dryMA0GCSqGSIb3DQEBCwUAA4IBAQCFSuU25SVkzyfo5mxEZlrTP9ZG /OSPZFt4GBFF2H33LVBKoUBiWX9Hj/5TXydeYF2rf+H3DlbzDbWB/EoJLIV4MN3O jXZsH6w0i+67O+iLhQXCnjj/UHO3pmkfeZO9H6qrkEBpP/+ZJ1xH/HcG6suMWFlI Kv6KNty9WIkjB6xbhXDKlqdlBn8gTrFi+AROzetiqFLGkNc65NTLYVRgHbcJKnnH 5CWCSForxN8EfCQ8M6eMu/gazXkzO1psgITWeb9bZmUrmsHJk4+JNFWijrUF6RCo ulb0fX1vvbLYQO0rXdH9E+lsJnnSeQJ1N0h8zEk/kNMeUQkeZNnINLeXecDc -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:04 2026 by rpki-client