This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wtlcz-L6H0lUiq0gbgi1U0aF8Z0.roa File: wtlcz-L6H0lUiq0gbgi1U0aF8Z0.roa (raw, json) Hash identifier: I9AYehhMA1ioYmgfH0mfdE9yNgsLTxCAh4UlBlzE48M= Subject key identifier: C2:D9:5C:CF:E2:FA:1F:49:54:8A:AD:20:6E:08:B5:53:46:85:F1:9D Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A930C84DEC9628D2A55996A92B3EF Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wtlcz-L6H0lUiq0gbgi1U0aF8Z0.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 82.153.148.0/24 maxlen: 24 89.213.63.0/24 maxlen: 24 89.213.157.0/24 maxlen: 24 89.213.227.0/24 maxlen: 24 109.176.242.0/24 maxlen: 24 213.130.137.0/24 maxlen: 24 213.130.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:93:0c:84:de:c9:62:8d:2a:55:99:6a:92:b3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2d95ccfe2fa1f49548aad206e08b5534685f19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:3f:bf:fb:f0:2a:69:21:ba:ab:a9:6b:98: 12:1a:8c:47:f9:e7:76:4d:9f:48:aa:6b:1b:89:3e: fe:49:29:19:56:67:90:db:d9:34:80:84:13:46:bd: 71:56:27:91:88:85:90:ac:fa:36:88:47:d7:40:5c: 51:c8:a6:18:dd:61:c5:1e:a9:b2:18:fd:59:6b:c4: aa:e3:95:b1:d2:db:ab:78:b6:6f:54:34:9d:dc:64: 71:1d:d5:a6:1c:df:4a:6a:de:e4:92:d8:af:42:bc: 1a:e4:78:be:3d:64:34:8c:47:9a:33:40:44:52:73: 5b:f1:c0:c0:34:94:3e:97:ce:43:f7:e0:38:43:cb: e6:5a:62:41:fb:51:c0:89:14:c6:d6:cf:98:69:5f: d6:cf:23:c6:dd:68:18:fb:38:d9:e3:6e:75:93:eb: 0c:53:cc:3e:06:e9:74:3a:81:88:bb:50:e8:d7:3a: 82:cd:27:19:06:19:fa:4d:3d:78:9a:1b:4c:e7:d2: f6:0b:07:d1:08:3e:ea:f1:08:92:4a:db:10:d1:81: 66:8d:ee:18:dc:03:29:7b:ba:b7:aa:fc:85:eb:a2: f8:8c:60:cc:fa:4f:b9:13:e0:f3:6e:a5:c3:09:09: 86:9b:15:bc:d4:16:12:ca:10:7e:66:d3:a0:b8:f8: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D9:5C:CF:E2:FA:1F:49:54:8A:AD:20:6E:08:B5:53:46:85:F1:9D X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wtlcz-L6H0lUiq0gbgi1U0aF8Z0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.148.0/24 89.213.63.0/24 89.213.157.0/24 89.213.227.0/24 109.176.242.0/24 213.130.137.0/24 213.130.152.0/24 Signature Algorithm: sha256WithRSAEncryption 87:09:aa:cc:f0:55:bb:e6:3a:ae:b2:a8:3a:0e:59:7c:fa:af: e8:9c:02:af:cf:e4:51:b2:70:94:08:c8:3f:1c:72:9f:64:e4: bc:5f:08:ae:85:e5:8f:a7:0e:cc:13:91:c6:79:17:e5:d2:5c: 97:31:69:bc:40:91:58:45:40:13:fb:ec:c2:5d:ad:c9:39:26: 52:93:16:70:fd:f1:47:fb:d2:0f:1b:f8:43:dc:ea:49:81:30: 11:65:bc:92:d3:d2:60:39:07:33:74:19:c8:ec:aa:14:6f:dd: 78:a4:e1:65:32:b5:d3:2e:19:bf:08:b9:4e:76:45:c3:bf:4c: e8:25:d6:b6:ab:66:f0:f7:4a:4d:0b:1b:22:2d:6e:e6:92:5c: 30:60:ca:47:4b:ac:ae:6a:66:f0:25:11:9b:3b:22:43:35:8a: 7f:3b:c9:52:22:5e:56:5c:31:37:c3:de:86:9e:22:73:a5:cb: fc:29:9e:da:73:18:ed:55:a4:a5:5d:09:41:a0:fb:97:79:a4: ca:cc:87:e0:78:b0:3c:36:36:98:24:a2:1e:d1:30:00:18:79: d7:15:18:c6:b3:e1:06:7e:cb:2d:fd:ba:b3:96:b9:87:fc:ea: 2d:7e:e6:1e:d7:54:b5:f6:07:50:60:8f:2d:70:9f:34:e6:13: 85:a3:8d:f4 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6WpMMhN7JYo0qVZlqkrPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmQ5NWNjZmUyZmExZjQ5NTQ4YWFkMjA2ZTA4YjU1MzQ2ODVmMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIk/v/vwKmkhuqupa5gSGoxH+ed2 TZ9IqmsbiT7+SSkZVmeQ29k0gIQTRr1xVieRiIWQrPo2iEfXQFxRyKYY3WHFHqmy GP1Za8Sq45Wx0tureLZvVDSd3GRxHdWmHN9Kat7kktivQrwa5Hi+PWQ0jEeaM0BE UnNb8cDANJQ+l85D9+A4Q8vmWmJB+1HAiRTG1s+YaV/WzyPG3WgY+zjZ4251k+sM U8w+Bul0OoGIu1Do1zqCzScZBhn6TT14mhtM59L2CwfRCD7q8QiSStsQ0YFmje4Y 3AMpe7q3qvyF66L4jGDM+k+5E+DzbqXDCQmGmxW81BYSyhB+ZtOguPgk8wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFMLZXM/i+h9JVIqtIG4ItVNGhfGdMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvd3RsY3otTDZIMGxVaXEwZ2JnaTFVMGFGOFowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAUpmUAwQA WdU/AwQAWdWdAwQAWdXjAwQAbbDyAwQA1YKJAwQA1YKYMA0GCSqGSIb3DQEBCwUA A4IBAQCHCarM8FW75jqusqg6Dll8+q/onAKvz+RRsnCUCMg/HHKfZOS8XwiuheWP pw7ME5HGeRfl0lyXMWm8QJFYRUAT++zCXa3JOSZSkxZw/fFH+9IPG/hD3OpJgTAR ZbyS09JgOQczdBnI7KoUb914pOFlMrXTLhm/CLlOdkXDv0zoJda2q2bw90pNCxsi LW7mklwwYMpHS6yuambwJRGbOyJDNYp/O8lSIl5WXDE3w96GniJzpcv8KZ7acxjt VaSlXQlBoPuXeaTKzIfgeLA8NjaYJKIe0TAAGHnXFRjGs+EGfsst/bqzlrmH/Oot fuYe11S19gdQYI8tcJ805hOFo430 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:31 2026 by rpki-client