This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/wpxxQF5AabypL-KTlSZ22CF0FgQ.roa File: wpxxQF5AabypL-KTlSZ22CF0FgQ.roa (raw, json) Hash identifier: LcmjGoMQfmQ0l8r/PAIze2pDnlI+sA44Nszwtlprn+0= Subject key identifier: C2:9C:71:40:5E:40:69:BC:A9:2F:E2:93:95:26:76:D8:21:74:16:04 Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de Certificate serial: 019B7FF15D722B65F20240370038D1F68A42 Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/wpxxQF5AabypL-KTlSZ22CF0FgQ.roa Signing time: Fri 02 Jan 2026 18:21:23 +0000 ROA not before: Fri 02 Jan 2026 18:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42697 IP address blocks: 77.243.48.0/20 maxlen: 20 77.243.62.0/23 maxlen: 23 109.200.64.0/20 maxlen: 20 185.29.77.0/24 maxlen: 24 185.29.78.0/23 maxlen: 23 2a03:dc80::/29 maxlen: 32 2a03:dc82::/32 maxlen: 32 2a03:dc84::/32 maxlen: 32 2a03:dc86::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:5d:72:2b:65:f2:02:40:37:00:38:d1:f6:8a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de Validity Not Before: Jan 2 18:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c29c71405e4069bca92fe293952676d821741604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:0d:c0:79:20:d1:94:74:96:dd:36:4d:89: 6e:99:08:87:2b:53:8c:49:95:f2:a4:7c:52:6f:1a: 5f:06:71:b0:b1:5f:95:c6:59:d8:78:ba:0c:e8:b0: 0b:d8:3b:8e:a2:2d:42:df:51:3e:47:63:3f:fe:5c: bc:f4:30:79:4c:f9:b0:a8:de:3b:8a:ee:1b:d6:39: 24:a2:87:c4:11:00:66:3c:f4:75:e5:52:69:8c:eb: 45:93:d1:19:e8:48:2d:1c:b3:1c:c9:29:d8:6c:3d: 2a:13:5d:40:c3:1f:63:33:71:5e:dc:5e:e5:ab:57: 22:d3:43:c8:8e:d3:87:9b:59:7d:ab:fc:5e:21:d9: 98:9c:9a:40:59:d2:5a:06:61:6f:0d:7c:87:9b:75: e7:ac:5c:dc:1f:fd:61:de:0f:ab:f3:2d:f6:71:74: d7:fc:3c:ad:83:77:0f:34:76:29:63:32:8d:d7:2c: 6c:5a:64:bb:31:49:4b:2c:a6:f7:cf:ba:0a:e4:50: 39:d7:d8:0f:e2:45:04:7c:84:b5:3c:07:d7:a8:22: 06:4f:fd:9d:f6:2e:d8:68:bb:7c:71:f1:dd:0e:12: 35:b4:fd:d1:c0:fd:ec:45:30:78:52:8d:6a:35:67: a8:98:e1:14:d6:93:fc:fb:35:31:77:a5:b5:f9:58: 2e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9C:71:40:5E:40:69:BC:A9:2F:E2:93:95:26:76:D8:21:74:16:04 X509v3 Authority Key Identifier: keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/wpxxQF5AabypL-KTlSZ22CF0FgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.243.48.0/20 109.200.64.0/20 185.29.77.0-185.29.79.255 IPv6: 2a03:dc80::/29 Signature Algorithm: sha256WithRSAEncryption 60:e2:4d:3c:13:f0:00:8b:a1:5e:77:b0:55:14:b1:03:05:8a: 95:e7:e0:96:27:d6:fe:49:cf:4c:fc:4e:b7:41:85:b0:91:81: aa:98:fb:21:36:c4:10:42:07:f1:c9:c9:62:e7:1a:ae:31:ec: fe:33:9d:6c:08:01:5f:6a:06:02:14:ce:11:ef:c1:4c:bb:ce: 0d:05:93:f8:14:06:48:66:47:be:00:7e:0b:18:82:03:d1:e0: 24:e1:7c:83:58:32:4c:26:61:71:42:00:ae:32:10:e6:00:15: 30:2b:dd:56:de:bb:e7:f4:39:36:ee:65:2d:36:f4:ee:f8:92: 8d:4f:c6:8f:f9:89:34:15:61:dc:98:40:a3:b6:f3:7c:db:b0: 79:67:97:ac:4a:3f:70:90:6e:d4:08:d0:ea:bb:3a:6b:29:a0: f6:45:cf:23:45:1e:9b:f5:69:84:dd:5e:47:78:96:fe:a8:10: f7:f6:61:4f:55:08:18:b5:06:1d:44:7f:6d:39:85:20:aa:a2: d7:80:02:01:37:ff:a7:c0:38:4f:af:29:c2:37:d6:b4:1a:76: 9d:aa:b3:95:71:e0:13:cb:73:8d:9e:4e:d3:c9:77:90:19:21: 23:d6:6d:38:e8:f7:52:fc:fd:47:a2:08:79:23:88:bb:f2:86: 3a:b3:f6:42 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt/8V1yK2XyAkA3ADjR9opCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTA5NzBkZGJiNzYxOWNjODIxODZkZGI1MzZlYjRlODk4 NWQyZGUwHhcNMjYwMTAyMTgyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjljNzE0MDVlNDA2OWJjYTkyZmUyOTM5NTI2NzZkODIxNzQxNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt70NwHkg0ZR0lt02TYlumQiHK1OM SZXypHxSbxpfBnGwsV+VxlnYeLoM6LAL2DuOoi1C31E+R2M//ly89DB5TPmwqN47 iu4b1jkkoofEEQBmPPR15VJpjOtFk9EZ6EgtHLMcySnYbD0qE11Awx9jM3Fe3F7l q1ci00PIjtOHm1l9q/xeIdmYnJpAWdJaBmFvDXyHm3XnrFzcH/1h3g+r8y32cXTX /Dytg3cPNHYpYzKN1yxsWmS7MUlLLKb3z7oK5FA519gP4kUEfIS1PAfXqCIGT/2d 9i7YaLt8cfHdDhI1tP3RwP3sRTB4Uo1qNWeomOEU1pP8+zUxd6W1+Vgu5wIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFMKccUBeQGm8qS/ik5UmdtghdBYEMB8GA1UdIwQY MBaAFBaQlw3bt2GcyCGG3bU2606JhdLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUt Y2MwM2JkMzE1ZmY5LzEvd3B4eFFGNUFhYnlwTC1LVGxTWjIyQ0YwRmdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUtY2MwM2JkMzE1ZmY5 LzEvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQETfMwAwQE bchAMAwDBAC5HU0DBAS5HUAwDQQCAAIwBwMFAyoD3IAwDQYJKoZIhvcNAQELBQAD ggEBAGDiTTwT8ACLoV53sFUUsQMFipXn4JYn1v5Jz0z8TrdBhbCRgaqY+yE2xBBC B/HJyWLnGq4x7P4znWwIAV9qBgIUzhHvwUy7zg0Fk/gUBkhmR74AfgsYggPR4CTh fINYMkwmYXFCAK4yEOYAFTAr3Vbeu+f0OTbuZS029O74ko1Pxo/5iTQVYdyYQKO2 83zbsHlnl6xKP3CQbtQI0Oq7OmspoPZFzyNFHpv1aYTdXkd4lv6oEPf2YU9VCBi1 Bh1Ef205hSCqoteAAgE3/6fAOE+vKcI31rQadp2qs5Vx4BPLc42eTtPJd5AZISPW bTjo91L8/UeiCHkjiLvyhjqz9kI= -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:31 2026 by rpki-client