This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/Wcz0ftkKeuX2k1o_TiQ_1hXFk58.roa File: Wcz0ftkKeuX2k1o_TiQ_1hXFk58.roa (raw, json) Hash identifier: iZlk4p7VXTU6ENrDviKNzDvlEi8TVpmFuM/Rky4WSog= Subject key identifier: 59:CC:F4:7E:D9:0A:7A:E5:F6:93:5A:3F:4E:24:3F:D6:15:C5:93:9F Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93 Certificate serial: 019B7758C85DFE04A85DECDEF70ADCBAE21F Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/Wcz0ftkKeuX2k1o_TiQ_1hXFk58.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30779 IP address blocks: 88.135.224.0/19 maxlen: 19 91.200.72.0/24 maxlen: 24 193.19.74.0/23 maxlen: 23 193.34.20.0/22 maxlen: 22 2001:67c:203c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c8:5d:fe:04:a8:5d:ec:de:f7:0a:dc:ba:e2:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59ccf47ed90a7ae5f6935a3f4e243fd615c5939f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:51:db:85:e1:96:d3:34:e2:91:93:22:0e:c6: 0e:66:f7:8e:b2:1a:b4:5f:27:eb:36:c9:e3:85:30: 45:7d:dc:a0:88:a4:2b:32:43:f5:80:db:69:03:90: 80:40:39:de:7c:f3:32:bf:d2:81:b4:d1:56:57:a6: b3:33:4e:5d:e3:d6:b6:15:c5:34:43:6f:b3:81:61: 19:d8:32:9f:39:0f:9d:a8:27:ff:29:01:2b:ff:3e: 72:7a:05:b1:42:68:77:a9:be:38:d6:f0:ff:cc:cd: b8:29:ed:88:0e:a3:ca:26:3b:38:5c:9b:a2:97:41: 97:9b:29:82:13:2a:ca:59:16:92:74:75:19:47:a2: cd:7d:de:72:da:1d:39:74:3c:68:23:02:0e:f4:f7: 48:ef:9c:9a:66:03:94:f9:89:a3:dc:e2:49:fe:bf: 77:51:8b:c2:7b:43:20:0e:23:89:5a:ad:f2:25:6e: 32:a9:40:55:5e:1f:fd:e9:95:b6:7f:a3:36:f2:3a: 6e:6a:d4:4a:5a:77:f1:70:54:0f:d2:e6:aa:69:38: 22:93:20:db:d8:d4:92:48:47:5c:ab:8d:16:a2:60: 0f:2f:3a:6d:37:8d:43:23:e1:55:4c:9e:25:ed:6b: af:62:f4:d1:ee:b5:07:12:b9:2f:0b:46:4d:fc:1f: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:F4:7E:D9:0A:7A:E5:F6:93:5A:3F:4E:24:3F:D6:15:C5:93:9F X509v3 Authority Key Identifier: keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/Wcz0ftkKeuX2k1o_TiQ_1hXFk58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.224.0/19 91.200.72.0/24 193.19.74.0/23 193.34.20.0/22 IPv6: 2001:67c:203c::/48 Signature Algorithm: sha256WithRSAEncryption 7a:f3:30:70:c6:37:8c:e8:40:43:be:a2:a3:b6:b7:fa:b9:ee: 96:f5:34:1c:b3:36:97:1b:8e:bd:f2:c5:2c:66:7b:82:74:fe: 5d:00:63:f6:e5:65:8d:a6:6c:17:1d:f3:3b:07:a3:4e:ff:36: 51:92:47:49:d4:86:15:c9:2f:90:c6:6a:2f:49:a5:48:99:82: 84:f1:77:1c:e8:04:dc:72:5c:3e:38:77:d4:fd:cc:26:ee:ae: 56:d5:b6:64:a9:66:9a:81:a8:c0:e0:43:02:e0:31:4a:8c:4d: 18:7b:f9:bd:f1:be:12:f0:88:62:a1:13:5c:b0:7d:ea:06:5a: 30:d7:6f:e2:8c:03:03:a7:45:48:54:6e:3a:c3:37:88:64:6e: 0d:c1:e7:bc:7b:fe:99:c6:fb:df:4a:b9:f6:ad:68:0f:6b:af: 96:4d:02:1f:fd:6f:bb:26:2a:13:1f:c9:1f:8d:7a:e2:bc:ae: 0f:71:76:d3:6e:97:6c:f5:f0:b8:57:97:e5:38:c4:64:0e:97: cf:7a:94:ff:cd:5c:f6:c8:f0:f6:a1:a2:c2:a3:be:79:9c:40: ce:19:15:05:a0:b3:01:b3:9f:1b:9f:89:1e:fb:ac:22:67:a2: 62:db:f1:ac:6a:f5:e1:ec:02:e0:63:88:9d:5e:a2:90:a0:61: 4c:23:f6:71 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3WMhd/gSoXeze9wrcuuIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDkzMmJkYjYxMDg1Yzc2ZGQ2NDVjMWU3NmViNzExMTc1 NDdiOTMwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWNjZjQ3ZWQ5MGE3YWU1ZjY5MzVhM2Y0ZTI0M2ZkNjE1YzU5MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1HbheGW0zTikZMiDsYOZveOshq0 XyfrNsnjhTBFfdygiKQrMkP1gNtpA5CAQDnefPMyv9KBtNFWV6azM05d49a2FcU0 Q2+zgWEZ2DKfOQ+dqCf/KQEr/z5yegWxQmh3qb441vD/zM24Ke2IDqPKJjs4XJui l0GXmymCEyrKWRaSdHUZR6LNfd5y2h05dDxoIwIO9PdI75yaZgOU+Ymj3OJJ/r93 UYvCe0MgDiOJWq3yJW4yqUBVXh/96ZW2f6M28jpuatRKWnfxcFQP0uaqaTgikyDb 2NSSSEdcq40WomAPLzptN41DI+FVTJ4l7WuvYvTR7rUHErkvC0ZN/B/ZjwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFFnM9H7ZCnrl9pNaP04kP9YVxZOfMB8GA1UdIwQY MBaAFM0JMr22EIXHbdZFwedutxEXVHuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFreXZiWVFoY2R0MWtYQjUyNjNFUmRVZTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wYThiMWYtY2E3Mi00ZWRhLWE3MTct NDgyYzg2ZGIyMDQwLzEvV2N6MGZ0a0tldVgyazFvX1RpUV8xaFhGazU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wYThiMWYtY2E3Mi00ZWRhLWE3MTctNDgyYzg2ZGIyMDQw LzEvelFreXZiWVFoY2R0MWtYQjUyNjNFUmRVZTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQFWIfgAwQA W8hIAwQBwRNKAwQCwSIUMA8EAgACMAkDBwAgAQZ8IDwwDQYJKoZIhvcNAQELBQAD ggEBAHrzMHDGN4zoQEO+oqO2t/q57pb1NByzNpcbjr3yxSxme4J0/l0AY/blZY2m bBcd8zsHo07/NlGSR0nUhhXJL5DGai9JpUiZgoTxdxzoBNxyXD44d9T9zCburlbV tmSpZpqBqMDgQwLgMUqMTRh7+b3xvhLwiGKhE1ywfeoGWjDXb+KMAwOnRUhUbjrD N4hkbg3B57x7/pnG+99KufataA9rr5ZNAh/9b7smKhMfyR+NeuK8rg9xdtNul2z1 8LhXl+U4xGQOl896lP/NXPbI8PahosKjvnmcQM4ZFQWgswGznxufiR77rCJnomLb 8axq9eHsAuBjiJ1eopCgYUwj9nE= -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:04 2026 by rpki-client