This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/wvM-Mwaw5-Yu2Gi4rXyhq8xWjTo.roa File: wvM-Mwaw5-Yu2Gi4rXyhq8xWjTo.roa (raw, json) Hash identifier: zwkwV/qCyW+dPqYTHQuCJTe82tiBbsC4rDyFqVjw0RM= Subject key identifier: C2:F3:3E:33:06:B0:E7:E6:2E:D8:68:B8:AD:7C:A1:AB:CC:56:8D:3A Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a Certificate serial: 019B7F15B14B73266AF7126904546D7E8A03 Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/wvM-Mwaw5-Yu2Gi4rXyhq8xWjTo.roa Signing time: Fri 02 Jan 2026 14:21:26 +0000 ROA not before: Fri 02 Jan 2026 14:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197667 IP address blocks: 185.139.40.0/22 maxlen: 22 185.139.41.0/24 maxlen: 24 185.139.42.0/24 maxlen: 24 185.139.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b1:4b:73:26:6a:f7:12:69:04:54:6d:7e:8a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2f33e3306b0e7e62ed868b8ad7ca1abcc568d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:5a:e7:75:70:e0:36:9d:79:c6:d1:d3:c7: 23:d2:6c:b7:c3:a2:0b:2e:7c:e0:45:5c:c7:84:46: 26:bf:55:1f:52:d6:e3:45:4d:be:6c:09:12:7c:c8: 74:e9:f2:9c:23:fc:84:37:f8:32:58:ff:34:d3:94: 50:cf:c0:60:de:21:8a:e3:de:97:30:63:df:96:ee: 05:b3:89:66:bc:36:0a:68:a9:8f:86:b1:40:93:95: 44:65:95:93:40:1e:4c:b5:37:bf:3c:40:6a:56:a3: 08:16:b4:87:1b:5c:81:46:10:e4:d7:c2:42:1e:2d: c7:6a:ab:f0:58:bc:bc:aa:4f:f9:00:12:3b:c4:8d: 16:b4:89:64:32:5a:ff:d8:24:8a:02:07:43:04:df: 6a:28:53:45:1e:40:5b:97:e8:42:74:89:25:d7:e1: 50:da:07:3d:f0:43:46:d8:ba:61:23:12:bc:9b:43: e3:d6:7b:49:4c:14:3f:ed:35:fe:a2:60:47:e0:1f: e2:38:a2:1a:89:6c:20:5b:96:1b:07:e1:38:f2:86: b5:b8:25:5b:b9:c4:b6:45:71:11:5a:02:f4:18:b4: e0:ae:15:e1:02:30:a1:8f:ef:22:40:ed:c3:b3:9f: 61:0b:b3:4a:e0:a8:9a:85:20:e2:54:a5:9f:b9:e6: d2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F3:3E:33:06:B0:E7:E6:2E:D8:68:B8:AD:7C:A1:AB:CC:56:8D:3A X509v3 Authority Key Identifier: keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/wvM-Mwaw5-Yu2Gi4rXyhq8xWjTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.40.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:b1:7a:6d:bb:22:56:f0:2b:8a:3e:1d:93:95:83:6a:3f:bb: ed:6f:e7:5d:43:8d:7e:06:cf:26:7e:6f:a6:20:44:f2:94:b2: 3e:31:f1:a6:c3:23:ab:a4:c6:fa:b8:c0:d0:e0:7c:12:20:13: 40:16:ba:69:26:b9:ec:7b:d9:e9:3c:4c:3e:4a:ac:f7:a6:dc: ae:5f:87:7e:9e:07:4e:7d:ef:87:d5:e4:b2:ae:2b:0f:ef:c5: b5:f5:d9:07:e0:c9:82:2a:90:d8:3b:6c:a0:81:3e:8e:20:c6: 07:e1:ac:5e:0c:f8:1f:a8:7b:9e:a5:00:86:5a:f1:09:cf:04: ef:3e:92:34:e5:44:ce:d0:59:a7:98:13:81:56:40:75:f9:3c: 40:11:ba:bc:03:87:6b:b9:7d:78:51:9a:bc:9a:5e:a4:d1:83: af:41:c5:31:b4:12:a2:f4:d7:e1:f8:fc:0a:77:03:ef:72:8b: 15:89:b8:11:d3:32:20:3f:9e:c1:49:94:30:34:d7:4b:c5:45: cc:9c:5f:0c:d0:8f:50:90:52:a1:aa:38:38:ef:7b:1f:ff:29: 47:89:81:32:2a:19:6b:ea:0e:24:70:0d:07:ad:42:a8:db:df: 4a:83:1a:1e:9f:f4:31:b3:3d:d5:f5:12:1c:58:cb:a3:1b:be: 7f:9a:f6:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FbFLcyZq9xJpBFRtfooDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOWIwNWEzNWQ0MTA5YTFlNGE4MzRjY2FkYWNkZDJjNmY1 NmIwNWEwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmYzM2UzMzA2YjBlN2U2MmVkODY4YjhhZDdjYTFhYmNjNTY4ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGxa53Vw4DadecbR08cj0my3w6IL LnzgRVzHhEYmv1UfUtbjRU2+bAkSfMh06fKcI/yEN/gyWP8005RQz8Bg3iGK496X MGPflu4Fs4lmvDYKaKmPhrFAk5VEZZWTQB5MtTe/PEBqVqMIFrSHG1yBRhDk18JC Hi3HaqvwWLy8qk/5ABI7xI0WtIlkMlr/2CSKAgdDBN9qKFNFHkBbl+hCdIkl1+FQ 2gc98ENG2LphIxK8m0Pj1ntJTBQ/7TX+omBH4B/iOKIaiWwgW5YbB+E48oa1uCVb ucS2RXERWgL0GLTgrhXhAjChj+8iQO3Ds59hC7NK4KiahSDiVKWfuebSrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLzPjMGsOfmLthouK18oavMVo06MB8GA1UdIwQY MBaAFBCbBaNdQQmh5Kg0zK2s3SxvVrBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jYWFjMGUtNTI2OC00MjNhLWFmYjAt NDQ5MTUyZjFkM2I3LzEvd3ZNLU13YXc1LVl1MkdpNHJYeWhxOHhXalRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9jYWFjMGUtNTI2OC00MjNhLWFmYjAtNDQ5MTUyZjFkM2I3 LzEvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYsoMA0G CSqGSIb3DQEBCwUAA4IBAQCPsXptuyJW8CuKPh2TlYNqP7vtb+ddQ41+Bs8mfm+m IETylLI+MfGmwyOrpMb6uMDQ4HwSIBNAFrppJrnse9npPEw+Sqz3ptyuX4d+ngdO fe+H1eSyrisP78W19dkH4MmCKpDYO2yggT6OIMYH4axeDPgfqHuepQCGWvEJzwTv PpI05UTO0FmnmBOBVkB1+TxAEbq8A4druX14UZq8ml6k0YOvQcUxtBKi9Nfh+PwK dwPvcosVibgR0zIgP57BSZQwNNdLxUXMnF8M0I9QkFKhqjg473sf/ylHiYEyKhlr 6g4kcA0HrUKo299Kgxoen/Qxsz3V9RIcWMujG75/mva2 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:14 2026 by rpki-client