This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/pwR2uuhLQb704CaTl-JhUr6tQUw.roa File: pwR2uuhLQb704CaTl-JhUr6tQUw.roa (raw, json) Hash identifier: WST6jplxdqOcMqOOJtSBgG40d9NpmMZJxxHB0hC7zBU= Subject key identifier: A7:04:76:BA:E8:4B:41:BE:F4:E0:26:93:97:E2:61:52:BE:AD:41:4C Certificate issuer: /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Certificate serial: 019B797EFAFCF4F60ED40594B0090758F005 Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/pwR2uuhLQb704CaTl-JhUr6tQUw.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203619 IP address blocks: 89.124.253.0/24 maxlen: 24 2a03:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fa:fc:f4:f6:0e:d4:05:94:b0:09:07:58:f0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a70476bae84b41bef4e0269397e26152bead414c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:7a:fc:00:06:ee:c6:95:8c:e0:55:71:da: f6:e9:2a:c5:85:26:a2:a7:aa:e3:3d:b2:fb:51:65: e2:18:b1:fd:57:88:c4:2f:f4:63:cb:09:0e:8d:2e: 1a:27:07:8c:5b:36:32:68:c6:5f:6d:69:5b:16:26: 8e:0b:50:38:3d:60:a8:06:4c:1a:27:2f:20:fe:ac: 6c:78:ee:ff:ce:08:14:aa:50:86:b6:ed:ae:2c:37: c9:cf:77:d0:bd:6f:93:7f:25:e6:d5:c5:2e:09:7d: 41:e7:98:fa:59:37:92:53:97:ea:2c:e7:b1:c9:e4: 25:ea:46:a6:4d:15:21:5f:6a:40:f5:c0:4e:52:b1: 09:7a:f7:a9:d9:f3:82:cf:2e:aa:f6:5c:ff:b5:30: 83:ff:f5:75:31:d2:64:53:7e:98:ed:20:c6:d7:ad: 9b:a8:94:67:c1:e3:f0:3e:a7:d9:35:91:1f:46:c9: ea:1c:68:0b:34:16:7b:46:57:aa:91:99:2b:86:c2: 2a:d9:20:dc:e0:ec:28:43:d3:65:b9:02:c8:f7:86: 7d:43:94:27:87:a9:04:12:c5:5f:27:cb:2c:a8:92: ef:3e:9d:10:da:c3:83:6b:8e:5b:7a:f4:2d:96:53: c6:16:49:78:72:07:7b:9a:78:ec:c6:9f:95:3f:51: 01:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:04:76:BA:E8:4B:41:BE:F4:E0:26:93:97:E2:61:52:BE:AD:41:4C X509v3 Authority Key Identifier: keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/pwR2uuhLQb704CaTl-JhUr6tQUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.124.253.0/24 IPv6: 2a03:c040::/48 Signature Algorithm: sha256WithRSAEncryption 7d:15:b2:6e:4a:d9:e1:10:44:a5:38:64:b8:52:ca:2c:b8:f9: 5e:3a:60:67:1e:55:e2:6e:84:36:30:7c:d5:7e:3b:23:01:b8: 59:42:ae:03:87:77:e5:66:e8:5c:0e:4b:cd:cc:99:55:4d:ea: 62:69:e3:aa:17:3a:35:bb:3f:70:fd:c4:9f:08:76:c6:b5:cb: 8a:b8:9d:14:56:72:a0:4d:5c:a3:d7:b4:b5:06:ca:b8:8d:0c: 39:64:24:25:d6:da:86:a2:e2:0c:d9:b4:71:1c:ec:cc:7d:bb: 26:1e:aa:be:c1:da:72:82:8c:ac:8b:1c:a1:32:46:5b:c5:02: b7:c2:f8:f7:9c:91:8c:f4:3d:a8:7b:fe:38:bc:30:49:84:87: 1a:bb:34:53:94:19:3d:be:ad:d3:b8:b3:64:15:37:ef:b3:41: b5:3c:6c:cf:e0:24:ab:9e:76:4e:64:18:90:64:83:fe:11:fa: d6:aa:eb:b5:fd:f0:72:3d:4f:54:85:76:40:c2:86:86:cc:d6: fb:bb:c4:ae:22:d0:26:15:d6:0c:12:54:72:11:00:6e:42:e7: de:e8:c5:e7:74:b7:a8:49:29:b2:0e:34:a9:85:01:4f:25:34: 9b:e9:94:85:98:bc:c7:ca:0c:8e:c4:c3:b4:0e:37:72:6a:38: a6:21:7f:50 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fvr89PYO1AWUsAkHWPAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWM0NWZmYTRhMzEyNDYwYzAwZmZlZGUzMmQ0ZGM0MWZk MmY3Y2YwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzA0NzZiYWU4NGI0MWJlZjRlMDI2OTM5N2UyNjE1MmJlYWQ0MTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygN6/AAG7saVjOBVcdr26SrFhSai p6rjPbL7UWXiGLH9V4jEL/RjywkOjS4aJweMWzYyaMZfbWlbFiaOC1A4PWCoBkwa Jy8g/qxseO7/zggUqlCGtu2uLDfJz3fQvW+TfyXm1cUuCX1B55j6WTeSU5fqLOex yeQl6kamTRUhX2pA9cBOUrEJevep2fOCzy6q9lz/tTCD//V1MdJkU36Y7SDG162b qJRnwePwPqfZNZEfRsnqHGgLNBZ7RleqkZkrhsIq2SDc4OwoQ9NluQLI94Z9Q5Qn h6kEEsVfJ8ssqJLvPp0Q2sODa45bevQtllPGFkl4cgd7mnjsxp+VP1EBwQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKcEdrroS0G+9OAmk5fiYVK+rUFMMB8GA1UdIwQY MBaAFMJcRf+koxJGDAD/7eMtTcQf0vfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAt NzAxOWJkYmIxMTc3LzEvcHdSMnV1aExRYjcwNENhVGwtSmhVcjZ0UVV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAtNzAxOWJkYmIxMTc3 LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWXz9MA8E AgACMAkDBwAqA8BAAAAwDQYJKoZIhvcNAQELBQADggEBAH0Vsm5K2eEQRKU4ZLhS yiy4+V46YGceVeJuhDYwfNV+OyMBuFlCrgOHd+Vm6FwOS83MmVVN6mJp46oXOjW7 P3D9xJ8Idsa1y4q4nRRWcqBNXKPXtLUGyriNDDlkJCXW2oai4gzZtHEc7Mx9uyYe qr7B2nKCjKyLHKEyRlvFArfC+PeckYz0Pah7/ji8MEmEhxq7NFOUGT2+rdO4s2QV N++zQbU8bM/gJKuedk5kGJBkg/4R+taq67X98HI9T1SFdkDChobM1vu7xK4i0CYV 1gwSVHIRAG5C597oxed0t6hJKbIONKmFAU8lNJvplIWYvMfKDI7Ew7QON3JqOKYh f1A= -----END CERTIFICATE-----Generated at Wed Feb 11 00:58:45 2026 by rpki-client