This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/WL6q68-uoJAeV1AkxAgPdtwWoyc.roa File: WL6q68-uoJAeV1AkxAgPdtwWoyc.roa (raw, json) Hash identifier: f7/E+EUbjnh6BcH/3q+PZzjcsDtZuhmuT+6PSPvWfAM= Subject key identifier: 58:BE:AA:EB:CF:AE:A0:90:1E:57:50:24:C4:08:0F:76:DC:16:A3:27 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380E32109691D7F5C6B8B0DB801DDC Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/WL6q68-uoJAeV1AkxAgPdtwWoyc.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 91.184.240.0/22 maxlen: 24 91.184.254.0/23 maxlen: 24 109.172.94.0/23 maxlen: 24 185.197.74.0/24 maxlen: 24 185.230.143.0/24 maxlen: 24 193.188.20.0/24 maxlen: 24 193.188.21.0/24 maxlen: 24 193.188.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0e:32:10:96:91:d7:f5:c6:b8:b0:db:80:1d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58beaaebcfaea0901e575024c4080f76dc16a327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:7c:89:ce:91:90:09:26:e3:92:79:1b:48: 9e:bc:53:e3:62:3b:10:61:a4:7f:dd:26:f9:da:39: 68:0f:f0:88:6a:29:91:25:23:21:da:05:bb:df:4f: df:e6:0c:4d:aa:b0:63:e6:c8:be:36:fe:b2:58:fe: c8:f7:4f:c7:f5:de:ec:7d:09:ba:ca:05:67:ac:2c: 2c:e5:61:b3:29:a7:64:59:ff:b5:b3:d9:c5:7c:f1: 6e:a7:bf:51:63:2d:7f:96:f2:18:c3:1b:56:49:d6: 52:fd:bb:9a:28:c4:84:dc:be:c1:77:b1:9f:b6:24: 7d:86:4e:a0:73:ec:ed:73:b3:b9:8b:63:dd:e3:4d: d2:3a:87:80:b8:46:67:bf:06:09:26:5a:1e:fe:0d: a8:a8:0c:81:0b:73:e2:0e:d8:0e:95:b5:3b:f0:ab: 12:57:c1:d8:dd:ca:3e:e7:40:c1:87:ee:62:fe:29: a3:3f:4a:34:d0:5c:2b:87:41:b3:15:51:b6:28:31: 4c:e6:32:10:98:4e:ab:9d:e7:25:29:10:eb:b2:2d: 9c:19:12:8e:54:cd:0e:4c:84:46:f9:05:ec:ba:f6: 24:93:02:0f:b9:7d:14:08:6b:e2:43:8d:ee:46:02: c1:89:48:04:04:d6:2e:3f:6b:c1:09:a4:4a:75:01: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BE:AA:EB:CF:AE:A0:90:1E:57:50:24:C4:08:0F:76:DC:16:A3:27 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/WL6q68-uoJAeV1AkxAgPdtwWoyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.184.240.0/22 91.184.254.0/23 109.172.94.0/23 185.197.74.0/24 185.230.143.0/24 193.188.20.0-193.188.22.255 Signature Algorithm: sha256WithRSAEncryption 91:a6:9a:e9:7b:58:b8:9a:09:da:90:7a:ef:bf:39:fa:93:7b: 55:f2:03:e0:59:b3:ca:aa:32:d9:14:ec:15:c5:a9:41:de:d5: e7:22:c1:f5:af:e5:75:63:a6:b5:32:b2:a1:67:9b:ce:b0:18: d2:8e:1f:f5:26:3a:b2:79:c0:f0:f9:5a:8a:73:e3:84:91:20: 45:35:70:2a:5e:e0:53:0a:a5:1f:7e:2d:b3:9d:6d:1d:e9:a7: 2b:75:18:17:b7:91:0d:1b:3c:c4:95:6d:d9:05:db:26:8f:02: 0b:b8:1f:a2:af:bf:0b:d9:aa:1f:91:31:55:6c:fa:ad:5b:a0: 6d:41:b0:f3:ab:f9:d4:e3:95:c8:6f:58:a5:41:72:4a:99:5e: 2c:68:69:6d:5f:f0:9e:02:38:ec:da:2f:b5:a3:01:12:02:af: 6c:d2:4a:3a:77:3f:04:ce:33:b5:ad:1a:21:e1:af:aa:11:f6: 7a:9e:b8:69:85:e6:67:59:83:71:15:5d:99:b9:c0:28:d7:94: a7:90:47:d0:22:e8:af:19:b0:b0:af:19:65:d6:82:ab:15:98: 76:a4:02:a6:32:81:bd:cb:7d:e9:f8:74:73:11:c7:32:1c:22: 55:01:c3:39:3b:0a:f8:76:58:d1:ba:02:1e:41:09:f4:f6:a0: 89:35:bd:20 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt+OA4yEJaR1/XGuLDbgB3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGJlYWFlYmNmYWVhMDkwMWU1NzUwMjRjNDA4MGY3NmRjMTZhMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszt8ic6RkAkm45J5G0ievFPjYjsQ YaR/3Sb52jloD/CIaimRJSMh2gW730/f5gxNqrBj5si+Nv6yWP7I90/H9d7sfQm6 ygVnrCws5WGzKadkWf+1s9nFfPFup79RYy1/lvIYwxtWSdZS/buaKMSE3L7Bd7Gf tiR9hk6gc+ztc7O5i2Pd403SOoeAuEZnvwYJJloe/g2oqAyBC3PiDtgOlbU78KsS V8HY3co+50DBh+5i/imjP0o00Fwrh0GzFVG2KDFM5jIQmE6rneclKRDrsi2cGRKO VM0OTIRG+QXsuvYkkwIPuX0UCGviQ43uRgLBiUgEBNYuP2vBCaRKdQG0gwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFFi+quvPrqCQHldQJMQID3bcFqMnMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvV0w2cTY4LXVvSkFlVjFBa3hBZ1BkdHdXb3ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCW7jwAwQB W7j+AwQBbaxeAwQAucVKAwQAueaPMAwDBALBvBQDBADBvBYwDQYJKoZIhvcNAQEL BQADggEBAJGmmul7WLiaCdqQeu+/OfqTe1XyA+BZs8qqMtkU7BXFqUHe1eciwfWv 5XVjprUysqFnm86wGNKOH/UmOrJ5wPD5Wopz44SRIEU1cCpe4FMKpR9+LbOdbR3p pyt1GBe3kQ0bPMSVbdkF2yaPAgu4H6KvvwvZqh+RMVVs+q1boG1BsPOr+dTjlchv WKVBckqZXixoaW1f8J4COOzaL7WjARICr2zSSjp3PwTOM7WtGiHhr6oR9nqeuGmF 5mdZg3EVXZm5wCjXlKeQR9Ai6K8ZsLCvGWXWgqsVmHakAqYygb3Lfen4dHMRxzIc IlUBwzk7Cvh2WNG6Ah5BCfT2oIk1vSA= -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:49 2026 by rpki-client