This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa File: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (raw, json) Hash identifier: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss= Subject key identifier: C2:60:07:B4:A3:1A:4D:2C:0A:DA:B1:55:7B:E5:F2:DE:3A:C0:F4:E9 Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466 Certificate serial: 019B79EC471A98F9F7B182183EF5EE418F40 Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa Signing time: Thu 01 Jan 2026 14:18:06 +0000 ROA not before: Thu 01 Jan 2026 14:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207611 IP address blocks: 131.220.0.0/16 maxlen: 17 193.30.3.0/24 maxlen: 24 2a00:5ba0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:47:1a:98:f9:f7:b1:82:18:3e:f5:ee:41:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466 Validity Not Before: Jan 1 14:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c26007b4a31a4d2c0adab1557be5f2de3ac0f4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:d7:29:83:39:ef:a8:25:40:70:69:0e:9e: 29:70:29:0f:a2:bc:58:ab:eb:e5:75:e8:f9:80:2a: 0f:5d:98:72:0b:5b:77:15:84:5f:b9:80:72:4c:db: 44:cb:4b:e6:61:eb:a6:d0:c3:82:f8:9e:ee:a1:b0: 7b:c5:64:72:ff:d1:fb:8e:b7:de:43:7a:ce:c8:c1: f7:fb:fd:5b:57:bd:f4:6f:2e:6b:b4:fe:b9:d7:8d: b6:fe:51:c1:93:8c:74:09:5e:30:3d:52:47:fa:af: 9f:03:60:89:76:b5:c0:ca:70:c6:5f:95:d6:49:87: 3c:66:51:fc:68:eb:32:98:86:b2:b9:c6:19:b6:01: 78:17:5e:ad:bf:9b:10:89:c6:b8:18:e4:de:ea:d9: 55:2a:cb:3f:47:d7:e2:6b:63:cf:c1:2f:dc:67:f9: 7c:97:18:ef:26:4b:17:95:4d:c4:4c:54:c6:0a:8a: d0:4e:c1:db:b0:55:b8:47:48:cc:c2:c7:ef:e7:22: ba:d8:71:25:1d:63:0d:5c:38:f8:5f:f1:8f:a1:5a: cd:f2:37:bc:1e:87:85:0d:a9:dc:5b:4b:a5:f3:72: 89:73:96:74:e5:61:05:6d:9d:31:05:ef:7a:e0:47: 74:d4:1c:e2:b1:bb:c7:4f:38:43:a7:cb:07:3e:b6: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:60:07:B4:A3:1A:4D:2C:0A:DA:B1:55:7B:E5:F2:DE:3A:C0:F4:E9 X509v3 Authority Key Identifier: keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.220.0.0/16 193.30.3.0/24 IPv6: 2a00:5ba0::/29 Signature Algorithm: sha256WithRSAEncryption d8:3c:4d:66:87:e1:c5:d9:59:74:ef:05:b3:c2:0f:94:02:0f: 4c:e1:42:08:e8:05:af:09:18:0b:fd:aa:c7:07:2a:15:02:76: b1:5a:3d:a4:33:e6:c5:d9:3f:16:2e:56:00:79:13:47:b7:e2: ac:b2:4a:93:27:d3:64:b4:e2:12:96:2b:c4:fe:ef:eb:00:c3: 7d:dc:8f:78:e7:69:0d:23:d0:b1:d4:0e:04:c4:ad:bd:b6:8f: 35:1a:ad:68:b9:6e:32:0e:5c:0b:e7:90:b5:99:7d:c8:bf:06: b3:95:de:6e:ff:7a:ae:cd:51:39:a2:63:30:55:4d:15:ca:2c: f3:3e:94:40:19:d4:42:64:a6:5a:95:23:ab:4e:1d:de:6a:98: 6f:a3:8e:d2:2a:4c:e2:c9:3e:49:76:0b:e7:a3:8e:e9:be:3d: 96:fe:f1:1b:14:82:bf:3e:af:08:3e:c8:f6:b3:c6:11:52:37: 2e:3b:c3:54:39:a5:b2:2f:1f:30:bc:ed:9b:65:89:4d:51:8f: 19:af:1d:29:ec:3d:60:1f:01:62:91:2d:20:0b:9b:ef:21:c2: 3b:11:9a:bc:8c:24:8d:42:7b:0f:ea:78:0a:6b:04:6c:1d:f8: 03:f3:4e:99:99:48:6c:ee:f1:50:14:77:4a:35:10:99:8a:cf: 46:30:99:af -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt57EcamPn3sYIYPvXuQY9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl NzI0NjYwHhcNMjYwMTAxMTQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjYwMDdiNGEzMWE0ZDJjMGFkYWIxNTU3YmU1ZjJkZTNhYzBmNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ/XKYM576glQHBpDp4pcCkPorxY q+vldej5gCoPXZhyC1t3FYRfuYByTNtEy0vmYeum0MOC+J7uobB7xWRy/9H7jrfe Q3rOyMH3+/1bV730by5rtP651422/lHBk4x0CV4wPVJH+q+fA2CJdrXAynDGX5XW SYc8ZlH8aOsymIayucYZtgF4F16tv5sQica4GOTe6tlVKss/R9fia2PPwS/cZ/l8 lxjvJksXlU3ETFTGCorQTsHbsFW4R0jMwsfv5yK62HElHWMNXDj4X/GPoVrN8je8 HoeFDancW0ul83KJc5Z05WEFbZ0xBe964Ed01BzisbvHTzhDp8sHPrZGpwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMJgB7SjGk0sCtqxVXvl8t46wPTpMB8GA1UdIwQY MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It Y2Q0MDNiZGVlNGRmLzEvd21BSHRLTWFUU3dLMnJGVmUtWHkzanJBOU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAg9wDBADB HgMwDQQCAAIwBwMFAyoAW6AwDQYJKoZIhvcNAQELBQADggEBANg8TWaH4cXZWXTv BbPCD5QCD0zhQgjoBa8JGAv9qscHKhUCdrFaPaQz5sXZPxYuVgB5E0e34qyySpMn 02S04hKWK8T+7+sAw33cj3jnaQ0j0LHUDgTErb22jzUarWi5bjIOXAvnkLWZfci/ BrOV3m7/eq7NUTmiYzBVTRXKLPM+lEAZ1EJkplqVI6tOHd5qmG+jjtIqTOLJPkl2 C+ejjum+PZb+8RsUgr8+rwg+yPazxhFSNy47w1Q5pbIvHzC87ZtliU1RjxmvHSns PWAfAWKRLSALm+8hwjsRmryMJI1Cew/qeAprBGwd+APzTpmZSGzu8VAUd0o1EJmK z0Ywma8= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:27 2026 by rpki-client