This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/WUXb-p2bwi8my27KJmefSQDxFng.roa File: WUXb-p2bwi8my27KJmefSQDxFng.roa (raw, json) Hash identifier: +UWsoZIc3QFjDTn9cLGvdthjCv+sSjp1Ho47a8q1MC0= Subject key identifier: 59:45:DB:FA:9D:9B:C2:2F:26:CB:6E:CA:26:67:9F:49:00:F1:16:78 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECFBCBB2E6AAF42DD0A277F0799138 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/WUXb-p2bwi8my27KJmefSQDxFng.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8643 IP address blocks: 195.130.64.0/23 maxlen: 23 195.130.123.0/24 maxlen: 24 2001:648:2010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fb:cb:b2:e6:aa:f4:2d:d0:a2:77:f0:79:91:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5945dbfa9d9bc22f26cb6eca26679f4900f11678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:49:9d:3e:f9:54:2f:55:42:d6:1e:bb:14:63: b0:29:36:2f:03:ad:88:89:2b:ca:ea:55:4a:ef:38: 64:96:86:e3:7e:6d:8f:56:93:21:c8:a6:87:21:3f: 0c:b8:09:f9:38:92:d1:c3:7b:60:44:6d:b1:1f:88: 87:94:f5:72:f2:88:0f:38:6d:e9:d1:57:5a:88:1f: bf:6f:fd:17:72:d2:be:c6:78:ed:90:7d:b8:36:19: 8d:92:91:24:e7:9c:32:89:6b:d6:83:cc:14:ab:e4: a2:8d:ec:1e:80:3e:f2:8c:ca:aa:37:38:87:70:da: 24:d4:b1:bd:9e:8a:16:0d:9d:7a:3c:53:64:21:39: 54:2c:3e:8b:d7:66:a5:99:bd:40:de:c9:aa:30:bf: d5:1d:23:e3:18:8d:18:01:b5:fe:35:bf:bf:19:16: 7f:e1:a5:0d:35:fb:36:f7:3b:bb:9d:60:f8:87:6f: 6e:c3:7a:e2:b6:ee:93:6f:c7:1b:52:c8:eb:77:91: 90:a7:4d:a9:47:a5:31:f6:ad:d9:75:0d:d1:01:f7: e3:f6:74:e1:fd:ca:6b:80:50:fb:2b:11:8d:85:be: 16:ac:1f:41:4f:6a:db:bd:4e:60:e0:c1:c2:f4:cc: 08:4e:e1:5a:22:78:9a:ab:8e:bd:99:8c:22:a4:dc: 29:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:45:DB:FA:9D:9B:C2:2F:26:CB:6E:CA:26:67:9F:49:00:F1:16:78 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/WUXb-p2bwi8my27KJmefSQDxFng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.130.64.0/23 195.130.123.0/24 IPv6: 2001:648:2010::/48 Signature Algorithm: sha256WithRSAEncryption 1a:3e:b4:88:c7:b7:b2:cf:7b:f4:5a:ce:ca:cf:8d:4e:f3:b8: 51:b7:1b:c6:35:be:85:a3:98:2f:be:58:a0:db:53:e0:9d:aa: ba:fd:9b:32:b6:39:ba:07:b8:70:01:84:7c:b0:2c:29:b6:8f: e6:84:a3:e6:c3:0c:c3:a3:ca:3f:85:ca:bf:7b:33:51:ba:16: f6:04:01:3b:65:c0:61:68:b1:54:b8:65:73:84:e9:29:45:26: ed:5d:54:81:bf:08:fd:cd:4e:ba:c4:79:18:18:92:63:44:3f: 65:5f:13:6b:c9:5e:0e:b6:59:65:84:03:08:42:88:2c:10:c5: 71:00:5d:9e:60:d8:12:43:c4:55:4a:5e:88:23:a7:4c:c8:77: ce:c3:36:3a:98:38:f6:78:3a:0a:53:da:9a:9b:77:c9:c6:58: 80:3b:ce:79:a0:c2:6b:2e:18:7d:c9:14:b4:3a:a9:33:e7:c9: 9c:12:51:7a:1c:fc:3b:22:88:a3:d5:2b:3b:de:45:e3:ff:11: 49:69:be:a9:05:37:43:66:89:0d:a0:8f:92:b4:8d:ba:92:f0: 48:95:70:76:b6:6c:dd:fa:78:93:77:14:2e:41:06:0a:8e:c6: a4:ea:3a:71:d8:cb:9b:d4:8f:09:f9:eb:ec:9f:78:99:60:e9: 0e:e9:19:c8 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87PvLsuaq9C3QonfweZE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTQ1ZGJmYTlkOWJjMjJmMjZjYjZlY2EyNjY3OWY0OTAwZjExNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEmdPvlUL1VC1h67FGOwKTYvA62I iSvK6lVK7zhklobjfm2PVpMhyKaHIT8MuAn5OJLRw3tgRG2xH4iHlPVy8ogPOG3p 0VdaiB+/b/0XctK+xnjtkH24NhmNkpEk55wyiWvWg8wUq+SijewegD7yjMqqNziH cNok1LG9nooWDZ16PFNkITlULD6L12almb1A3smqML/VHSPjGI0YAbX+Nb+/GRZ/ 4aUNNfs29zu7nWD4h29uw3ritu6Tb8cbUsjrd5GQp02pR6Ux9q3ZdQ3RAffj9nTh /cprgFD7KxGNhb4WrB9BT2rbvU5g4MHC9MwITuFaIniaq469mYwipNwpTwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFlF2/qdm8IvJstuyiZnn0kA8RZ4MB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvV1VYYi1wMmJ3aThteTI3S0ptZWZTUUR4Rm5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBw4JAAwQA w4J7MA8EAgACMAkDBwAgAQZIIBAwDQYJKoZIhvcNAQELBQADggEBABo+tIjHt7LP e/RazsrPjU7zuFG3G8Y1voWjmC++WKDbU+Cdqrr9mzK2OboHuHABhHywLCm2j+aE o+bDDMOjyj+Fyr97M1G6FvYEATtlwGFosVS4ZXOE6SlFJu1dVIG/CP3NTrrEeRgY kmNEP2VfE2vJXg62WWWEAwhCiCwQxXEAXZ5g2BJDxFVKXogjp0zId87DNjqYOPZ4 OgpT2pqbd8nGWIA7znmgwmsuGH3JFLQ6qTPnyZwSUXoc/DsiiKPVKzveReP/EUlp vqkFN0NmiQ2gj5K0jbqS8EiVcHa2bN36eJN3FC5BBgqOxqTqOnHYy5vUjwn56+yf eJlg6Q7pGcg= -----END CERTIFICATE-----Generated at Mon Feb 2 09:38:58 2026 by rpki-client