This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/xzWZwX5dFxrjNrqyC87RwCdeYwI.roa File: xzWZwX5dFxrjNrqyC87RwCdeYwI.roa (raw, json) Hash identifier: 6Pa9VX5amyqk8NFVQLYL7l7qsZQa9+9iDgCKM+czywk= Subject key identifier: C7:35:99:C1:7E:5D:17:1A:E3:36:BA:B2:0B:CE:D1:C0:27:5E:63:02 Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b Certificate serial: 019B797EC3D468E3D14F58ED636CC34FEEA4 Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/xzWZwX5dFxrjNrqyC87RwCdeYwI.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43146 IP address blocks: 80.78.244.0/22 maxlen: 22 80.78.249.0/24 maxlen: 24 89.108.68.0/24 maxlen: 24 89.108.72.0/22 maxlen: 22 89.108.72.0/24 maxlen: 24 89.108.73.0/24 maxlen: 24 89.108.74.0/24 maxlen: 24 89.108.75.0/24 maxlen: 24 89.108.80.0/24 maxlen: 24 89.108.82.0/24 maxlen: 24 89.108.84.0/24 maxlen: 24 89.108.85.0/24 maxlen: 24 89.108.86.0/24 maxlen: 24 89.108.87.0/24 maxlen: 24 89.108.90.0/24 maxlen: 24 89.108.91.0/24 maxlen: 24 89.108.92.0/24 maxlen: 24 89.108.93.0/24 maxlen: 24 89.108.96.0/24 maxlen: 24 89.108.97.0/24 maxlen: 24 89.108.104.0/24 maxlen: 24 89.108.105.0/24 maxlen: 24 89.108.106.0/24 maxlen: 24 89.108.107.0/24 maxlen: 24 89.108.108.0/22 maxlen: 22 89.108.108.0/24 maxlen: 24 89.108.109.0/24 maxlen: 24 89.108.110.0/24 maxlen: 24 89.108.111.0/24 maxlen: 24 89.108.112.0/24 maxlen: 24 89.108.116.0/22 maxlen: 22 89.108.116.0/24 maxlen: 24 89.108.117.0/24 maxlen: 24 89.108.118.0/24 maxlen: 24 89.108.119.0/24 maxlen: 24 89.108.120.0/22 maxlen: 22 89.108.120.0/24 maxlen: 24 89.108.121.0/24 maxlen: 24 89.108.122.0/24 maxlen: 24 89.108.123.0/24 maxlen: 24 89.108.124.0/22 maxlen: 22 89.108.124.0/24 maxlen: 24 89.108.125.0/24 maxlen: 24 89.108.126.0/24 maxlen: 24 89.108.127.0/24 maxlen: 24 176.99.2.0/24 maxlen: 24 176.99.3.0/24 maxlen: 24 176.99.10.0/24 maxlen: 24 176.99.14.0/24 maxlen: 24 185.46.8.0/22 maxlen: 22 194.58.124.0/24 maxlen: 24 194.58.125.0/24 maxlen: 24 194.67.107.0/24 maxlen: 24 212.158.162.0/24 maxlen: 24 2a00:f940:8::/48 maxlen: 48 2a03:4900:a0::/48 maxlen: 48 2a03:4900:a1::/48 maxlen: 48 2a03:4900:fffb::/48 maxlen: 48 2a03:4900:fffc::/48 maxlen: 48 2a03:4900:fffd::/48 maxlen: 48 2a03:4900:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c3:d4:68:e3:d1:4f:58:ed:63:6c:c3:4f:ee:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c73599c17e5d171ae336bab20bced1c0275e6302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:c6:cd:66:5a:d0:d2:74:e5:2a:fe:49:61: fa:6e:17:8d:20:41:a2:fe:86:f1:e7:0c:17:62:79: 66:ad:a1:6c:13:53:86:00:a3:e7:f7:59:72:c3:40: 35:bd:87:0c:e6:7b:c1:80:59:fe:5f:54:14:a7:34: d2:93:c4:ef:e2:e9:60:b4:d6:4a:67:4f:e7:35:93: 20:5f:36:07:29:12:ad:53:60:29:7a:29:fa:e3:9a: 47:4c:68:c0:8f:72:2f:b2:e1:66:cd:13:41:cf:11: c0:52:37:f1:d6:ef:ac:3a:fb:10:aa:8f:b7:4a:53: f0:90:7e:12:dd:89:5c:4a:9e:5a:8f:c6:c2:5d:61: f0:50:f1:96:11:3f:c7:6e:75:46:7b:63:a3:7b:0c: 07:a4:6a:5c:e6:b6:69:3d:e9:49:32:a6:72:76:8e: ac:bc:b5:96:90:16:9a:cf:28:9e:7e:a8:9b:3a:a6: 8f:ae:69:b3:bb:62:ec:2e:1c:0d:e0:e8:d8:c1:ca: 5d:66:0a:d7:44:67:90:cb:97:c7:22:2a:db:30:99: 50:71:ff:59:36:94:de:6a:f6:50:89:68:91:92:ba: a8:ae:96:3f:4e:c9:0a:2a:c0:13:c5:83:b2:59:a4: 90:4d:e3:d9:94:df:6d:84:69:6a:f4:0b:d6:2d:a2: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:99:C1:7E:5D:17:1A:E3:36:BA:B2:0B:CE:D1:C0:27:5E:63:02 X509v3 Authority Key Identifier: keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/xzWZwX5dFxrjNrqyC87RwCdeYwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.78.244.0/22 80.78.249.0/24 89.108.68.0/24 89.108.72.0/22 89.108.80.0/24 89.108.82.0/24 89.108.84.0/22 89.108.90.0-89.108.93.255 89.108.96.0/23 89.108.104.0-89.108.112.255 89.108.116.0-89.108.127.255 176.99.2.0/23 176.99.10.0/24 176.99.14.0/24 185.46.8.0/22 194.58.124.0/23 194.67.107.0/24 212.158.162.0/24 IPv6: 2a00:f940:8::/48 2a03:4900:a0::/47 2a03:4900:fffb::-2a03:4900:fffd:ffff:ffff:ffff:ffff:ffff 2a03:4900:ffff::/48 Signature Algorithm: sha256WithRSAEncryption a1:6d:00:ef:ae:b6:c0:da:85:e8:30:a5:6c:1e:04:fc:f1:19: 59:46:c8:b7:7b:e8:8c:0b:ab:47:04:e8:f8:5a:1c:95:e9:78: 33:2f:55:a5:97:3b:dd:70:78:eb:f2:b0:58:18:0c:57:5a:b5: a5:a0:b7:d3:e5:89:c9:90:1e:77:ae:d1:97:8f:eb:19:81:52: c8:5e:9e:e9:3e:c5:71:e2:61:e4:e8:e0:34:a7:04:a1:c4:50: 46:b1:af:81:dc:16:07:f2:15:ed:37:a5:09:3a:eb:ff:96:b0: 7d:cf:65:08:dc:4b:d1:cb:82:2d:27:e7:09:92:3a:ad:24:31: d6:ab:7f:fe:cd:33:15:87:e1:ae:41:58:a5:45:26:0f:77:19: 7c:48:17:97:da:e3:38:f0:07:4a:c1:c8:75:c9:bf:c6:8a:3a: e6:1e:57:1c:86:c3:6d:8d:5c:0d:ec:f9:57:a3:96:41:16:c6: 63:aa:89:0a:69:e8:7f:ac:fd:6a:5b:af:fb:7e:65:91:d3:c0: ce:83:9e:50:00:da:67:a1:69:12:a7:39:f7:17:eb:c9:10:a4: c0:06:77:dc:58:d5:5c:a6:12:87:3d:13:cd:f6:6f:31:25:cc: ca:51:6c:74:96:2e:3d:82:4b:ab:6a:90:28:40:01:86:6f:eb: 03:d5:ab:df -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt5fsPUaOPRT1jtY2zDT+6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MzMyOTRhMWNkYzEzNThhZmM0MzljMGE3MjczM2IwNjVh ODZmOGIwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzM1OTljMTdlNWQxNzFhZTMzNmJhYjIwYmNlZDFjMDI3NWU2MzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAfGzWZa0NJ05Sr+SWH6bheNIEGi /obx5wwXYnlmraFsE1OGAKPn91lyw0A1vYcM5nvBgFn+X1QUpzTSk8Tv4ulgtNZK Z0/nNZMgXzYHKRKtU2Apein645pHTGjAj3IvsuFmzRNBzxHAUjfx1u+sOvsQqo+3 SlPwkH4S3YlcSp5aj8bCXWHwUPGWET/HbnVGe2OjewwHpGpc5rZpPelJMqZydo6s vLWWkBaazyiefqibOqaPrmmzu2LsLhwN4OjYwcpdZgrXRGeQy5fHIirbMJlQcf9Z NpTeavZQiWiRkrqorpY/TskKKsATxYOyWaSQTePZlN9thGlq9AvWLaLkYwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFMc1mcF+XRca4za6sgvO0cAnXmMCMB8GA1UdIwQY MBaAFFgzKUoc3BNYr8Q5wKcnM7BlqG+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDct YmI0YjY1YjZhMGQxLzEveHpXWndYNWRGeHJqTnJxeUM4N1J3Q2RlWXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDctYmI0YjY1YjZhMGQx LzEvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHYBggrBgEFBQcBBwEB/wSByDCBxTCBiwQCAAEwgYQDBAJQ TvQDBABQTvkDBABZbEQDBAJZbEgDBABZbFADBABZbFIDBAJZbFQwDAMEAVlsWgME AVlsXAMEAVlsYDAMAwQDWWxoAwQAWWxwMAwDBAJZbHQDBAdZbAADBAGwYwIDBACw YwoDBACwYw4DBAK5LggDBAHCOnwDBADCQ2sDBADUnqIwNQQCAAIwLwMHACoA+UAA CAMHASoDSQAAoDASAwcAKgNJAP/7AwcBKgNJAP/8AwcAKgNJAP//MA0GCSqGSIb3 DQEBCwUAA4IBAQChbQDvrrbA2oXoMKVsHgT88RlZRsi3e+iMC6tHBOj4WhyV6Xgz L1WllzvdcHjr8rBYGAxXWrWloLfT5YnJkB53rtGXj+sZgVLIXp7pPsVx4mHk6OA0 pwShxFBGsa+B3BYH8hXtN6UJOuv/lrB9z2UI3EvRy4ItJ+cJkjqtJDHWq3/+zTMV h+GuQVilRSYPdxl8SBeX2uM48AdKwch1yb/GijrmHlcchsNtjVwN7PlXo5ZBFsZj qokKaeh/rP1qW6/7fmWR08DOg55QANpnoWkSpzn3F+vJEKTABnfcWNVcphKHPRPN 9m8xJczKUWx0li49gkurapAoQAGGb+sD1avf -----END CERTIFICATE-----Generated at Tue Feb 10 09:28:15 2026 by rpki-client