This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/Wrrx-J8255kGZZQo2Z_lshL_g94.roa File: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (raw, json) Hash identifier: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ= Subject key identifier: 5A:BA:F1:F8:9F:36:E7:99:06:65:94:28:D9:9F:E5:B2:12:FF:83:DE Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Certificate serial: 019B7834B40852B42BB44FFEA9935F634960 Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/Wrrx-J8255kGZZQo2Z_lshL_g94.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12956 IP address blocks: 2.57.224.0/22 maxlen: 22 5.53.0.0/21 maxlen: 21 5.255.144.0/21 maxlen: 21 45.135.52.0/22 maxlen: 22 80.76.8.0/21 maxlen: 21 81.173.104.0/21 maxlen: 21 84.16.0.0/19 maxlen: 19 89.32.176.0/21 maxlen: 21 94.142.96.0/19 maxlen: 19 103.244.236.0/22 maxlen: 22 176.52.248.0/21 maxlen: 21 185.43.180.0/22 maxlen: 22 185.153.168.0/22 maxlen: 22 185.190.8.0/22 maxlen: 22 185.210.28.0/22 maxlen: 22 188.214.148.0/23 maxlen: 23 193.36.134.0/23 maxlen: 23 213.140.32.0/19 maxlen: 19 2001:1498::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b4:08:52:b4:2b:b4:4f:fe:a9:93:5f:63:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5abaf1f89f36e79906659428d99fe5b212ff83de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:7f:bf:b8:3b:41:17:12:4f:28:6a:34:65: 77:3b:af:60:20:c8:76:e1:cd:32:98:8d:7e:50:d7: f0:da:6a:88:50:32:ae:ec:24:32:d2:a9:80:ab:0b: e9:5e:f3:28:1f:5f:5f:e2:0a:1e:33:3f:52:ee:f7: a1:c1:18:b1:bf:c4:6b:fc:1b:d7:57:e7:71:fd:df: 5a:2b:e8:e2:4e:11:db:25:c0:4e:4c:63:c6:1f:c3: a2:96:0d:04:99:bb:0a:d0:43:a3:24:62:66:c0:d4: cc:41:c7:5f:7b:bc:9d:39:bf:0f:df:ce:17:c6:0a: 2e:00:04:40:be:88:46:76:a9:fe:de:b1:f0:4c:4a: 31:4e:d2:95:2b:d6:96:36:38:99:93:62:d6:4c:5f: fb:aa:e0:6f:41:e7:b7:bb:c4:9a:66:be:44:fd:6a: 20:34:0a:e7:0b:fd:a1:da:cc:c7:d3:21:db:99:65: 7a:15:57:20:2e:fd:a2:18:7e:31:1e:99:bc:71:4d: 20:42:1e:1f:1d:49:81:6c:5e:10:03:be:f3:84:37: e7:9f:c2:55:a9:a2:16:0b:f0:3c:bc:b5:8b:19:e7: 83:a3:4c:fe:a6:c9:f8:94:5c:48:13:4b:60:ec:6e: db:92:a5:f3:55:a3:83:c3:bf:06:54:b2:9a:e7:8d: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:F1:F8:9F:36:E7:99:06:65:94:28:D9:9F:E5:B2:12:FF:83:DE X509v3 Authority Key Identifier: keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/Wrrx-J8255kGZZQo2Z_lshL_g94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.224.0/22 5.53.0.0/21 5.255.144.0/21 45.135.52.0/22 80.76.8.0/21 81.173.104.0/21 84.16.0.0/19 89.32.176.0/21 94.142.96.0/19 103.244.236.0/22 176.52.248.0/21 185.43.180.0/22 185.153.168.0/22 185.190.8.0/22 185.210.28.0/22 188.214.148.0/23 193.36.134.0/23 213.140.32.0/19 IPv6: 2001:1498::/32 Signature Algorithm: sha256WithRSAEncryption 39:0c:ac:ca:c1:d6:65:58:c8:92:79:c1:65:96:da:0f:69:0b: 4f:63:e4:b0:7c:25:04:93:e1:fd:34:d0:cf:ab:b6:38:c9:c8: 1c:e6:38:10:07:8d:e7:92:48:3d:cd:a8:a6:18:4d:7e:55:ec: 66:ff:28:23:f9:fd:d4:c9:1d:d6:66:69:3d:c7:62:57:d7:69: 6a:4e:69:b8:48:b4:fb:20:6c:8b:e5:43:1a:be:df:54:ca:38: 8c:05:94:f2:a8:a3:82:42:15:04:39:07:cc:25:41:2a:c4:07: a5:9f:f7:4d:65:cb:ae:61:f7:b9:30:a5:1c:1d:34:91:c4:46: ce:cb:00:64:ce:a7:1e:a0:0f:4d:65:5a:7b:74:d7:9d:a9:1d: 99:05:3c:16:1d:d8:9e:50:06:e3:b8:7d:89:e5:c7:a9:60:de: 47:14:e7:d2:d0:1e:d8:51:67:10:d6:87:95:9b:1c:da:c9:70: 0e:61:c3:81:f8:f5:1f:60:1e:b6:f8:39:20:09:20:c7:75:5c: 83:63:8e:b1:37:ff:5b:c1:cb:a9:b2:7b:1d:9e:68:31:a3:a1: 76:cc:a9:7b:38:96:cf:14:b9:51:5e:c1:2c:9e:ae:46:83:e1: be:b3:07:8e:2a:0a:0a:bd:dc:6a:fe:4d:4b:b7:7a:14:1a:e5: 15:23:1a:ab -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt4NLQIUrQrtE/+qZNfY0lgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj ZTVhNGEwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWJhZjFmODlmMzZlNzk5MDY2NTk0MjhkOTlmZTViMjEyZmY4M2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRR/v7g7QRcSTyhqNGV3O69gIMh2 4c0ymI1+UNfw2mqIUDKu7CQy0qmAqwvpXvMoH19f4goeMz9S7vehwRixv8Rr/BvX V+dx/d9aK+jiThHbJcBOTGPGH8Oilg0EmbsK0EOjJGJmwNTMQcdfe7ydOb8P384X xgouAARAvohGdqn+3rHwTEoxTtKVK9aWNjiZk2LWTF/7quBvQee3u8SaZr5E/Wog NArnC/2h2szH0yHbmWV6FVcgLv2iGH4xHpm8cU0gQh4fHUmBbF4QA77zhDfnn8JV qaIWC/A8vLWLGeeDo0z+psn4lFxIE0tg7G7bkqXzVaODw78GVLKa541PWQIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFFq68fifNueZBmWUKNmf5bIS/4PeMB8GA1UdIwQY MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct ZDQ1YWI3ZGYyZGUxLzEvV3JyeC1KODI1NWtHWlpRbzJaX2xzaExfZzk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQCAjng AwQDBTUAAwQDBf+QAwQCLYc0AwQDUEwIAwQDUa1oAwQFVBAAAwQDWSCwAwQFXo5g AwQCZ/TsAwQDsDT4AwQCuSu0AwQCuZmoAwQCub4IAwQCudIcAwQBvNaUAwQBwSSG AwQF1YwgMA0EAgACMAcDBQAgARSYMA0GCSqGSIb3DQEBCwUAA4IBAQA5DKzKwdZl WMiSecFlltoPaQtPY+SwfCUEk+H9NNDPq7Y4ycgc5jgQB43nkkg9zaimGE1+Vexm /ygj+f3UyR3WZmk9x2JX12lqTmm4SLT7IGyL5UMavt9UyjiMBZTyqKOCQhUEOQfM JUEqxAeln/dNZcuuYfe5MKUcHTSRxEbOywBkzqceoA9NZVp7dNedqR2ZBTwWHdie UAbjuH2J5cepYN5HFOfS0B7YUWcQ1oeVmxzayXAOYcOB+PUfYB62+DkgCSDHdVyD Y46xN/9bwcupsnsdnmgxo6F2zKl7OJbPFLlRXsEsnq5Gg+G+sweOKgoKvdxq/k1L t3oUGuUVIxqr -----END CERTIFICATE-----Generated at Fri Jan 23 13:57:16 2026 by rpki-client