This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/WVn5YFnfO2jFJ5kw6lfdZUAWPg8.roa File: WVn5YFnfO2jFJ5kw6lfdZUAWPg8.roa (raw, json) Hash identifier: UzQkVewuUoKex8Q3MZoPhDLlaOTxHP2XeS15bQwc1sw= Subject key identifier: 59:59:F9:60:59:DF:3B:68:C5:27:99:30:EA:57:DD:65:40:16:3E:0F Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B7DCADE43A71616E5BE9AAA092D88DC7B Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/WVn5YFnfO2jFJ5kw6lfdZUAWPg8.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 87.254.2.0/24 maxlen: 24 87.254.10.0/24 maxlen: 24 87.254.11.0/24 maxlen: 24 87.254.12.0/23 maxlen: 24 87.254.18.0/23 maxlen: 24 87.254.22.0/24 maxlen: 24 87.254.29.0/24 maxlen: 24 217.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:de:43:a7:16:16:e5:be:9a:aa:09:2d:88:dc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5959f96059df3b68c5279930ea57dd6540163e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:a9:34:90:14:cb:fd:f2:47:85:69:74:99: 05:bc:a1:22:42:47:d8:1d:0b:9d:c5:66:b9:a1:40: ce:59:88:a7:92:a0:60:08:37:36:bf:1f:e7:32:c8: 29:5b:62:79:8f:f6:5e:ec:f2:51:56:b9:fe:70:b8: 3c:33:04:f5:29:0c:05:00:fa:28:ff:ea:a6:b1:08: 98:8b:7c:21:ab:b7:e9:98:c3:be:ee:2d:d5:fa:25: 28:da:56:9c:7d:59:07:97:39:34:4b:b6:02:bd:0b: 16:94:3c:b9:6d:a6:6d:43:89:af:73:75:89:8e:73: 13:57:c1:08:2a:78:ae:3b:2a:ce:1a:98:3d:63:93: 1a:12:56:dd:6d:cf:dc:d2:1b:db:ea:45:c4:ad:e3: 1d:24:70:5f:e1:18:d9:be:d6:f8:64:05:c9:cc:d9: 0e:87:26:25:41:dc:71:44:b1:92:9b:b6:fc:ee:61: 33:cf:78:a0:76:9f:e2:d7:b4:53:29:21:ae:af:16: 95:ed:0d:8e:40:ce:0c:f9:f4:13:7f:89:a8:73:6d: cf:3a:96:eb:8c:0d:0e:78:cd:34:a1:4c:74:c6:0e: 0f:ef:e3:08:c5:2f:11:65:43:4e:35:3d:43:f9:1a: 87:ef:8e:2e:c0:6b:cc:61:4c:e5:f4:66:66:c6:21: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:59:F9:60:59:DF:3B:68:C5:27:99:30:EA:57:DD:65:40:16:3E:0F X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/WVn5YFnfO2jFJ5kw6lfdZUAWPg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.2.0/24 87.254.10.0-87.254.13.255 87.254.18.0/23 87.254.22.0/24 87.254.29.0/24 217.25.3.0/24 Signature Algorithm: sha256WithRSAEncryption ad:46:fb:ba:98:3b:0f:29:bf:cd:37:d4:7a:1c:02:89:b8:30: e6:bc:1b:b7:c2:10:ea:33:e4:0f:7e:40:f8:f4:c0:10:5b:69: 72:16:0b:c5:a7:38:09:0c:dc:8d:b4:a2:b4:9c:e2:64:89:c4: 1e:bb:6e:48:88:a4:89:9d:11:6e:77:fd:35:9f:67:2f:c2:81: 1d:ae:0f:35:64:b1:22:a6:12:52:1f:4f:c2:ce:c7:fa:a4:a8: 4c:6d:a2:21:1d:35:93:73:5f:b2:b4:02:45:58:0e:5d:14:47: 17:f5:c8:a4:ad:6a:cf:6e:2d:c6:4d:8b:93:47:51:c3:46:1c: bc:88:90:f3:34:1c:20:1a:75:43:81:e6:ea:e6:e5:9a:77:d6: 99:5c:97:20:73:3a:c7:71:37:3c:2e:af:d9:22:87:5b:53:94: 27:e8:5d:58:1e:e8:37:1c:a5:02:bb:44:4d:60:e9:40:a8:67: 03:49:25:5e:6f:91:eb:0f:61:a5:ce:e8:db:4f:27:cc:ca:b6: ad:e5:d3:e3:bc:ba:8b:84:46:52:6c:79:3f:1d:72:cb:94:f9: a5:09:a6:9d:09:d7:ca:59:7d:de:e8:6e:bd:24:79:18:1f:41: 52:59:71:09:38:a7:48:84:9c:95:ae:d0:fc:61:55:e9:0a:90: 72:e9:1b:88 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt9yt5DpxYW5b6aqgktiNx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTU5Zjk2MDU5ZGYzYjY4YzUyNzk5MzBlYTU3ZGQ2NTQwMTYzZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWepNJAUy/3yR4VpdJkFvKEiQkfY HQudxWa5oUDOWYinkqBgCDc2vx/nMsgpW2J5j/Ze7PJRVrn+cLg8MwT1KQwFAPoo /+qmsQiYi3whq7fpmMO+7i3V+iUo2lacfVkHlzk0S7YCvQsWlDy5baZtQ4mvc3WJ jnMTV8EIKniuOyrOGpg9Y5MaElbdbc/c0hvb6kXEreMdJHBf4RjZvtb4ZAXJzNkO hyYlQdxxRLGSm7b87mEzz3igdp/i17RTKSGurxaV7Q2OQM4M+fQTf4moc23POpbr jA0OeM00oUx0xg4P7+MIxS8RZUNONT1D+RqH744uwGvMYUzl9GZmxiGhGwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFFlZ+WBZ3ztoxSeZMOpX3WVAFj4PMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvV1ZuNVlGbmZPMmpGSjVrdzZsZmRaVUFXUGc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAV/4CMAwD BAFX/goDBAFX/gwDBAFX/hIDBABX/hYDBABX/h0DBADZGQMwDQYJKoZIhvcNAQEL BQADggEBAK1G+7qYOw8pv8031HocAom4MOa8G7fCEOoz5A9+QPj0wBBbaXIWC8Wn OAkM3I20orSc4mSJxB67bkiIpImdEW53/TWfZy/CgR2uDzVksSKmElIfT8LOx/qk qExtoiEdNZNzX7K0AkVYDl0URxf1yKStas9uLcZNi5NHUcNGHLyIkPM0HCAadUOB 5urm5Zp31plclyBzOsdxNzwur9kih1tTlCfoXVge6DccpQK7RE1g6UCoZwNJJV5v kesPYaXO6NtPJ8zKtq3l0+O8uouERlJseT8dcsuU+aUJpp0J18pZfd7obr0keRgf QVJZcQk4p0iEnJWu0PxhVekKkHLpG4g= -----END CERTIFICATE-----Generated at Thu Jan 22 00:57:58 2026 by rpki-client