This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa File: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (raw, json) Hash identifier: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI= Subject key identifier: 59:AF:67:F5:E4:60:01:C1:DB:CF:BE:89:E9:67:19:88:64:BE:05:BA Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019B7E38D30CDA342F06DB54CEA467466CFF Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41483 IP address blocks: 89.254.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d3:0c:da:34:2f:06:db:54:ce:a4:67:46:6c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59af67f5e46001c1dbcfbe89e967198864be05ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:5b:79:f5:96:2c:b1:9d:48:29:ab:9b:b5: 4b:16:a6:6e:a5:c3:db:45:b9:ff:3c:57:64:db:41: a5:07:b8:ad:9b:bd:27:71:a5:ef:4d:a0:6c:10:73: 25:0f:79:60:30:4e:75:b7:75:b7:ef:7b:4e:d7:42: c3:65:fb:9d:44:3f:14:ce:de:9b:14:4f:c1:de:28: c8:a9:9f:87:bf:ab:8b:8a:1e:25:f4:d9:1f:b5:e8: d7:af:c7:bc:cb:37:02:bd:04:cc:80:bd:8a:0e:9c: 8b:78:17:21:72:42:dc:91:df:6f:4b:a1:d3:3a:13: 9c:ab:09:8e:f6:d9:8b:94:87:4d:aa:e4:39:6b:54: c7:b6:13:f2:5c:27:95:71:ad:bd:92:0c:19:83:4f: a5:65:ab:aa:4b:08:c0:b6:96:7f:d6:07:26:7b:f2: 55:60:f4:bd:9d:b6:c6:6d:40:7f:5f:32:c9:7c:ff: dd:8d:18:4e:9e:46:d2:b5:ac:5b:92:f4:8b:b9:b5: 38:8c:a6:ce:9e:7c:65:94:50:1b:e8:23:63:d3:69: 6b:b7:a5:3c:f1:6f:3b:9e:00:ac:cf:09:9f:f4:74: df:e6:63:15:9a:1d:e4:07:05:aa:46:81:00:37:11: ea:8c:41:98:d9:cd:d7:68:f6:b2:0b:21:d9:a3:2e: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AF:67:F5:E4:60:01:C1:DB:CF:BE:89:E9:67:19:88:64:BE:05:BA X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.254.64.0/18 Signature Algorithm: sha256WithRSAEncryption 19:70:a5:e2:ef:a9:1b:c2:10:58:5c:fc:d0:38:c8:68:ce:31: d9:1f:b7:06:ac:19:6a:ab:6f:90:95:01:49:57:f0:af:2a:ec: 72:3b:99:12:32:bd:3c:f5:c7:00:45:b5:a8:90:91:91:9c:1a: 2e:d6:82:23:08:7f:bb:b6:1d:55:e3:f2:3d:ea:c1:37:c7:5b: 39:0b:37:da:17:c5:ae:b1:24:10:be:84:83:fc:86:81:66:7f: 46:d6:9b:27:2a:c6:8d:d8:3e:bf:71:2d:e5:a5:bd:ad:3a:3a: 32:17:d8:66:bf:4c:bb:a4:23:ba:9f:1b:72:5d:45:25:28:d9: 72:cf:9a:8e:63:39:9c:0b:e7:c2:5a:76:bb:d5:08:b1:b5:96: 6d:09:b4:6d:37:ae:c0:6e:e1:15:47:74:54:d3:02:17:6d:9a: 5e:64:e0:c9:b4:ca:34:e6:b6:b3:f8:7a:fe:80:04:b2:fa:a8: 8c:cc:71:0a:18:26:1a:26:12:d7:e8:08:9f:40:a3:14:88:39: 9a:cb:93:b2:29:83:8f:7f:e0:fa:02:e1:83:1a:b9:e5:35:91: e7:71:b5:43:bb:17:d3:fd:46:08:ce:8a:ea:67:e6:1c:0f:85: 95:3a:18:46:7f:9a:9a:76:fb:06:4e:3e:5b:e9:ea:b5:62:f0: 79:c0:01:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONMM2jQvBttUzqRnRmz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWFmNjdmNWU0NjAwMWMxZGJjZmJlODllOTY3MTk4ODY0YmUwNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yxbefWWLLGdSCmrm7VLFqZupcPb Rbn/PFdk20GlB7itm70ncaXvTaBsEHMlD3lgME51t3W373tO10LDZfudRD8Uzt6b FE/B3ijIqZ+Hv6uLih4l9NkftejXr8e8yzcCvQTMgL2KDpyLeBchckLckd9vS6HT OhOcqwmO9tmLlIdNquQ5a1THthPyXCeVca29kgwZg0+lZauqSwjAtpZ/1gcme/JV YPS9nbbGbUB/XzLJfP/djRhOnkbStaxbkvSLubU4jKbOnnxllFAb6CNj02lrt6U8 8W87ngCszwmf9HTf5mMVmh3kBwWqRoEANxHqjEGY2c3XaPayCyHZoy7MZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFmvZ/XkYAHB28++ielnGYhkvgW6MB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvV2E5bjllUmdBY0hiejc2SjZXY1ppR1MtQmJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGWf5AMA0G CSqGSIb3DQEBCwUAA4IBAQAZcKXi76kbwhBYXPzQOMhozjHZH7cGrBlqq2+QlQFJ V/CvKuxyO5kSMr089ccARbWokJGRnBou1oIjCH+7th1V4/I96sE3x1s5CzfaF8Wu sSQQvoSD/IaBZn9G1psnKsaN2D6/cS3lpb2tOjoyF9hmv0y7pCO6nxtyXUUlKNly z5qOYzmcC+fCWna71QixtZZtCbRtN67AbuEVR3RU0wIXbZpeZODJtMo05raz+Hr+ gASy+qiMzHEKGCYaJhLX6AifQKMUiDmay5OyKYOPf+D6AuGDGrnlNZHncbVDuxfT /UYIzorqZ+YcD4WVOhhGf5qadvsGTj5b6eq1YvB5wAG5 -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:38 2026 by rpki-client