This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/wEBX4egrVoQFZyAMyTEno5yUCOY.roa File: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (raw, json) Hash identifier: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI= Subject key identifier: C0:40:57:E1:E8:2B:56:84:05:67:20:0C:C9:31:27:A3:9C:94:08:E6 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019B76EAEB501B5CA7138E7F4A445AB1F038 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/wEBX4egrVoQFZyAMyTEno5yUCOY.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207479 IP address blocks: 81.95.43.0/24 maxlen: 24 82.194.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:eb:50:1b:5c:a7:13:8e:7f:4a:44:5a:b1:f0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c04057e1e82b56840567200cc93127a39c9408e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9c:1e:33:81:20:de:be:bd:63:2b:0b:b8:9a: e1:1e:fc:b0:bd:cf:de:f8:8d:f2:05:bd:9c:33:b1: be:b6:fe:8c:8e:93:14:fa:06:e6:9f:46:00:77:0a: 00:cf:1a:64:bb:33:92:75:be:85:03:35:5d:e8:1b: 64:db:34:99:08:1b:2d:ed:89:28:c9:a1:8e:49:c6: b5:0b:0b:cc:f4:84:8d:5e:38:7d:dc:d1:12:04:1d: 1e:b8:e7:c8:e4:69:c1:e1:fd:ca:b5:01:ae:9c:de: a4:91:b0:1f:c4:1a:51:01:10:85:0d:fb:47:3e:dc: e3:ed:f1:ea:88:ab:46:31:b1:29:66:24:8a:61:7b: 6a:84:0b:ee:88:ca:90:9b:6f:c6:ff:98:cc:70:6a: 52:69:f5:98:3c:0b:b0:03:38:e9:3a:e7:3f:7c:9d: 25:f9:27:8f:b1:be:db:ce:de:47:50:10:e4:6d:da: cd:9e:03:33:5a:0e:80:4d:8e:aa:7c:43:56:42:8e: d1:ac:b7:63:eb:6c:a4:4f:60:cc:cc:7d:25:2c:b8: 9e:6e:08:46:c7:6e:82:9e:d0:52:bb:9a:59:b4:90: 50:32:36:0e:d6:ca:6b:80:88:10:a4:0d:68:b5:02: da:cc:d9:aa:3a:cf:69:76:45:82:65:9a:af:c7:dc: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:40:57:E1:E8:2B:56:84:05:67:20:0C:C9:31:27:A3:9C:94:08:E6 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/wEBX4egrVoQFZyAMyTEno5yUCOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.43.0/24 82.194.248.0/24 Signature Algorithm: sha256WithRSAEncryption 89:c4:97:24:52:d4:d4:3e:69:0a:ea:99:08:b4:03:b4:84:d9: 04:1e:d7:35:d1:77:ec:41:98:fa:97:c0:71:db:bd:71:af:a8: fb:9d:1c:3c:8e:c6:dc:57:d5:fe:65:c6:40:ed:b5:43:f9:f3: 92:7e:3c:28:82:22:2d:e6:b1:9c:76:b9:1b:4c:6c:35:6f:70: a5:95:f0:9b:07:ad:5c:4d:82:f6:c9:40:2a:03:9f:aa:85:28: 25:a6:80:d9:96:a5:eb:17:fc:7d:4e:bb:f8:c2:69:c7:59:c5: 1a:e0:5e:ce:e8:b0:7b:27:63:23:37:0a:aa:36:62:1f:bd:fe: 1e:39:bb:f2:e2:7c:9e:2f:cb:bf:fd:20:1e:4e:11:d1:82:90: 31:24:13:88:9f:ac:fd:ea:c0:c0:48:fb:7a:c6:00:a4:d3:8a: 19:94:af:69:f2:00:b9:f9:e3:e4:e1:ea:fb:6e:57:9c:75:73: c8:99:fe:ec:f5:ef:40:05:70:92:29:46:ec:0b:e6:be:32:17: 8e:5b:be:36:4d:33:1e:f4:c1:c1:a0:a9:7a:97:9d:1c:d4:06: 3d:4f:39:1e:ea:4a:61:5a:c1:ea:e8:c5:1b:70:49:64:65:e4: b5:d9:ff:39:3d:f9:ab:3e:7d:7d:a2:93:69:f3:2b:6d:bd:d9: 59:39:02:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26utQG1ynE45/SkRasfA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDQwNTdlMWU4MmI1Njg0MDU2NzIwMGNjOTMxMjdhMzljOTQwOGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZweM4Eg3r69YysLuJrhHvywvc/e +I3yBb2cM7G+tv6MjpMU+gbmn0YAdwoAzxpkuzOSdb6FAzVd6Btk2zSZCBst7Yko yaGOSca1CwvM9ISNXjh93NESBB0euOfI5GnB4f3KtQGunN6kkbAfxBpRARCFDftH Ptzj7fHqiKtGMbEpZiSKYXtqhAvuiMqQm2/G/5jMcGpSafWYPAuwAzjpOuc/fJ0l +SePsb7bzt5HUBDkbdrNngMzWg6ATY6qfENWQo7RrLdj62ykT2DMzH0lLLiebghG x26CntBSu5pZtJBQMjYO1sprgIgQpA1otQLazNmqOs9pdkWCZZqvx9zjnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMBAV+HoK1aEBWcgDMkxJ6OclAjmMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvd0VCWDRlZ3JWb1FGWnlBTXlURW5vNXlVQ09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUV8rAwQA UsL4MA0GCSqGSIb3DQEBCwUAA4IBAQCJxJckUtTUPmkK6pkItAO0hNkEHtc10Xfs QZj6l8Bx271xr6j7nRw8jsbcV9X+ZcZA7bVD+fOSfjwogiIt5rGcdrkbTGw1b3Cl lfCbB61cTYL2yUAqA5+qhSglpoDZlqXrF/x9Trv4wmnHWcUa4F7O6LB7J2MjNwqq NmIfvf4eObvy4nyeL8u//SAeThHRgpAxJBOIn6z96sDASPt6xgCk04oZlK9p8gC5 +ePk4er7blecdXPImf7s9e9ABXCSKUbsC+a+MheOW742TTMe9MHBoKl6l50c1AY9 Tzke6kphWsHq6MUbcElkZeS12f85PfmrPn19opNp8yttvdlZOQKo -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:24 2026 by rpki-client