This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/WlvzyTdODs1w5g16wAD9se0N5yc.roa File: WlvzyTdODs1w5g16wAD9se0N5yc.roa (raw, json) Hash identifier: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4= Subject key identifier: 5A:5B:F3:C9:37:4E:0E:CD:70:E6:0D:7A:C0:00:FD:B1:ED:0D:E7:27 Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019B77C6732B997E635974C5195732D42B9C Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/WlvzyTdODs1w5g16wAD9se0N5yc.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204573 IP address blocks: 185.112.174.0/24 maxlen: 24 185.112.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:73:2b:99:7e:63:59:74:c5:19:57:32:d4:2b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a5bf3c9374e0ecd70e60d7ac000fdb1ed0de727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:a1:6f:8f:ef:c8:63:3f:9c:78:72:7f:49: 27:ba:c0:02:85:e2:bf:e5:6c:8f:44:33:64:c3:25: 5c:4e:fe:b7:03:66:c8:14:6d:f6:bd:e3:16:eb:a3: b4:4a:11:a2:20:29:8b:43:8d:b4:f9:7d:da:58:9c: b6:06:fd:24:92:f9:2f:b6:4c:b6:bc:c1:6b:b7:a8: f1:1b:75:d6:6d:0d:03:af:eb:79:8c:9c:a5:0e:88: 72:24:b3:4e:5e:ef:bf:73:7e:c2:26:58:bd:7b:0e: da:27:fe:62:9c:59:1a:ed:c9:fe:23:1f:4f:49:b2: 7a:93:dd:73:a1:61:dd:da:9f:ad:16:e3:4e:40:18: 1f:11:d1:d5:6c:f9:1d:35:98:87:89:d6:a6:d2:7d: 0f:d4:22:00:65:ff:f4:51:2c:bd:89:1c:e2:4d:3c: 45:bc:bd:74:51:74:9f:87:90:43:61:a4:b2:10:1c: 76:af:ea:c6:ae:c9:82:6e:3e:cd:f0:5c:46:3d:0f: 20:b9:60:58:f4:59:eb:af:7d:61:74:fd:43:6e:84: 52:27:30:35:06:e1:8d:19:c7:3f:cf:d1:6c:22:0a: 86:7b:14:bf:53:64:2f:12:1f:fe:66:cf:77:0b:0e: 57:0c:db:0b:e9:8e:a7:c1:bc:92:ad:b4:c2:c6:90: ea:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5B:F3:C9:37:4E:0E:CD:70:E6:0D:7A:C0:00:FD:B1:ED:0D:E7:27 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/WlvzyTdODs1w5g16wAD9se0N5yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.174.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:31:8a:f2:f2:64:7e:42:89:cf:63:8e:d1:91:29:63:67:19: de:33:e2:c8:5e:7d:b3:53:d6:47:6e:1d:9e:62:3e:7d:87:49: 78:1f:66:98:cc:45:25:74:5e:bb:46:93:a9:e2:7a:44:44:f0: 8b:59:3f:ce:71:12:dd:71:79:31:b0:a4:ff:b8:19:90:67:e0: e8:cd:46:fe:77:a8:60:eb:07:18:73:12:e7:10:32:23:18:a9: 4c:ba:03:a8:5b:d1:a2:eb:c3:2f:7a:18:5d:08:17:81:e9:3a: a9:25:9c:e3:d4:7f:b6:b3:08:ea:e0:eb:60:c3:fd:e9:5f:97: 28:30:73:ca:7d:a3:00:78:12:4e:77:d8:69:e9:2c:92:0c:84: 96:0d:dd:35:a1:6b:e8:69:65:a5:fa:aa:37:d5:d7:e0:ab:14: a4:ee:ce:35:eb:e1:fd:6c:70:2f:dc:a8:7b:1c:77:9b:8b:d5: a3:0a:e1:c1:34:bf:89:3b:aa:45:bf:f9:5b:62:3e:db:fc:e5: 1e:bf:de:f4:62:5d:99:5b:75:dd:70:a7:22:44:38:c4:cf:ab: dd:3d:6c:1a:eb:d4:a4:1e:76:05:f6:06:08:f5:32:99:4d:8a: 96:07:06:09:ce:e5:9a:30:52:58:74:ec:f3:01:52:26:64:e3: 26:15:ec:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnMrmX5jWXTFGVcy1CucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTViZjNjOTM3NGUwZWNkNzBlNjBkN2FjMDAwZmRiMWVkMGRlNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqqhb4/vyGM/nHhyf0knusACheK/ 5WyPRDNkwyVcTv63A2bIFG32veMW66O0ShGiICmLQ420+X3aWJy2Bv0kkvkvtky2 vMFrt6jxG3XWbQ0Dr+t5jJylDohyJLNOXu+/c37CJli9ew7aJ/5inFka7cn+Ix9P SbJ6k91zoWHd2p+tFuNOQBgfEdHVbPkdNZiHidam0n0P1CIAZf/0USy9iRziTTxF vL10UXSfh5BDYaSyEBx2r+rGrsmCbj7N8FxGPQ8guWBY9Fnrr31hdP1DboRSJzA1 BuGNGcc/z9FsIgqGexS/U2QvEh/+Zs93Cw5XDNsL6Y6nwbySrbTCxpDqkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFpb88k3Tg7NcOYNesAA/bHtDecnMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvV2x2enlUZE9EczF3NWcxNndBRDlzZTBONXljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXCuMA0G CSqGSIb3DQEBCwUAA4IBAQAPMYry8mR+QonPY47RkSljZxneM+LIXn2zU9ZHbh2e Yj59h0l4H2aYzEUldF67RpOp4npERPCLWT/OcRLdcXkxsKT/uBmQZ+DozUb+d6hg 6wcYcxLnEDIjGKlMugOoW9Gi68MvehhdCBeB6TqpJZzj1H+2swjq4Otgw/3pX5co MHPKfaMAeBJOd9hp6SySDISWDd01oWvoaWWl+qo31dfgqxSk7s416+H9bHAv3Kh7 HHebi9WjCuHBNL+JO6pFv/lbYj7b/OUev970Yl2ZW3XdcKciRDjEz6vdPWwa69Sk HnYF9gYI9TKZTYqWBwYJzuWaMFJYdOzzAVImZOMmFewV -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:50 2026 by rpki-client