This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/WpjjTnaqAZv75i8pt4da5AeyrG8.roa File: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (raw, json) Hash identifier: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s= Subject key identifier: 5A:98:E3:4E:76:AA:01:9B:FB:E6:2F:29:B7:87:5A:E4:07:B2:AC:6F Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270 Certificate serial: 019B797F4FE43EDE288681FED1F6EB3D9220 Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/WpjjTnaqAZv75i8pt4da5AeyrG8.roa Signing time: Thu 01 Jan 2026 12:19:05 +0000 ROA not before: Thu 01 Jan 2026 12:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396535 IP address blocks: 86.48.44.0/22 maxlen: 22 86.48.44.0/23 maxlen: 23 185.151.204.0/24 maxlen: 24 2a0b:14c0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4f:e4:3e:de:28:86:81:fe:d1:f6:eb:3d:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270 Validity Not Before: Jan 1 12:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a98e34e76aa019bfbe62f29b7875ae407b2ac6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:d2:05:4b:d5:f3:0a:2b:94:91:17:3a:a3: f6:93:bb:f4:aa:34:4f:81:a0:6a:ed:99:e9:f1:c8: 6c:ef:f6:c9:d3:c9:18:10:10:02:c4:c8:23:6d:b8: 0b:5a:77:0d:d9:7b:48:b1:d0:3c:38:a3:07:7a:ac: 09:1b:28:68:8b:1f:a7:40:12:d1:c0:d0:fc:95:83: 55:f0:bc:95:3d:78:6a:14:89:25:3b:15:cf:10:de: b7:19:56:d1:4e:01:be:7e:07:c0:43:92:20:c4:65: f3:9f:71:23:ee:c6:8e:7b:bf:3a:fd:86:a6:13:ad: bb:78:a3:d4:95:82:07:12:17:d7:fc:a3:67:44:90: e7:e7:f5:a2:0f:38:6a:0c:0a:2e:a6:9d:34:32:41: 99:8a:e1:de:6a:db:47:98:43:6c:a6:62:27:3b:a3: c4:d0:38:92:4a:d6:bd:27:22:f9:13:38:f8:a5:a6: 94:56:f6:62:17:de:f1:6f:51:77:c1:48:c9:fe:43: b8:c2:2c:ce:73:76:c9:37:39:72:6c:1a:f5:59:93: c4:23:7e:42:e2:01:71:3d:6e:92:20:3e:b7:52:94: fc:a6:64:15:0a:b4:77:8c:c3:e2:85:31:72:02:b2: a2:70:f8:ce:23:6a:12:76:ee:86:14:c8:56:90:37: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:98:E3:4E:76:AA:01:9B:FB:E6:2F:29:B7:87:5A:E4:07:B2:AC:6F X509v3 Authority Key Identifier: keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/WpjjTnaqAZv75i8pt4da5AeyrG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.48.44.0/22 185.151.204.0/24 IPv6: 2a0b:14c0:3::/48 Signature Algorithm: sha256WithRSAEncryption 32:38:41:e3:57:fc:f1:12:e8:cb:66:0b:34:c9:5b:76:bd:f7: ba:13:71:ed:6a:3e:58:92:da:a0:87:f8:d9:88:ed:f2:d1:98: 80:1b:c4:3f:3e:e2:e5:68:3e:e5:ce:52:8f:fa:c4:a2:66:49: 3a:a1:e8:26:70:87:40:f7:85:05:d1:cf:ee:22:f8:21:37:22: 9c:fa:cf:6a:60:da:17:3a:b7:b6:83:1b:f8:e0:8d:54:61:0e: 5b:95:d4:56:d0:5d:43:99:24:ed:f0:34:5e:98:4c:1f:ff:9e: 2b:4a:53:7d:86:96:42:1e:2e:b2:fe:1a:26:f4:16:a2:e8:76: 31:e0:a6:dc:d7:1d:25:78:39:63:cd:7c:e1:62:33:f5:a0:48: 00:af:f7:84:e7:bf:9b:98:61:58:da:e9:6b:ab:49:df:3c:62: b1:22:46:56:2f:41:0a:b3:24:09:76:5e:53:29:bb:df:6a:59: 09:bb:2c:08:84:e5:1e:c0:a0:b8:e0:3c:e2:ba:bd:1e:98:3f: c3:b5:fc:1f:2f:fc:7a:2e:c7:c2:2f:14:19:15:3c:01:a8:5d: 78:aa:5e:45:4d:33:50:6f:2c:7c:d1:f6:f5:fc:bd:13:38:3c: 46:68:3d:e1:0d:c4:a6:b2:ae:1a:12:6c:8f:11:e6:f7:bc:e3: 7e:b8:35:86 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5f0/kPt4ohoH+0fbrPZIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw Y2MyNzAwHhcNMjYwMTAxMTIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTk4ZTM0ZTc2YWEwMTliZmJlNjJmMjliNzg3NWFlNDA3YjJhYzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK3SBUvV8worlJEXOqP2k7v0qjRP gaBq7Znp8chs7/bJ08kYEBACxMgjbbgLWncN2XtIsdA8OKMHeqwJGyhoix+nQBLR wND8lYNV8LyVPXhqFIklOxXPEN63GVbRTgG+fgfAQ5IgxGXzn3Ej7saOe786/Yam E627eKPUlYIHEhfX/KNnRJDn5/WiDzhqDAoupp00MkGZiuHeattHmENspmInO6PE 0DiSSta9JyL5Ezj4paaUVvZiF97xb1F3wUjJ/kO4wizOc3bJNzlybBr1WZPEI35C 4gFxPW6SID63UpT8pmQVCrR3jMPihTFyArKicPjOI2oSdu6GFMhWkDcjlQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFqY4052qgGb++YvKbeHWuQHsqxvMB8GA1UdIwQY MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt NmMxYjQ0NzFmN2VlLzEvV3BqalRuYXFBWnY3NWk4cHQ0ZGE1QWV5ckc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCVjAsAwQA uZfMMA8EAgACMAkDBwAqCxTAAAMwDQYJKoZIhvcNAQELBQADggEBADI4QeNX/PES 6MtmCzTJW3a997oTce1qPliS2qCH+NmI7fLRmIAbxD8+4uVoPuXOUo/6xKJmSTqh 6CZwh0D3hQXRz+4i+CE3Ipz6z2pg2hc6t7aDG/jgjVRhDluV1FbQXUOZJO3wNF6Y TB//nitKU32GlkIeLrL+Gib0FqLodjHgptzXHSV4OWPNfOFiM/WgSACv94Tnv5uY YVja6WurSd88YrEiRlYvQQqzJAl2XlMpu99qWQm7LAiE5R7AoLjgPOK6vR6YP8O1 /B8v/Houx8IvFBkVPAGoXXiqXkVNM1BvLHzR9vX8vRM4PEZoPeENxKayrhoSbI8R 5ve84364NYY= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:30 2026 by rpki-client