This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/_wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa File: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (raw, json) Hash identifier: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo= Subject key identifier: FF:08:2F:89:15:46:D4:AF:F9:A3:E5:3D:7C:9E:E8:ED:92:64:FD:11 Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Certificate serial: 019B76EAE42779B0104AFC473FAA4BBE1950 Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/_wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57497 IP address blocks: 14.102.14.0/24 maxlen: 24 45.89.236.0/22 maxlen: 24 61.14.229.0/24 maxlen: 24 103.130.146.0/24 maxlen: 24 212.18.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e4:27:79:b0:10:4a:fc:47:3f:aa:4b:be:19:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff082f891546d4aff9a3e53d7c9ee8ed9264fd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:cd:20:e0:76:b9:21:d3:55:c9:2d:f0:53: 29:7c:e1:ee:b2:66:41:d7:3d:fb:b7:db:cd:b1:cc: 0a:bf:dc:5a:54:73:10:b1:54:c9:e8:cf:28:a5:d4: 67:0e:c4:08:7b:35:c6:59:6f:72:e0:fd:ad:2e:53: 8b:67:24:02:98:7e:ae:b6:05:66:e8:af:1f:b5:f4: 05:a9:7a:a4:29:66:6e:77:d9:5d:8c:97:4d:b3:bc: df:50:d4:e6:87:8b:6a:24:e8:77:ac:90:f2:bf:c7: 4e:f8:82:6d:75:87:49:39:96:45:63:51:cc:a9:44: cd:85:33:35:3c:ba:f3:c9:3b:a3:7d:18:69:60:0c: b0:0e:ed:d0:36:b9:8a:70:d7:2a:26:e4:9e:f0:ff: a3:47:64:6a:e9:85:70:53:c7:91:35:46:a4:74:1d: cc:65:1a:d0:16:ff:57:c9:4d:8b:21:cb:bf:24:ef: 0c:65:c5:0c:b0:4e:5b:b4:cd:06:71:3a:d2:21:f6: 22:16:59:aa:47:5f:74:93:67:08:bc:a3:98:c9:8a: dc:59:ec:af:65:24:68:c6:a0:24:f5:91:99:c3:ea: dd:2f:b4:95:cb:6f:ad:ca:8a:09:20:5d:c7:f6:ea: b2:31:b6:0b:9a:07:35:30:49:37:5d:d1:0b:4a:9d: c3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:08:2F:89:15:46:D4:AF:F9:A3:E5:3D:7C:9E:E8:ED:92:64:FD:11 X509v3 Authority Key Identifier: keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/_wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.14.0/24 45.89.236.0/22 61.14.229.0/24 103.130.146.0/24 212.18.108.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:b7:35:5e:b3:99:b6:29:22:82:a8:65:d3:66:f5:4e:7c:52: aa:eb:b1:ee:47:66:0c:e4:c7:59:66:35:00:a6:2d:c6:cd:0e: 76:d5:88:48:72:04:73:68:7c:da:89:d9:c2:f3:81:61:eb:87: 97:49:61:15:75:55:50:73:a3:22:b1:28:b5:39:b7:1a:9d:2e: 76:7b:5f:f5:a0:1e:2d:6b:f0:cc:22:65:22:f3:9c:df:12:e5: f5:96:e2:8f:80:38:11:26:b7:ae:81:2e:51:ba:00:d0:aa:c0: 20:d5:dd:07:bd:27:59:50:2a:c3:2a:2c:5a:cd:8f:3d:2a:27: d2:14:5f:0b:e0:3f:25:a9:bd:b1:73:01:40:36:89:96:ce:a5: 90:00:06:eb:94:ac:b7:d4:d0:a9:5a:32:a7:b0:51:95:80:85: 1e:af:45:92:b4:fa:23:bc:8b:26:05:90:52:44:1e:fe:76:85: a2:2e:8e:c3:e5:b6:bf:e8:36:18:d9:8e:9e:34:dd:3c:e5:63: a3:ff:a0:15:08:6c:14:13:af:67:34:c4:e4:20:4f:ce:17:43: b7:88:c0:44:99:ee:67:30:c1:4f:78:67:27:88:7f:34:f7:9d: e7:23:d0:30:d5:65:01:44:c0:6b:c5:80:98:f3:15:fb:7a:9b: da:86:36:a5 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt26uQnebAQSvxHP6pLvhlQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz YTBjZTIwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjA4MmY4OTE1NDZkNGFmZjlhM2U1M2Q3YzllZThlZDkyNjRmZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsADNIOB2uSHTVckt8FMpfOHusmZB 1z37t9vNscwKv9xaVHMQsVTJ6M8opdRnDsQIezXGWW9y4P2tLlOLZyQCmH6utgVm 6K8ftfQFqXqkKWZud9ldjJdNs7zfUNTmh4tqJOh3rJDyv8dO+IJtdYdJOZZFY1HM qUTNhTM1PLrzyTujfRhpYAywDu3QNrmKcNcqJuSe8P+jR2Rq6YVwU8eRNUakdB3M ZRrQFv9XyU2LIcu/JO8MZcUMsE5btM0GcTrSIfYiFlmqR190k2cIvKOYyYrcWeyv ZSRoxqAk9ZGZw+rdL7SVy2+tyooJIF3H9uqyMbYLmgc1MEk3XdELSp3D7QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFP8IL4kVRtSv+aPlPXye6O2SZP0RMB8GA1UdIwQY MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt NTZjYzM5ZGI2ZWQ2LzEvX3dndmlSVkcxS181by1VOWZKN283WkprX1JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2 LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQADmYOAwQC LVnsAwQAPQ7lAwQAZ4KSAwQA1BJsMA0GCSqGSIb3DQEBCwUAA4IBAQAMtzVes5m2 KSKCqGXTZvVOfFKq67HuR2YM5MdZZjUApi3GzQ521YhIcgRzaHzaidnC84Fh64eX SWEVdVVQc6MisSi1ObcanS52e1/1oB4ta/DMImUi85zfEuX1luKPgDgRJreugS5R ugDQqsAg1d0HvSdZUCrDKixazY89KifSFF8L4D8lqb2xcwFANomWzqWQAAbrlKy3 1NCpWjKnsFGVgIUer0WStPojvIsmBZBSRB7+doWiLo7D5ba/6DYY2Y6eNN085WOj /6AVCGwUE69nNMTkIE/OF0O3iMBEme5nMMFPeGcniH80953nI9Aw1WUBRMBrxYCY 8xX7epvahjal -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:51 2026 by rpki-client