This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/WoXz8LEgluCQDtouES2_1t3quKQ.roa File: WoXz8LEgluCQDtouES2_1t3quKQ.roa (raw, json) Hash identifier: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw= Subject key identifier: 5A:85:F3:F0:B1:20:96:E0:90:0E:DA:2E:11:2D:BF:D6:DD:EA:B8:A4 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 019B7E3906A470A458C3E06143E410D0387A Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/WoXz8LEgluCQDtouES2_1t3quKQ.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44070 IP address blocks: 78.41.8.0/21 maxlen: 21 89.31.8.0/21 maxlen: 21 2a10:c540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:06:a4:70:a4:58:c3:e0:61:43:e4:10:d0:38:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a85f3f0b12096e0900eda2e112dbfd6ddeab8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:31:b4:d9:dd:3c:9a:21:14:14:de:97:5a: 85:04:6f:22:3f:9f:b0:f5:57:f3:75:96:6d:4e:5d: aa:7b:24:00:34:cf:04:e5:54:53:0a:f4:24:9f:09: 74:f8:41:e5:1c:d9:e4:dc:31:10:62:5d:fb:e1:cb: 63:8a:fd:10:8b:6a:68:2d:45:14:98:58:9f:21:e8: 8d:2a:d7:c4:7e:6b:63:3b:b7:6e:b9:0e:63:9a:9a: da:ae:d7:cd:89:39:c2:fb:a6:43:5c:37:e1:4e:cf: 19:d3:70:dc:1e:92:2a:1d:17:6f:21:bc:9a:bc:50: 60:0c:d7:9f:52:ec:8e:20:4f:3d:d1:74:24:c5:a6: c9:92:a1:a7:5c:36:8b:7e:0d:b8:18:43:d9:58:a5: 83:7d:25:ff:34:ee:59:f8:3f:34:e2:54:55:3d:47: f1:49:0c:1f:a2:94:74:dd:d8:1b:8c:14:08:b4:56: dc:ec:c0:6f:8d:55:75:bc:22:f5:bb:a6:d8:0d:af: 31:d0:a4:f5:84:b5:f5:37:4a:dc:54:a1:0f:c7:53: b5:46:35:b7:68:b7:7c:00:38:ea:ea:cf:fe:9d:5a: a3:a1:a9:c9:a1:cc:8b:4e:55:3f:39:bf:82:d1:41: 49:8d:1a:48:a5:ab:75:1f:c0:e8:9b:21:14:04:55: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:85:F3:F0:B1:20:96:E0:90:0E:DA:2E:11:2D:BF:D6:DD:EA:B8:A4 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/WoXz8LEgluCQDtouES2_1t3quKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.8.0/21 89.31.8.0/21 IPv6: 2a10:c540::/29 Signature Algorithm: sha256WithRSAEncryption 6c:57:84:f6:72:13:aa:9f:71:69:ed:63:fb:61:5b:77:4d:d3: 28:ac:36:23:79:15:0c:d9:db:ed:65:74:42:03:d9:89:25:3e: f6:31:6a:e2:02:ee:df:d9:fd:4f:55:4d:65:86:05:af:9f:02: 10:17:6f:22:f3:d2:0d:74:b9:cb:8b:60:dd:32:10:21:84:a9: d9:62:9f:94:6e:b0:91:40:06:55:dc:ae:1c:21:b7:38:f4:2e: f9:39:a3:e2:be:35:94:32:06:2c:2f:b7:c4:c7:0e:f0:3f:20: 27:71:31:67:6d:47:8c:fd:c2:1c:b4:4a:3a:40:cd:99:98:0c: 92:69:8e:e2:88:08:9e:13:f7:21:ba:0c:66:0d:58:46:1a:b5: 53:bf:e8:5b:19:6e:c5:41:30:8f:75:d4:38:2a:5a:d8:d9:a8: 97:74:c4:2b:b0:d5:53:a7:a5:c3:55:e7:3a:60:d7:16:ea:a0: 5b:03:5e:be:ba:d0:0a:e7:f1:ff:87:b8:ec:d1:48:ea:19:48: 6e:80:c4:39:6d:1d:92:bf:13:7c:51:44:f1:4b:b7:de:c9:a2: fa:bc:b7:b7:a1:f1:fd:e8:64:29:42:df:80:53:b2:e6:21:f1: 93:60:1c:6c:7f:37:66:20:05:ac:54:34:fd:62:37:ee:2d:ac: a0:05:3c:d1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OQakcKRYw+BhQ+QQ0Dh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTg1ZjNmMGIxMjA5NmUwOTAwZWRhMmUxMTJkYmZkNmRkZWFiOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FAxtNndPJohFBTel1qFBG8iP5+w 9VfzdZZtTl2qeyQANM8E5VRTCvQknwl0+EHlHNnk3DEQYl374ctjiv0Qi2poLUUU mFifIeiNKtfEfmtjO7duuQ5jmprartfNiTnC+6ZDXDfhTs8Z03DcHpIqHRdvIbya vFBgDNefUuyOIE890XQkxabJkqGnXDaLfg24GEPZWKWDfSX/NO5Z+D804lRVPUfx SQwfopR03dgbjBQItFbc7MBvjVV1vCL1u6bYDa8x0KT1hLX1N0rcVKEPx1O1RjW3 aLd8ADjq6s/+nVqjoanJocyLTlU/Ob+C0UFJjRpIpat1H8DomyEUBFW/bwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFqF8/CxIJbgkA7aLhEtv9bd6rikMB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvV29YejhMRWdsdUNRRHRvdUVTMl8xdDNxdUtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTikIAwQD WR8IMA0EAgACMAcDBQMqEMVAMA0GCSqGSIb3DQEBCwUAA4IBAQBsV4T2chOqn3Fp 7WP7YVt3TdMorDYjeRUM2dvtZXRCA9mJJT72MWriAu7f2f1PVU1lhgWvnwIQF28i 89INdLnLi2DdMhAhhKnZYp+UbrCRQAZV3K4cIbc49C75OaPivjWUMgYsL7fExw7w PyAncTFnbUeM/cIctEo6QM2ZmAySaY7iiAieE/chugxmDVhGGrVTv+hbGW7FQTCP ddQ4KlrY2aiXdMQrsNVTp6XDVec6YNcW6qBbA16+utAK5/H/h7js0UjqGUhugMQ5 bR2SvxN8UUTxS7feyaL6vLe3ofH96GQpQt+AU7LmIfGTYBxsfzdmIAWsVDT9Yjfu LaygBTzR -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:11 2026 by rpki-client