This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/WzC3ng1LgvNoGeAWK-E4mAth79c.roa File: WzC3ng1LgvNoGeAWK-E4mAth79c.roa (raw, json) Hash identifier: in7OVP806sec7BG3P2bRg0+XxW/GuztBYg8LKPCWtFc= Subject key identifier: 5B:30:B7:9E:0D:4B:82:F3:68:19:E0:16:2B:E1:38:98:0B:61:EF:D7 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 019BE4B475316ED335F60360F0F6B1C7798E Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/WzC3ng1LgvNoGeAWK-E4mAth79c.roa Signing time: Thu 22 Jan 2026 07:56:30 +0000 ROA not before: Thu 22 Jan 2026 07:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49434 IP address blocks: 88.214.24.0/24 maxlen: 24 91.238.180.0/24 maxlen: 24 91.238.181.0/24 maxlen: 24 91.239.208.0/24 maxlen: 24 185.55.240.0/24 maxlen: 24 194.24.161.0/24 maxlen: 24 2a12:5e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:b4:75:31:6e:d3:35:f6:03:60:f0:f6:b1:c7:79:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Jan 22 07:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b30b79e0d4b82f36819e0162be138980b61efd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:d3:06:f3:e1:98:01:b7:e6:a6:f9:42:3d: 86:d4:ab:cd:8f:2f:fa:ac:3b:8f:eb:6c:ae:25:8a: 61:1f:8f:3e:f6:4c:ee:51:6f:4d:6d:9a:be:ff:46: 61:c5:f7:23:af:32:47:3e:a0:62:7c:cd:6f:81:76: 9b:80:ef:41:b3:07:72:f1:01:a9:3f:38:cf:bd:ef: b0:1c:41:38:65:ad:73:53:09:5a:01:1f:6d:3e:22: be:f6:c7:80:76:33:bb:da:de:d0:c7:10:37:9a:66: dd:50:71:f9:c7:38:48:37:89:b8:52:00:a7:cf:d4: ac:96:6c:3d:62:3c:3f:74:59:c5:7d:9d:be:95:46: b7:80:97:02:bc:57:b7:57:b0:dd:f6:aa:4b:0c:f9: c6:5a:9f:f3:7a:d7:3a:b5:bc:15:ae:15:2e:c8:ee: a2:b2:12:2a:29:4d:6a:fd:04:05:62:94:d1:01:f7: fb:b1:fe:77:f4:c8:97:7b:63:2f:d9:c3:88:af:ca: 34:a8:b4:e2:b7:a2:57:e7:9f:9a:16:07:17:d6:cc: e2:83:3c:c4:3d:ac:4d:62:3d:5c:b8:19:58:c6:49: 1c:70:c4:53:a8:66:d4:19:a0:d1:f6:8b:1f:9b:78: b3:07:ff:28:14:a0:5d:81:07:57:57:c0:8b:15:8e: da:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:30:B7:9E:0D:4B:82:F3:68:19:E0:16:2B:E1:38:98:0B:61:EF:D7 X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/WzC3ng1LgvNoGeAWK-E4mAth79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.24.0/24 91.238.180.0/23 91.239.208.0/24 185.55.240.0/24 194.24.161.0/24 IPv6: 2a12:5e40::/32 Signature Algorithm: sha256WithRSAEncryption 57:19:1a:6f:aa:54:14:c5:48:79:d6:e2:39:3e:00:cc:80:4a: 45:2b:91:c6:de:6f:82:21:45:a0:28:7c:d2:a4:bd:02:04:f9: 75:61:14:a2:47:54:70:a3:22:e2:5f:d6:eb:61:4c:56:69:67: 6a:e0:a0:80:8e:bc:1b:13:3d:4d:0c:1d:8c:fd:e3:32:06:35: 7b:f8:71:df:3f:8b:1a:da:c8:de:e7:59:35:71:01:b1:9d:ec: 13:6d:68:9d:2c:f5:0a:92:07:be:80:c0:5c:94:54:5d:0a:9b: e4:c7:ed:c8:b4:af:82:dd:16:3c:69:72:f6:d7:96:7f:32:97: 8f:3f:95:0b:7e:2b:84:fd:e7:b1:c3:9d:f5:19:a8:a1:ed:f6: c9:71:0c:27:c1:fa:75:d5:f9:48:bb:0b:bd:4c:c5:36:f0:7c: fe:3d:27:c6:83:4c:f1:54:27:5d:41:fa:4f:bf:cc:db:7a:18: 5c:81:0b:7c:66:10:14:8a:6d:e8:77:b9:2e:9c:d2:97:c2:b0: 30:c7:3e:fe:c3:7b:46:f5:e2:a9:d4:a4:12:bd:3c:32:7f:20: 16:4a:cb:82:06:aa:83:0c:f2:11:a4:e9:5e:ac:26:6e:a9:2a: 7b:f1:08:23:4c:88:22:f9:b7:f9:97:3e:bd:97:57:83:12:c1: fb:90:13:22 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZvktHUxbtM19gNg8Paxx3mOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjYwMTIyMDc1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjMwYjc5ZTBkNGI4MmYzNjgxOWUwMTYyYmUxMzg5ODBiNjFlZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6nTBvPhmAG35qb5Qj2G1KvNjy/6 rDuP62yuJYphH48+9kzuUW9NbZq+/0ZhxfcjrzJHPqBifM1vgXabgO9Bswdy8QGp PzjPve+wHEE4Za1zUwlaAR9tPiK+9seAdjO72t7QxxA3mmbdUHH5xzhIN4m4UgCn z9Sslmw9Yjw/dFnFfZ2+lUa3gJcCvFe3V7Dd9qpLDPnGWp/zetc6tbwVrhUuyO6i shIqKU1q/QQFYpTRAff7sf539MiXe2Mv2cOIr8o0qLTit6JX55+aFgcX1szigzzE PaxNYj1cuBlYxkkccMRTqGbUGaDR9osfm3izB/8oFKBdgQdXV8CLFY7a+wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFFswt54NS4LzaBngFivhOJgLYe/XMB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvV3pDM25nMUxndk5vR2VBV0stRTRtQXRoNzljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAWNYYAwQB W+60AwQAW+/QAwQAuTfwAwQAwhihMA0EAgACMAcDBQAqEl5AMA0GCSqGSIb3DQEB CwUAA4IBAQBXGRpvqlQUxUh51uI5PgDMgEpFK5HG3m+CIUWgKHzSpL0CBPl1YRSi R1RwoyLiX9brYUxWaWdq4KCAjrwbEz1NDB2M/eMyBjV7+HHfP4sa2sje51k1cQGx newTbWidLPUKkge+gMBclFRdCpvkx+3ItK+C3RY8aXL215Z/MpePP5ULfiuE/eex w531Gaih7fbJcQwnwfp11flIuwu9TMU28Hz+PSfGg0zxVCddQfpPv8zbehhcgQt8 ZhAUim3od7kunNKXwrAwxz7+w3tG9eKp1KQSvTwyfyAWSsuCBqqDDPIRpOlerCZu qSp78QgjTIgi+bf5lz69l1eDEsH7kBMi -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:53 2026 by rpki-client