This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/WXXJ5075ZAff04RmS5smR110RVw.roa File: WXXJ5075ZAff04RmS5smR110RVw.roa (raw, json) Hash identifier: uErB5MACpy/J873DH0P3yHm3DQt+fz1WVOuw3Q44104= Subject key identifier: 59:75:C9:E7:4E:F9:64:07:DF:D3:84:66:4B:9B:26:47:5D:74:45:5C Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1 Certificate serial: 019B7C12BDF76B6E6F8DAE414C8921E84517 Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/WXXJ5075ZAff04RmS5smR110RVw.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 194.34.144.0/24 maxlen: 24 194.34.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bd:f7:6b:6e:6f:8d:ae:41:4c:89:21:e8:45:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1 Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5975c9e74ef96407dfd384664b9b26475d74455c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3b:4f:75:fd:3f:74:34:2e:43:30:cf:e2:c5: 35:29:01:22:08:0b:68:74:4a:d6:bd:79:bd:19:e8: 4e:34:a8:34:50:42:3e:4f:2a:13:d5:75:93:34:ae: 69:29:f8:57:5e:09:69:d7:32:f6:26:89:1a:26:d6: c7:bb:58:28:f3:b4:cc:08:f7:a0:6c:f3:1d:04:37: df:6d:b0:2d:8a:68:de:d4:9b:7d:11:04:16:e4:04: aa:68:86:a7:53:55:f8:5f:1d:ed:62:0d:b7:69:87: 1e:60:6b:85:96:2e:bc:c1:85:b5:8e:da:8f:4c:05: a7:0f:13:fb:a0:12:2a:73:10:e8:28:67:6c:d7:ea: fd:e6:99:37:de:91:e3:0c:fb:54:87:f9:c8:28:b2: d9:db:ce:ce:46:1a:6c:45:bd:61:a6:39:fe:64:7b: 53:c6:3c:7b:59:0f:72:fc:82:e8:14:cc:3a:44:03: 86:d1:07:64:fb:cc:91:c0:a8:c4:ec:c3:43:01:4e: 2a:fc:02:6c:ae:b1:7b:cf:c1:53:0a:cc:76:3b:05: 38:1e:7c:24:68:16:c5:c3:70:53:eb:68:d2:b2:41: bf:04:2a:2c:47:69:a5:aa:d8:e8:c4:5a:21:2e:f0: a0:0d:56:05:55:19:9e:3a:bf:00:45:d6:43:7c:ab: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:75:C9:E7:4E:F9:64:07:DF:D3:84:66:4B:9B:26:47:5D:74:45:5C X509v3 Authority Key Identifier: keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/WXXJ5075ZAff04RmS5smR110RVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.144.0/24 194.34.150.0/24 Signature Algorithm: sha256WithRSAEncryption 37:1d:a6:c9:f9:ab:e2:62:df:a7:e5:87:f7:7a:11:46:95:3e: 09:fd:fa:0a:5b:76:84:89:16:69:84:ec:bd:f8:1d:7a:f1:f1: 48:26:1c:79:03:12:55:f7:1b:66:69:a3:91:a7:79:f3:f2:58: 20:49:24:7c:3e:d1:9f:2c:9c:ae:36:7e:c2:91:73:0b:f5:29: fd:45:7b:66:e8:85:2f:b8:91:8a:63:ce:53:72:69:a5:81:b1: f6:69:fa:c6:18:e2:ac:1c:82:1f:0a:49:32:5b:50:3d:a1:ad: 70:71:4d:48:56:21:48:b0:ac:dd:92:fe:5c:f3:cc:2d:b3:d3: 84:14:63:ec:e9:75:ca:29:ea:e6:e3:a3:51:f8:d6:57:a3:a4: 8f:ef:7a:5e:88:b6:9e:5e:fe:57:16:6a:4c:da:20:b9:46:43: 23:67:8f:ee:ea:66:8a:a6:2f:91:ae:db:24:50:25:11:13:cc: 21:fb:f9:66:1c:a3:bc:c8:65:3a:ef:2e:71:b3:28:69:4b:ab: 9e:7d:de:81:e3:94:6a:14:ef:a5:a7:d1:d5:6e:72:e7:59:3b: de:3f:c3:f7:b7:2d:0d:83:74:1c:c0:48:f2:15:7d:db:03:e5: d0:60:1e:07:99:58:a9:46:eb:19:84:0f:e8:50:7a:f5:a3:f2: 42:70:9f:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Er33a25vja5BTIkh6EUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YWNhNDAxNmFmODVkNTk2OTU0ODRjZDYxM2NmMTg5NmRm ZDU5YTEwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTc1YzllNzRlZjk2NDA3ZGZkMzg0NjY0YjliMjY0NzVkNzQ0NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DtPdf0/dDQuQzDP4sU1KQEiCAto dErWvXm9GehONKg0UEI+TyoT1XWTNK5pKfhXXglp1zL2JokaJtbHu1go87TMCPeg bPMdBDffbbAtimje1Jt9EQQW5ASqaIanU1X4Xx3tYg23aYceYGuFli68wYW1jtqP TAWnDxP7oBIqcxDoKGds1+r95pk33pHjDPtUh/nIKLLZ287ORhpsRb1hpjn+ZHtT xjx7WQ9y/ILoFMw6RAOG0Qdk+8yRwKjE7MNDAU4q/AJsrrF7z8FTCsx2OwU4Hnwk aBbFw3BT62jSskG/BCosR2mlqtjoxFohLvCgDVYFVRmeOr8ARdZDfKudvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFl1yedO+WQH39OEZkubJkdddEVcMB8GA1UdIwQY MBaAFJmspAFq+F1ZaVSEzWE88Ylt/VmhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAt Y2JiYWM2ZTRhZDcxLzEvV1hYSjUwNzVaQWZmMDRSbVM1c21SMTEwUlZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAtY2JiYWM2ZTRhZDcx LzEvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwiKQAwQA wiKWMA0GCSqGSIb3DQEBCwUAA4IBAQA3HabJ+aviYt+n5Yf3ehFGlT4J/foKW3aE iRZphOy9+B168fFIJhx5AxJV9xtmaaORp3nz8lggSSR8PtGfLJyuNn7CkXML9Sn9 RXtm6IUvuJGKY85TcmmlgbH2afrGGOKsHIIfCkkyW1A9oa1wcU1IViFIsKzdkv5c 88wts9OEFGPs6XXKKerm46NR+NZXo6SP73peiLaeXv5XFmpM2iC5RkMjZ4/u6maK pi+RrtskUCURE8wh+/lmHKO8yGU67y5xsyhpS6uefd6B45RqFO+lp9HVbnLnWTve P8P3ty0Ng3QcwEjyFX3bA+XQYB4HmVipRusZhA/oUHr1o/JCcJ/G -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:26 2026 by rpki-client