This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wWt0yVsKiJPbGIWMnd-ZBY-h8bE.roa File: wWt0yVsKiJPbGIWMnd-ZBY-h8bE.roa (raw, json) Hash identifier: PlnOr2cRMYiEZG+cVzFS/fN/Nth+o/EpClCSo90luNU= Subject key identifier: C1:6B:74:C9:5B:0A:88:93:DB:18:85:8C:9D:DF:99:05:8F:A1:F1:B1 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BB924977CFA5DBDA8668A3DE9791 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wWt0yVsKiJPbGIWMnd-ZBY-h8bE.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50245 IP address blocks: 92.38.38.0/24 maxlen: 24 93.171.200.0/22 maxlen: 24 95.47.138.0/24 maxlen: 24 2a02:128:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bb:92:49:77:cf:a5:db:da:86:68:a3:de:97:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c16b74c95b0a8893db18858c9ddf99058fa1f1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:e2:17:4d:a1:69:d2:bf:7f:e5:8b:cb:cd: 13:5e:01:85:d6:70:b8:dd:b1:19:a5:b2:5b:5f:6f: 27:cd:c2:ad:f4:13:73:b3:33:47:d6:2c:a8:fa:18: bd:9f:91:8c:d9:2c:ae:e5:97:42:81:c5:5b:86:13: 77:12:23:76:50:c6:26:dc:b7:03:69:d1:31:f3:93: 16:d5:84:be:0f:f3:0d:05:e3:16:f4:f6:76:41:53: 92:bc:18:e2:48:20:cb:df:1d:d8:f9:c4:50:4b:62: 56:2a:b1:b1:b7:cf:29:12:45:60:1b:a0:f1:37:60: b9:3a:df:a4:21:8e:03:65:c7:b5:a8:35:d3:a4:17: 3b:f8:c2:c0:69:fe:e5:81:fa:b7:ff:ff:5b:ab:fe: 1a:ca:bf:42:96:46:05:4b:c0:9e:c0:3c:53:98:3d: 8a:18:83:4a:ae:6e:c9:95:7b:98:98:80:12:09:b6: c2:8a:53:2f:24:2e:d3:ae:38:d3:06:96:a1:05:1e: 1d:24:41:e7:aa:bc:14:36:4a:b8:b6:7c:2d:b1:cb: 60:0e:44:e1:d4:b8:01:b1:e5:f1:04:fe:d8:58:73: f8:51:4b:d4:42:59:cb:d9:7d:a9:70:3e:29:84:a4: b9:24:7e:d4:34:72:95:52:e3:37:05:3d:89:8b:40: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6B:74:C9:5B:0A:88:93:DB:18:85:8C:9D:DF:99:05:8F:A1:F1:B1 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wWt0yVsKiJPbGIWMnd-ZBY-h8bE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.38.0/24 93.171.200.0/22 95.47.138.0/24 IPv6: 2a02:128:7::/48 Signature Algorithm: sha256WithRSAEncryption a7:97:b7:e0:c9:d5:f5:6a:96:85:3e:a9:3a:9a:23:57:96:0e: 4e:51:c7:55:ef:3d:6d:55:71:d4:b0:ef:67:41:75:99:07:a7: 97:18:1e:9e:85:e8:49:ec:ad:6f:66:60:07:e1:7a:e6:63:b1: 7b:e6:9a:83:4c:7d:aa:60:83:41:d1:b6:1a:41:5a:a1:2c:cd: 04:2d:52:0b:7e:6a:f9:f8:0b:95:ac:84:0b:85:dc:83:81:24: b8:75:21:8c:85:59:39:21:c8:fa:3e:cf:44:1b:d6:20:aa:0d: 5b:cd:e5:76:3b:fb:05:a6:63:6e:2f:29:4f:2b:cd:0a:f0:f0: ce:44:91:bf:bc:24:55:22:7d:7f:2d:3b:86:e9:67:ad:21:1d: 49:68:86:b2:cc:04:b9:e0:01:4b:94:cd:cd:a4:1f:de:51:bc: 6a:68:8c:ac:71:33:95:4b:88:2b:bc:ab:58:20:c8:a4:f3:9a: dd:8d:d4:2d:62:de:b3:2c:63:6a:b3:17:75:90:3f:49:de:38: aa:20:fd:bd:4e:c3:d0:19:7b:89:8c:04:a9:e0:55:28:f4:d0: 55:6d:df:52:b8:8d:00:72:81:1a:3e:c6:ae:7a:b1:0f:68:e5: 5b:dd:09:03:b8:24:01:42:dd:0f:74:b1:60:00:2d:8c:d2:68: da:b4:57:d5 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/hLuSSXfPpdvahmij3peRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTZiNzRjOTViMGE4ODkzZGIxODg1OGM5ZGRmOTkwNThmYTFmMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGriF02hadK/f+WLy80TXgGF1nC4 3bEZpbJbX28nzcKt9BNzszNH1iyo+hi9n5GM2Syu5ZdCgcVbhhN3EiN2UMYm3LcD adEx85MW1YS+D/MNBeMW9PZ2QVOSvBjiSCDL3x3Y+cRQS2JWKrGxt88pEkVgG6Dx N2C5Ot+kIY4DZce1qDXTpBc7+MLAaf7lgfq3//9bq/4ayr9ClkYFS8CewDxTmD2K GINKrm7JlXuYmIASCbbCilMvJC7TrjjTBpahBR4dJEHnqrwUNkq4tnwtsctgDkTh 1LgBseXxBP7YWHP4UUvUQlnL2X2pcD4phKS5JH7UNHKVUuM3BT2Ji0DVoQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFMFrdMlbCoiT2xiFjJ3fmQWPofGxMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvd1d0MHlWc0tpSlBiR0lXTW5kLVpCWS1oOGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAXCYmAwQC XavIAwQAXy+KMA8EAgACMAkDBwAqAgEoAAcwDQYJKoZIhvcNAQELBQADggEBAKeX t+DJ1fVqloU+qTqaI1eWDk5Rx1XvPW1VcdSw72dBdZkHp5cYHp6F6EnsrW9mYAfh euZjsXvmmoNMfapgg0HRthpBWqEszQQtUgt+avn4C5WshAuF3IOBJLh1IYyFWTkh yPo+z0Qb1iCqDVvN5XY7+wWmY24vKU8rzQrw8M5Ekb+8JFUifX8tO4bpZ60hHUlo hrLMBLngAUuUzc2kH95RvGpojKxxM5VLiCu8q1ggyKTzmt2N1C1i3rMsY2qzF3WQ P0neOKog/b1Ow9AZe4mMBKngVSj00FVt31K4jQBygRo+xq56sQ9o5VvdCQO4JAFC 3Q90sWAALYzSaNq0V9U= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:48 2026 by rpki-client