This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/WVLTQr1-K-aLKLtSSfyrC4NsyC8.roa File: WVLTQr1-K-aLKLtSSfyrC4NsyC8.roa (raw, json) Hash identifier: OIwtFNjzelXJFPdqGmasyx/BT4Vju2a4sVYVymTpVmo= Subject key identifier: 59:52:D3:42:BD:7E:2B:E6:8B:28:BB:52:49:FC:AB:0B:83:6C:C8:2F Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 019B7C1216648038183E99388FB9F3145F65 Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/WVLTQr1-K-aLKLtSSfyrC4NsyC8.roa Signing time: Fri 02 Jan 2026 00:18:38 +0000 ROA not before: Fri 02 Jan 2026 00:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58321 IP address blocks: 91.198.146.0/24 maxlen: 24 91.199.22.0/24 maxlen: 24 91.228.196.0/22 maxlen: 24 91.234.146.0/24 maxlen: 24 91.237.52.0/24 maxlen: 24 91.239.66.0/23 maxlen: 24 94.152.254.0/24 maxlen: 24 94.152.255.0/24 maxlen: 24 178.250.40.0/21 maxlen: 24 185.5.96.0/22 maxlen: 24 185.25.148.0/22 maxlen: 24 185.123.160.0/22 maxlen: 24 185.123.160.0/24 maxlen: 24 185.140.120.0/22 maxlen: 24 185.180.204.0/22 maxlen: 24 185.193.112.0/22 maxlen: 24 185.201.112.0/22 maxlen: 24 185.204.216.0/22 maxlen: 24 185.208.164.0/24 maxlen: 24 185.243.52.0/22 maxlen: 24 193.17.184.0/24 maxlen: 24 193.218.152.0/22 maxlen: 24 194.169.227.0/24 maxlen: 24 195.2.254.0/23 maxlen: 24 195.78.66.0/23 maxlen: 24 195.114.0.0/23 maxlen: 24 195.242.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:16:64:80:38:18:3e:99:38:8f:b9:f3:14:5f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: Jan 2 00:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5952d342bd7e2be68b28bb5249fcab0b836cc82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:55:7a:50:19:6c:78:8c:db:5c:56:d6:11: b9:74:57:c7:b9:6e:d1:92:27:6c:ff:3b:19:e2:73: 2f:8b:65:d7:35:9a:34:aa:bc:c0:b1:8e:fa:1f:86: 47:e9:d7:74:c2:4f:85:22:ac:ba:72:78:02:62:27: ec:ef:20:23:6f:c3:41:3c:8a:98:e3:ca:68:2b:5f: 39:b2:a5:7b:37:ee:7d:a5:d5:47:bd:26:18:6f:b1: e8:9b:6d:33:8e:ad:20:fd:65:96:c7:05:f2:d8:a7: da:ec:59:61:29:3f:11:ff:f7:85:66:ca:3a:83:11: 9a:40:59:e9:fd:7c:a3:bf:3a:bb:61:b2:ef:4b:10: 7f:ce:63:92:47:86:ed:63:74:57:48:af:90:32:8e: 5c:3c:16:ff:52:d3:e9:28:b0:44:8e:44:3b:7a:fd: 10:25:90:9b:a4:d0:07:6c:81:cc:fa:4c:8c:04:da: 71:62:c7:53:79:bd:ef:39:c1:31:a2:52:af:3f:dc: f2:2a:35:11:f6:06:57:85:fc:81:ff:f1:ee:96:f7: cd:64:ae:c7:ae:8d:11:2c:02:9b:b0:9b:8c:de:ed: 84:ca:56:8a:bf:b4:71:9c:82:8c:d5:ec:df:c5:eb: f1:4d:2c:57:76:66:e6:c3:cd:91:70:95:23:8d:c5: ab:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:52:D3:42:BD:7E:2B:E6:8B:28:BB:52:49:FC:AB:0B:83:6C:C8:2F X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/WVLTQr1-K-aLKLtSSfyrC4NsyC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.146.0/24 91.199.22.0/24 91.228.196.0/22 91.234.146.0/24 91.237.52.0/24 91.239.66.0/23 94.152.254.0/23 178.250.40.0/21 185.5.96.0/22 185.25.148.0/22 185.123.160.0/22 185.140.120.0/22 185.180.204.0/22 185.193.112.0/22 185.201.112.0/22 185.204.216.0/22 185.208.164.0/24 185.243.52.0/22 193.17.184.0/24 193.218.152.0/22 194.169.227.0/24 195.2.254.0/23 195.78.66.0/23 195.114.0.0/23 195.242.116.0/23 Signature Algorithm: sha256WithRSAEncryption 85:54:f3:21:f6:6a:a7:7a:57:c0:08:02:69:7a:47:14:2d:ac: 4b:a1:0a:04:92:53:cb:37:4c:22:9f:10:42:6c:84:67:d1:5b: c9:8b:05:cc:cc:00:9a:eb:41:be:37:26:28:bc:06:1d:ff:f4: f5:56:ba:88:6d:a0:4c:62:9d:c6:6b:2f:d3:84:92:87:99:41: 9a:86:5e:2f:fc:ed:8b:51:f5:01:8d:b4:c3:39:b7:7f:d3:1a: 38:f6:49:36:1b:a6:25:87:8f:8c:9b:a5:95:ff:b7:1b:ec:fa: 59:86:30:ca:37:bc:f2:15:82:e0:28:55:e8:34:a7:b6:4f:aa: db:64:74:4e:26:89:7b:4f:a7:1b:21:94:6c:17:47:60:d7:1a: 22:73:7b:48:16:df:77:08:d3:d1:3c:f4:32:3a:90:91:13:92: ed:13:f5:0e:6e:1c:d7:a7:c3:2f:9f:37:64:3a:3b:15:c7:d0: 95:d9:76:7d:3c:a2:d3:8a:3d:78:69:c1:6e:a3:86:2a:84:b9: 3e:5e:11:32:71:4e:7b:97:f6:e9:19:84:cf:47:28:72:81:72: ee:7a:f0:c7:f0:22:59:d7:91:83:06:20:c7:df:bc:25:cb:d7: f7:1c:e2:a7:36:0f:51:7d:a8:06:cb:0c:a0:1c:a0:55:2f:4d: f2:60:69:59 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt8EhZkgDgYPpk4j7nzFF9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjYwMTAyMDAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTUyZDM0MmJkN2UyYmU2OGIyOGJiNTI0OWZjYWIwYjgzNmNjODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mdVelAZbHiM21xW1hG5dFfHuW7R kids/zsZ4nMvi2XXNZo0qrzAsY76H4ZH6dd0wk+FIqy6cngCYifs7yAjb8NBPIqY 48poK185sqV7N+59pdVHvSYYb7Hom20zjq0g/WWWxwXy2Kfa7FlhKT8R//eFZso6 gxGaQFnp/Xyjvzq7YbLvSxB/zmOSR4btY3RXSK+QMo5cPBb/UtPpKLBEjkQ7ev0Q JZCbpNAHbIHM+kyMBNpxYsdTeb3vOcExolKvP9zyKjUR9gZXhfyB//HulvfNZK7H ro0RLAKbsJuM3u2EylaKv7RxnIKM1ezfxevxTSxXdmbmw82RcJUjjcWr1QIDAQAB o4ICnjCCApowHQYDVR0OBBYEFFlS00K9fivmiyi7Ukn8qwuDbMgvMB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvV1ZMVFFyMS1LLWFMS0x0U1NmeXJDNE5zeUM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBABb xpIDBABbxxYDBAJb5MQDBABb6pIDBABb7TQDBAFb70IDBAFemP4DBAOy+igDBAK5 BWADBAK5GZQDBAK5e6ADBAK5jHgDBAK5tMwDBAK5wXADBAK5yXADBAK5zNgDBAC5 0KQDBAK58zQDBADBEbgDBALB2pgDBADCqeMDBAHDAv4DBAHDTkIDBAHDcgADBAHD 8nQwDQYJKoZIhvcNAQELBQADggEBAIVU8yH2aqd6V8AIAml6RxQtrEuhCgSSU8s3 TCKfEEJshGfRW8mLBczMAJrrQb43Jii8Bh3/9PVWuohtoExincZrL9OEkoeZQZqG Xi/87YtR9QGNtMM5t3/TGjj2STYbpiWHj4ybpZX/txvs+lmGMMo3vPIVguAoVeg0 p7ZPqttkdE4miXtPpxshlGwXR2DXGiJze0gW33cI09E89DI6kJETku0T9Q5uHNen wy+fN2Q6OxXH0JXZdn08otOKPXhpwW6jhiqEuT5eETJxTnuX9ukZhM9HKHKBcu56 8MfwIlnXkYMGIMffvCXL1/cc4qc2D1F9qAbLDKAcoFUvTfJgaVk= -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:33 2026 by rpki-client