This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/W914McBBRKGYiuiAzeka3FO9x30.roa File: W914McBBRKGYiuiAzeka3FO9x30.roa (raw, json) Hash identifier: 5Lk0OVwYK6830fr40ALXftDbodH5B8wykwfgKJE/pDw= Subject key identifier: 5B:DD:78:31:C0:41:44:A1:98:8A:E8:80:CD:E9:1A:DC:53:BD:C7:7D Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9 Certificate serial: 019B7C80C85BE0B30C63DA8E02D204E6D1D3 Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/W914McBBRKGYiuiAzeka3FO9x30.roa Signing time: Fri 02 Jan 2026 02:19:33 +0000 ROA not before: Fri 02 Jan 2026 02:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31673 IP address blocks: 62.148.160.0/19 maxlen: 24 80.247.160.0/20 maxlen: 24 81.26.208.0/20 maxlen: 24 81.93.48.0/20 maxlen: 24 85.255.208.0/20 maxlen: 24 87.237.96.0/21 maxlen: 24 94.126.64.0/21 maxlen: 24 185.2.24.0/22 maxlen: 24 185.111.120.0/22 maxlen: 24 185.139.148.0/22 maxlen: 24 193.239.88.0/22 maxlen: 24 2001:16e8::/32 maxlen: 48 2a00:f80::/32 maxlen: 48 2a02:728::/32 maxlen: 48 2a02:4640::/32 maxlen: 48 2a06:5dc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c8:5b:e0:b3:0c:63:da:8e:02:d2:04:e6:d1:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9 Validity Not Before: Jan 2 02:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bdd7831c04144a1988ae880cde91adc53bdc77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:13:44:f0:88:a5:7c:72:4d:1d:73:c8:98: 19:a8:0f:53:9d:aa:c7:bc:e4:47:d0:4b:ba:71:2b: ab:e3:93:ff:9b:32:e2:99:ab:e4:df:f8:d3:0a:03: 5a:1a:c6:48:58:dd:46:1f:c2:c3:2f:60:98:6e:29: 9d:86:fc:78:21:d4:bd:93:9c:e3:be:53:52:b2:f6: 43:46:88:56:bf:d1:a9:f5:c2:16:7a:26:28:56:d9: fb:8e:8c:07:75:70:96:42:3f:7a:61:82:b0:20:30: 34:a0:d0:73:5f:31:c1:74:9f:97:55:c4:26:88:6b: 6f:98:d4:17:7c:64:af:1c:67:9d:21:c5:89:5f:25: 9d:23:2e:2d:a5:e1:a0:e5:41:d3:3e:f9:83:ed:bc: 62:e1:d9:02:42:c3:2a:1b:c9:79:4d:78:b3:9f:1d: 69:6f:17:96:b0:de:e6:4a:be:ff:4b:e5:65:db:54: 0a:e1:69:6c:31:5f:3d:e1:8e:8f:a3:a1:f0:5d:26: 98:21:fc:e0:1e:ed:94:cb:03:8b:7b:bf:2a:78:d0: 73:bc:6d:bf:96:1e:f9:0e:63:94:2e:ff:78:14:8d: 76:b0:26:2c:aa:7b:a3:96:04:cd:12:34:44:d0:4a: 60:cb:2d:07:49:0b:51:53:76:2d:c5:4e:7f:e2:2b: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DD:78:31:C0:41:44:A1:98:8A:E8:80:CD:E9:1A:DC:53:BD:C7:7D X509v3 Authority Key Identifier: keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/W914McBBRKGYiuiAzeka3FO9x30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.148.160.0/19 80.247.160.0/20 81.26.208.0/20 81.93.48.0/20 85.255.208.0/20 87.237.96.0/21 94.126.64.0/21 185.2.24.0/22 185.111.120.0/22 185.139.148.0/22 193.239.88.0/22 IPv6: 2001:16e8::/32 2a00:f80::/32 2a02:728::/32 2a02:4640::/32 2a06:5dc0::/29 Signature Algorithm: sha256WithRSAEncryption 6a:26:3b:d9:3b:22:4d:15:7c:41:96:c0:8e:ad:2f:88:10:03: cf:74:62:ba:2b:b5:3c:26:f1:31:81:75:82:2c:21:78:13:39: 8b:98:75:5c:b4:97:f8:0d:5f:2b:57:bd:c1:14:2f:8a:c4:37: 63:57:7b:eb:56:eb:9c:b6:46:4f:31:9a:8f:76:fd:99:ec:88: ec:3a:18:d4:a7:a7:49:fc:14:a0:78:4c:85:df:53:d0:be:cd: ff:81:15:17:d5:41:36:47:c0:87:8e:bd:10:60:e1:3d:e4:c9: 8d:36:6c:de:9f:cf:56:d9:59:2b:a4:48:42:16:9a:be:cf:cd: ac:05:16:60:98:1a:e3:90:45:a7:0e:d2:06:c1:4a:72:5d:67: 14:6b:93:c0:0d:fe:23:fa:30:8f:e6:a9:bc:97:98:26:7a:d4: 67:79:a6:ef:fb:d0:4e:7d:98:35:cd:f4:dc:91:39:8b:78:bd: 48:2f:16:2e:d7:2c:1c:62:e5:ca:c2:b2:65:a5:cf:0e:44:b5: 46:cf:61:06:d0:19:4b:df:17:5c:8d:fb:52:d7:9c:29:82:55: a3:c5:d8:87:50:ee:24:7b:5b:f2:d9:7f:cd:8f:4c:d8:4f:9b: 58:ea:ed:5f:a5:f7:5e:5d:bc:38:e9:12:17:84:1f:e6:52:92: e4:6c:96:50 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISAZt8gMhb4LMMY9qOAtIE5tHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjY3MTMxZDc2MGI1ZGIxZGU5OGVhMjBjMGY4MmZjMDFj OWYxZDkwHhcNMjYwMTAyMDIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmRkNzgzMWMwNDE0NGExOTg4YWU4ODBjZGU5MWFkYzUzYmRjNzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24UTRPCIpXxyTR1zyJgZqA9TnarH vORH0Eu6cSur45P/mzLimavk3/jTCgNaGsZIWN1GH8LDL2CYbimdhvx4IdS9k5zj vlNSsvZDRohWv9Gp9cIWeiYoVtn7jowHdXCWQj96YYKwIDA0oNBzXzHBdJ+XVcQm iGtvmNQXfGSvHGedIcWJXyWdIy4tpeGg5UHTPvmD7bxi4dkCQsMqG8l5TXiznx1p bxeWsN7mSr7/S+Vl21QK4WlsMV894Y6Po6HwXSaYIfzgHu2UywOLe78qeNBzvG2/ lh75DmOULv94FI12sCYsqnujlgTNEjRE0Epgyy0HSQtRU3YtxU5/4isMMQIDAQAB o4ICcTCCAm0wHQYDVR0OBBYEFFvdeDHAQUShmIrogM3pGtxTvcd9MB8GA1UdIwQY MBaAFFhmcTHXYLXbHemOogwPgvwByfHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0daeE1kZGd0ZHNkNlk2aURBLUNfQUhKOGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80YTgwZTYtMWQwNC00NjQ3LWE4ZDQt MjQ4MTEwNmY4YjI1LzEvVzkxNE1jQkJSS0dZaXVpQXpla2EzRk85eDMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80YTgwZTYtMWQwNC00NjQ3LWE4ZDQtMjQ4MTEwNmY4YjI1 LzEvV0daeE1kZGd0ZHNkNlk2aURBLUNfQUhKOGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwSAQCAAEwQgMEBT6UoAME BFD3oAMEBFEa0AMEBFFdMAMEBFX/0AMEA1ftYAMEA15+QAMEArkCGAMEArlveAME ArmLlAMEAsHvWDApBAIAAjAjAwUAIAEW6AMFACoAD4ADBQAqAgcoAwUAKgJGQAMF AyoGXcAwDQYJKoZIhvcNAQELBQADggEBAGomO9k7Ik0VfEGWwI6tL4gQA890Yror tTwm8TGBdYIsIXgTOYuYdVy0l/gNXytXvcEUL4rEN2NXe+tW65y2Rk8xmo92/Zns iOw6GNSnp0n8FKB4TIXfU9C+zf+BFRfVQTZHwIeOvRBg4T3kyY02bN6fz1bZWSuk SEIWmr7PzawFFmCYGuOQRacO0gbBSnJdZxRrk8AN/iP6MI/mqbyXmCZ61Gd5pu/7 0E59mDXN9NyROYt4vUgvFi7XLBxi5crCsmWlzw5EtUbPYQbQGUvfF1yN+1LXnCmC VaPF2IdQ7iR7W/LZf82PTNhPm1jq7V+l915dvDjpEheEH+ZSkuRsllA= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:48 2026 by rpki-client