This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/WEEvyZDdTsB41WxUfj6LZ4yl2mY.roa File: WEEvyZDdTsB41WxUfj6LZ4yl2mY.roa (raw, json) Hash identifier: ib+np8fqyahmEOQHpJakofEw2vzrTxLyloRSwSyU3qw= Subject key identifier: 58:41:2F:C9:90:DD:4E:C0:78:D5:6C:54:7E:3E:8B:67:8C:A5:DA:66 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019BD8D8BDF2FA1AEA0D23E7296B4FBF3D3A Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/WEEvyZDdTsB41WxUfj6LZ4yl2mY.roa Signing time: Tue 20 Jan 2026 00:40:41 +0000 ROA not before: Tue 20 Jan 2026 00:40:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 5.2.128.0/17 maxlen: 17 5.12.0.0/14 maxlen: 14 31.14.224.0/22 maxlen: 22 62.231.64.0/18 maxlen: 18 62.231.79.0/24 maxlen: 24 62.231.120.0/24 maxlen: 24 79.114.0.0/15 maxlen: 15 79.118.0.0/15 maxlen: 15 79.118.155.0/24 maxlen: 24 81.18.64.0/19 maxlen: 19 81.196.0.0/16 maxlen: 16 81.196.205.0/24 maxlen: 24 82.76.0.0/14 maxlen: 14 82.76.58.0/24 maxlen: 24 82.76.114.0/24 maxlen: 24 82.76.243.0/24 maxlen: 24 82.76.254.0/23 maxlen: 23 82.78.137.0/24 maxlen: 24 82.79.10.0/24 maxlen: 24 82.79.119.0/24 maxlen: 24 82.137.0.0/18 maxlen: 18 82.137.0.0/21 maxlen: 21 82.137.16.0/20 maxlen: 20 82.137.32.0/19 maxlen: 19 84.232.128.0/17 maxlen: 17 84.232.149.0/24 maxlen: 24 84.232.181.0/24 maxlen: 24 86.120.0.0/13 maxlen: 13 86.121.222.0/24 maxlen: 24 86.123.114.0/24 maxlen: 24 86.127.54.0/24 maxlen: 24 86.127.59.0/24 maxlen: 24 89.43.180.0/23 maxlen: 23 89.45.72.0/22 maxlen: 22 89.46.12.0/22 maxlen: 22 93.113.40.0/22 maxlen: 22 94.176.220.0/22 maxlen: 22 185.129.36.0/22 maxlen: 22 188.24.0.0/15 maxlen: 15 188.26.0.0/17 maxlen: 17 188.26.128.0/18 maxlen: 18 188.26.224.0/19 maxlen: 19 188.27.0.0/16 maxlen: 16 188.27.120.0/24 maxlen: 24 193.111.232.0/24 maxlen: 24 194.102.80.0/24 maxlen: 24 194.102.81.0/24 maxlen: 24 212.54.96.0/19 maxlen: 19 212.54.120.0/24 maxlen: 24 212.54.122.0/24 maxlen: 24 212.54.123.0/24 maxlen: 24 212.54.127.0/24 maxlen: 24 212.93.128.0/19 maxlen: 19 212.93.143.0/24 maxlen: 24 213.154.96.0/19 maxlen: 24 213.154.100.0/24 maxlen: 24 213.154.128.0/19 maxlen: 24 213.157.160.0/19 maxlen: 19 213.157.165.0/24 maxlen: 24 213.157.189.0/24 maxlen: 24 2a02:2f00::/28 maxlen: 28 2a02:2f01:100::/48 maxlen: 48 2a02:2f09:3100::/48 maxlen: 48 2a02:2f0c:8002::/48 maxlen: 48 2a02:2f0f:309::/48 maxlen: 48 2a02:2f0f:571::/48 maxlen: 48 2a03:9c20::/32 maxlen: 32 2a03:9c20:1000::/48 maxlen: 48 2a03:9c20:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:d8:bd:f2:fa:1a:ea:0d:23:e7:29:6b:4f:bf:3d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jan 20 00:40:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58412fc990dd4ec078d56c547e3e8b678ca5da66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:6f:5c:db:b2:3e:6e:81:70:65:07:01:53: ab:6d:8b:49:a2:e1:ad:70:6e:78:6b:5d:56:13:b2: e2:81:a3:ab:18:7b:19:eb:ec:6d:5d:19:40:7e:9d: e9:4a:4c:2c:42:92:9d:f0:16:fd:3b:0b:f0:50:a7: f5:eb:41:c1:72:07:23:41:7d:e0:39:0e:38:79:80: 51:a1:56:b6:16:b6:e4:51:9f:99:7e:6c:2c:36:a8: 17:9f:e0:ac:e3:c7:68:f3:fa:fc:fa:e8:75:0d:3e: 57:c3:51:7e:cc:2b:10:be:90:70:aa:da:b3:82:20: a8:9f:9b:90:bf:bf:0e:1c:7e:27:e8:ef:00:b9:d3: b4:82:2f:6a:77:21:f1:69:a0:78:1f:23:8c:ae:21: f5:48:9f:c6:25:12:f2:a0:80:44:4c:48:05:7e:23: d6:b5:9a:62:55:1b:d9:d9:02:5c:46:a7:d6:e9:45: 62:43:2f:13:6f:68:7c:56:62:4d:aa:42:9e:7a:c4: 35:bb:dd:9a:03:b1:9c:c9:e6:a4:90:db:ad:6b:a6: 28:0d:18:67:37:b9:eb:88:90:5d:d4:80:3b:50:43: 6f:9f:66:61:cf:db:00:d8:e6:f7:a4:1f:c2:4d:35: ad:41:ea:02:fa:23:21:f8:c9:27:c1:db:50:e9:54: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:41:2F:C9:90:DD:4E:C0:78:D5:6C:54:7E:3E:8B:67:8C:A5:DA:66 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/WEEvyZDdTsB41WxUfj6LZ4yl2mY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.2.128.0/17 5.12.0.0/14 31.14.224.0/22 62.231.64.0/18 79.114.0.0/15 79.118.0.0/15 81.18.64.0/19 81.196.0.0/16 82.76.0.0/14 82.137.0.0/18 84.232.128.0/17 86.120.0.0/13 89.43.180.0/23 89.45.72.0/22 89.46.12.0/22 93.113.40.0/22 94.176.220.0/22 185.129.36.0/22 188.24.0.0-188.26.191.255 188.26.224.0-188.27.255.255 193.111.232.0/24 194.102.80.0/23 212.54.96.0/19 212.93.128.0/19 213.154.96.0-213.154.159.255 213.157.160.0/19 IPv6: 2a02:2f00::/28 2a03:9c20::/32 Signature Algorithm: sha256WithRSAEncryption 84:88:2e:95:3d:82:4b:23:5d:1a:23:b7:a9:6a:b8:82:8b:7b: f3:bf:6c:32:d0:ca:39:85:fa:d2:d6:fb:4e:f0:71:dd:0f:ad: d1:26:4f:2e:25:b8:b0:e6:fa:69:ec:a2:8f:9e:24:0e:6d:e2: b9:dd:b7:f4:ab:0f:83:b1:2b:9f:02:a5:e3:5f:19:31:4a:b0: b9:02:70:f9:b7:03:42:98:b5:9a:6e:91:7a:4a:ab:75:1d:7c: 49:9e:ca:89:e8:d9:09:bd:c4:ac:63:e8:4b:b0:da:75:b8:7b: 10:9c:fe:6d:b4:43:f1:3e:1b:da:6d:06:90:12:71:db:84:d3: 5c:01:1e:1a:47:66:a6:6d:84:68:db:7e:d9:67:e1:89:b5:20: a8:6b:57:bb:e4:e5:1e:13:25:62:1a:54:18:96:f7:45:1f:37: 98:1f:6d:35:6c:fe:56:8b:5d:e8:9e:98:18:01:69:0e:74:d7: b2:08:d0:59:62:e4:6e:57:7b:2c:0e:54:37:85:67:d0:30:ec: 37:67:a0:79:99:ab:dd:c4:74:ce:62:b6:77:2a:0b:4f:ba:c8: 4e:7c:be:26:1b:28:6d:9c:f8:84:04:50:8c:c8:c1:9e:f1:57: 3f:9f:32:e5:00:13:04:8d:96:41:a5:74:14:68:e5:06:68:de: f5:2a:3a:c0 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISAZvY2L3y+hrqDSPnKWtPvz06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwMTIwMDA0MDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODQxMmZjOTkwZGQ0ZWMwNzhkNTZjNTQ3ZTNlOGI2NzhjYTVkYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkdvXNuyPm6BcGUHAVOrbYtJouGt cG54a11WE7LigaOrGHsZ6+xtXRlAfp3pSkwsQpKd8Bb9OwvwUKf160HBcgcjQX3g OQ44eYBRoVa2FrbkUZ+ZfmwsNqgXn+Cs48do8/r8+uh1DT5Xw1F+zCsQvpBwqtqz giCon5uQv78OHH4n6O8AudO0gi9qdyHxaaB4HyOMriH1SJ/GJRLyoIBETEgFfiPW tZpiVRvZ2QJcRqfW6UViQy8Tb2h8VmJNqkKeesQ1u92aA7GcyeakkNuta6YoDRhn N7nriJBd1IA7UENvn2Zhz9sA2Ob3pB/CTTWtQeoC+iMh+MknwdtQ6VTqaQIDAQAB o4ICyjCCAsYwHQYDVR0OBBYEFFhBL8mQ3U7AeNVsVH4+i2eMpdpmMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvV0VFdnlaRGRUc0I0MVd4VWZqNkxaNHlsMm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCBswQCAAEwgawDBAcF AoADAwIFDAMEAh8O4AMEBj7nQAMDAU9yAwMBT3YDBAVREkADAwBRxAMDAlJMAwQG UokAAwQHVOiAAwMDVngDBAFZK7QDBAJZLUgDBAJZLgwDBAJdcSgDBAJesNwDBAK5 gSQwCwMDA7wYAwQGvBqAMAsDBAW8GuADAwK8GAMEAMFv6AMEAcJmUAMEBdQ2YAME BdRdgDAMAwQF1ZpgAwQF1ZqAAwQF1Z2gMBQEAgACMA4DBQQqAi8AAwUAKgOcIDAN BgkqhkiG9w0BAQsFAAOCAQEAhIgulT2CSyNdGiO3qWq4got7879sMtDKOYX60tb7 TvBx3Q+t0SZPLiW4sOb6aeyij54kDm3iud239KsPg7ErnwKl418ZMUqwuQJw+bcD Qpi1mm6RekqrdR18SZ7KiejZCb3ErGPoS7Dadbh7EJz+bbRD8T4b2m0GkBJx24TT XAEeGkdmpm2EaNt+2WfhibUgqGtXu+TlHhMlYhpUGJb3RR83mB9tNWz+Votd6J6Y GAFpDnTXsgjQWWLkbld7LA5UN4Vn0DDsN2egeZmr3cR0zmK2dyoLT7rITny+Jhso bZz4hARQjMjBnvFXP58y5QATBI2WQaV0FGjlBmje9So6wA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:40 2026 by rpki-client