This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/WZU6FHFcHOx5fALoZimlHMooRJs.roa File: WZU6FHFcHOx5fALoZimlHMooRJs.roa (raw, json) Hash identifier: WpBGTEqhwHqD6YFmMFq/AcUePkWzvyP/nRmAiQbyO2E= Subject key identifier: 59:95:3A:14:71:5C:1C:EC:79:7C:02:E8:66:29:A5:1C:CA:28:44:9B Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF3EC6AC9BA815DB6897E1E1650DC Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/WZU6FHFcHOx5fALoZimlHMooRJs.roa Signing time: Thu 01 Jan 2026 14:17:45 +0000 ROA not before: Thu 01 Jan 2026 14:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42772 IP address blocks: 87.252.246.0/24 maxlen: 24 87.252.252.0/24 maxlen: 24 87.252.254.0/24 maxlen: 24 87.252.255.0/24 maxlen: 24 91.149.128.0/21 maxlen: 21 91.149.128.0/24 maxlen: 24 91.149.129.0/24 maxlen: 24 91.149.130.0/24 maxlen: 24 91.149.131.0/24 maxlen: 24 91.149.132.0/24 maxlen: 24 91.149.133.0/24 maxlen: 24 91.149.134.0/24 maxlen: 24 91.149.135.0/24 maxlen: 24 91.149.144.0/21 maxlen: 21 91.149.152.0/24 maxlen: 24 91.149.153.0/24 maxlen: 24 91.149.154.0/24 maxlen: 24 91.149.162.0/24 maxlen: 24 91.149.165.0/24 maxlen: 24 91.149.168.0/24 maxlen: 24 91.149.169.0/24 maxlen: 24 91.149.184.0/24 maxlen: 24 91.149.185.0/24 maxlen: 24 91.149.186.0/24 maxlen: 24 91.149.187.0/24 maxlen: 24 91.149.188.0/24 maxlen: 24 91.149.190.0/24 maxlen: 24 91.149.191.0/24 maxlen: 24 93.125.0.0/24 maxlen: 24 93.125.2.0/24 maxlen: 24 93.125.3.0/24 maxlen: 24 93.125.4.0/24 maxlen: 24 93.125.5.0/24 maxlen: 24 93.125.6.0/24 maxlen: 24 93.125.7.0/24 maxlen: 24 93.125.8.0/24 maxlen: 24 93.125.9.0/24 maxlen: 24 93.125.10.0/24 maxlen: 24 93.125.11.0/24 maxlen: 24 93.125.12.0/24 maxlen: 24 93.125.13.0/24 maxlen: 24 93.125.14.0/24 maxlen: 24 93.125.15.0/24 maxlen: 24 93.125.16.0/24 maxlen: 24 93.125.17.0/24 maxlen: 24 93.125.41.0/24 maxlen: 24 93.125.62.0/24 maxlen: 24 93.125.63.0/24 maxlen: 24 93.125.64.0/24 maxlen: 24 93.125.65.0/24 maxlen: 24 93.125.66.0/24 maxlen: 24 93.125.67.0/24 maxlen: 24 93.125.68.0/24 maxlen: 24 93.125.69.0/24 maxlen: 24 93.125.81.0/24 maxlen: 24 93.125.83.0/24 maxlen: 24 93.125.84.0/24 maxlen: 24 93.125.85.0/24 maxlen: 24 93.125.86.0/24 maxlen: 24 93.125.100.0/24 maxlen: 24 93.125.101.0/24 maxlen: 24 93.125.102.0/24 maxlen: 24 93.125.103.0/24 maxlen: 24 93.125.112.0/24 maxlen: 24 93.125.115.0/24 maxlen: 24 93.125.116.0/24 maxlen: 24 93.125.117.0/24 maxlen: 24 93.125.125.0/24 maxlen: 24 178.172.146.0/24 maxlen: 24 178.172.147.0/24 maxlen: 24 178.172.151.0/24 maxlen: 24 178.172.152.0/24 maxlen: 24 178.172.206.0/24 maxlen: 24 178.172.207.0/24 maxlen: 24 178.172.209.0/24 maxlen: 24 178.172.210.0/24 maxlen: 24 178.172.240.0/24 maxlen: 24 178.172.241.0/24 maxlen: 24 213.184.224.0/22 maxlen: 22 213.184.224.0/24 maxlen: 24 213.184.225.0/24 maxlen: 24 213.184.226.0/24 maxlen: 24 213.184.227.0/24 maxlen: 24 213.184.233.0/24 maxlen: 24 213.184.244.0/24 maxlen: 24 213.184.245.0/24 maxlen: 24 213.184.248.0/24 maxlen: 24 213.184.249.0/24 maxlen: 24 213.184.250.0/24 maxlen: 24 213.184.251.0/24 maxlen: 24 213.184.252.0/24 maxlen: 24 213.184.253.0/24 maxlen: 24 213.184.254.0/24 maxlen: 24 213.184.255.0/24 maxlen: 24 217.21.33.0/24 maxlen: 24 217.21.48.0/24 maxlen: 24 217.21.54.0/24 maxlen: 24 217.21.59.0/24 maxlen: 24 217.21.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f3:ec:6a:c9:ba:81:5d:b6:89:7e:1e:16:50:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59953a14715c1cec797c02e86629a51cca28449b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:52:2b:a1:16:2f:ae:10:a8:cc:84:60:9b: fb:e9:b1:58:1a:7f:68:5b:7a:ca:1d:95:f9:6f:6a: fc:75:71:83:99:f0:85:35:aa:b5:73:ce:20:ef:d1: 2e:f0:fd:2a:69:4e:5f:38:84:f1:c8:93:bc:bc:02: 7a:a0:a2:ac:25:38:21:ae:9d:8a:6a:ef:69:b7:62: 20:88:64:e6:b8:87:68:26:4a:d6:34:62:71:1c:ab: ac:19:41:9d:7a:54:b0:b2:58:36:00:c0:a3:e3:d3: d1:32:b4:ed:bd:e8:ac:4d:fd:00:15:4b:21:0e:4d: 97:20:21:ad:6e:78:ba:7f:a7:96:86:c2:a6:d4:73: 6a:9e:6c:bf:84:e4:91:f4:75:16:6d:bc:1b:99:9d: 72:8d:a8:f7:ec:9b:59:87:ff:c0:9a:53:0e:a6:e5: 57:60:d7:9e:a0:c1:91:ba:88:cc:ca:49:af:85:d3: c5:8f:92:b4:4a:62:e6:cf:f2:7a:2d:9a:65:02:1a: 6b:ed:b5:fa:f2:cc:29:1f:43:b4:2e:dc:0c:0b:dd: 85:ef:7a:5a:db:16:4f:9c:af:39:65:ba:1e:8c:21: 51:0a:7a:2d:c5:f1:92:6a:cf:e1:1b:21:55:e4:f3: 26:a6:40:6b:06:60:e4:c2:3b:6a:86:f9:27:4c:3e: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:95:3A:14:71:5C:1C:EC:79:7C:02:E8:66:29:A5:1C:CA:28:44:9B X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/WZU6FHFcHOx5fALoZimlHMooRJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.252.246.0/24 87.252.252.0/24 87.252.254.0/23 91.149.128.0/21 91.149.144.0-91.149.154.255 91.149.162.0/24 91.149.165.0/24 91.149.168.0/23 91.149.184.0-91.149.188.255 91.149.190.0/23 93.125.0.0/24 93.125.2.0-93.125.17.255 93.125.41.0/24 93.125.62.0-93.125.69.255 93.125.81.0/24 93.125.83.0-93.125.86.255 93.125.100.0/22 93.125.112.0/24 93.125.115.0-93.125.117.255 93.125.125.0/24 178.172.146.0/23 178.172.151.0-178.172.152.255 178.172.206.0/23 178.172.209.0-178.172.210.255 178.172.240.0/23 213.184.224.0/22 213.184.233.0/24 213.184.244.0/23 213.184.248.0/21 217.21.33.0/24 217.21.48.0/24 217.21.54.0/24 217.21.59.0-217.21.60.255 Signature Algorithm: sha256WithRSAEncryption 59:26:a5:d5:f2:76:c1:6f:78:90:a5:87:eb:00:bc:3b:0d:1f: ec:ab:ef:9b:1e:b3:56:d1:b0:cf:5a:69:d4:b7:bb:48:ab:18: a5:18:9f:fc:36:b1:b8:7c:e8:ca:f7:3d:20:1a:0b:47:2c:0c: 64:af:b6:f6:07:fb:ab:93:99:22:04:56:4e:be:2f:93:3d:ff: 9b:1a:60:f8:46:05:4d:5a:c4:ae:cb:c0:bd:e9:d6:c6:2a:1c: 75:f9:01:03:2a:ab:0e:a6:0e:1b:13:b5:6c:5f:ef:11:9d:0f: 95:de:b4:e5:ef:67:73:65:44:47:af:46:ec:b5:45:28:2a:35: ab:de:c3:24:33:2e:b5:e8:e0:df:f7:e4:b8:36:96:69:47:15: ec:94:51:55:6c:bd:34:0e:52:6b:18:64:59:8e:19:0f:e4:3d: 33:89:d0:1a:b7:cb:8e:bf:dd:b3:94:6e:a5:e3:1d:19:f3:c2: 3d:32:4b:25:d9:fa:e4:99:c6:be:2d:dd:68:44:b1:3d:e6:18: cf:98:54:12:6d:29:86:46:0e:f1:57:5d:d8:22:de:e4:49:ee: f8:5a:bf:72:5c:6d:bb:bb:fa:40:e3:d1:e4:a0:3f:a2:52:cd: 77:e6:33:10:9a:81:dc:5c:6e:b5:48:7c:9a:f2:8e:18:e7:d3: 4a:80:4e:f1 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgISAZt56/Psasm6gV22iX4eFlDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTk1M2ExNDcxNWMxY2VjNzk3YzAyZTg2NjI5YTUxY2NhMjg0NDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkddSK6EWL64QqMyEYJv76bFYGn9o W3rKHZX5b2r8dXGDmfCFNaq1c84g79Eu8P0qaU5fOITxyJO8vAJ6oKKsJTghrp2K au9pt2IgiGTmuIdoJkrWNGJxHKusGUGdelSwslg2AMCj49PRMrTtveisTf0AFUsh Dk2XICGtbni6f6eWhsKm1HNqnmy/hOSR9HUWbbwbmZ1yjaj37JtZh//AmlMOpuVX YNeeoMGRuojMykmvhdPFj5K0SmLmz/J6LZplAhpr7bX68swpH0O0LtwMC92F73pa 2xZPnK85ZboejCFRCnotxfGSas/hGyFV5PMmpkBrBmDkwjtqhvknTD6MRQIDAQAB o4IDGzCCAxcwHQYDVR0OBBYEFFmVOhRxXBzseXwC6GYppRzKKESbMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvV1pVNkZIRmNIT3g1ZkFMb1ppbWxITW9vUkpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCCARYEAgABMIIB DgMEAFf89gMEAFf8/AMEAVf8/gMEA1uVgDAMAwQEW5WQAwQAW5WaAwQAW5WiAwQA W5WlAwQBW5WoMAwDBANblbgDBABblbwDBAFblb4DBABdfQAwDAMEAV19AgMEAV19 EAMEAF19KTAMAwQBXX0+AwQBXX1EAwQAXX1RMAwDBABdfVMDBABdfVYDBAJdfWQD BABdfXAwDAMEAF19cwMEAV19dAMEAF19fQMEAbKskjAMAwQAsqyXAwQAsqyYAwQB sqzOMAwDBACyrNEDBACyrNIDBAGyrPADBALVuOADBADVuOkDBAHVuPQDBAPVuPgD BADZFSEDBADZFTADBADZFTYwDAMEANkVOwMEANkVPDANBgkqhkiG9w0BAQsFAAOC AQEAWSal1fJ2wW94kKWH6wC8Ow0f7Kvvmx6zVtGwz1pp1Le7SKsYpRif/DaxuHzo yvc9IBoLRywMZK+29gf7q5OZIgRWTr4vkz3/mxpg+EYFTVrErsvAvenWxiocdfkB AyqrDqYOGxO1bF/vEZ0Pld605e9nc2VER69G7LVFKCo1q97DJDMutejg3/fkuDaW aUcV7JRRVWy9NA5SaxhkWY4ZD+Q9M4nQGrfLjr/ds5RupeMdGfPCPTJLJdn65JnG vi3daESxPeYYz5hUEm0phkYO8Vdd2CLe5Enu+Fq/clxtu7v6QOPR5KA/olLNd+Yz EJqB3FxutUh8mvKOGOfTSoBO8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:20 2026 by rpki-client