This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/Wg4SVphoReQnCpUyJ5-oZULRakI.roa File: Wg4SVphoReQnCpUyJ5-oZULRakI.roa (raw, json) Hash identifier: Q8EhoBGzMhLpl/1N6VdUdhxyINS1Dda6nBjz3JP3ehw= Subject key identifier: 5A:0E:12:56:98:68:45:E4:27:0A:95:32:27:9F:A8:65:42:D1:6A:42 Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea Certificate serial: 019B7F8199760D77A43AC3020E7A5C11C7EB Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/Wg4SVphoReQnCpUyJ5-oZULRakI.roa Signing time: Fri 02 Jan 2026 16:19:18 +0000 ROA not before: Fri 02 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24953 IP address blocks: 185.23.202.0/23 maxlen: 24 194.34.224.0/24 maxlen: 24 194.34.227.0/24 maxlen: 24 2a0d:f9c3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:99:76:0d:77:a4:3a:c3:02:0e:7a:5c:11:c7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea Validity Not Before: Jan 2 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a0e1256986845e4270a9532279fa86542d16a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:21:6f:1f:96:48:7f:14:a1:88:ed:bf:40: 63:6e:3f:0e:4e:43:58:f6:a8:a0:4b:c2:2f:ab:d7: 21:46:d9:c4:aa:e6:e9:e1:8b:8b:52:bd:df:fa:5f: ef:84:d9:ea:58:42:cd:28:70:4c:34:77:68:e9:b0: 88:d4:9f:2f:fc:99:52:e9:44:c3:53:ce:7f:0e:b9: 1b:1c:31:ac:23:cd:15:f0:34:f7:5c:1f:5c:18:fc: 82:5a:4d:55:8f:67:4f:1a:6f:20:a3:5f:4d:c1:d5: d1:b8:90:60:14:52:8c:14:75:96:48:08:c9:81:4b: d3:60:74:58:83:c5:8e:df:77:98:08:89:f9:a0:21: 95:9a:b3:93:71:8d:b4:9c:9d:3f:cf:d2:78:5d:e1: d8:32:37:5e:a7:2c:5a:37:e5:0b:af:af:db:e0:b0: 1f:b6:49:a9:07:5b:c2:bf:8c:8d:05:70:70:13:74: ed:16:8b:4e:c8:76:a8:c9:80:1c:fb:30:06:f4:d2: 21:13:e9:61:38:96:f7:d8:5e:a9:14:42:e5:ff:15: 86:f0:5b:55:66:44:d7:ac:b4:da:31:e7:46:95:04: 15:5f:fe:a9:fe:a9:31:ab:f1:77:19:c1:b3:75:6f: 68:f1:36:34:87:ed:22:c1:ac:21:48:bf:f0:02:99: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0E:12:56:98:68:45:E4:27:0A:95:32:27:9F:A8:65:42:D1:6A:42 X509v3 Authority Key Identifier: keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/Wg4SVphoReQnCpUyJ5-oZULRakI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.202.0/23 194.34.224.0/24 194.34.227.0/24 IPv6: 2a0d:f9c3::/32 Signature Algorithm: sha256WithRSAEncryption 9e:80:67:02:70:5c:4c:c0:9d:6b:ff:b3:d0:35:49:28:22:28: 32:5b:68:36:bd:3b:c6:8d:f2:80:b4:e2:99:1c:50:5f:4d:d9: a6:df:01:f9:a5:7a:73:c8:91:3d:00:fc:59:c0:9d:a5:bd:5c: 6f:eb:c9:e1:a5:bc:cd:8c:76:4f:36:41:c4:19:02:e9:a2:4c: 25:8a:b0:5a:f5:54:4c:51:c7:10:46:bd:82:78:29:58:af:d8: f3:45:3f:84:0b:32:59:41:49:5e:ee:3d:24:76:74:7e:1a:14: 04:2e:fd:45:71:f5:ee:57:16:52:87:59:d9:ce:f0:c8:b5:29: db:32:9d:82:6b:f0:57:fc:96:3b:98:3e:dd:c5:77:dc:ed:d1: c8:6b:bc:d6:8e:a1:f3:46:9b:91:42:f2:04:a7:c2:37:3c:cb: 20:3f:52:b4:43:53:c8:00:84:3f:74:f6:fd:8f:7f:4c:45:c4: 5c:6c:a3:d6:50:02:31:b6:8e:dc:08:0f:02:c3:01:2c:36:ed: 3a:9e:2b:06:bd:45:5e:92:e9:bf:a1:15:0c:65:48:01:dd:af: 9d:ec:8f:6e:70:ef:40:87:07:84:50:c0:52:1a:6f:d5:de:09: f4:5b:73:ca:9c:88:53:bd:41:51:28:5f:d7:44:c4:04:e5:56: 6b:f6:24:94 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/gZl2DXekOsMCDnpcEcfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0M2UxYmE5MWM1NjlhOGIyMWE2ZDJkNjdmNWRiYmQ2YzA0 ZTQzZWEwHhcNMjYwMTAyMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTBlMTI1Njk4Njg0NWU0MjcwYTk1MzIyNzlmYTg2NTQyZDE2YTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3khbx+WSH8UoYjtv0Bjbj8OTkNY 9qigS8Ivq9chRtnEqubp4YuLUr3f+l/vhNnqWELNKHBMNHdo6bCI1J8v/JlS6UTD U85/DrkbHDGsI80V8DT3XB9cGPyCWk1Vj2dPGm8go19NwdXRuJBgFFKMFHWWSAjJ gUvTYHRYg8WO33eYCIn5oCGVmrOTcY20nJ0/z9J4XeHYMjdepyxaN+ULr6/b4LAf tkmpB1vCv4yNBXBwE3TtFotOyHaoyYAc+zAG9NIhE+lhOJb32F6pFELl/xWG8FtV ZkTXrLTaMedGlQQVX/6p/qkxq/F3GcGzdW9o8TY0h+0iwawhSL/wApnl4wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFoOElaYaEXkJwqVMiefqGVC0WpCMB8GA1UdIwQY MBaAFGQ+G6kcVpqLIabS1n9du9bATkPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAt ZmVhMGFmZjM1OWY1LzEvV2c0U1ZwaG9SZVFuQ3BVeUo1LW9aVUxSYWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAtZmVhMGFmZjM1OWY1 LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBuRfKAwQA wiLgAwQAwiLjMA0EAgACMAcDBQAqDfnDMA0GCSqGSIb3DQEBCwUAA4IBAQCegGcC cFxMwJ1r/7PQNUkoIigyW2g2vTvGjfKAtOKZHFBfTdmm3wH5pXpzyJE9APxZwJ2l vVxv68nhpbzNjHZPNkHEGQLpokwlirBa9VRMUccQRr2CeClYr9jzRT+ECzJZQUle 7j0kdnR+GhQELv1FcfXuVxZSh1nZzvDItSnbMp2Ca/BX/JY7mD7dxXfc7dHIa7zW jqHzRpuRQvIEp8I3PMsgP1K0Q1PIAIQ/dPb9j39MRcRcbKPWUAIxto7cCA8CwwEs Nu06nisGvUVekum/oRUMZUgB3a+d7I9ucO9AhweEUMBSGm/V3gn0W3PKnIhTvUFR KF/XRMQE5VZr9iSU -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:21 2026 by rpki-client