This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/WwX0JTR-L90JZbPhPbc6WFq_tJM.roa File: WwX0JTR-L90JZbPhPbc6WFq_tJM.roa (raw, json) Hash identifier: W2cWm9/jLU8s1tVrrv8IZTosQohnszilkPH0YNaiEbE= Subject key identifier: 5B:05:F4:25:34:7E:2F:DD:09:65:B3:E1:3D:B7:3A:58:5A:BF:B4:93 Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d Certificate serial: 019B79EC9FE6991F97753BCBDC280CCA88D0 Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/WwX0JTR-L90JZbPhPbc6WFq_tJM.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35332 IP address blocks: 37.235.112.0/21 maxlen: 24 45.89.144.0/22 maxlen: 24 45.116.184.0/22 maxlen: 24 77.242.112.0/20 maxlen: 24 87.236.0.0/21 maxlen: 24 139.28.200.0/22 maxlen: 24 185.113.212.0/22 maxlen: 24 185.151.96.0/22 maxlen: 24 188.92.56.0/21 maxlen: 24 194.5.181.0/24 maxlen: 24 194.156.2.0/24 maxlen: 24 208.88.128.0/22 maxlen: 24 2a00:a000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9f:e6:99:1f:97:75:3b:cb:dc:28:0c:ca:88:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b05f425347e2fdd0965b3e13db73a585abfb493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a8:78:c5:a2:a0:56:15:66:ca:00:65:52:e4: 10:4d:62:54:fb:e8:a3:d5:82:e7:af:cc:1d:19:db: 04:57:ae:43:e6:7f:c9:b6:62:51:86:ac:6e:30:6c: f2:9e:22:50:c3:26:52:90:20:2f:84:a6:b2:b3:e7: c6:94:ec:86:ef:d8:5b:d5:47:cb:02:8b:cc:b9:61: 9b:0a:c9:09:20:80:c5:48:8f:04:95:10:ef:9c:cb: af:67:01:62:74:a2:e4:5b:c9:e9:e3:8e:30:ac:34: e2:89:0a:8c:65:12:64:be:46:30:30:4a:a4:87:2e: 33:ea:c7:09:54:54:4a:d0:a9:04:25:02:6c:be:0e: 8a:30:02:b1:db:a8:9b:e7:cd:af:b1:93:ef:59:b2: d2:6e:d2:b1:69:da:43:f1:37:74:dc:fe:2d:25:1f: 05:ec:bb:05:96:52:68:0e:8d:ff:bd:53:c5:1e:0e: e8:f7:8c:4e:00:4d:00:fd:d6:79:e2:3d:77:5b:14: 9f:1b:69:0b:3b:bc:a9:ed:18:57:4b:4b:41:61:9c: 81:aa:95:16:9d:56:45:c8:c9:1a:2f:20:31:17:2d: 3d:12:7d:8f:28:65:97:aa:20:e5:89:a3:94:49:d4: 44:ea:9c:c6:95:a5:f5:56:b6:f4:4a:10:25:ae:a3: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:05:F4:25:34:7E:2F:DD:09:65:B3:E1:3D:B7:3A:58:5A:BF:B4:93 X509v3 Authority Key Identifier: keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/WwX0JTR-L90JZbPhPbc6WFq_tJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.235.112.0/21 45.89.144.0/22 45.116.184.0/22 77.242.112.0/20 87.236.0.0/21 139.28.200.0/22 185.113.212.0/22 185.151.96.0/22 188.92.56.0/21 194.5.181.0/24 194.156.2.0/24 208.88.128.0/22 IPv6: 2a00:a000::/32 Signature Algorithm: sha256WithRSAEncryption 7f:78:0e:84:f0:d7:83:7b:32:2a:84:19:b8:75:52:fc:a5:5e: 36:02:0c:2b:63:cf:87:b4:58:30:b2:6a:f4:e3:42:fc:b5:dd: 00:84:bc:4c:d5:ac:e1:8a:0b:34:b5:97:b8:08:92:91:35:1e: fc:a2:77:b1:f7:23:31:d0:e1:95:22:cd:a5:56:08:f3:64:bb: aa:a6:d9:70:17:d3:29:13:19:e6:13:cc:70:7f:09:48:7b:27: a9:a7:a6:2f:34:cb:9f:2e:fb:04:28:4f:d5:70:ae:f3:1e:bb: b4:08:0d:3a:b8:e0:06:0d:3f:00:a0:6f:f2:2a:65:f2:64:3f: 6f:20:fc:38:ca:4a:3c:13:e0:a2:4e:ce:d1:c8:30:d7:2e:49: a4:bd:a0:87:5e:b9:a4:2c:72:40:40:05:ac:83:10:6e:69:fb: 07:97:df:29:86:b0:62:b0:27:4d:5a:3c:5c:2f:d6:25:4e:1a: 50:16:66:db:67:54:dc:3e:ab:42:13:02:6b:7f:cd:c7:9a:5a: 2b:24:1e:29:53:c1:3d:3a:3e:42:f8:87:f6:60:a1:51:71:26: be:50:e4:6a:c3:fd:01:98:fd:df:be:bd:fc:5e:bb:9e:b9:ec: 5f:72:c0:8c:fb:60:a9:94:97:28:95:96:49:d8:1f:7c:0f:6d: 51:19:c4:d1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt57J/mmR+XdTvL3CgMyojQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODA5YTdlNmNhMTRkMGExYTk3NjY3M2UwMzE5ZTM0ZTk1 NmVkM2QwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjA1ZjQyNTM0N2UyZmRkMDk2NWIzZTEzZGI3M2E1ODVhYmZiNDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqh4xaKgVhVmygBlUuQQTWJU++ij 1YLnr8wdGdsEV65D5n/JtmJRhqxuMGzyniJQwyZSkCAvhKays+fGlOyG79hb1UfL AovMuWGbCskJIIDFSI8ElRDvnMuvZwFidKLkW8np444wrDTiiQqMZRJkvkYwMEqk hy4z6scJVFRK0KkEJQJsvg6KMAKx26ib582vsZPvWbLSbtKxadpD8Td03P4tJR8F 7LsFllJoDo3/vVPFHg7o94xOAE0A/dZ54j13WxSfG2kLO7yp7RhXS0tBYZyBqpUW nVZFyMkaLyAxFy09En2PKGWXqiDliaOUSdRE6pzGlaX1Vrb0ShAlrqNOCQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFFsF9CU0fi/dCWWz4T23Olhav7STMB8GA1UdIwQY MBaAFL+Amn5soU0KGpdmc+AxnjTpVu09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAt M2ZkZmI0MTQwZjI0LzEvV3dYMEpUUi1MOTBKWmJQaFBiYzZXRnFfdEpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAtM2ZkZmI0MTQwZjI0 LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQDJetwAwQC LVmQAwQCLXS4AwQETfJwAwQDV+wAAwQCixzIAwQCuXHUAwQCuZdgAwQDvFw4AwQA wgW1AwQAwpwCAwQC0FiAMA0EAgACMAcDBQAqAKAAMA0GCSqGSIb3DQEBCwUAA4IB AQB/eA6E8NeDezIqhBm4dVL8pV42AgwrY8+HtFgwsmr040L8td0AhLxM1azhigs0 tZe4CJKRNR78onex9yMx0OGVIs2lVgjzZLuqptlwF9MpExnmE8xwfwlIeyepp6Yv NMufLvsEKE/VcK7zHru0CA06uOAGDT8AoG/yKmXyZD9vIPw4yko8E+CiTs7RyDDX LkmkvaCHXrmkLHJAQAWsgxBuafsHl98phrBisCdNWjxcL9YlThpQFmbbZ1TcPqtC EwJrf83HmlorJB4pU8E9Oj5C+If2YKFRcSa+UORqw/0BmP3fvr38XrueuexfcsCM +2CplJcolZZJ2B98D21RGcTR -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:55 2026 by rpki-client