This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/WTJ8woPLWTLtZYim50VkEfyNYog.roa File: WTJ8woPLWTLtZYim50VkEfyNYog.roa (raw, json) Hash identifier: q9EVFkQ3zkjO8cJHlLxnMky01XoCS5Xv4WlBuG7Pt5E= Subject key identifier: 59:32:7C:C2:83:CB:59:32:ED:65:88:A6:E7:45:64:11:FC:8D:62:88 Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f Certificate serial: 019B7FF13CE005D777B6CD351BC039738F5C Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/WTJ8woPLWTLtZYim50VkEfyNYog.roa Signing time: Fri 02 Jan 2026 18:21:14 +0000 ROA not before: Fri 02 Jan 2026 18:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31313 IP address blocks: 86.105.108.0/22 maxlen: 24 86.105.216.0/22 maxlen: 24 89.35.192.0/24 maxlen: 24 89.41.56.0/23 maxlen: 24 89.42.116.0/23 maxlen: 24 89.43.190.0/23 maxlen: 24 89.124.128.0/18 maxlen: 24 89.124.192.0/19 maxlen: 24 89.200.246.0/23 maxlen: 24 89.200.247.0/24 maxlen: 24 91.235.4.0/23 maxlen: 24 93.113.29.0/24 maxlen: 24 130.195.57.0/24 maxlen: 24 176.126.252.0/22 maxlen: 24 176.126.252.0/24 maxlen: 24 176.126.253.0/24 maxlen: 24 176.126.254.0/24 maxlen: 24 176.126.255.0/24 maxlen: 24 185.57.80.0/22 maxlen: 24 185.57.80.0/24 maxlen: 24 185.57.81.0/24 maxlen: 24 185.57.83.0/24 maxlen: 24 185.233.148.0/22 maxlen: 24 185.233.148.0/24 maxlen: 24 185.233.149.0/24 maxlen: 24 185.233.150.0/24 maxlen: 24 185.233.151.0/24 maxlen: 24 193.151.28.0/22 maxlen: 24 193.169.21.0/24 maxlen: 24 195.242.244.0/22 maxlen: 24 203.25.143.0/24 maxlen: 24 213.177.0.0/19 maxlen: 24 2a00:5dc0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:3c:e0:05:d7:77:b6:cd:35:1b:c0:39:73:8f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f Validity Not Before: Jan 2 18:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59327cc283cb5932ed6588a6e7456411fc8d6288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:5d:9d:6f:31:21:75:d9:a2:37:d4:9e:f1: 39:f6:c4:2b:48:a2:41:07:b4:c1:c8:cd:f5:af:09: 14:92:41:89:23:8d:cc:13:57:26:84:67:87:e8:9d: 80:37:85:65:e8:85:9b:75:dd:c8:83:7a:b5:5d:24: 7a:c6:f6:93:36:97:97:3f:b0:8b:0b:9b:bf:9c:ef: 99:cd:97:c7:7f:10:41:36:7b:44:21:ed:cc:44:44: e9:21:0a:32:53:1b:73:59:64:27:34:85:74:78:37: 16:2d:e2:2a:eb:14:1b:eb:5f:39:7b:6e:76:47:47: e5:1b:ab:f1:78:55:df:67:5f:30:39:b6:ec:77:95: d7:79:32:89:61:41:52:58:e9:c8:5a:f1:7b:df:82: 24:98:c4:3e:49:4d:12:29:07:35:3b:48:87:a7:94: fc:81:82:cb:87:7d:68:49:08:68:cb:60:49:ec:7f: 7a:fe:f0:a9:f9:25:19:63:ee:9b:f2:47:b0:4c:87: d8:ea:a5:c4:7e:e6:d9:de:af:9d:ed:86:76:78:ed: fd:19:19:62:d7:2d:8c:bf:c8:9c:24:69:3d:4e:26: 38:55:68:a5:cc:db:2e:73:f4:9f:9e:9f:b7:f3:99: 95:d7:37:57:f0:fb:a8:fe:6c:fd:c8:e4:02:0f:f2: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:32:7C:C2:83:CB:59:32:ED:65:88:A6:E7:45:64:11:FC:8D:62:88 X509v3 Authority Key Identifier: keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/WTJ8woPLWTLtZYim50VkEfyNYog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.108.0/22 86.105.216.0/22 89.35.192.0/24 89.41.56.0/23 89.42.116.0/23 89.43.190.0/23 89.124.128.0-89.124.223.255 89.200.246.0/23 91.235.4.0/23 93.113.29.0/24 130.195.57.0/24 176.126.252.0/22 185.57.80.0/22 185.233.148.0/22 193.151.28.0/22 193.169.21.0/24 195.242.244.0/22 203.25.143.0/24 213.177.0.0/19 IPv6: 2a00:5dc0::/29 Signature Algorithm: sha256WithRSAEncryption 41:e7:a5:8b:5a:55:6f:12:bd:94:1f:bf:80:6e:4b:59:10:55: 96:da:49:db:9f:79:80:22:a9:13:30:85:cc:be:c7:e2:c1:4a: 3f:82:54:71:fa:b4:51:f7:8c:64:51:72:3e:b9:b4:3d:5f:78: f5:f2:bd:4f:cf:14:99:26:38:a3:e0:b5:b6:7a:ef:a4:04:4b: b5:d3:dc:31:d7:aa:b8:9a:53:98:44:29:c1:9e:74:c5:35:3a: d7:eb:7a:1b:b1:ff:02:3c:93:d4:c9:6f:58:8b:e5:de:6d:30: 22:b9:29:c0:58:f8:ec:59:ce:d2:08:54:26:6c:c1:f1:b5:ed: 18:ef:fc:ce:68:e1:83:77:5c:a9:c6:92:57:25:11:98:5c:94: 3a:97:a7:c1:35:f6:be:e2:eb:f4:5c:1d:d5:9a:61:5c:55:e2: ed:c5:a9:be:7e:3a:a9:b6:ae:8a:55:2f:a3:9f:fd:da:7b:24: bb:5f:0b:89:bd:3e:b8:12:db:b4:22:f7:cb:ce:9c:d5:9d:4d: 94:03:ac:e1:5e:6f:d6:26:ca:dc:00:7f:85:71:2d:05:d6:eb: 21:e6:88:82:b0:62:4d:1d:a8:43:d9:f6:db:e6:a3:7a:ea:b1: c8:a3:b4:e1:5c:3a:fc:11:d8:ad:87:0c:78:23:3e:5e:42:d9: cd:7a:eb:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt/8TzgBdd3ts01G8A5c49cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5 YjI5NmYwHhcNMjYwMTAyMTgyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTMyN2NjMjgzY2I1OTMyZWQ2NTg4YTZlNzQ1NjQxMWZjOGQ2Mjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JFdnW8xIXXZojfUnvE59sQrSKJB B7TByM31rwkUkkGJI43ME1cmhGeH6J2AN4Vl6IWbdd3Ig3q1XSR6xvaTNpeXP7CL C5u/nO+ZzZfHfxBBNntEIe3MRETpIQoyUxtzWWQnNIV0eDcWLeIq6xQb6185e252 R0flG6vxeFXfZ18wObbsd5XXeTKJYUFSWOnIWvF734IkmMQ+SU0SKQc1O0iHp5T8 gYLLh31oSQhoy2BJ7H96/vCp+SUZY+6b8kewTIfY6qXEfubZ3q+d7YZ2eO39GRli 1y2Mv8icJGk9TiY4VWilzNsuc/Sfnp+385mV1zdX8Puo/mz9yOQCD/KkewIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFFkyfMKDy1ky7WWIpudFZBH8jWKIMB8GA1UdIwQY MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct NzMxYWJjNmY3NWNhLzEvV1RKOHdvUExXVEx0WllpbTUwVmtFZnlOWW9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBgAQCAAEwegMEAlZp bAMEAlZp2AMEAFkjwAMEAVkpOAMEAVkqdAMEAVkrvjAMAwQHWXyAAwQFWXzAAwQB Wcj2AwQBW+sEAwQAXXEdAwQAgsM5AwQCsH78AwQCuTlQAwQCuemUAwQCwZccAwQA wakVAwQCw/L0AwQAyxmPAwQF1bEAMA0EAgACMAcDBQMqAF3AMA0GCSqGSIb3DQEB CwUAA4IBAQBB56WLWlVvEr2UH7+AbktZEFWW2knbn3mAIqkTMIXMvsfiwUo/glRx +rRR94xkUXI+ubQ9X3j18r1PzxSZJjij4LW2eu+kBEu109wx16q4mlOYRCnBnnTF NTrX63obsf8CPJPUyW9Yi+XebTAiuSnAWPjsWc7SCFQmbMHxte0Y7/zOaOGDd1yp xpJXJRGYXJQ6l6fBNfa+4uv0XB3VmmFcVeLtxam+fjqptq6KVS+jn/3aeyS7XwuJ vT64Etu0IvfLzpzVnU2UA6zhXm/WJsrcAH+FcS0F1ush5oiCsGJNHahD2fbb5qN6 6rHIo7ThXDr8Edithwx4Iz5eQtnNeuu0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:17 2026 by rpki-client