This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/Wc1p-DpPzNdXtLyd3sx2az35Zww.roa File: Wc1p-DpPzNdXtLyd3sx2az35Zww.roa (raw, json) Hash identifier: v3gxQPsBigcTifxf0QwdjAT04GF+RnrhxMrjTFKL3EU= Subject key identifier: 59:CD:69:F8:3A:4F:CC:D7:57:B4:BC:9D:DE:CC:76:6B:3D:F9:67:0C Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db Certificate serial: 019BE575A25BBF4603F1B737E0D736EE451B Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/Wc1p-DpPzNdXtLyd3sx2az35Zww.roa Signing time: Thu 22 Jan 2026 11:27:30 +0000 ROA not before: Thu 22 Jan 2026 11:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 155.55.0.0/17 maxlen: 17 155.55.128.0/18 maxlen: 18 2001:678:9dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:75:a2:5b:bf:46:03:f1:b7:37:e0:d7:36:ee:45:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db Validity Not Before: Jan 22 11:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59cd69f83a4fccd757b4bc9ddecc766b3df9670c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:57:39:68:f0:1a:cf:b9:27:e9:f7:06:66: dc:7b:e0:4b:62:36:28:27:ca:00:f6:cd:15:72:dd: 6d:bd:a9:e4:55:7a:a8:0c:70:48:e9:07:ff:f2:cb: 6c:9b:90:02:cd:05:51:14:d8:a3:71:57:94:5d:f1: f4:2b:fd:d4:74:86:b3:63:8e:40:3e:7a:cf:97:16: 32:74:61:ff:d7:b4:29:f4:c3:8b:43:16:91:c9:9c: 7b:d4:b7:03:ce:dc:52:89:01:d2:a3:ef:b5:cc:c7: 28:d8:23:05:6b:27:dc:ef:ce:92:fa:eb:8b:7d:c7: 9a:a4:59:3a:2d:63:d6:7c:92:b2:a4:78:1c:0c:e5: 29:78:5a:a6:d4:f3:e3:a6:b1:ce:d1:49:8a:20:d5: a8:41:f1:8a:38:42:f7:fa:d5:d7:12:03:8b:fe:18: eb:17:d3:7e:9c:56:6d:f1:5d:3a:dc:65:a6:92:6b: 43:1a:f9:a9:96:f6:c7:6b:6e:f9:e1:f8:ea:6c:53: c3:ce:3a:1a:31:60:85:9b:b9:d7:b8:85:ab:ec:e5: 6b:4d:41:e0:39:8b:f1:de:e2:4f:1b:62:d9:6e:71: ea:41:ca:50:a8:c1:52:d6:61:0b:0e:7f:29:23:f5: 8a:9b:75:5f:e5:42:32:1a:de:93:10:45:fe:e0:3f: 12:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:69:F8:3A:4F:CC:D7:57:B4:BC:9D:DE:CC:76:6B:3D:F9:67:0C X509v3 Authority Key Identifier: keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/Wc1p-DpPzNdXtLyd3sx2az35Zww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.55.0.0-155.55.191.255 IPv6: 2001:678:9dc::/48 Signature Algorithm: sha256WithRSAEncryption 81:4f:09:45:e0:6e:4d:01:60:88:64:a4:66:d8:8b:3a:2b:e4: 1d:64:b5:d7:2b:78:81:51:00:b8:18:b7:38:9a:7a:cc:ba:5c: ca:81:aa:10:46:da:48:a2:ef:cf:53:bb:45:e9:66:4d:3d:54: 88:e4:a0:4a:94:e5:8c:c3:ab:38:b4:0e:1c:3f:38:07:46:bb: 3c:6d:91:7a:38:0b:43:bd:02:c1:84:a6:20:bb:48:95:61:9f: 20:2e:f6:05:1e:75:1d:2c:71:d7:c3:c9:d1:9c:df:2d:f9:d7: b6:d9:5b:1e:b0:18:51:2d:d9:3b:8a:6c:2d:eb:91:a9:65:78: c1:03:d1:96:41:c8:92:fb:eb:4c:dd:8c:21:d6:36:c1:c0:c6: a1:c7:0f:61:58:4b:55:39:dc:c5:62:c9:49:f3:09:4e:a4:dc: 69:ab:fb:93:c0:e5:6b:12:0b:bc:6e:63:d0:ab:19:5b:f9:66: be:47:8e:56:48:f1:b2:a7:3b:28:43:21:09:2f:1b:0b:db:7a: 0f:64:24:dd:6e:65:89:87:29:a2:a0:fc:41:fa:eb:b5:48:87: 6a:63:1c:ba:7d:62:f7:c2:5d:c7:52:bf:6e:35:ee:fc:a3:b2: 6d:be:e3:d1:38:d4:b6:6a:1a:6c:0f:2c:ac:39:aa:13:77:b6: a0:35:4a:9f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvldaJbv0YD8bc34Nc27kUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDYzMjVlMzQ0MThhNTdjZTU2NmVmYzBjM2U4YjM4YTBl ZmE1ZGIwHhcNMjYwMTIyMTEyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWNkNjlmODNhNGZjY2Q3NTdiNGJjOWRkZWNjNzY2YjNkZjk2NzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+JXOWjwGs+5J+n3Bmbce+BLYjYo J8oA9s0Vct1tvankVXqoDHBI6Qf/8stsm5ACzQVRFNijcVeUXfH0K/3UdIazY45A PnrPlxYydGH/17Qp9MOLQxaRyZx71LcDztxSiQHSo++1zMco2CMFayfc786S+uuL fceapFk6LWPWfJKypHgcDOUpeFqm1PPjprHO0UmKINWoQfGKOEL3+tXXEgOL/hjr F9N+nFZt8V063GWmkmtDGvmplvbHa2754fjqbFPDzjoaMWCFm7nXuIWr7OVrTUHg OYvx3uJPG2LZbnHqQcpQqMFS1mELDn8pI/WKm3Vf5UIyGt6TEEX+4D8SqwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFnNafg6T8zXV7S8nd7Mdms9+WcMMB8GA1UdIwQY MBaAFFkGMl40QYpXzlZu/Aw+izig76XbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2Yt YjIxN2E2OGNlYWY0LzEvV2MxcC1EcFB6TmRYdEx5ZDNzeDJhejM1Wnd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2YtYjIxN2E2OGNlYWY0 LzEvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjATBAIAATANMAsDAwCbNwME Bps3gDAPBAIAAjAJAwcAIAEGeAncMA0GCSqGSIb3DQEBCwUAA4IBAQCBTwlF4G5N AWCIZKRm2Is6K+QdZLXXK3iBUQC4GLc4mnrMulzKgaoQRtpIou/PU7tF6WZNPVSI 5KBKlOWMw6s4tA4cPzgHRrs8bZF6OAtDvQLBhKYgu0iVYZ8gLvYFHnUdLHHXw8nR nN8t+de22VsesBhRLdk7imwt65GpZXjBA9GWQciS++tM3Ywh1jbBwMahxw9hWEtV OdzFYslJ8wlOpNxpq/uTwOVrEgu8bmPQqxlb+Wa+R45WSPGypzsoQyEJLxsL23oP ZCTdbmWJhymioPxB+uu1SIdqYxy6fWL3wl3HUr9uNe78o7JtvuPRONS2ahpsDyys OaoTd7agNUqf -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:11 2026 by rpki-client