This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/WvR_PyZn7HQBLy1Van9znwED4dU.roa File: WvR_PyZn7HQBLy1Van9znwED4dU.roa (raw, json) Hash identifier: 5FqxeqmUCHn2vzUhg58G9qJL/lfqVbvp/uqG5bnLGIU= Subject key identifier: 5A:F4:7F:3F:26:67:EC:74:01:2F:2D:55:6A:7F:73:9F:01:03:E1:D5 Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155 Certificate serial: 019B7F156C10204EEB1366A9F33805DD7F1B Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/WvR_PyZn7HQBLy1Van9znwED4dU.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35540 IP address blocks: 109.190.0.0/16 maxlen: 16 151.127.0.0/16 maxlen: 16 2001:41d0:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6c:10:20:4e:eb:13:66:a9:f3:38:05:dd:7f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5af47f3f2667ec74012f2d556a7f739f0103e1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:4e:41:58:5f:c4:92:de:97:93:54:d8:37: e4:69:2a:7e:7c:f1:f2:07:c5:72:cc:98:de:cd:a1: 82:32:3e:e2:6b:ad:4b:67:ee:e9:8d:02:ad:41:21: 47:9e:3e:9c:06:41:53:e5:b0:a3:3c:c9:28:78:81: 48:d6:52:23:64:28:cf:9a:6d:86:3c:94:3a:f9:05: 42:a5:7d:22:71:59:af:4c:87:d2:44:5c:ef:55:36: 45:cb:09:d1:f8:dc:e7:43:44:cd:5b:82:d1:e4:a8: 08:34:b3:53:56:e5:45:c4:cd:35:e9:cd:2b:54:09: 76:18:b2:18:93:2e:a5:32:bf:c3:fd:44:98:67:65: 7a:99:94:d6:45:3a:72:21:29:33:5a:9c:0d:ee:0d: e6:2c:46:0a:09:8f:f9:6b:eb:b2:8a:2e:9e:d6:b2: 7a:5c:4b:d7:09:4e:a6:34:17:a2:ee:fb:67:28:5f: dc:ae:8f:2f:c1:c3:f1:8a:19:c6:e4:2d:6c:64:e5: b4:3b:9e:9f:d1:08:0a:4b:2e:5a:28:ad:25:d0:06: 52:b4:aa:b4:6b:ba:13:b8:e3:82:0c:bd:23:86:ba: b4:38:59:d3:68:00:c9:5b:b4:17:2b:28:f9:03:7d: 68:88:41:24:27:b3:2d:f2:8f:99:81:b8:47:2a:d6: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:7F:3F:26:67:EC:74:01:2F:2D:55:6A:7F:73:9F:01:03:E1:D5 X509v3 Authority Key Identifier: keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/WvR_PyZn7HQBLy1Van9znwED4dU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.190.0.0/16 151.127.0.0/16 IPv6: 2001:41d0:fc00::/38 Signature Algorithm: sha256WithRSAEncryption 73:19:61:f5:19:6f:f0:10:d6:06:33:72:e5:11:a1:48:ff:18: 01:55:0e:89:19:20:a6:c9:28:15:a1:2b:26:44:34:00:50:f9: 2b:0d:c8:f0:bf:71:f5:1a:7e:3c:a6:fc:5b:d9:cb:76:89:67: 88:8a:67:49:90:50:27:36:24:a7:33:14:84:46:af:6f:81:88: 75:73:a0:10:5e:8d:ff:90:ea:10:d5:78:ff:81:4b:74:e2:37: d8:34:58:9b:a5:25:65:2d:c1:c8:2a:15:96:ed:fc:ba:36:7d: 7b:3e:11:01:61:0c:43:1e:7c:62:39:fd:3e:e6:46:7b:59:0b: 83:46:22:0a:08:91:49:b1:b6:0d:9c:cb:ac:55:e1:a6:d4:3a: eb:cb:77:06:43:b1:44:96:fd:5c:cb:f2:de:b1:12:e7:b3:0f: a9:f0:37:60:e7:7c:d7:9f:cb:a9:02:69:58:dd:dc:14:54:83: 09:b8:c6:3a:c4:26:6d:e7:94:67:e3:14:8c:4b:20:5a:f1:86: 12:f1:61:68:73:14:71:c3:88:0c:5c:9c:06:49:b2:37:99:53: 48:fa:42:54:ca:23:0c:ac:6e:10:ed:48:02:7c:80:a7:ec:10: f8:aa:ce:ba:da:17:50:00:1b:91:c3:31:d2:b5:d9:e1:36:4f: f9:df:80:48 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FWwQIE7rE2ap8zgF3X8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYTlmZmY2M2EzNDc3OTU3ZmY3NWNjZGMwMDNkYWI2OGNm OWQxNTUwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWY0N2YzZjI2NjdlYzc0MDEyZjJkNTU2YTdmNzM5ZjAxMDNlMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyVOQVhfxJLel5NU2DfkaSp+fPHy B8VyzJjezaGCMj7ia61LZ+7pjQKtQSFHnj6cBkFT5bCjPMkoeIFI1lIjZCjPmm2G PJQ6+QVCpX0icVmvTIfSRFzvVTZFywnR+NznQ0TNW4LR5KgINLNTVuVFxM016c0r VAl2GLIYky6lMr/D/USYZ2V6mZTWRTpyISkzWpwN7g3mLEYKCY/5a+uyii6e1rJ6 XEvXCU6mNBei7vtnKF/cro8vwcPxihnG5C1sZOW0O56f0QgKSy5aKK0l0AZStKq0 a7oTuOOCDL0jhrq0OFnTaADJW7QXKyj5A31oiEEkJ7Mt8o+ZgbhHKtblZwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFr0fz8mZ+x0AS8tVWp/c58BA+HVMB8GA1UdIwQY MBaAFICp//Y6NHeVf/dczcAD2raM+dFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTIt NDdkOThlNTg1NDVhLzEvV3ZSX1B5Wm43SFFCTHkxVmFuOXpud0VENGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTItNDdkOThlNTg1NDVh LzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAQBAIAATAKAwMAbb4DAwCX fzAOBAIAAjAIAwYCIAFB0PwwDQYJKoZIhvcNAQELBQADggEBAHMZYfUZb/AQ1gYz cuURoUj/GAFVDokZIKbJKBWhKyZENABQ+SsNyPC/cfUafjym/FvZy3aJZ4iKZ0mQ UCc2JKczFIRGr2+BiHVzoBBejf+Q6hDVeP+BS3TiN9g0WJulJWUtwcgqFZbt/Lo2 fXs+EQFhDEMefGI5/T7mRntZC4NGIgoIkUmxtg2cy6xV4abUOuvLdwZDsUSW/VzL 8t6xEuezD6nwN2DnfNefy6kCaVjd3BRUgwm4xjrEJm3nlGfjFIxLIFrxhhLxYWhz FHHDiAxcnAZJsjeZU0j6QlTKIwysbhDtSAJ8gKfsEPiqzrraF1AAG5HDMdK12eE2 T/nfgEg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:07 2026 by rpki-client