This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/WT8soFb0G2lfILU2qZ5H18IGdzM.roa File: WT8soFb0G2lfILU2qZ5H18IGdzM.roa (raw, json) Hash identifier: UUtAQrRto8WY3idcaUY5KVtJEryFTswf23QBr9mGoPQ= Subject key identifier: 59:3F:2C:A0:56:F4:1B:69:5F:20:B5:36:A9:9E:47:D7:C2:06:77:33 Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Certificate serial: 019BE16FAA8E413AC12411DCF5EE51177F99 Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/WT8soFb0G2lfILU2qZ5H18IGdzM.roa Signing time: Wed 21 Jan 2026 16:42:30 +0000 ROA not before: Wed 21 Jan 2026 16:42:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 89.126.225.0/24 maxlen: 24 89.126.226.0/24 maxlen: 24 89.126.227.0/24 maxlen: 24 89.126.229.0/24 maxlen: 24 89.126.230.0/24 maxlen: 24 89.126.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:6f:aa:8e:41:3a:c1:24:11:dc:f5:ee:51:17:7f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Validity Not Before: Jan 21 16:42:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=593f2ca056f41b695f20b536a99e47d7c2067733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4b:7a:4a:54:2b:9c:6a:03:a0:3e:9e:5f:7a: 53:d3:5b:ef:c2:6b:2a:20:c5:6e:bd:e9:fb:84:72: 82:2f:62:57:6f:ee:df:e1:86:e9:07:cd:6c:76:dc: bc:3f:a7:55:a5:e0:07:80:ce:94:34:11:9f:56:1c: 19:dc:c2:5a:2e:21:0d:7b:81:be:6c:3a:bb:16:d1: 05:84:9a:ca:00:36:f1:60:42:90:ab:ef:9a:24:32: 2d:89:50:87:a4:64:a2:0a:f5:76:47:30:2b:67:fa: 69:bb:de:53:97:04:93:16:95:16:a9:fb:b5:98:0a: 9a:9f:31:63:7b:d6:55:6c:48:23:73:e1:e8:d9:72: c9:1d:d3:e7:92:42:93:29:c8:c6:f6:ce:47:03:65: 84:67:ac:27:d5:ec:59:6f:77:73:86:7d:ed:d4:95: b6:05:a5:7d:e5:19:ba:74:f9:cb:c1:f0:48:78:be: aa:97:7f:d4:4c:aa:0d:69:81:c4:81:20:1a:ec:04: 38:d6:73:b4:e1:78:bb:a1:39:d1:0f:46:07:92:49: 25:aa:28:de:49:00:6c:34:3c:37:e3:96:41:4b:56: 18:bb:c3:aa:91:1e:f5:2e:94:2c:33:de:90:9c:b7: f1:5f:88:4d:19:b1:83:c8:17:e2:91:b4:3a:6b:de: cd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3F:2C:A0:56:F4:1B:69:5F:20:B5:36:A9:9E:47:D7:C2:06:77:33 X509v3 Authority Key Identifier: keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/WT8soFb0G2lfILU2qZ5H18IGdzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.126.225.0-89.126.227.255 89.126.229.0-89.126.231.255 Signature Algorithm: sha256WithRSAEncryption 05:34:df:b0:86:d6:92:46:cc:bf:6c:7d:5b:4a:b2:91:27:f7: 6c:af:e0:48:c7:eb:91:09:41:79:58:73:ad:9e:ae:1d:4b:65: 38:ec:21:a9:e3:eb:3a:cb:cb:87:19:2c:eb:42:60:41:80:7a: 7e:4d:53:aa:d4:61:4e:03:aa:cb:14:d0:3e:e2:2f:40:d0:a5: 44:47:e1:02:e2:64:a1:ee:90:d8:fe:bb:1e:59:d8:c0:ad:f6: eb:7c:71:e6:04:d2:e4:6e:aa:ee:2d:e1:7f:3f:97:09:8f:b2: 76:9d:8d:0d:38:5a:bb:b5:36:66:d0:30:be:23:e0:61:f3:9a: a4:ad:7a:23:14:a0:9d:f2:be:cb:90:ad:09:5b:76:78:70:c7: bf:55:6b:11:1a:8c:59:16:77:8d:23:35:3e:75:ab:06:c2:da: 18:00:65:8e:a3:e8:6b:00:48:69:d9:37:3a:21:3e:1d:2d:df: 1c:09:5c:6f:ce:fb:1b:d9:33:b3:6e:f9:56:b6:da:a6:6d:52: b8:20:c3:64:c5:97:de:86:8f:7a:94:98:43:86:60:86:db:f9: 6d:67:45:6a:8a:ce:c5:87:79:fd:e2:3c:fc:79:51:37:46:e0: d5:8a:a1:fd:a2:43:f9:c7:c2:eb:a4:65:3e:e5:b3:01:ba:5e: 2c:1c:34:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZvhb6qOQTrBJBHc9e5RF3+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl MjlkMjUwHhcNMjYwMTIxMTY0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTNmMmNhMDU2ZjQxYjY5NWYyMGI1MzZhOTllNDdkN2MyMDY3NzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkt6SlQrnGoDoD6eX3pT01vvwmsq IMVuven7hHKCL2JXb+7f4YbpB81sdty8P6dVpeAHgM6UNBGfVhwZ3MJaLiENe4G+ bDq7FtEFhJrKADbxYEKQq++aJDItiVCHpGSiCvV2RzArZ/ppu95TlwSTFpUWqfu1 mAqanzFje9ZVbEgjc+Ho2XLJHdPnkkKTKcjG9s5HA2WEZ6wn1exZb3dzhn3t1JW2 BaV95Rm6dPnLwfBIeL6ql3/UTKoNaYHEgSAa7AQ41nO04Xi7oTnRD0YHkkklqije SQBsNDw345ZBS1YYu8OqkR71LpQsM96QnLfxX4hNGbGDyBfikbQ6a97NJwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFFk/LKBW9BtpXyC1NqmeR9fCBnczMB8GA1UdIwQY MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct NWNmNTZlZTQzNWIzLzEvV1Q4c29GYjBHMmxmSUxVMnFaNUgxOElHZHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABZfuED BAJZfuAwDAMEAFl+5QMEA1l+4DANBgkqhkiG9w0BAQsFAAOCAQEABTTfsIbWkkbM v2x9W0qykSf3bK/gSMfrkQlBeVhzrZ6uHUtlOOwhqePrOsvLhxks60JgQYB6fk1T qtRhTgOqyxTQPuIvQNClREfhAuJkoe6Q2P67HlnYwK3263xx5gTS5G6q7i3hfz+X CY+ydp2NDThau7U2ZtAwviPgYfOapK16IxSgnfK+y5CtCVt2eHDHv1VrERqMWRZ3 jSM1PnWrBsLaGABljqPoawBIadk3OiE+HS3fHAlcb877G9kzs275Vrbapm1SuCDD ZMWX3oaPepSYQ4Zghtv5bWdFaorOxYd5/eI8/HlRN0bg1Yqh/aJD+cfC66RlPuWz AbpeLBw0hA== -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:34 2026 by rpki-client