This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa File: wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa (raw, json) Hash identifier: iNHYhiuIOvx+WnYo71O2iLGhS7LwuKNxzeVE0KBxbXs= Subject key identifier: C2:03:C4:5F:33:9B:F2:47:2A:78:7D:06:87:4E:6E:00:2A:9D:AC:54 Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157 Certificate serial: 019B76EB2366152A25402768803FA3B5E955 Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa Signing time: Thu 01 Jan 2026 00:18:00 +0000 ROA not before: Thu 01 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48955 IP address blocks: 91.211.87.0/24 maxlen: 24 91.217.226.0/24 maxlen: 24 185.140.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:23:66:15:2a:25:40:27:68:80:3f:a3:b5:e9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157 Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c203c45f339bf2472a787d06874e6e002a9dac54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:48:a0:25:d2:db:b5:0c:1b:13:4c:79:63:20: ec:34:79:f4:41:fd:bc:85:c1:89:ae:db:9a:27:59: 3f:46:15:95:63:13:78:93:95:f6:02:e9:5b:44:66: dd:4d:1c:1c:6a:88:c2:e2:fa:05:80:27:7d:5d:39: 01:84:92:00:39:af:d2:72:b0:1b:cb:d2:11:00:63: c5:e7:0d:3e:58:8f:10:74:0b:aa:38:3b:fd:db:54: 99:72:e2:63:c3:06:17:13:d1:73:b2:65:ea:14:0a: e2:01:ff:62:e1:7a:ae:9e:a0:fe:c5:2f:8c:fe:14: ac:d6:b0:f6:0a:04:d6:fa:ec:b0:54:39:c1:ab:23: 17:14:e6:d6:ab:d4:e2:c0:0f:a3:30:8c:d6:1d:dd: 1d:ff:d7:99:50:c6:f4:9f:3c:24:7a:89:4f:99:c8: fc:5e:ea:d6:f6:6e:15:92:ec:35:3a:65:1d:76:d8: 34:f3:0f:75:fa:9b:72:f7:53:f5:b9:17:e4:06:8d: 09:25:9f:0f:c1:01:83:69:ae:0f:09:66:d2:98:2d: 28:36:13:fc:ca:d0:aa:e4:85:d8:79:22:da:06:3a: 0d:bc:e5:30:e4:55:a7:81:53:ce:7c:79:63:3f:22: 62:c3:40:a0:29:68:16:82:1e:ce:2b:62:c9:8c:ca: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:03:C4:5F:33:9B:F2:47:2A:78:7D:06:87:4E:6E:00:2A:9D:AC:54 X509v3 Authority Key Identifier: keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.87.0/24 91.217.226.0/24 185.140.251.0/24 Signature Algorithm: sha256WithRSAEncryption 32:39:5d:57:7e:d3:9d:14:1a:86:76:a3:ad:b1:11:4a:b5:82: 9d:27:2b:7b:be:cb:68:dd:f5:6b:9d:7b:33:30:22:cf:9c:4f: 5e:54:22:18:fd:6b:91:db:c3:6e:cd:da:16:46:05:0d:01:7d: 3c:21:af:a2:a8:19:6d:d2:d4:f7:a4:e1:a6:57:ee:a5:ee:d9: 73:44:90:f7:9d:cf:0b:43:38:1f:e8:12:64:59:93:4e:54:e9: af:4f:2b:8a:24:45:94:f1:18:a1:14:cc:f4:d0:da:d3:75:74: ca:4b:63:00:86:24:84:d8:db:c2:64:d2:18:86:a1:5c:58:a3: 81:e8:bc:ff:fd:c8:09:40:57:13:0d:25:0e:8c:ba:50:54:7f: f7:83:9e:74:06:dc:61:fb:0c:23:4e:ab:f3:f8:a7:06:91:cc: 71:9a:09:11:48:89:e3:ef:a8:23:80:8b:06:76:9c:ee:eb:48: 5d:cd:e3:69:4b:16:57:8f:27:77:dd:1e:aa:a2:15:5c:68:4e: b7:35:2d:d2:ee:b9:b1:44:dc:32:80:cb:35:ad:08:90:64:bd: 19:8c:61:15:39:4f:2c:a7:df:e3:b3:d4:8e:6d:ee:bf:9c:0c: 97:84:0d:dd:29:9b:b0:9e:af:75:5a:f1:46:04:46:b2:85:8a: 10:9c:10:fe -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26yNmFSolQCdogD+jtelVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4 MTUxNTcwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjAzYzQ1ZjMzOWJmMjQ3MmE3ODdkMDY4NzRlNmUwMDJhOWRhYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kigJdLbtQwbE0x5YyDsNHn0Qf28 hcGJrtuaJ1k/RhWVYxN4k5X2AulbRGbdTRwcaojC4voFgCd9XTkBhJIAOa/ScrAb y9IRAGPF5w0+WI8QdAuqODv921SZcuJjwwYXE9FzsmXqFAriAf9i4XqunqD+xS+M /hSs1rD2CgTW+uywVDnBqyMXFObWq9TiwA+jMIzWHd0d/9eZUMb0nzwkeolPmcj8 XurW9m4Vkuw1OmUddtg08w91+pty91P1uRfkBo0JJZ8PwQGDaa4PCWbSmC0oNhP8 ytCq5IXYeSLaBjoNvOUw5FWngVPOfHljPyJiw0CgKWgWgh7OK2LJjMrrAwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMIDxF8zm/JHKnh9BodObgAqnaxUMB8GA1UdIwQY MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt MzM4ODE0NjdhYzVlLzEvd2dQRVh6T2I4a2NxZUgwR2gwNXVBQ3FkckZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9NXAwQA W9niAwQAuYz7MA0GCSqGSIb3DQEBCwUAA4IBAQAyOV1XftOdFBqGdqOtsRFKtYKd Jyt7vsto3fVrnXszMCLPnE9eVCIY/WuR28NuzdoWRgUNAX08Ia+iqBlt0tT3pOGm V+6l7tlzRJD3nc8LQzgf6BJkWZNOVOmvTyuKJEWU8RihFMz00NrTdXTKS2MAhiSE 2NvCZNIYhqFcWKOB6Lz//cgJQFcTDSUOjLpQVH/3g550Btxh+wwjTqvz+KcGkcxx mgkRSInj76gjgIsGdpzu60hdzeNpSxZXjyd33R6qohVcaE63NS3S7rmxRNwygMs1 rQiQZL0ZjGEVOU8sp9/js9SObe6/nAyXhA3dKZuwnq91WvFGBEayhYoQnBD+ -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:23 2026 by rpki-client