This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WJ4Jy6vJt10hXJ4wxJI6ZOx7Ig0.roa File: WJ4Jy6vJt10hXJ4wxJI6ZOx7Ig0.roa (raw, json) Hash identifier: qp+bB+494AtK+TFe7yvjATR+N6zBna16BJglFUyapsE= Subject key identifier: 58:9E:09:CB:AB:C9:B7:5D:21:5C:9E:30:C4:92:3A:64:EC:7B:22:0D Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB87545689F44052938A19B14571F Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WJ4Jy6vJt10hXJ4wxJI6ZOx7Ig0.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33993 IP address blocks: 2.56.178.0/24 maxlen: 24 45.12.114.0/24 maxlen: 24 45.12.115.0/24 maxlen: 24 45.128.49.0/24 maxlen: 24 45.128.53.0/24 maxlen: 24 141.98.188.0/24 maxlen: 24 141.98.189.0/24 maxlen: 24 141.98.190.0/24 maxlen: 24 141.98.191.0/24 maxlen: 24 171.22.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b8:75:45:68:9f:44:05:29:38:a1:9b:14:57:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=589e09cbabc9b75d215c9e30c4923a64ec7b220d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:ee:15:40:9a:6f:55:f2:a7:f3:f8:61:65: e9:0c:51:e1:8f:01:63:f3:4b:87:ed:a7:49:23:72: 5b:65:a7:96:cd:f2:71:68:27:5f:f1:d6:b3:3f:18: 62:bb:f5:d0:4a:8e:d7:0a:9f:7d:de:23:0a:37:f4: 3e:21:06:2e:7c:c6:29:63:e1:0b:cd:a6:a6:65:67: b6:29:5f:7f:89:9a:29:56:25:f4:60:86:fa:d5:16: 6b:ef:a6:f7:b3:73:1f:1f:e6:0b:f0:50:01:4c:cd: c8:86:a0:4d:b2:63:86:6c:13:7f:e0:e2:17:e9:2b: d4:ae:b3:ba:56:79:df:21:70:39:ea:81:e8:73:93: 11:33:6c:43:df:38:53:20:70:b0:8d:a2:3e:b4:c6: 79:2f:e6:29:07:8e:1d:cc:f6:02:c5:d4:5d:38:c3: f5:a8:b7:97:82:37:02:27:57:ae:65:d6:51:53:9a: 25:2b:5b:c9:b8:e2:78:40:02:14:2a:4d:30:ee:f2: 5f:e5:36:d8:51:c1:42:57:0c:53:26:f0:24:4f:59: 3f:41:97:9f:3a:61:83:0b:d0:ba:46:cb:df:eb:22: f7:df:10:61:18:7b:a8:96:e4:3a:0c:b0:59:ba:65: 80:51:ad:a1:54:50:f5:82:9f:76:d8:29:62:ce:ff: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:09:CB:AB:C9:B7:5D:21:5C:9E:30:C4:92:3A:64:EC:7B:22:0D X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WJ4Jy6vJt10hXJ4wxJI6ZOx7Ig0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.178.0/24 45.12.114.0/23 45.128.49.0/24 45.128.53.0/24 141.98.188.0/22 171.22.119.0/24 Signature Algorithm: sha256WithRSAEncryption 81:f5:52:4e:6a:89:86:f0:16:91:2d:ac:b8:8c:f0:5c:57:28: 0b:ef:68:3b:cf:b6:d2:7d:44:7a:0c:17:5a:9e:c0:c4:dd:03: b5:30:1b:26:5e:79:01:aa:0b:8e:b7:35:aa:51:27:48:f0:7b: e7:9c:c7:fc:fb:e5:98:a2:9a:84:db:11:95:4e:13:8e:4e:ce: cb:bc:fa:a6:ee:fd:67:29:63:9c:30:7d:97:cd:1c:cd:76:da: 2f:d4:ef:cb:63:0f:2b:ae:55:ae:08:09:a9:bb:dd:91:2f:68: d8:e3:44:79:80:3a:d4:37:94:f5:be:c8:b3:84:a7:c5:56:a6: 60:1b:28:b9:f1:40:fb:87:bf:41:5f:4c:9f:65:fe:58:8e:79: 7c:b9:6b:a3:5b:53:0a:0c:c6:2a:70:97:28:ba:3d:cd:8b:ba: 81:d2:0b:1b:4e:ac:25:73:7c:bf:ae:f8:bb:0f:2b:f0:d4:74: 02:2a:b8:a5:7a:df:08:0a:3d:98:6e:66:88:fc:eb:29:5e:5b: 1e:f6:24:48:86:36:d0:76:86:75:d2:0e:02:02:03:0d:ae:97: 1e:a4:78:9d:8d:95:b2:b2:15:85:cd:1e:8e:e5:ad:03:2d:d5: 5d:e6:33:fc:7d:0c:62:1b:b4:0e:7c:69:47:5c:11:d3:1f:38: d6:e9:7d:9b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt26rh1RWifRAUpOKGbFFcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODllMDljYmFiYzliNzVkMjE1YzllMzBjNDkyM2E2NGVjN2IyMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1TuFUCab1Xyp/P4YWXpDFHhjwFj 80uH7adJI3JbZaeWzfJxaCdf8dazPxhiu/XQSo7XCp993iMKN/Q+IQYufMYpY+EL zaamZWe2KV9/iZopViX0YIb61RZr76b3s3MfH+YL8FABTM3IhqBNsmOGbBN/4OIX 6SvUrrO6VnnfIXA56oHoc5MRM2xD3zhTIHCwjaI+tMZ5L+YpB44dzPYCxdRdOMP1 qLeXgjcCJ1euZdZRU5olK1vJuOJ4QAIUKk0w7vJf5TbYUcFCVwxTJvAkT1k/QZef OmGDC9C6Rsvf6yL33xBhGHuoluQ6DLBZumWAUa2hVFD1gp922Clizv8aKQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFieCcurybddIVyeMMSSOmTseyINMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvV0o0Snk2dkp0MTBoWEo0d3hKSTZaT3g3SWcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjiyAwQB LQxyAwQALYAxAwQALYA1AwQCjWK8AwQAqxZ3MA0GCSqGSIb3DQEBCwUAA4IBAQCB 9VJOaomG8BaRLay4jPBcVygL72g7z7bSfUR6DBdansDE3QO1MBsmXnkBqguOtzWq USdI8HvnnMf8++WYopqE2xGVThOOTs7LvPqm7v1nKWOcMH2XzRzNdtov1O/LYw8r rlWuCAmpu92RL2jY40R5gDrUN5T1vsizhKfFVqZgGyi58UD7h79BX0yfZf5Yjnl8 uWujW1MKDMYqcJcouj3Ni7qB0gsbTqwlc3y/rvi7Dyvw1HQCKrilet8ICj2YbmaI /OspXlse9iRIhjbQdoZ10g4CAgMNrpcepHidjZWyshWFzR6O5a0DLdVd5jP8fQxi G7QOfGlHXBHTHzjW6X2b -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:51 2026 by rpki-client