This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/wp6uiGrJ4kjvwZ8tHt_RT5DTcms.roa File: wp6uiGrJ4kjvwZ8tHt_RT5DTcms.roa (raw, json) Hash identifier: VFhk9hTGSYfetlFbp/u5F1XNCOx7IZQTp3tsScBlLMU= Subject key identifier: C2:9E:AE:88:6A:C9:E2:48:EF:C1:9F:2D:1E:DF:D1:4F:90:D3:72:6B Certificate issuer: /CN=f10d39eddb008d1b89df9741960dbf2044f657fb Certificate serial: 019B7EA753E2D73B01BACC38BDA03756CE84 Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/wp6uiGrJ4kjvwZ8tHt_RT5DTcms.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39923 IP address blocks: 91.238.219.0/24 maxlen: 24 109.68.0.0/21 maxlen: 21 109.68.160.0/21 maxlen: 21 109.68.160.0/24 maxlen: 24 109.68.161.0/24 maxlen: 24 109.68.162.0/24 maxlen: 24 109.68.163.0/24 maxlen: 24 109.68.164.0/24 maxlen: 24 109.68.165.0/24 maxlen: 24 109.68.166.0/24 maxlen: 24 109.68.167.0/24 maxlen: 24 109.68.240.0/21 maxlen: 21 185.35.164.0/22 maxlen: 22 185.35.164.0/24 maxlen: 24 185.35.165.0/24 maxlen: 24 185.35.166.0/24 maxlen: 24 185.35.167.0/24 maxlen: 24 185.58.96.0/22 maxlen: 22 185.58.96.0/24 maxlen: 24 185.58.97.0/24 maxlen: 24 185.58.98.0/24 maxlen: 24 185.58.99.0/24 maxlen: 24 185.111.204.0/22 maxlen: 22 185.111.204.0/24 maxlen: 24 185.111.205.0/24 maxlen: 24 185.111.206.0/24 maxlen: 24 185.111.207.0/24 maxlen: 24 194.145.127.0/24 maxlen: 24 194.145.152.0/24 maxlen: 24 194.145.155.0/24 maxlen: 24 194.146.23.0/24 maxlen: 24 195.189.202.0/23 maxlen: 23 195.189.202.0/24 maxlen: 24 195.189.203.0/24 maxlen: 24 2a02:2a08::/32 maxlen: 32 2a04:6480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:53:e2:d7:3b:01:ba:cc:38:bd:a0:37:56:ce:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c29eae886ac9e248efc19f2d1edfd14f90d3726b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:6f:c8:1d:ab:35:98:d0:95:ff:b3:10:4a: ec:9b:b9:b2:78:27:c7:c4:4d:61:57:45:d1:c0:8b: c2:fd:3e:d8:55:0a:3b:15:21:f3:da:31:50:e5:55: cc:c8:55:5e:0e:47:b6:7f:c6:23:c4:d0:7f:04:ef: dc:bd:46:9d:ee:a3:b4:a1:be:b5:1e:55:b0:20:a8: d3:48:e8:b5:35:0c:1d:7f:a7:3a:b0:41:4a:f9:91: ae:88:9b:2b:fd:c4:f2:74:f4:0f:5b:9f:37:b1:8c: 54:53:f0:7a:b3:ae:ee:12:59:99:1f:44:bb:40:36: c0:05:87:e1:05:32:c1:c1:56:68:18:19:02:5f:ec: 36:e4:c8:e7:00:ae:2f:0b:22:04:92:85:f3:9f:4c: 4a:5c:b6:4e:0d:ad:b7:5f:c5:e7:54:eb:48:ed:31: 34:9d:74:97:dd:0a:00:0f:c5:8c:45:e1:0b:f2:ab: 99:b4:31:6b:60:de:76:43:2f:cd:e9:74:61:ea:3e: e7:be:0d:9a:0a:f8:34:22:dc:c9:19:e3:4a:63:d8: 10:d7:da:af:da:05:6b:d7:92:e8:94:35:ec:ab:e4: b4:c2:40:d7:41:52:f1:45:bd:ae:fc:4e:39:ad:08: 4d:96:6d:5f:cb:c7:38:a3:87:6b:db:da:3c:92:8a: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9E:AE:88:6A:C9:E2:48:EF:C1:9F:2D:1E:DF:D1:4F:90:D3:72:6B X509v3 Authority Key Identifier: keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/wp6uiGrJ4kjvwZ8tHt_RT5DTcms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.219.0/24 109.68.0.0/21 109.68.160.0/21 109.68.240.0/21 185.35.164.0/22 185.58.96.0/22 185.111.204.0/22 194.145.127.0/24 194.145.152.0/24 194.145.155.0/24 194.146.23.0/24 195.189.202.0/23 IPv6: 2a02:2a08::/32 2a04:6480::/29 Signature Algorithm: sha256WithRSAEncryption 0d:e2:9e:9a:4a:23:e6:cf:3c:8a:20:0e:4d:fd:ed:2e:1e:c6: 12:09:96:49:2c:db:bf:e9:0c:3a:70:81:b4:5b:b4:45:8e:6f: 06:ec:98:9b:24:be:35:4f:e9:1a:99:1e:bd:e1:8c:a4:47:3f: 5f:4f:ad:0f:2f:8d:12:67:b2:a7:b9:93:cc:49:70:d1:8d:65: 76:73:7f:ec:29:ba:e4:4f:f6:48:1f:fa:7d:f9:69:fb:ef:ea: 62:43:26:37:aa:a4:14:82:26:29:13:e3:34:af:38:2f:d1:74: c1:9d:44:3d:d6:7b:be:80:2d:48:12:17:df:a0:f7:2c:c6:f5: 57:12:25:d3:3b:87:fe:d6:c7:9a:7c:b9:bf:93:b2:d0:a8:e0: bb:f9:f8:ea:3e:33:d3:6c:76:0a:8d:01:0f:f8:1e:db:54:26: 63:97:78:4d:7e:48:2f:46:d8:bb:76:41:31:64:54:33:36:d5: c4:61:71:05:95:84:a0:26:3e:47:84:dc:b6:2b:3f:34:11:7c: 1e:86:1a:b6:25:28:04:7b:07:ac:fd:84:86:57:8b:d6:6c:db: 9e:a9:cb:4e:96:88:a4:5d:11:5a:14:60:37:00:a9:f6:09:d7: d3:78:23:a8:d8:68:76:ad:1e:82:4c:02:ca:77:ad:50:5b:53: c4:b5:31:1d -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZt+p1Pi1zsBusw4vaA3Vs6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMGQzOWVkZGIwMDhkMWI4OWRmOTc0MTk2MGRiZjIwNDRm NjU3ZmIwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjllYWU4ODZhYzllMjQ4ZWZjMTlmMmQxZWRmZDE0ZjkwZDM3MjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGdvyB2rNZjQlf+zEErsm7myeCfH xE1hV0XRwIvC/T7YVQo7FSHz2jFQ5VXMyFVeDke2f8YjxNB/BO/cvUad7qO0ob61 HlWwIKjTSOi1NQwdf6c6sEFK+ZGuiJsr/cTydPQPW583sYxUU/B6s67uElmZH0S7 QDbABYfhBTLBwVZoGBkCX+w25MjnAK4vCyIEkoXzn0xKXLZODa23X8XnVOtI7TE0 nXSX3QoAD8WMReEL8quZtDFrYN52Qy/N6XRh6j7nvg2aCvg0ItzJGeNKY9gQ19qv 2gVr15LolDXsq+S0wkDXQVLxRb2u/E45rQhNlm1fy8c4o4dr29o8koqmPwIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFMKerohqyeJI78GfLR7f0U+Q03JrMB8GA1UdIwQY MBaAFPENOe3bAI0bid+XQZYNvyBE9lf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt ZjU2MmI4OTc0ZDhiLzEvd3A2dWlHcko0a2p2d1o4dEh0X1JUNURUY21zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi LzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBOBAIAATBIAwQAW+7bAwQD bUQAAwQDbUSgAwQDbUTwAwQCuSOkAwQCuTpgAwQCuW/MAwQAwpF/AwQAwpGYAwQA wpGbAwQAwpIXAwQBw73KMBQEAgACMA4DBQAqAioIAwUDKgRkgDANBgkqhkiG9w0B AQsFAAOCAQEADeKemkoj5s88iiAOTf3tLh7GEgmWSSzbv+kMOnCBtFu0RY5vBuyY myS+NU/pGpkeveGMpEc/X0+tDy+NEmeyp7mTzElw0Y1ldnN/7Cm65E/2SB/6fflp ++/qYkMmN6qkFIImKRPjNK84L9F0wZ1EPdZ7voAtSBIX36D3LMb1VxIl0zuH/tbH mny5v5Oy0Kjgu/n46j4z02x2Co0BD/ge21QmY5d4TX5IL0bYu3ZBMWRUMzbVxGFx BZWEoCY+R4Tctis/NBF8HoYatiUoBHsHrP2EhleL1mzbnqnLTpaIpF0RWhRgNwCp 9gnX03gjqNhodq0egkwCynetUFtTxLUxHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:24 2026 by rpki-client