This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/Wn4stG9r3sPGrKZA-bHeBQoqYZE.roa File: Wn4stG9r3sPGrKZA-bHeBQoqYZE.roa (raw, json) Hash identifier: q+6bbzrK5RoX6mP8fjjAray92+/gWY61XEVj188QjD8= Subject key identifier: 5A:7E:2C:B4:6F:6B:DE:C3:C6:AC:A6:40:F9:B1:DE:05:0A:2A:61:91 Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834 Certificate serial: 019B77591B8BD0458DE7750A61C1117220E6 Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/Wn4stG9r3sPGrKZA-bHeBQoqYZE.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29695 IP address blocks: 77.110.192.0/18 maxlen: 18 77.222.192.0/19 maxlen: 19 80.89.32.0/19 maxlen: 19 82.148.128.0/19 maxlen: 19 89.162.0.0/17 maxlen: 17 141.0.224.0/19 maxlen: 19 178.16.64.0/20 maxlen: 20 185.10.28.0/22 maxlen: 22 185.65.152.0/22 maxlen: 22 194.182.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1b:8b:d0:45:8d:e7:75:0a:61:c1:11:72:20:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a7e2cb46f6bdec3c6aca640f9b1de050a2a6191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0f:a2:cb:cf:67:82:d2:df:b8:df:65:6a:5f: 26:34:56:e6:24:bb:b7:3a:87:9b:05:b3:91:50:b9: a0:1c:e5:c7:8b:2e:4a:1a:ab:0f:e3:dc:be:f6:4f: 9c:eb:58:a0:26:99:bd:e3:b7:8f:6e:c2:c2:00:da: 0f:60:a8:02:9d:34:bc:6b:85:04:22:bb:14:cd:f2: c8:e4:d3:10:9b:be:8a:80:63:b9:63:ca:22:bc:5d: 10:ec:d1:11:e7:15:e4:17:1f:83:e8:b9:45:ce:a7: ed:2d:db:5e:56:5e:6f:c1:9c:f1:6c:81:dc:7c:7a: 20:43:20:da:97:c0:9c:a2:e9:b9:2e:af:20:64:b1: 86:cd:f8:03:d3:4c:86:e8:04:bf:e8:a1:48:06:5b: d1:88:08:74:f8:eb:a0:70:1a:ad:5d:39:91:99:c6: 6b:2d:70:51:2d:9d:49:4b:1f:58:9c:48:5d:91:6d: dc:c8:a2:f5:c3:a3:0c:4d:9c:ee:5a:bb:70:ee:7d: a7:13:4f:fc:ec:1b:79:8a:de:f0:37:f1:82:62:0a: 92:a6:81:d7:a7:a3:42:c1:b1:1d:ce:74:31:f2:55: 3b:d8:33:e2:4f:a6:b0:93:09:a0:27:a3:0e:97:d6: b4:16:a9:60:a5:74:be:06:98:5d:04:05:59:22:86: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7E:2C:B4:6F:6B:DE:C3:C6:AC:A6:40:F9:B1:DE:05:0A:2A:61:91 X509v3 Authority Key Identifier: keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/Wn4stG9r3sPGrKZA-bHeBQoqYZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.110.192.0/18 77.222.192.0/19 80.89.32.0/19 82.148.128.0/19 89.162.0.0/17 141.0.224.0/19 178.16.64.0/20 185.10.28.0/22 185.65.152.0/22 194.182.224.0/21 Signature Algorithm: sha256WithRSAEncryption 49:03:f9:6f:78:ca:b3:99:a1:37:bb:c5:05:5e:d2:f5:c7:71: 5c:89:ad:fd:37:28:ea:0f:f4:41:7f:7a:78:28:28:44:81:fe: 57:4e:27:2e:89:f7:7d:59:4d:8f:db:66:fc:40:81:a8:20:2e: 9d:17:3f:d7:ec:41:a2:d5:2f:59:9e:65:1c:e4:5f:3a:36:d0: 43:6f:94:bc:c5:e8:e9:b3:89:f8:3c:02:92:e2:2c:24:33:01: 5d:c8:82:98:5f:28:d2:cb:be:e4:bd:3a:5b:1c:bb:a7:3d:7f: b2:1b:42:59:1b:d2:fb:da:e9:65:e4:44:f1:0f:8f:08:43:4f: 2e:51:fd:25:81:d6:e5:99:3b:d3:d6:6f:7c:b3:06:ab:ce:41: ef:04:a3:ef:59:15:1a:fc:b6:fd:e7:32:87:14:e8:88:e2:74: 19:52:43:9b:62:91:77:9c:98:21:6b:1c:b0:88:a4:5a:21:ec: b8:fc:03:cf:69:d1:06:01:b0:3b:9a:fc:44:f3:30:d8:f0:ad: b3:86:e4:23:89:2e:bb:9c:b6:d2:ce:2b:af:9d:ad:b5:da:a8: fb:68:86:32:95:44:f6:17:44:c6:19:4d:39:df:ef:08:a5:a9: ef:e6:86:c7:a3:8c:3d:30:c6:77:2c:0c:ac:17:8f:d8:0a:0f: 98:10:17:fc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt3WRuL0EWN53UKYcERciDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz ZGI4MzQwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTdlMmNiNDZmNmJkZWMzYzZhY2E2NDBmOWIxZGUwNTBhMmE2MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ+iy89ngtLfuN9lal8mNFbmJLu3 OoebBbORULmgHOXHiy5KGqsP49y+9k+c61igJpm947ePbsLCANoPYKgCnTS8a4UE IrsUzfLI5NMQm76KgGO5Y8oivF0Q7NER5xXkFx+D6LlFzqftLdteVl5vwZzxbIHc fHogQyDal8Ccoum5Lq8gZLGGzfgD00yG6AS/6KFIBlvRiAh0+OugcBqtXTmRmcZr LXBRLZ1JSx9YnEhdkW3cyKL1w6MMTZzuWrtw7n2nE0/87Bt5it7wN/GCYgqSpoHX p6NCwbEdznQx8lU72DPiT6awkwmgJ6MOl9a0FqlgpXS+BphdBAVZIoaYuwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFFp+LLRva97DxqymQPmx3gUKKmGRMB8GA1UdIwQY MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt NzBkYWQ1MWU3M2ZiLzEvV240c3RHOXIzc1BHcktaQS1iSGVCUW9xWVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQGTW7AAwQF Td7AAwQFUFkgAwQFUpSAAwQHWaIAAwQFjQDgAwQEshBAAwQCuQocAwQCuUGYAwQD wrbgMA0GCSqGSIb3DQEBCwUAA4IBAQBJA/lveMqzmaE3u8UFXtL1x3Fcia39Nyjq D/RBf3p4KChEgf5XTicuifd9WU2P22b8QIGoIC6dFz/X7EGi1S9ZnmUc5F86NtBD b5S8xejps4n4PAKS4iwkMwFdyIKYXyjSy77kvTpbHLunPX+yG0JZG9L72ull5ETx D48IQ08uUf0lgdblmTvT1m98swarzkHvBKPvWRUa/Lb95zKHFOiI4nQZUkObYpF3 nJghaxywiKRaIey4/APPadEGAbA7mvxE8zDY8K2zhuQjiS67nLbSziuvna212qj7 aIYylUT2F0TGGU053+8Ipanv5obHo4w9MMZ3LAysF4/YCg+YEBf8 -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:50 2026 by rpki-client