This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/wlFKLKiiGrz35Xi-5LjAPv-O29I.roa File: wlFKLKiiGrz35Xi-5LjAPv-O29I.roa (raw, json) Hash identifier: Xc0LKCazMtZLUwvnl2NzDp5cLTNr9d3bVVU78MpvOYI= Subject key identifier: C2:51:4A:2C:A8:A2:1A:BC:F7:E5:78:BE:E4:B8:C0:3E:FF:8E:DB:D2 Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab Certificate serial: 019B7B3581490F166563496E1B5563F1DBE5 Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/wlFKLKiiGrz35Xi-5LjAPv-O29I.roa Signing time: Thu 01 Jan 2026 20:17:42 +0000 ROA not before: Thu 01 Jan 2026 20:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15958 IP address blocks: 109.106.224.0/20 maxlen: 20 109.245.0.0/16 maxlen: 16 109.245.0.0/21 maxlen: 21 109.245.8.0/22 maxlen: 22 109.245.16.0/20 maxlen: 20 109.245.40.0/21 maxlen: 21 109.245.48.0/20 maxlen: 20 109.245.128.0/21 maxlen: 21 109.245.144.0/21 maxlen: 21 109.245.160.0/21 maxlen: 21 109.245.168.0/21 maxlen: 21 109.245.192.0/19 maxlen: 19 109.245.228.0/22 maxlen: 22 109.245.232.0/21 maxlen: 21 109.245.240.0/20 maxlen: 20 217.65.192.0/20 maxlen: 20 217.65.196.0/22 maxlen: 22 217.65.200.0/21 maxlen: 21 217.65.201.0/24 maxlen: 24 217.65.202.0/23 maxlen: 23 217.65.204.0/22 maxlen: 22 2a01:ac80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:81:49:0f:16:65:63:49:6e:1b:55:63:f1:db:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2514a2ca8a21abcf7e578bee4b8c03eff8edbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:52:0d:d2:22:84:9b:a5:f8:ab:27:52:9c:c5: 50:9e:93:16:f8:8c:4c:46:07:82:70:0b:a8:6e:aa: 14:26:87:ef:dc:bf:ee:34:cd:57:4f:21:04:02:73: 15:21:6a:25:0f:d3:e4:48:1d:23:ab:c8:d6:de:a5: c3:9c:38:d8:6c:f5:fb:3d:e6:ff:ff:5b:8a:1f:24: 75:d5:dd:3f:b6:82:a0:3b:cd:41:78:ce:2c:66:f1: c8:8c:f3:16:4c:c9:b0:da:27:18:23:2c:02:e7:e6: 25:79:56:21:55:df:fd:a5:8f:6e:e0:ff:cc:95:9f: 76:e8:eb:9b:84:c4:4e:9a:2e:ec:a1:63:3a:02:3a: 6a:f8:46:1b:26:c4:27:c7:a0:22:c2:34:4c:07:57: 40:09:67:9e:f9:58:4f:24:d8:25:2f:b7:a1:4d:b0: 3a:7c:d3:1c:47:91:ba:c7:59:1b:b9:e4:d3:dc:07: 0d:61:f0:90:02:4e:52:b8:e6:9a:8e:0d:60:d1:b7: e0:e3:b9:a9:46:65:b9:9e:0e:3c:8b:26:80:07:8e: cc:f0:ff:5a:ce:2a:fc:7f:1b:f9:82:4c:60:6c:8a: ef:14:84:51:1f:ec:b5:9a:aa:4a:fa:51:8d:4f:d3: 69:24:51:00:8b:82:06:67:e6:78:71:72:83:52:42: 25:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:51:4A:2C:A8:A2:1A:BC:F7:E5:78:BE:E4:B8:C0:3E:FF:8E:DB:D2 X509v3 Authority Key Identifier: keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/wlFKLKiiGrz35Xi-5LjAPv-O29I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.106.224.0/20 109.245.0.0/16 217.65.192.0/20 IPv6: 2a01:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 7e:e8:bb:ed:9e:f8:39:70:0c:f3:02:88:ba:01:23:0f:5b:be: 90:22:16:45:2e:97:3c:e7:31:0a:99:8b:d0:ce:90:65:20:5e: b0:c3:55:3c:b7:5f:8b:3a:fe:8d:ab:8a:0c:b3:14:5a:56:99: fc:f3:40:ad:3e:36:99:54:4d:a7:ad:4c:a7:f5:1d:fb:57:c5: 96:f8:03:dd:5e:cc:ec:0a:b5:14:a2:cc:e4:79:62:5c:0f:d2: 73:c8:1c:01:6b:73:58:29:eb:98:4f:85:49:22:ee:41:75:d4: 1e:c2:2c:b8:63:56:5a:4f:8b:3b:b7:ed:38:f0:de:df:2e:e4: 88:fd:ee:0e:8f:bb:2b:aa:28:4a:8f:3c:24:31:59:91:51:62: cd:b7:3a:e8:43:00:72:6a:6c:72:99:fe:9d:e2:f9:45:9c:49: b2:99:f1:72:0b:39:0a:48:6e:56:47:b0:27:fd:00:d8:55:a5: 01:a3:77:06:f0:f1:22:18:78:39:71:2c:a9:81:73:7f:75:5a: ae:ec:b9:8a:06:bd:af:fa:9c:36:cc:36:33:bc:fb:d6:f4:03: a2:a5:14:2c:02:45:3a:8f:a2:b4:6a:bf:0b:e1:85:f4:d1:ab: 6b:1b:b1:f9:2f:ab:b8:ea:80:eb:85:d4:3c:d3:35:82:c1:ba: 1b:75:28:2d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7NYFJDxZlY0luG1Vj8dvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzJmZTJjODA1ZWQ2M2FmYzljODllOTMyNGFjOTRkMzA5 MzlhYWIwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjUxNGEyY2E4YTIxYWJjZjdlNTc4YmVlNGI4YzAzZWZmOGVkYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1IN0iKEm6X4qydSnMVQnpMW+IxM RgeCcAuobqoUJofv3L/uNM1XTyEEAnMVIWolD9PkSB0jq8jW3qXDnDjYbPX7Peb/ /1uKHyR11d0/toKgO81BeM4sZvHIjPMWTMmw2icYIywC5+YleVYhVd/9pY9u4P/M lZ926OubhMROmi7soWM6Ajpq+EYbJsQnx6AiwjRMB1dACWee+VhPJNglL7ehTbA6 fNMcR5G6x1kbueTT3AcNYfCQAk5SuOaajg1g0bfg47mpRmW5ng48iyaAB47M8P9a zir8fxv5gkxgbIrvFIRRH+y1mqpK+lGNT9NpJFEAi4IGZ+Z4cXKDUkIlDwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFMJRSiyoohq89+V4vuS4wD7/jtvSMB8GA1UdIwQY MBaAFA1y/iyAXtY6/JyJ6TJKyU0wk5qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgt Y2Y4MThjN2M0NTFhLzEvd2xGS0xLaWlHcnozNVhpLTVMakFQdi1PMjlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgtY2Y4MThjN2M0NTFh LzEvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQEbWrgAwMA bfUDBATZQcAwDQQCAAIwBwMFACoBrIAwDQYJKoZIhvcNAQELBQADggEBAH7ou+2e +DlwDPMCiLoBIw9bvpAiFkUulzznMQqZi9DOkGUgXrDDVTy3X4s6/o2rigyzFFpW mfzzQK0+NplUTaetTKf1HftXxZb4A91ezOwKtRSizOR5YlwP0nPIHAFrc1gp65hP hUki7kF11B7CLLhjVlpPizu37Tjw3t8u5Ij97g6PuyuqKEqPPCQxWZFRYs23OuhD AHJqbHKZ/p3i+UWcSbKZ8XILOQpIblZHsCf9ANhVpQGjdwbw8SIYeDlxLKmBc391 Wq7suYoGva/6nDbMNjO8+9b0A6KlFCwCRTqPorRqvwvhhfTRq2sbsfkvq7jqgOuF 1DzTNYLBuht1KC0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:13 2026 by rpki-client