This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WRUta8Y3by7elbC00WfI8MHVUFI.roa File: WRUta8Y3by7elbC00WfI8MHVUFI.roa (raw, json) Hash identifier: 7viacSs1BN4EQju5S7KsHQ/feU2GjxufMlRoyEGQSts= Subject key identifier: 59:15:2D:6B:C6:37:6F:2E:DE:95:B0:B4:D1:67:C8:F0:C1:D5:50:52 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7635364BBED22F59C990BBAE0A722 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WRUta8Y3by7elbC00WfI8MHVUFI.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24699 IP address blocks: 80.66.144.0/20 maxlen: 20 81.20.96.0/20 maxlen: 20 88.85.160.0/20 maxlen: 20 109.108.32.0/19 maxlen: 19 212.124.16.0/20 maxlen: 20 212.124.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:63:53:64:bb:ed:22:f5:9c:99:0b:ba:e0:a7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59152d6bc6376f2ede95b0b4d167c8f0c1d55052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:ab:59:10:1d:d1:66:59:d5:27:e3:d3:1d: 12:d2:34:7c:d9:82:a0:fb:d4:31:c4:a4:86:aa:bf: ff:ab:99:f8:a2:2a:e9:fe:36:13:ed:5e:5f:eb:e1: 74:95:34:b0:05:5f:8c:c7:eb:b2:3d:75:a9:57:00: 12:7f:2b:77:71:67:a3:31:d4:11:d4:cb:bf:7e:86: 82:28:48:c4:86:6b:ba:73:76:28:58:8b:29:be:a6: 6e:33:3a:97:9f:4a:ba:f1:37:cf:81:a0:2a:57:0f: 44:18:ac:32:1d:05:ce:40:dc:03:85:00:78:c6:7c: bd:7b:0a:65:0b:cf:55:e3:24:ae:30:29:2a:7e:f5: 83:8c:8e:ab:e9:52:13:35:8d:7d:45:da:9c:9b:b6: 05:26:70:01:1c:85:7b:84:8c:44:ca:0a:e7:1e:17: bd:c1:1a:85:44:64:df:8f:c9:40:92:a7:82:fa:f9: 0a:23:61:b4:df:84:d1:1a:c5:18:80:e2:b9:bb:e9: e2:a1:c2:db:9a:86:ed:f0:52:e1:e7:ef:86:3d:8b: ea:4a:0e:58:ba:38:e6:01:e8:b9:2c:ce:a7:f9:08: 4d:cd:49:90:42:65:86:68:2c:d3:59:96:f8:90:28: f0:98:00:5a:d6:31:ee:47:ce:8e:2b:84:c0:1c:67: 82:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:15:2D:6B:C6:37:6F:2E:DE:95:B0:B4:D1:67:C8:F0:C1:D5:50:52 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WRUta8Y3by7elbC00WfI8MHVUFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.144.0/20 81.20.96.0/20 88.85.160.0/20 109.108.32.0/19 212.124.16.0/20 Signature Algorithm: sha256WithRSAEncryption 52:4f:64:96:0e:3a:2e:a3:64:4e:98:6e:c2:fd:08:c5:89:1c: c0:60:05:87:16:b1:f9:34:91:16:54:5a:1d:18:7e:b4:31:94: 41:81:db:e7:7c:03:c9:6b:5e:86:8c:35:85:f1:03:55:d2:0c: 27:5d:55:f4:ce:81:b7:8f:6f:51:16:91:a7:54:e7:09:07:60: 78:30:92:d0:19:72:57:72:5b:db:9d:c9:7d:32:57:e5:f3:15: 6a:04:38:8a:64:e6:f0:c1:c3:24:91:a7:66:62:d8:3b:26:d0: 01:b7:85:ce:b6:e1:29:24:f7:47:67:4e:c3:fc:96:0b:72:77: f5:bb:f0:31:ab:54:62:7b:28:1f:b9:b9:44:1b:42:63:9f:95: 4a:51:d9:74:fa:98:77:22:ac:65:05:bc:11:68:4a:d7:3a:06: 08:2d:a7:9b:9e:8e:ee:36:67:6a:f5:38:0c:ca:b1:68:f7:89: 8b:b5:28:93:73:22:d9:19:d4:37:01:e2:be:a6:25:c4:7b:a5: 42:69:74:7d:18:d1:ed:b4:ee:f4:9f:bd:77:05:7a:c5:d6:52: 5d:e4:41:f4:0f:9b:5e:7e:54:cd:f7:b8:8f:c3:c9:f2:cf:be: b4:f8:f7:e2:cf:66:e3:04:29:c2:92:3c:ed:32:be:14:5f:19: a2:33:d3:dd -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+p2NTZLvtIvWcmQu64KciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTE1MmQ2YmM2Mzc2ZjJlZGU5NWIwYjRkMTY3YzhmMGMxZDU1MDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiGrWRAd0WZZ1Sfj0x0S0jR82YKg +9QxxKSGqr//q5n4oirp/jYT7V5f6+F0lTSwBV+Mx+uyPXWpVwASfyt3cWejMdQR 1Mu/foaCKEjEhmu6c3YoWIspvqZuMzqXn0q68TfPgaAqVw9EGKwyHQXOQNwDhQB4 xny9ewplC89V4ySuMCkqfvWDjI6r6VITNY19Rdqcm7YFJnABHIV7hIxEygrnHhe9 wRqFRGTfj8lAkqeC+vkKI2G034TRGsUYgOK5u+niocLbmobt8FLh5++GPYvqSg5Y ujjmAei5LM6n+QhNzUmQQmWGaCzTWZb4kCjwmABa1jHuR86OK4TAHGeCEwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFkVLWvGN28u3pWwtNFnyPDB1VBSMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvV1JVdGE4WTNieTdlbGJDMDBXZkk4TUhWVUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEUEKQAwQE URRgAwQEWFWgAwQFbWwgAwQE1HwQMA0GCSqGSIb3DQEBCwUAA4IBAQBST2SWDjou o2ROmG7C/QjFiRzAYAWHFrH5NJEWVFodGH60MZRBgdvnfAPJa16GjDWF8QNV0gwn XVX0zoG3j29RFpGnVOcJB2B4MJLQGXJXclvbncl9Mlfl8xVqBDiKZObwwcMkkadm Ytg7JtABt4XOtuEpJPdHZ07D/JYLcnf1u/Axq1RieygfublEG0Jjn5VKUdl0+ph3 IqxlBbwRaErXOgYILaebno7uNmdq9TgMyrFo94mLtSiTcyLZGdQ3AeK+piXEe6VC aXR9GNHttO70n713BXrF1lJd5EH0D5teflTN97iPw8nyz760+Pfiz2bjBCnCkjzt Mr4UXxmiM9Pd -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:05 2026 by rpki-client