This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/wg5OftPgVNpmxpzdpbKek2C7FEg.roa File: wg5OftPgVNpmxpzdpbKek2C7FEg.roa (raw, json) Hash identifier: oTkbiPHQzNKZqESVyHeHgcmIIPtZzqbqasVYV2IuRzU= Subject key identifier: C2:0E:4E:7E:D3:E0:54:DA:66:C6:9C:DD:A5:B2:9E:93:60:BB:14:48 Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e Certificate serial: 019B7A5AC656717CAFA847FD46B3E9B9D364 Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/wg5OftPgVNpmxpzdpbKek2C7FEg.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31127 IP address blocks: 88.80.224.0/19 maxlen: 20 92.245.192.0/19 maxlen: 20 185.22.176.0/22 maxlen: 23 217.144.16.0/20 maxlen: 21 2a01:108::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c6:56:71:7c:af:a8:47:fd:46:b3:e9:b9:d3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20e4e7ed3e054da66c69cdda5b29e9360bb1448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:68:d7:f2:46:08:ae:c2:64:c9:ca:94:43: 2b:4e:bf:92:b7:26:b6:40:20:89:78:ae:db:02:cf: 77:98:5b:78:98:88:44:d6:b3:b0:09:0c:41:d9:4b: 3a:61:ad:e5:f9:50:ca:11:30:8f:d0:53:44:50:74: ff:ea:22:4c:b8:4f:e2:d8:f3:09:a4:f4:fd:ae:b5: 3e:a8:2a:d6:64:ce:67:15:2c:53:a6:1c:57:64:a5: 4d:35:2a:29:ce:26:22:bd:ab:da:1d:55:ea:6c:ff: 26:58:66:5d:21:58:16:0d:59:1c:af:0d:24:9e:0c: c1:88:c7:85:c0:1d:43:cc:69:a1:cc:c6:ac:bf:d5: 87:ee:57:25:15:93:d9:40:eb:39:69:35:d1:3a:ca: e6:b8:25:47:1f:6c:66:bd:a0:af:fc:fa:9d:04:a0: 9c:9a:fb:12:98:86:08:20:18:59:d4:04:65:b2:7d: de:54:f3:af:d1:c1:62:2a:71:83:1b:bd:76:8c:e9: 4e:0d:e1:5c:2e:9e:c5:6c:44:38:40:58:bc:a6:f3: d4:f3:52:8f:f6:65:34:a5:89:8c:1a:48:7a:54:09: db:c8:ab:f7:f4:4b:8a:5b:5e:32:12:5e:4e:e5:2a: 01:65:8d:1b:a1:55:71:72:d3:cb:a5:11:88:c5:46: 51:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0E:4E:7E:D3:E0:54:DA:66:C6:9C:DD:A5:B2:9E:93:60:BB:14:48 X509v3 Authority Key Identifier: keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/wg5OftPgVNpmxpzdpbKek2C7FEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.224.0/19 92.245.192.0/19 185.22.176.0/22 217.144.16.0/20 IPv6: 2a01:108::/32 Signature Algorithm: sha256WithRSAEncryption 2f:9f:cd:42:6f:bd:15:d7:3a:61:54:18:65:7c:df:aa:29:9b: 11:e3:a0:3e:d1:5d:be:92:7c:39:f4:93:a3:ae:32:9a:ce:82: af:1e:cf:38:5f:54:f2:03:1f:11:fc:81:c0:a5:36:ed:00:a6: f9:9e:40:2b:db:8e:3b:43:fb:bf:36:82:6f:b3:e2:70:d9:77: 93:c8:2a:37:a0:14:cc:dd:be:07:d3:cb:43:ae:d8:28:21:72: 59:c5:a7:e7:4b:54:dd:1b:b7:3c:be:5a:f7:bf:b9:a3:1d:f6: 2e:83:d5:66:bb:a2:0a:5c:43:8e:cf:bd:3f:28:1b:0d:9a:0f: b0:68:2e:19:ab:f9:49:26:91:36:6a:86:dd:65:40:5e:ef:20: 63:ba:6f:71:20:9d:18:db:29:65:ee:55:60:0c:89:c1:53:98: ae:34:2c:27:d6:a7:d4:e3:7c:63:98:16:93:c4:81:7d:72:20: 65:ce:3a:34:b7:bb:fd:75:d0:de:56:9c:7c:45:14:7f:92:7b: 97:f8:48:4b:d8:b0:2c:a6:e6:7a:9a:ec:07:bf:40:97:d8:59: d9:67:d8:0b:9f:79:9b:28:04:70:12:af:7d:2d:ae:ee:2a:7b: e3:a1:27:5a:c9:df:b2:c8:91:cc:39:a7:97:41:b8:30:8a:9d: 57:21:35:07 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6WsZWcXyvqEf9RrPpudNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZjkwY2MxMjNkMGQyMDQ2OWQzOWM2YzM0NTVmMzFlYTYx MjNmNGUwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjBlNGU3ZWQzZTA1NGRhNjZjNjljZGRhNWIyOWU5MzYwYmIxNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy1o1/JGCK7CZMnKlEMrTr+Stya2 QCCJeK7bAs93mFt4mIhE1rOwCQxB2Us6Ya3l+VDKETCP0FNEUHT/6iJMuE/i2PMJ pPT9rrU+qCrWZM5nFSxTphxXZKVNNSopziYivavaHVXqbP8mWGZdIVgWDVkcrw0k ngzBiMeFwB1DzGmhzMasv9WH7lclFZPZQOs5aTXROsrmuCVHH2xmvaCv/PqdBKCc mvsSmIYIIBhZ1ARlsn3eVPOv0cFiKnGDG712jOlODeFcLp7FbEQ4QFi8pvPU81KP 9mU0pYmMGkh6VAnbyKv39EuKW14yEl5O5SoBZY0boVVxctPLpRGIxUZRtQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMIOTn7T4FTaZsac3aWynpNguxRIMB8GA1UdIwQY MBaAFHb5DMEj0NIEadOcbDRV8x6mEj9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84MmY5MDEtM2Y0OC00MjlhLTgzNjUt N2FmNTc0OTQxOTM2LzEvd2c1T2Z0UGdWTnBteHB6ZHBiS2VrMkM3RkVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84MmY5MDEtM2Y0OC00MjlhLTgzNjUtN2FmNTc0OTQxOTM2 LzEvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFWFDgAwQF XPXAAwQCuRawAwQE2ZAQMA0EAgACMAcDBQAqAQEIMA0GCSqGSIb3DQEBCwUAA4IB AQAvn81Cb70V1zphVBhlfN+qKZsR46A+0V2+knw59JOjrjKazoKvHs84X1TyAx8R /IHApTbtAKb5nkAr2447Q/u/NoJvs+Jw2XeTyCo3oBTM3b4H08tDrtgoIXJZxafn S1TdG7c8vlr3v7mjHfYug9Vmu6IKXEOOz70/KBsNmg+waC4Zq/lJJpE2aobdZUBe 7yBjum9xIJ0Y2yll7lVgDInBU5iuNCwn1qfU43xjmBaTxIF9ciBlzjo0t7v9ddDe Vpx8RRR/knuX+EhL2LAspuZ6muwHv0CX2FnZZ9gLn3mbKARwEq99La7uKnvjoSda yd+yyJHMOaeXQbgwip1XITUH -----END CERTIFICATE-----Generated at Sat Jan 10 20:50:08 2026 by rpki-client