This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/wCCdFB7UjGfQwzVORHDutY8coC4.roa File: wCCdFB7UjGfQwzVORHDutY8coC4.roa (raw, json) Hash identifier: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw= Subject key identifier: C0:20:9D:14:1E:D4:8C:67:D0:C3:35:4E:44:70:EE:B5:8F:1C:A0:2E Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Certificate serial: 019B7B35F552953E374E36AB14B94E5E55C7 Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/wCCdFB7UjGfQwzVORHDutY8coC4.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56724 IP address blocks: 5.149.152.0/23 maxlen: 24 5.149.154.0/24 maxlen: 24 5.149.159.0/24 maxlen: 24 185.61.252.0/22 maxlen: 24 2a04:ee00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f5:52:95:3e:37:4e:36:ab:14:b9:4e:5e:55:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0209d141ed48c67d0c3354e4470eeb58f1ca02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:9c:53:51:b3:fb:53:18:c0:41:61:88:59: 79:60:84:93:a9:e3:ea:a6:58:b0:f4:8a:f6:09:55: e9:b5:6f:54:34:98:0a:d7:8b:c0:e8:de:4e:dc:7d: 91:c9:ad:f0:bf:d1:32:86:e2:07:6b:0c:0e:34:5f: a1:d6:be:b8:73:1e:d1:6c:3d:bc:17:b7:e5:b6:f9: f7:e4:25:16:05:39:ee:7d:e2:d6:66:80:e0:5a:67: cc:58:30:56:cc:a3:27:71:1b:d6:57:0d:06:8a:5d: 08:01:21:ed:25:16:62:79:57:84:ba:5e:68:e2:9c: dc:11:b1:6c:f2:6f:68:34:0f:f4:7d:eb:c0:95:92: b5:89:38:62:46:84:ff:c8:1f:ad:d4:79:65:d9:ca: a6:51:50:ec:29:fa:cf:6b:41:fd:2d:ab:32:50:07: 35:00:fb:c9:93:b0:27:dc:db:eb:f3:9b:14:48:b3: a7:f9:66:56:70:88:2c:9c:8e:55:dd:ff:d5:2d:11: b3:80:58:13:42:10:d6:b4:7a:d3:cf:d4:dc:46:6b: d6:e3:80:1d:b2:f0:60:fd:9b:ac:0c:d6:58:fb:15: 5a:6a:e8:6e:56:dc:58:45:32:d1:19:45:a1:9b:2f: 23:a6:c6:95:51:9b:c4:60:b8:5b:10:36:57:da:26: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:20:9D:14:1E:D4:8C:67:D0:C3:35:4E:44:70:EE:B5:8F:1C:A0:2E X509v3 Authority Key Identifier: keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/wCCdFB7UjGfQwzVORHDutY8coC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.152.0-5.149.154.255 5.149.159.0/24 185.61.252.0/22 IPv6: 2a04:ee00::/29 Signature Algorithm: sha256WithRSAEncryption 79:89:10:6f:6f:1e:b4:b8:0c:64:e4:a8:4b:ab:c7:32:aa:bb: fe:36:c7:7d:0a:ff:1b:8c:6e:3e:a1:84:01:5d:8d:dd:d2:45: 7f:70:72:dc:46:ae:ed:5f:9b:2e:c9:27:b9:4a:2f:e0:e4:08: fa:de:75:b1:dd:79:19:82:12:6c:81:de:ca:2a:15:f7:a8:b1: 96:75:ed:62:56:8d:9a:2c:aa:78:7d:3d:55:7b:b4:c9:2b:7e: 26:6f:b4:3c:df:6f:97:60:f4:c2:53:db:00:a4:3a:2a:43:d0: 1a:71:04:17:77:a4:c1:32:a0:48:5d:15:1e:7c:c5:3e:0d:0c: b0:0c:31:a1:24:24:05:55:40:00:b1:03:1e:94:d0:d0:ef:21: f4:53:7e:c5:d7:29:57:8a:a6:46:ef:5a:7b:85:fc:99:b3:d3: 54:fa:4a:f9:4f:79:76:a5:3b:ee:1a:29:cb:15:57:27:d7:c4: 5a:75:4f:9b:b6:cd:a3:7a:d2:17:56:c2:b0:61:49:d0:ff:a3: fd:13:b9:27:68:43:ed:f6:1a:05:1f:d7:e1:5d:1f:c0:a8:4b: 64:91:b9:80:34:44:f3:c4:75:e3:1d:dc:8a:bb:04:ad:12:51: 60:47:ef:7e:1f:17:d0:76:52:6c:e5:47:d7:aa:e7:a2:8f:9b: 3a:7e:f3:e5 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7NfVSlT43TjarFLlOXlXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1 OGIzZTcwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDIwOWQxNDFlZDQ4YzY3ZDBjMzM1NGU0NDcwZWViNThmMWNhMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn6cU1Gz+1MYwEFhiFl5YISTqePq pliw9Ir2CVXptW9UNJgK14vA6N5O3H2Rya3wv9EyhuIHawwONF+h1r64cx7RbD28 F7fltvn35CUWBTnufeLWZoDgWmfMWDBWzKMncRvWVw0Gil0IASHtJRZieVeEul5o 4pzcEbFs8m9oNA/0fevAlZK1iThiRoT/yB+t1Hll2cqmUVDsKfrPa0H9LasyUAc1 APvJk7An3Nvr85sUSLOn+WZWcIgsnI5V3f/VLRGzgFgTQhDWtHrTz9TcRmvW44Ad svBg/ZusDNZY+xVaauhuVtxYRTLRGUWhmy8jpsaVUZvEYLhbEDZX2iabHQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFMAgnRQe1Ixn0MM1TkRw7rWPHKAuMB8GA1UdIwQY MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt ZTk3Y2QzYWQ0ZGEzLzEvd0NDZEZCN1VqR2ZRd3pWT1JIRHV0WThjb0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAMFlZgD BAAFlZoDBAAFlZ8DBAK5PfwwDQQCAAIwBwMFAyoE7gAwDQYJKoZIhvcNAQELBQAD ggEBAHmJEG9vHrS4DGTkqEurxzKqu/42x30K/xuMbj6hhAFdjd3SRX9wctxGru1f my7JJ7lKL+DkCPredbHdeRmCEmyB3soqFfeosZZ17WJWjZosqnh9PVV7tMkrfiZv tDzfb5dg9MJT2wCkOipD0BpxBBd3pMEyoEhdFR58xT4NDLAMMaEkJAVVQACxAx6U 0NDvIfRTfsXXKVeKpkbvWnuF/Jmz01T6SvlPeXalO+4aKcsVVyfXxFp1T5u2zaN6 0hdWwrBhSdD/o/0TuSdoQ+32GgUf1+FdH8CoS2SRuYA0RPPEdeMd3Iq7BK0SUWBH 734fF9B2UmzlR9eq56KPmzp+8+U= -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:57 2026 by rpki-client