This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa File: w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa (raw, json) Hash identifier: Rh0VsCvy2O3VBR0z+FrTOlGdPanimSzIyXLHmJJMba4= Subject key identifier: C3:94:F1:4B:7B:E4:1E:47:AA:5F:0D:C2:99:4F:A6:C2:6C:01:5E:F4 Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef Certificate serial: 019B77590446D29040CF414D98B55CC68C0C Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203968 IP address blocks: 109.109.192.0/21 maxlen: 24 185.114.212.0/22 maxlen: 24 2a06:71c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:04:46:d2:90:40:cf:41:4d:98:b5:5c:c6:8c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c394f14b7be41e47aa5f0dc2994fa6c26c015ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0a:b5:12:2e:91:69:5a:aa:f5:63:39:28:8c: 8a:b2:b1:e3:e2:84:d1:a0:3d:6c:85:c7:42:d2:c8: 45:68:eb:c4:05:c9:45:85:af:4e:91:94:05:bf:83: 8c:dc:72:ee:aa:98:e8:b5:c9:1a:3f:3d:56:49:15: 92:47:29:7b:67:c4:2f:c5:d9:11:12:05:73:73:56: bc:78:b0:09:f5:f9:60:1b:b4:ea:7f:08:b9:bd:05: bb:8d:61:d6:17:2e:ce:84:b4:b1:3b:9d:52:dd:a6: 0e:b7:be:d6:e8:86:a1:f0:bc:14:9e:2d:a6:e9:ce: 96:a3:26:12:da:66:fc:c2:02:d2:27:23:06:1b:60: 51:21:77:4b:29:51:13:16:82:5d:a4:f9:27:88:ef: de:5b:14:23:d7:56:56:2b:5e:04:a1:2c:50:04:5b: 56:ad:ec:1e:a6:a6:84:67:e1:02:c1:b7:03:4d:94: 6e:d2:31:90:3a:25:bc:2b:24:83:74:28:ab:6c:22: e1:ae:31:21:2d:4d:d8:b0:07:cc:c7:27:7a:1a:4a: 04:95:7e:15:0a:95:14:28:c7:34:08:91:18:7b:d7: bd:1f:51:8d:48:1f:db:68:bc:5e:b0:b6:4d:97:61: 7a:02:c6:89:92:eb:c4:cd:54:5d:e5:80:6d:31:05: 68:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:94:F1:4B:7B:E4:1E:47:AA:5F:0D:C2:99:4F:A6:C2:6C:01:5E:F4 X509v3 Authority Key Identifier: keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.109.192.0/21 185.114.212.0/22 IPv6: 2a06:71c0::/29 Signature Algorithm: sha256WithRSAEncryption 19:81:e7:8d:a6:a2:a0:4f:80:b1:ad:14:99:a9:14:bd:c1:46: a3:db:87:63:c6:ca:f9:32:b0:4d:8a:c2:0c:a2:42:57:42:17: 44:be:46:0d:51:44:5d:5f:2d:e8:76:e7:52:3b:87:35:94:80: b7:f2:e1:ac:e2:6f:f1:ff:ae:4c:09:ef:ab:d3:19:1a:08:48: ae:3e:89:6d:5e:83:51:12:c6:52:ac:e7:cd:9c:a3:56:bd:3a: a4:c6:d2:c5:ad:e1:e3:e4:79:66:42:83:51:cd:05:2f:1b:fb: d7:51:07:9a:b3:84:49:20:74:7a:17:b6:70:4b:c9:a9:5a:df: 4f:8a:cf:8f:49:5e:62:b1:cc:1e:4e:12:f0:2d:52:49:a1:41: 16:b4:f2:65:44:84:4b:44:af:e2:dd:88:db:d9:4e:07:0b:ba: 72:86:db:e9:b9:5f:24:d4:e8:2b:2b:37:24:4d:1b:15:7b:c1: 09:1a:34:9d:e1:1c:3b:c9:d3:ef:79:40:22:3d:3d:ca:59:9d: 7e:1b:cd:15:bc:e0:25:33:9a:31:0f:14:90:0b:8d:eb:4c:d7: 9f:c0:8d:fa:fc:ef:13:1c:f6:2c:70:d1:61:fa:54:a5:0f:63: ca:9f:e3:3c:94:f3:0e:f0:4b:b4:e4:aa:23:cc:32:99:a5:38: b4:16:a0:79 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WQRG0pBAz0FNmLVcxowMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk NDU0ZWYwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzk0ZjE0YjdiZTQxZTQ3YWE1ZjBkYzI5OTRmYTZjMjZjMDE1ZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Aq1Ei6RaVqq9WM5KIyKsrHj4oTR oD1shcdC0shFaOvEBclFha9OkZQFv4OM3HLuqpjotckaPz1WSRWSRyl7Z8QvxdkR EgVzc1a8eLAJ9flgG7Tqfwi5vQW7jWHWFy7OhLSxO51S3aYOt77W6Iah8LwUni2m 6c6WoyYS2mb8wgLSJyMGG2BRIXdLKVETFoJdpPkniO/eWxQj11ZWK14EoSxQBFtW rewepqaEZ+ECwbcDTZRu0jGQOiW8KySDdCirbCLhrjEhLU3YsAfMxyd6GkoElX4V CpUUKMc0CJEYe9e9H1GNSB/baLxesLZNl2F6AsaJkuvEzVRd5YBtMQVoPQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMOU8Ut75B5Hql8NwplPpsJsAV70MB8GA1UdIwQY MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt N2E3MmUyNmM4OTE4LzEvdzVUeFMzdmtIa2VxWHczQ21VLW13bXdCWHZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4 LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDbW3AAwQC uXLUMA0EAgACMAcDBQMqBnHAMA0GCSqGSIb3DQEBCwUAA4IBAQAZgeeNpqKgT4Cx rRSZqRS9wUaj24djxsr5MrBNisIMokJXQhdEvkYNUURdXy3odudSO4c1lIC38uGs 4m/x/65MCe+r0xkaCEiuPoltXoNREsZSrOfNnKNWvTqkxtLFreHj5HlmQoNRzQUv G/vXUQeas4RJIHR6F7ZwS8mpWt9Pis+PSV5iscweThLwLVJJoUEWtPJlRIRLRK/i 3Yjb2U4HC7pyhtvpuV8k1OgrKzckTRsVe8EJGjSd4Rw7ydPveUAiPT3KWZ1+G80V vOAlM5oxDxSQC43rTNefwI36/O8THPYscNFh+lSlD2PKn+M8lPMO8Eu05KojzDKZ pTi0FqB5 -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:11 2026 by rpki-client