This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa File: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (raw, json) Hash identifier: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo= Subject key identifier: 5B:E8:6A:5F:85:7F:79:60:9D:83:AF:EB:55:15:B2:28:AC:0D:B1:9A Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E389390F06F279A0953CE18E704098C Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197610 IP address blocks: 213.174.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:93:90:f0:6f:27:9a:09:53:ce:18:e7:04:09:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5be86a5f857f79609d83afeb5515b228ac0db19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:5b:79:23:03:cd:1d:f0:5f:e1:59:88:51: df:ee:ed:0f:b4:d5:50:9d:ca:1e:19:62:c0:62:e7: 66:05:37:7c:79:8a:0a:26:53:45:83:82:ec:69:9c: 04:0e:80:ff:ad:e3:3b:25:87:0f:88:b6:8f:fb:5d: 94:28:0b:4d:fb:d5:b3:f6:88:78:69:4b:2d:4f:f6: 25:64:b3:d5:5d:0e:f1:13:12:30:30:01:c6:4b:ff: d9:23:eb:eb:dd:9a:fc:fd:d5:ec:46:2c:d9:0e:3b: e2:66:d8:e5:37:1d:1d:a1:f2:6d:a1:3d:6a:48:64: 51:0b:11:fc:2d:a3:54:42:b5:21:13:66:24:7b:17: b3:18:91:97:56:46:ec:2d:39:10:fd:24:ef:2a:1c: 74:58:77:42:05:5b:d8:d3:fc:1e:b0:c5:40:cc:d8: e6:36:04:db:61:fc:3c:bb:bc:c7:96:a0:eb:7b:8d: 5a:8c:63:ad:63:ec:d1:a6:b7:0b:17:90:b8:59:ce: 3a:2d:42:3e:2a:be:33:9a:83:0e:c2:b7:2b:26:d7: 77:e6:1c:da:b1:98:73:de:c5:b5:66:12:12:91:18: 06:68:6b:c6:28:8c:80:ca:87:ba:65:00:03:ff:c6: 29:67:bd:78:1d:86:0b:10:67:0d:06:c4:15:09:2b: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E8:6A:5F:85:7F:79:60:9D:83:AF:EB:55:15:B2:28:AC:0D:B1:9A X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.174.28.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:8f:37:9a:1a:6e:01:74:e4:1f:e5:fc:e0:55:e5:0f:9c:a8: 1f:54:a6:68:22:76:cb:80:0a:2e:60:ab:42:f2:00:aa:32:0f: 78:87:a5:ee:c0:b2:e8:a7:14:4d:24:93:00:d3:85:7a:f3:a9: 17:a7:a7:b1:35:27:3e:92:32:1e:e0:83:8a:06:53:50:ca:38: fb:48:75:59:92:9d:62:ff:62:e0:11:d6:f2:0b:83:d9:15:b5: a2:3e:63:bd:e0:c2:59:4d:2a:53:e7:41:13:61:68:73:95:5d: 6e:93:c7:0a:49:57:e1:28:90:3e:46:ad:21:f4:3a:68:ac:8e: 4e:f4:bb:42:e5:bc:6f:79:9d:ff:10:be:f5:0f:26:9d:38:38: 57:77:ae:6a:e1:8c:d6:df:c6:97:fc:3c:8e:cf:7b:bc:9e:98: db:c8:61:a4:56:5c:d2:e4:64:c6:0d:d8:05:0b:6e:e8:c0:05: 48:5b:ba:05:10:4f:fc:e4:b4:2b:14:f5:59:3c:57:fb:29:b9: 4d:01:ac:7c:ac:55:22:7a:10:b5:d2:de:50:fa:1b:ac:ed:b1: 52:e8:fb:e3:9b:c9:b4:84:7b:3b:2e:3d:1c:bd:bc:40:42:c6: f6:fa:70:dd:45:10:1c:8c:ac:9a:b3:f5:6c:bc:01:c7:96:d3: 1c:27:ed:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJOQ8G8nmglTzhjnBAmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmU4NmE1Zjg1N2Y3OTYwOWQ4M2FmZWI1NTE1YjIyOGFjMGRiMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsdbeSMDzR3wX+FZiFHf7u0PtNVQ ncoeGWLAYudmBTd8eYoKJlNFg4LsaZwEDoD/reM7JYcPiLaP+12UKAtN+9Wz9oh4 aUstT/YlZLPVXQ7xExIwMAHGS//ZI+vr3Zr8/dXsRizZDjviZtjlNx0dofJtoT1q SGRRCxH8LaNUQrUhE2YkexezGJGXVkbsLTkQ/STvKhx0WHdCBVvY0/wesMVAzNjm NgTbYfw8u7zHlqDre41ajGOtY+zRprcLF5C4Wc46LUI+Kr4zmoMOwrcrJtd35hza sZhz3sW1ZhISkRgGaGvGKIyAyoe6ZQAD/8YpZ714HYYLEGcNBsQVCStCvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvoal+Ff3lgnYOv61UVsiisDbGaMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvVy1ocVg0Vl9lV0NkZzZfclZSV3lLS3dOc1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a4cMA0G CSqGSIb3DQEBCwUAA4IBAQALjzeaGm4BdOQf5fzgVeUPnKgfVKZoInbLgAouYKtC 8gCqMg94h6XuwLLopxRNJJMA04V686kXp6exNSc+kjIe4IOKBlNQyjj7SHVZkp1i /2LgEdbyC4PZFbWiPmO94MJZTSpT50ETYWhzlV1uk8cKSVfhKJA+Rq0h9DporI5O 9LtC5bxveZ3/EL71DyadODhXd65q4YzW38aX/DyOz3u8npjbyGGkVlzS5GTGDdgF C27owAVIW7oFEE/85LQrFPVZPFf7KblNAax8rFUiehC10t5Q+hus7bFS6Pvjm8m0 hHs7Lj0cvbxAQsb2+nDdRRAcjKyas/VsvAHHltMcJ+3J -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:21 2026 by rpki-client