This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/WZPhvrVWJ7TbYiNT2ZcXtbK7KLw.roa File: WZPhvrVWJ7TbYiNT2ZcXtbK7KLw.roa (raw, json) Hash identifier: gT6kAy3QC3WFVHTaMinwFIa4C3kHsmkq2W1J4go59R8= Subject key identifier: 59:93:E1:BE:B5:56:27:B4:DB:62:23:53:D9:97:17:B5:B2:BB:28:BC Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019B797EFBCE0632B0A4C3757FFE111C9668 Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/WZPhvrVWJ7TbYiNT2ZcXtbK7KLw.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215114 IP address blocks: 109.205.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fb:ce:06:32:b0:a4:c3:75:7f:fe:11:1c:96:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5993e1beb55627b4db622353d99717b5b2bb28bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:f3:ed:c4:82:c9:18:ce:b6:a9:28:d3:91: e5:24:64:15:31:c8:a0:96:c4:0a:aa:da:6c:4b:c3: 7f:f3:d6:b7:ac:40:8d:b8:a3:4d:3f:82:7c:10:8c: 43:66:d1:99:c5:93:8a:2a:9c:ae:71:05:70:86:17: 92:47:8e:dd:33:63:99:a2:36:d1:9f:4a:0e:60:4a: 4b:dc:ad:8e:ff:57:33:00:c8:10:92:d8:d6:5f:17: 82:22:67:23:04:6c:a6:51:c5:0d:c7:64:7a:a6:99: 1a:12:c7:5f:e5:5b:93:4a:27:35:75:42:c8:0f:0b: d0:a6:dc:bc:c6:b8:bf:7e:98:e8:26:44:2b:cb:23: 8d:ee:f5:bf:01:84:7b:6d:cf:bf:2d:b1:38:bf:69: 19:8d:43:b9:15:fe:c9:a6:84:77:ab:3f:81:53:9c: 0b:5d:ee:9c:cf:a8:cf:8c:72:08:99:07:53:59:10: 6c:5c:59:6a:79:6c:d3:74:6a:f0:9c:c4:bf:0e:e1: ec:61:ea:bb:16:ad:2e:41:b5:ae:2f:48:cf:a2:05: d6:dc:59:fb:76:62:b9:bf:32:60:85:3b:fb:ea:c0: 62:0d:a1:f3:0b:b9:1c:ea:55:ea:36:54:f1:1b:98: 77:91:f8:7c:c3:37:f4:d5:c1:0d:23:87:6d:d3:de: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:93:E1:BE:B5:56:27:B4:DB:62:23:53:D9:97:17:B5:B2:BB:28:BC X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/WZPhvrVWJ7TbYiNT2ZcXtbK7KLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.8.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:c2:33:82:51:18:0d:fd:a6:82:bb:da:04:0b:24:5a:42:a4: e1:24:b9:56:46:cb:08:d9:43:1a:e4:65:75:4e:dd:36:72:83: ef:0a:9d:76:12:b6:f7:3a:e6:76:1d:c5:5b:90:af:57:ae:df: 0e:5f:ad:95:32:3e:23:b9:71:f5:92:5b:5b:ec:b2:64:07:ce: 6b:7a:e5:29:55:eb:60:d3:6a:77:3b:85:08:1e:57:5d:23:33: 87:01:83:79:e1:3e:e5:ab:fa:6e:b5:84:6f:4d:aa:54:1b:6e: 2f:e7:c8:d8:a1:2a:be:13:1b:fd:13:37:97:40:f4:f4:d1:00: e8:73:e1:18:25:49:36:dc:74:ec:7e:c8:e3:95:7e:d8:3d:9c: a2:be:46:23:a7:0a:8b:d4:34:42:c5:2d:a1:4e:f9:36:e5:6b: a8:bd:0e:97:93:2f:61:59:10:03:a3:c5:2c:21:89:a5:68:f7: 38:63:57:8d:55:93:4f:07:7e:8c:59:43:77:73:9a:82:e4:8f: 42:bf:f2:fe:f9:5b:af:f6:7e:9f:ee:9f:6e:14:bf:64:31:8b: a0:fb:eb:16:09:f8:05:b1:60:e4:2d:88:d8:38:b6:91:c4:63: 8a:0e:2c:cd:b8:bd:46:83:9d:d7:66:4d:e0:0c:67:d1:ff:36: 70:1a:bc:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvvOBjKwpMN1f/4RHJZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTkzZTFiZWI1NTYyN2I0ZGI2MjIzNTNkOTk3MTdiNWIyYmIyOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pfz7cSCyRjOtqko05HlJGQVMcig lsQKqtpsS8N/89a3rECNuKNNP4J8EIxDZtGZxZOKKpyucQVwhheSR47dM2OZojbR n0oOYEpL3K2O/1czAMgQktjWXxeCImcjBGymUcUNx2R6ppkaEsdf5VuTSic1dULI DwvQpty8xri/fpjoJkQryyON7vW/AYR7bc+/LbE4v2kZjUO5Ff7JpoR3qz+BU5wL Xe6cz6jPjHIImQdTWRBsXFlqeWzTdGrwnMS/DuHsYeq7Fq0uQbWuL0jPogXW3Fn7 dmK5vzJghTv76sBiDaHzC7kc6lXqNlTxG5h3kfh8wzf01cENI4dt096NsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFmT4b61Vie022IjU9mXF7Wyuyi8MB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvV1pQaHZyVldKN1RiWWlOVDJaY1h0Yks3S0x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc0IMA0G CSqGSIb3DQEBCwUAA4IBAQBqwjOCURgN/aaCu9oECyRaQqThJLlWRssI2UMa5GV1 Tt02coPvCp12Erb3OuZ2HcVbkK9Xrt8OX62VMj4juXH1kltb7LJkB85reuUpVetg 02p3O4UIHlddIzOHAYN54T7lq/putYRvTapUG24v58jYoSq+Exv9EzeXQPT00QDo c+EYJUk23HTsfsjjlX7YPZyivkYjpwqL1DRCxS2hTvk25WuovQ6Xky9hWRADo8Us IYmlaPc4Y1eNVZNPB36MWUN3c5qC5I9Cv/L++Vuv9n6f7p9uFL9kMYug++sWCfgF sWDkLYjYOLaRxGOKDizNuL1Gg53XZk3gDGfR/zZwGrzm -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:44 2026 by rpki-client