This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/W-thWstLj_54HzMDe1CPmkWaZZY.roa File: W-thWstLj_54HzMDe1CPmkWaZZY.roa (raw, json) Hash identifier: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM= Subject key identifier: 5B:EB:61:5A:CB:4B:8F:FE:78:1F:33:03:7B:50:8F:9A:45:9A:65:96 Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5 Certificate serial: 019B78354BE6CE60F1DD50F8116495443E47 Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/W-thWstLj_54HzMDe1CPmkWaZZY.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206225 IP address blocks: 193.247.48.0/21 maxlen: 24 193.247.56.0/23 maxlen: 23 193.247.59.0/24 maxlen: 24 193.247.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4b:e6:ce:60:f1:dd:50:f8:11:64:95:44:3e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5beb615acb4b8ffe781f33037b508f9a459a6596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:3b:24:16:93:f1:95:3c:bc:60:4a:2d:3f: d5:fd:3c:9b:c1:09:89:8d:27:6f:86:0f:a2:a4:4a: e1:1c:ae:db:93:db:f2:e8:8b:ec:7a:98:09:8b:87: a2:a9:45:6d:75:72:a2:87:36:11:11:a8:4c:20:d2: df:40:b8:ad:1b:87:b0:f4:fa:05:24:13:d9:d1:e6: ff:22:45:c8:52:b0:69:80:ae:cd:e4:56:b6:2a:16: c5:07:c9:f5:a3:2a:9c:2d:5a:cc:24:57:76:4a:ef: a8:0c:c8:17:a7:9c:40:07:97:5f:1e:c2:3c:d9:2a: 2e:af:f3:3c:3e:56:cc:3b:52:10:d1:de:5c:b3:5e: 4f:dc:21:ee:10:b4:ab:33:51:25:63:0d:cc:9d:e9: d2:47:f3:e9:fe:8c:3d:28:ac:cf:c1:49:9f:24:80: b8:96:a1:be:80:8b:6f:40:2c:97:9b:2c:23:10:66: d1:cc:87:38:e3:63:89:38:dc:54:67:70:88:73:99: 82:ee:a3:a2:4b:2c:39:2d:2d:00:5d:5e:af:cc:c7: ae:7a:8e:2d:49:58:33:f2:e3:a9:d6:78:ab:68:79: b1:5a:26:b6:7f:ba:b9:81:4b:2c:b6:4b:43:47:40: ea:14:5c:b4:95:77:5e:8c:46:08:56:f1:c7:a5:4c: cd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EB:61:5A:CB:4B:8F:FE:78:1F:33:03:7B:50:8F:9A:45:9A:65:96 X509v3 Authority Key Identifier: keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/W-thWstLj_54HzMDe1CPmkWaZZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.48.0-193.247.57.255 193.247.59.0/24 193.247.62.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:dd:9a:c2:cb:48:fe:17:a6:b1:d2:2e:32:61:57:31:cb:ed: c6:64:38:13:09:37:dd:d4:25:14:73:a9:1e:9b:4b:38:16:57: be:31:86:56:29:df:20:6d:14:df:bd:1a:d4:48:82:98:10:c1: e4:40:21:dd:9b:88:7f:bf:40:64:2c:ce:d3:aa:86:1f:7e:ae: f3:82:2b:93:83:8d:b7:e2:51:f2:39:33:b9:6b:e3:68:ce:57: 52:68:0c:1e:32:44:16:76:d1:a1:c2:73:6c:a6:a1:70:0e:be: d1:ab:43:e5:f0:e4:69:4f:0f:c4:a9:c5:06:2e:bd:30:9a:f1: 03:ad:6d:1e:51:22:07:5e:39:ce:02:35:41:dc:e6:e0:c7:7d: a4:dd:a3:0e:0f:17:70:0b:20:f2:13:2c:7f:04:93:12:f4:a2: 83:32:aa:c7:79:72:8b:03:cd:c0:d5:d4:91:32:57:2a:1b:b3: b3:56:35:72:f6:29:bc:6d:9f:f3:4e:89:43:1c:62:a0:98:29: 1d:aa:00:6a:04:af:82:bb:88:82:20:e6:0d:4c:f9:be:f3:3a: 66:14:59:df:83:30:0f:2c:3b:43:88:3b:42:a3:71:92:1b:9c: 47:57:57:35:a0:b2:a9:58:2f:b7:65:3f:3e:20:83:9e:1d:ec: 61:3f:62:a0 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NUvmzmDx3VD4EWSVRD5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm OWY5YzUwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmViNjE1YWNiNGI4ZmZlNzgxZjMzMDM3YjUwOGY5YTQ1OWE2NTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJc7JBaT8ZU8vGBKLT/V/TybwQmJ jSdvhg+ipErhHK7bk9vy6IvsepgJi4eiqUVtdXKihzYREahMINLfQLitG4ew9PoF JBPZ0eb/IkXIUrBpgK7N5Fa2KhbFB8n1oyqcLVrMJFd2Su+oDMgXp5xAB5dfHsI8 2Sour/M8PlbMO1IQ0d5cs15P3CHuELSrM1ElYw3MnenSR/Pp/ow9KKzPwUmfJIC4 lqG+gItvQCyXmywjEGbRzIc442OJONxUZ3CIc5mC7qOiSyw5LS0AXV6vzMeueo4t SVgz8uOp1niraHmxWia2f7q5gUsstktDR0DqFFy0lXdejEYIVvHHpUzNCQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFvrYVrLS4/+eB8zA3tQj5pFmmWWMB8GA1UdIwQY MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt ZjU0ODY5OWY5NDdhLzEvVy10aFdzdExqXzU0SHpNRGUxQ1Bta1dhWlpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBATB9zAD BAHB9zgDBADB9zsDBAHB9z4wDQYJKoZIhvcNAQELBQADggEBAG3dmsLLSP4XprHS LjJhVzHL7cZkOBMJN93UJRRzqR6bSzgWV74xhlYp3yBtFN+9GtRIgpgQweRAId2b iH+/QGQsztOqhh9+rvOCK5ODjbfiUfI5M7lr42jOV1JoDB4yRBZ20aHCc2ymoXAO vtGrQ+Xw5GlPD8SpxQYuvTCa8QOtbR5RIgdeOc4CNUHc5uDHfaTdow4PF3ALIPIT LH8EkxL0ooMyqsd5cosDzcDV1JEyVyobs7NWNXL2Kbxtn/NOiUMcYqCYKR2qAGoE r4K7iIIg5g1M+b7zOmYUWd+DMA8sO0OIO0KjcZIbnEdXVzWgsqlYL7dlPz4gg54d 7GE/YqA= -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:40 2026 by rpki-client