This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/wULQ1rFany44hlJUjVnf6JD1px0.roa File: wULQ1rFany44hlJUjVnf6JD1px0.roa (raw, json) Hash identifier: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE= Subject key identifier: C1:42:D0:D6:B1:5A:9F:2E:38:86:52:54:8D:59:DF:E8:90:F5:A7:1D Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019B7910B25388C4D57C7CED0DDB4C2F1CB6 Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/wULQ1rFany44hlJUjVnf6JD1px0.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62453 IP address blocks: 82.193.94.0/24 maxlen: 24 82.193.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b2:53:88:c4:d5:7c:7c:ed:0d:db:4c:2f:1c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c142d0d6b15a9f2e388652548d59dfe890f5a71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:a9:a7:28:db:01:75:ad:7f:6f:4d:09:b3: 96:ae:28:4e:57:ed:cb:f2:58:54:cf:f9:43:4c:42: 9c:18:49:8a:99:dd:34:6b:e0:48:7d:dc:f8:93:6a: 9b:77:f9:36:7e:db:07:c2:37:fb:4e:2b:d3:1d:47: 9e:30:d5:35:40:b6:9a:11:73:e2:7e:be:df:46:d9: 5a:a6:f6:9e:4e:80:37:45:97:81:30:f5:71:d9:3e: 85:66:d7:4a:c1:5e:8b:d7:8f:12:3a:83:06:e1:b3: 79:b7:57:18:66:8d:65:1f:fc:83:90:a2:47:8c:c6: 08:7a:ae:8d:ae:51:03:d6:c2:fd:c7:0e:51:39:b3: 7e:5f:3b:0f:1b:6f:3d:0c:56:6e:1c:44:a3:db:a9: 4c:a7:c4:6d:91:98:72:fb:8c:06:25:ec:c2:c7:2e: 9b:d9:da:84:1e:c6:de:44:43:f9:ab:c8:3d:0c:c5: 72:04:c4:1f:de:b7:81:58:2d:aa:2e:08:9d:1e:c4: 5a:ab:0a:17:7c:56:a5:f6:3a:b8:88:f1:d0:77:63: e8:ae:8b:df:48:1c:be:7b:8e:57:9e:3e:43:8c:12: 22:46:6a:55:bd:e1:e5:76:58:c9:50:cd:02:69:40: 60:e2:23:64:cc:18:72:08:49:98:24:c0:9d:8e:7a: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:42:D0:D6:B1:5A:9F:2E:38:86:52:54:8D:59:DF:E8:90:F5:A7:1D X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/wULQ1rFany44hlJUjVnf6JD1px0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.193.94.0/23 Signature Algorithm: sha256WithRSAEncryption 00:53:43:83:23:69:c2:36:61:8d:b4:56:95:76:ef:83:fb:94: ea:36:e0:d8:c4:03:de:85:29:df:86:7e:26:39:60:f9:80:bf: bd:9d:7c:a9:44:1a:2e:41:8f:5c:85:1c:87:33:8c:c7:ac:27: 10:25:87:ed:92:99:86:e4:97:64:3e:a6:33:e8:33:19:75:ab: 7b:3f:29:79:8f:58:e3:ac:10:01:d3:da:14:8b:09:fc:60:61: 88:bd:f0:c2:8c:38:4d:86:25:9f:21:0b:2f:e2:2c:22:05:14: bf:c5:89:6d:59:48:8c:f8:66:01:5b:4e:30:42:1a:19:ae:49: 75:85:23:33:3b:3e:fd:11:17:b9:b3:1e:31:07:d0:61:b9:1a: cf:5b:a6:7e:50:18:61:f1:1e:8b:19:27:d4:f0:90:95:fc:6e: 61:60:e0:60:b4:77:e0:66:ea:e7:a7:37:49:24:a0:b4:a2:f1: 4c:fe:c6:68:31:21:53:4c:97:af:23:d2:d2:71:d6:cd:9f:27: fa:cb:80:e7:ac:18:21:97:9f:b4:46:62:ac:fa:19:cb:a3:33: f5:10:ba:98:3e:bd:a4:66:4c:49:85:89:f2:3f:e5:de:ba:69: 85:46:72:b6:95:41:46:27:82:28:30:32:9e:51:bd:1f:94:1a: 73:85:19:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELJTiMTVfHztDdtMLxy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTQyZDBkNmIxNWE5ZjJlMzg4NjUyNTQ4ZDU5ZGZlODkwZjVhNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV6ppyjbAXWtf29NCbOWrihOV+3L 8lhUz/lDTEKcGEmKmd00a+BIfdz4k2qbd/k2ftsHwjf7TivTHUeeMNU1QLaaEXPi fr7fRtlapvaeToA3RZeBMPVx2T6FZtdKwV6L148SOoMG4bN5t1cYZo1lH/yDkKJH jMYIeq6NrlED1sL9xw5RObN+XzsPG289DFZuHESj26lMp8RtkZhy+4wGJezCxy6b 2dqEHsbeREP5q8g9DMVyBMQf3reBWC2qLgidHsRaqwoXfFal9jq4iPHQd2Porovf SBy+e45Xnj5DjBIiRmpVveHldljJUM0CaUBg4iNkzBhyCEmYJMCdjnpzlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMFC0NaxWp8uOIZSVI1Z3+iQ9acdMB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvd1VMUTFyRmFueTQ0aGxKVWpWbmY2SkQxcHgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUsFeMA0G CSqGSIb3DQEBCwUAA4IBAQAAU0ODI2nCNmGNtFaVdu+D+5TqNuDYxAPehSnfhn4m OWD5gL+9nXypRBouQY9chRyHM4zHrCcQJYftkpmG5JdkPqYz6DMZdat7Pyl5j1jj rBAB09oUiwn8YGGIvfDCjDhNhiWfIQsv4iwiBRS/xYltWUiM+GYBW04wQhoZrkl1 hSMzOz79ERe5sx4xB9BhuRrPW6Z+UBhh8R6LGSfU8JCV/G5hYOBgtHfgZurnpzdJ JKC0ovFM/sZoMSFTTJevI9LScdbNnyf6y4DnrBghl5+0RmKs+hnLozP1ELqYPr2k ZkxJhYnyP+XeummFRnK2lUFGJ4IoMDKeUb0flBpzhRn4 -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:21 2026 by rpki-client