This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/W02fhpsgnAConQXGiEg0hq7nCh4.roa File: W02fhpsgnAConQXGiEg0hq7nCh4.roa (raw, json) Hash identifier: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk= Subject key identifier: 5B:4D:9F:86:9B:20:9C:00:A8:9D:05:C6:88:48:34:86:AE:E7:0A:1E Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e Certificate serial: 019B79ED03506325B0DF23A7F51DD7B2A24F Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/W02fhpsgnAConQXGiEg0hq7nCh4.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8717 IP address blocks: 193.109.54.0/24 maxlen: 24 193.109.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:03:50:63:25:b0:df:23:a7:f5:1d:d7:b2:a2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b4d9f869b209c00a89d05c688483486aee70a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:da:84:8b:1c:29:c3:2d:fe:b7:22:f2:52: 07:f2:0b:67:89:63:b2:59:b6:23:62:ac:dd:8c:54: 8d:81:48:91:ae:dd:d8:84:9d:1b:95:9e:eb:74:40: 75:91:91:6e:42:57:96:b8:97:79:8a:dd:dd:f5:cc: 25:19:d9:ff:74:9e:55:28:0d:21:22:bf:f7:c7:b7: 4d:15:34:26:66:a5:8d:51:14:50:ce:8d:07:55:38: 9a:82:b4:e6:73:8b:57:16:de:41:ab:14:94:a1:84: 71:cd:ff:c4:77:78:e9:d7:9f:b6:7b:37:3b:14:fe: f3:61:f1:ff:e2:51:28:38:21:cd:9f:9f:28:42:61: 76:01:92:23:19:7a:fa:20:1b:fa:5d:8f:d3:14:c9: 31:9d:3a:35:97:1f:ad:44:39:7f:38:0d:f8:d7:fb: 56:a3:a4:e2:65:0e:e4:b9:fd:b9:35:c9:21:d8:ee: 24:50:b9:e5:39:bc:e9:c7:ce:06:69:d3:a7:7f:59: 4d:3c:5a:ce:2d:6a:b8:b8:80:55:92:39:9c:81:f0: ef:0c:db:4f:0e:c4:75:07:0b:6b:8b:2a:28:9a:2f: 7d:23:bb:0c:40:be:a0:11:99:15:3b:ad:72:64:67: 6a:df:a8:b1:c0:78:36:be:99:9b:6d:0f:f8:27:61: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4D:9F:86:9B:20:9C:00:A8:9D:05:C6:88:48:34:86:AE:E7:0A:1E X509v3 Authority Key Identifier: keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/W02fhpsgnAConQXGiEg0hq7nCh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.54.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:0e:8a:48:28:5a:57:c5:43:4a:20:44:98:5f:89:b9:c7:8c: db:c1:e8:a9:6e:ab:80:3d:82:f5:57:f1:50:3e:6e:98:2e:6f: 96:51:10:ae:c3:19:64:fb:d7:5e:37:74:59:f5:1b:54:d1:47: 7b:30:e9:2c:0e:6d:15:a0:ae:28:6c:9c:c1:5f:84:ff:45:6a: 4e:5c:35:ca:29:db:88:84:15:73:02:d1:1b:71:8f:e8:04:37: 17:44:bb:00:7d:71:47:cc:e9:0b:7e:ec:73:97:b8:52:4e:2e: 4f:e7:3c:94:b5:00:42:cb:22:e6:e0:3a:d5:48:4f:35:98:ec: b6:8c:a7:f7:ab:ec:37:02:5d:b8:01:f7:2d:f3:20:94:9d:1b: 10:2b:c4:af:45:37:76:ff:22:dd:86:2c:35:ae:b1:46:1d:68: 35:fd:a4:36:f3:7c:85:29:cc:98:92:3f:98:04:d3:d5:a5:57: 0c:6f:b1:2f:87:36:c0:76:09:97:75:25:61:c1:19:93:7e:03: c8:15:57:1d:26:9a:5d:62:7d:8e:7f:7d:8b:66:3e:2d:f0:83: a6:ec:74:84:6f:fa:16:2a:16:c1:14:22:14:a2:85:4c:57:d6: 4f:c2:d9:e0:5f:63:d2:20:36:66:99:59:3f:fe:b3:fb:48:a3: 5c:f8:c1:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QNQYyWw3yOn9R3XsqJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3 MTk0NmUwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjRkOWY4NjliMjA5YzAwYTg5ZDA1YzY4ODQ4MzQ4NmFlZTcwYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFPahIscKcMt/rci8lIH8gtniWOy WbYjYqzdjFSNgUiRrt3YhJ0blZ7rdEB1kZFuQleWuJd5it3d9cwlGdn/dJ5VKA0h Ir/3x7dNFTQmZqWNURRQzo0HVTiagrTmc4tXFt5BqxSUoYRxzf/Ed3jp15+2ezc7 FP7zYfH/4lEoOCHNn58oQmF2AZIjGXr6IBv6XY/TFMkxnTo1lx+tRDl/OA341/tW o6TiZQ7kuf25Nckh2O4kULnlObzpx84GadOnf1lNPFrOLWq4uIBVkjmcgfDvDNtP DsR1Bwtriyoomi99I7sMQL6gEZkVO61yZGdq36ixwHg2vpmbbQ/4J2GNiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtNn4abIJwAqJ0FxohINIau5woeMB8GA1UdIwQY MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct ZTVjMWM2MmNmZTM3LzEvVzAyZmhwc2duQUNvblFYR2lFZzBocTduQ2g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3 LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW02MA0G CSqGSIb3DQEBCwUAA4IBAQBNDopIKFpXxUNKIESYX4m5x4zbweipbquAPYL1V/FQ Pm6YLm+WURCuwxlk+9deN3RZ9RtU0Ud7MOksDm0VoK4obJzBX4T/RWpOXDXKKduI hBVzAtEbcY/oBDcXRLsAfXFHzOkLfuxzl7hSTi5P5zyUtQBCyyLm4DrVSE81mOy2 jKf3q+w3Al24Afct8yCUnRsQK8SvRTd2/yLdhiw1rrFGHWg1/aQ283yFKcyYkj+Y BNPVpVcMb7EvhzbAdgmXdSVhwRmTfgPIFVcdJppdYn2Of32LZj4t8IOm7HSEb/oW KhbBFCIUooVMV9ZPwtngX2PSIDZmmVk//rP7SKNc+MEO -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:10 2026 by rpki-client