This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa File: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (raw, json) Hash identifier: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk= Subject key identifier: 5A:6C:EA:A9:DF:23:43:C9:76:CC:7F:29:EA:AB:D4:C2:33:54:04:2A Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B7CED5AF3BCDC8B9672B5D894B8566548 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58345 IP address blocks: 5.134.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5a:f3:bc:dc:8b:96:72:b5:d8:94:b8:56:65:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a6ceaa9df2343c976cc7f29eaabd4c23354042a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:cc:77:e1:cd:3a:92:98:0d:81:be:90:f1: 6c:c2:1a:2c:fd:a8:80:f7:44:ce:4b:db:59:dc:3e: b2:4c:0e:9c:0e:23:f6:03:27:af:15:4c:99:2f:95: df:df:d4:8f:a3:cd:7e:77:5d:1b:b4:2f:bb:49:f4: d5:66:0b:92:da:36:5b:c5:24:82:85:7a:d5:d6:81: 45:60:d0:40:52:04:81:4e:c6:97:e0:7a:75:2d:18: 11:49:30:8c:5e:77:f7:97:e0:e9:75:62:02:10:35: 44:a4:1c:cf:1c:bb:84:af:a7:24:57:d7:51:ba:c2: 8e:0f:90:6c:78:8f:46:c4:2d:de:08:2c:4e:68:b8: a3:b6:ab:16:18:c7:fe:5a:58:cf:bc:f0:63:19:f4: 6f:ce:c2:ae:1b:bd:be:4a:94:c7:52:6f:69:6c:04: 77:93:2a:49:03:81:47:a0:cc:bb:f4:08:c5:21:26: be:31:94:38:f5:d2:73:b0:24:61:68:2b:24:3d:05: 63:8d:fc:dd:11:f7:29:bf:4c:39:e5:3f:8f:19:d4: 66:3f:c3:b6:72:75:d5:69:f2:4a:07:69:a4:77:2c: a3:09:d9:69:a9:c7:ea:9d:10:81:f2:45:88:d7:48: f6:2f:bf:ca:ec:13:45:a2:23:04:3e:a0:a8:7c:04: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:EA:A9:DF:23:43:C9:76:CC:7F:29:EA:AB:D4:C2:33:54:04:2A X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.32.0/20 Signature Algorithm: sha256WithRSAEncryption 22:10:31:8c:b3:c4:3c:56:09:37:01:0c:3d:5e:72:65:d6:2a: 4d:83:da:d9:48:7c:0a:8d:02:5f:53:02:9f:cc:ed:be:ac:97: dd:35:dd:d8:53:e7:be:0e:7c:3c:f8:6f:4d:67:99:92:63:d9: 49:97:84:e4:76:dc:0b:33:e2:ba:86:1f:51:b5:19:a5:e2:a7: a4:2d:2d:e5:92:09:55:fa:8f:67:52:b0:68:a3:5a:c7:1f:b2: e7:47:6a:2f:4b:b3:42:32:05:47:17:45:8f:6c:1b:7b:24:b7: 08:29:a4:53:92:10:e1:87:1a:7f:14:05:78:e4:ba:97:41:eb: 9b:0f:f2:59:6c:55:c2:6c:06:2a:4d:86:e8:b6:ad:54:02:1a: ae:6e:f3:6c:79:33:22:21:d9:e2:8e:10:61:25:1c:9d:de:ce: 3f:9d:4e:fe:38:55:c2:93:66:f2:bd:ac:84:8a:03:43:73:10: 4b:3f:c8:a3:33:18:45:4c:1e:62:81:d6:e8:8f:8f:46:66:38: 42:80:57:25:5d:a6:ca:52:22:b5:a8:07:af:34:70:a0:70:41: 7a:31:6a:55:52:f5:da:07:42:27:48:f6:f1:06:41:4a:22:ff: 9e:f3:e6:31:ca:42:c7:86:1c:2d:b7:7c:76:3b:2c:65:b8:4d: 23:19:76:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VrzvNyLlnK12JS4VmVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTZjZWFhOWRmMjM0M2M5NzZjYzdmMjllYWFiZDRjMjMzNTQwNDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIvMd+HNOpKYDYG+kPFswhos/aiA 90TOS9tZ3D6yTA6cDiP2AyevFUyZL5Xf39SPo81+d10btC+7SfTVZguS2jZbxSSC hXrV1oFFYNBAUgSBTsaX4Hp1LRgRSTCMXnf3l+DpdWICEDVEpBzPHLuEr6ckV9dR usKOD5BseI9GxC3eCCxOaLijtqsWGMf+WljPvPBjGfRvzsKuG72+SpTHUm9pbAR3 kypJA4FHoMy79AjFISa+MZQ49dJzsCRhaCskPQVjjfzdEfcpv0w55T+PGdRmP8O2 cnXVafJKB2mkdyyjCdlpqcfqnRCB8kWI10j2L7/K7BNFoiMEPqCofATSxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFps6qnfI0PJdsx/Keqr1MIzVAQqMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvV216cXFkOGpROGwyekg4cDZxdlV3ak5VQkNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEBYYgMA0G CSqGSIb3DQEBCwUAA4IBAQAiEDGMs8Q8Vgk3AQw9XnJl1ipNg9rZSHwKjQJfUwKf zO2+rJfdNd3YU+e+Dnw8+G9NZ5mSY9lJl4TkdtwLM+K6hh9RtRml4qekLS3lkglV +o9nUrBoo1rHH7LnR2ovS7NCMgVHF0WPbBt7JLcIKaRTkhDhhxp/FAV45LqXQeub D/JZbFXCbAYqTYbotq1UAhqubvNseTMiIdnijhBhJRyd3s4/nU7+OFXCk2byvayE igNDcxBLP8ijMxhFTB5igdboj49GZjhCgFclXabKUiK1qAevNHCgcEF6MWpVUvXa B0InSPbxBkFKIv+e8+YxykLHhhwtt3x2OyxluE0jGXZe -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:21 2026 by rpki-client