This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/Wx2W2x44SbNMpet_nxHfcd54RRg.roa File: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (raw, json) Hash identifier: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w= Subject key identifier: 5B:1D:96:DB:1E:38:49:B3:4C:A5:EB:7F:9F:11:DF:71:DE:78:45:18 Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b Certificate serial: 019B79ED61C887A59430ED99ABAA0D1AB3F6 Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/Wx2W2x44SbNMpet_nxHfcd54RRg.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52213 IP address blocks: 91.224.16.0/23 maxlen: 24 91.224.16.0/24 maxlen: 24 91.224.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:61:c8:87:a5:94:30:ed:99:ab:aa:0d:1a:b3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b1d96db1e3849b34ca5eb7f9f11df71de784518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:42:4f:3b:27:a3:2f:72:56:06:7f:d5:94: e3:e0:c9:81:1e:b0:67:b4:18:e3:28:a6:7a:f1:64: a4:df:bf:c4:3b:0a:ff:ed:b0:a9:cd:d6:8f:f7:da: aa:19:13:7c:7e:0d:d1:76:7d:17:17:73:a0:19:1c: 65:f1:6d:79:7a:24:e8:de:86:f8:2a:f3:24:7d:2f: 85:3e:f6:bf:39:db:e1:ff:10:25:13:95:b3:b5:89: 62:a7:97:ff:bd:d6:b8:21:3d:73:39:05:5b:90:4b: 84:b0:3b:e3:96:a2:d1:15:c2:db:13:8e:b0:bc:6d: e4:6b:ff:53:aa:29:3c:e4:2f:39:53:1f:52:e0:80: 40:ba:70:4d:f1:a5:b3:9f:41:58:35:60:26:75:78: ae:39:e1:9d:6d:3f:31:bc:f3:07:33:18:e6:4a:b2: 3d:a2:4a:fe:f6:e4:cc:28:45:0c:e1:92:84:7f:e9: ce:2d:ab:69:25:cc:f2:ad:fb:ff:1b:87:2d:ce:ba: 93:9a:9c:b8:68:e7:33:5e:0a:c8:51:3d:88:ba:39: 54:23:aa:dd:b7:56:c2:c2:a2:f6:b4:60:ff:06:54: ef:e6:61:60:b4:a3:82:dd:4e:fc:25:be:ff:ea:38: 7d:f3:f7:5b:18:79:e5:2d:0e:50:0c:30:64:34:1f: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1D:96:DB:1E:38:49:B3:4C:A5:EB:7F:9F:11:DF:71:DE:78:45:18 X509v3 Authority Key Identifier: keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/Wx2W2x44SbNMpet_nxHfcd54RRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.16.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:0c:26:36:41:a2:52:2d:9d:2e:7a:5b:b6:ea:93:4b:4d:79: d4:cf:1c:4c:16:aa:13:05:c5:e7:3f:83:1e:1d:45:37:5d:42: 94:13:f7:b6:af:0e:21:42:b6:af:49:4c:5b:2b:4f:a6:c5:83: b1:fd:57:d6:56:c2:84:2d:78:09:32:79:1d:95:a5:1d:ec:ea: 36:4d:a8:df:4f:e0:c4:41:ad:ec:fa:4f:03:b9:d8:76:ca:b7: b9:7c:92:ce:eb:c6:d2:26:e4:bf:b0:dc:42:32:4e:f6:af:f4: 02:08:3d:30:9b:91:ff:fb:a0:d6:34:b2:95:65:f0:c3:01:33: 0a:8b:de:02:ba:2c:c7:85:5b:d9:7d:2b:82:03:18:2a:b2:49: dc:b6:67:83:31:a2:2f:9e:9e:fc:7b:14:5b:fb:6f:c3:cf:b6: 11:dc:50:ba:fe:d9:50:c7:5b:9c:4e:86:62:a9:0f:4e:d0:20: 8b:f5:11:58:0e:a0:ef:c0:9d:93:5c:7b:24:ed:1d:35:44:bb: 01:97:9d:ac:87:66:7f:e3:81:68:d5:0e:5f:f9:f2:8e:25:7a: e4:05:e9:02:dd:17:b8:88:72:83:73:a8:3c:62:1a:52:5f:c7: 7c:6a:c3:fb:1a:ce:83:fa:51:a9:99:6a:ad:c6:fd:3c:ff:da: 96:09:5b:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WHIh6WUMO2Zq6oNGrP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4 ZWYyNWIwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjFkOTZkYjFlMzg0OWIzNGNhNWViN2Y5ZjExZGY3MWRlNzg0NTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxhCTzsnoy9yVgZ/1ZTj4MmBHrBn tBjjKKZ68WSk37/EOwr/7bCpzdaP99qqGRN8fg3Rdn0XF3OgGRxl8W15eiTo3ob4 KvMkfS+FPva/Odvh/xAlE5WztYlip5f/vda4IT1zOQVbkEuEsDvjlqLRFcLbE46w vG3ka/9Tqik85C85Ux9S4IBAunBN8aWzn0FYNWAmdXiuOeGdbT8xvPMHMxjmSrI9 okr+9uTMKEUM4ZKEf+nOLatpJczyrfv/G4ctzrqTmpy4aOczXgrIUT2IujlUI6rd t1bCwqL2tGD/BlTv5mFgtKOC3U78Jb7/6jh98/dbGHnlLQ5QDDBkNB/ruQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFsdltseOEmzTKXrf58R33HeeEUYMB8GA1UdIwQY MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt NzZlNGUxYzkzNjA2LzEvV3gyVzJ4NDRTYk5NcGV0X254SGZjZDU0UlJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2 LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+AQMA0G CSqGSIb3DQEBCwUAA4IBAQBfDCY2QaJSLZ0uelu26pNLTXnUzxxMFqoTBcXnP4Me HUU3XUKUE/e2rw4hQravSUxbK0+mxYOx/VfWVsKELXgJMnkdlaUd7Oo2TajfT+DE Qa3s+k8Dudh2yre5fJLO68bSJuS/sNxCMk72r/QCCD0wm5H/+6DWNLKVZfDDATMK i94CuizHhVvZfSuCAxgqsknctmeDMaIvnp78exRb+2/Dz7YR3FC6/tlQx1ucToZi qQ9O0CCL9RFYDqDvwJ2TXHsk7R01RLsBl52sh2Z/44Fo1Q5f+fKOJXrkBekC3Re4 iHKDc6g8YhpSX8d8asP7Gs6D+lGpmWqtxv08/9qWCVuE -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:08 2026 by rpki-client