This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa File: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (raw, json) Hash identifier: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c= Subject key identifier: 5B:49:11:BE:5A:84:FB:7D:52:AF:E1:AB:D7:E5:8F:EB:1B:9C:50:C7 Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b Certificate serial: 019B797F1BFB05BD7E9C2C59B955AC224D08 Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56871 IP address blocks: 185.154.216.0/22 maxlen: 24 213.184.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1b:fb:05:bd:7e:9c:2c:59:b9:55:ac:22:4d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b4911be5a84fb7d52afe1abd7e58feb1b9c50c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:26:73:99:eb:18:b9:7f:d8:d8:60:0d:7a: 8f:64:d0:b7:ec:2e:cc:f5:d2:e0:30:fe:b8:88:13: 77:ac:4f:44:46:b7:76:f0:7b:3e:9c:65:60:bc:7d: 65:6f:80:88:a9:83:26:15:16:7e:81:14:30:12:99: 8d:f5:90:cd:10:26:5b:49:9a:3b:87:e7:22:5c:22: ea:98:73:d4:3f:f5:4b:87:54:a9:43:bc:fa:61:11: 1f:42:fb:d3:09:f1:7d:8f:db:8e:5c:94:ee:a0:7d: a2:34:4f:2f:70:f6:00:c8:5c:fe:2e:04:4a:fd:ea: 8e:ca:1f:14:e4:15:6a:f5:5b:2b:a7:cd:95:05:03: c8:8a:89:22:71:f5:87:d3:f3:24:f7:ba:ea:20:ea: a7:1d:54:cb:7d:6a:be:b0:5f:db:06:50:a7:e2:2f: 58:4e:95:01:80:50:83:d7:d4:cc:ba:77:cb:b7:7c: 21:06:94:43:0d:9d:3e:db:bf:ff:e6:3f:1a:5d:81: f1:6b:0a:91:51:a2:a9:bc:33:5b:9f:4b:75:07:d2: 9f:71:f7:c0:0d:f9:6a:00:15:0c:56:93:f8:6b:1c: 0c:d3:3d:a4:3c:53:e4:b0:d6:19:62:2f:c6:bb:56: d3:ee:e2:6a:e1:df:3f:b3:3d:35:44:6e:e5:9f:8e: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:49:11:BE:5A:84:FB:7D:52:AF:E1:AB:D7:E5:8F:EB:1B:9C:50:C7 X509v3 Authority Key Identifier: keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.216.0/22 213.184.80.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:f2:fc:f1:15:57:b1:0c:6c:ae:8d:1a:e4:0d:97:e6:53:3a: b5:01:b3:d5:5a:01:71:18:1d:71:6b:c2:d7:b5:78:b2:29:97: fc:c1:1b:12:bf:58:f8:ff:9d:fa:7b:e0:f7:3f:7c:da:d5:be: 90:9e:26:9d:02:5a:31:8a:8f:57:fe:72:64:83:4c:cf:39:70: 1d:21:6c:60:f7:21:fc:d6:93:a2:b4:2a:22:33:fd:2f:3d:45: ef:c4:3d:45:ee:9e:03:ea:28:f0:fa:f8:06:c9:53:36:38:46: dd:21:4f:6a:32:09:73:df:dc:19:39:ed:6d:57:3e:44:94:ef: 6d:ae:73:2d:38:db:5e:64:5a:2a:73:9a:80:9c:38:0f:e1:79: 4f:c9:df:f8:24:0d:97:51:e7:bb:f5:0a:40:b8:06:33:97:b8: 05:1f:43:32:3c:0a:2e:7d:ba:34:33:10:b5:13:ea:a1:bc:72: 7c:01:de:86:6f:8a:93:e7:4d:1a:9c:2d:f9:12:e6:68:4f:63: 4f:12:fd:3a:fb:1f:7c:0f:a2:e8:f7:67:1d:53:cd:af:13:4d: 94:7e:a9:c2:76:58:ef:38:09:23:35:be:02:e0:b1:47:1a:39: ac:dd:ec:b9:5b:a2:68:f2:b0:9e:f5:4b:2c:46:9a:ba:2b:c8: 86:38:95:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fxv7Bb1+nCxZuVWsIk0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1 YjVkN2IwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjQ5MTFiZTVhODRmYjdkNTJhZmUxYWJkN2U1OGZlYjFiOWM1MGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gMmc5nrGLl/2NhgDXqPZNC37C7M 9dLgMP64iBN3rE9ERrd28Hs+nGVgvH1lb4CIqYMmFRZ+gRQwEpmN9ZDNECZbSZo7 h+ciXCLqmHPUP/VLh1SpQ7z6YREfQvvTCfF9j9uOXJTuoH2iNE8vcPYAyFz+LgRK /eqOyh8U5BVq9Vsrp82VBQPIiokicfWH0/Mk97rqIOqnHVTLfWq+sF/bBlCn4i9Y TpUBgFCD19TMunfLt3whBpRDDZ0+27//5j8aXYHxawqRUaKpvDNbn0t1B9KfcffA DflqABUMVpP4axwM0z2kPFPksNYZYi/Gu1bT7uJq4d8/sz01RG7ln45OwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFtJEb5ahPt9Uq/hq9flj+sbnFDHMB8GA1UdIwQY MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct NDQ1ZDQ1ODhjMzEyLzEvVzBrUnZscUUtMzFTci1HcjEtV1A2eHVjVU1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZrYAwQC 1bhQMA0GCSqGSIb3DQEBCwUAA4IBAQCa8vzxFVexDGyujRrkDZfmUzq1AbPVWgFx GB1xa8LXtXiyKZf8wRsSv1j4/536e+D3P3za1b6QniadAloxio9X/nJkg0zPOXAd IWxg9yH81pOitCoiM/0vPUXvxD1F7p4D6ijw+vgGyVM2OEbdIU9qMglz39wZOe1t Vz5ElO9trnMtONteZFoqc5qAnDgP4XlPyd/4JA2XUee79QpAuAYzl7gFH0MyPAou fbo0MxC1E+qhvHJ8Ad6Gb4qT500anC35EuZoT2NPEv06+x98D6Lo92cdU82vE02U fqnCdljvOAkjNb4C4LFHGjms3ey5W6Jo8rCe9UssRpq6K8iGOJXF -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:06 2026 by rpki-client