This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa File: W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa (raw, json) Hash identifier: FSZFedNs1YnxbjhewAgdDVFznFYlPK2O05FcBLwFtyk= Subject key identifier: 5B:CB:D9:F1:AA:11:54:A8:EF:C5:45:67:CB:F3:9F:62:32:4D:EB:2A Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Certificate serial: 019B7C12BBC968825A4405A464DA7A62636D Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61316 IP address blocks: 185.10.208.0/22 maxlen: 22 193.33.212.0/23 maxlen: 23 2a03:6540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bb:c9:68:82:5a:44:05:a4:64:da:7a:62:63:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bcbd9f1aa1154a8efc54567cbf39f62324deb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:61:41:3d:b5:51:d4:07:d6:ba:47:f9:2c:6c: e3:d3:ad:f4:b6:e3:ce:c1:b5:5b:01:30:0b:7d:0f: 04:e3:76:b3:4c:1e:12:e2:4d:66:3f:2e:24:2d:f6: 6a:9c:92:98:84:86:15:26:4d:c8:8b:32:a5:ac:cd: 5d:29:89:21:5b:16:0a:c3:da:b7:e6:ed:cf:79:87: 0c:80:80:2d:a2:48:ea:1e:47:fe:d8:02:a8:dc:2f: 9d:8c:23:3e:54:26:14:22:88:67:0e:3e:23:81:6c: 9a:da:ec:85:f1:82:b6:ac:84:0d:a4:58:6b:a4:1b: c6:96:cb:9c:2a:ab:91:10:bb:0c:49:e6:81:34:6e: 61:76:24:18:56:f4:1c:07:f5:6c:fb:ea:3d:84:8a: 0f:79:21:cc:cb:25:1c:b9:01:2d:bf:d2:b0:40:08: 56:5d:0f:58:4d:cc:e1:80:74:d4:e9:22:fe:89:36: 74:2e:38:12:4e:30:2d:75:45:c4:74:0e:e3:8f:de: 57:4f:c6:ec:54:33:a5:bc:96:d3:c7:75:03:e9:fd: ae:88:84:9c:ad:53:94:70:2a:10:52:d8:e3:a4:5b: 13:97:49:65:16:ec:be:83:24:68:bd:23:a4:24:90: f4:82:3e:5c:3e:de:b7:9f:e7:8e:22:27:53:68:3f: c5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CB:D9:F1:AA:11:54:A8:EF:C5:45:67:CB:F3:9F:62:32:4D:EB:2A X509v3 Authority Key Identifier: keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.208.0/22 193.33.212.0/23 IPv6: 2a03:6540::/32 Signature Algorithm: sha256WithRSAEncryption 85:76:17:02:b4:76:05:a3:b1:aa:fb:4f:41:ee:e3:6f:10:4d: f8:61:2f:98:19:f2:65:01:f8:84:b2:59:e1:44:8e:73:9b:c3: d9:cb:d5:9d:f2:07:1f:6e:ea:c1:e3:98:fc:d2:0e:d1:94:ac: e9:b1:a0:30:45:f4:4d:87:66:2f:40:27:4c:cf:b7:89:57:02: 57:72:80:0e:ab:69:60:b5:9f:d9:35:eb:e4:32:71:9e:77:c9: 2e:d0:7e:d6:bb:3b:85:57:ef:ff:24:97:ec:95:69:71:be:ec: dd:b9:ce:a1:cd:9b:73:29:aa:66:f1:dc:05:a6:ac:58:ac:93: 86:e9:f9:b7:89:94:75:b3:6b:68:fe:88:1f:fe:8b:6b:1a:ef: b4:77:6e:06:8a:43:d7:ef:3e:84:d1:29:80:31:6d:bc:de:39: 5d:d5:35:88:b0:62:3d:b2:1e:eb:c4:41:25:d9:34:3e:d6:46: be:a9:1c:ef:28:d4:80:fd:ee:41:ce:97:ed:ab:e6:d5:22:fd: 57:3c:81:6e:e4:c7:50:c2:0f:1c:d8:93:42:f4:2f:b6:26:a5: b5:06:95:ea:20:c4:75:82:e3:db:91:38:53:4f:9d:3d:f4:cc: c2:8b:77:c4:28:d1:8f:3f:21:29:be:05:a5:fa:81:c2:ff:43: b2:46:eb:e1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8ErvJaIJaRAWkZNp6YmNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjM1MThmYWE5Yjk0YTQyZDFhM2I0ZDlmNjNiOTc0Mzk0 ZDA2NjIwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmNiZDlmMWFhMTE1NGE4ZWZjNTQ1NjdjYmYzOWY2MjMyNGRlYjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGFBPbVR1AfWukf5LGzj0630tuPO wbVbATALfQ8E43azTB4S4k1mPy4kLfZqnJKYhIYVJk3IizKlrM1dKYkhWxYKw9q3 5u3PeYcMgIAtokjqHkf+2AKo3C+djCM+VCYUIohnDj4jgWya2uyF8YK2rIQNpFhr pBvGlsucKquRELsMSeaBNG5hdiQYVvQcB/Vs++o9hIoPeSHMyyUcuQEtv9KwQAhW XQ9YTczhgHTU6SL+iTZ0LjgSTjAtdUXEdA7jj95XT8bsVDOlvJbTx3UD6f2uiISc rVOUcCoQUtjjpFsTl0llFuy+gyRovSOkJJD0gj5cPt63n+eOIidTaD/FdwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFvL2fGqEVSo78VFZ8vzn2IyTesqMB8GA1UdIwQY MBaAFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUt YTQ4YWMzMWRiYmYwLzEvVzh2Wjhhb1JWS2p2eFVWbnlfT2ZZakpONnlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUtYTQ4YWMzMWRiYmYw LzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQrQAwQB wSHUMA0EAgACMAcDBQAqA2VAMA0GCSqGSIb3DQEBCwUAA4IBAQCFdhcCtHYFo7Gq +09B7uNvEE34YS+YGfJlAfiEslnhRI5zm8PZy9Wd8gcfburB45j80g7RlKzpsaAw RfRNh2YvQCdMz7eJVwJXcoAOq2lgtZ/ZNevkMnGed8ku0H7WuzuFV+//JJfslWlx vuzduc6hzZtzKapm8dwFpqxYrJOG6fm3iZR1s2to/ogf/otrGu+0d24GikPX7z6E 0SmAMW283jld1TWIsGI9sh7rxEEl2TQ+1ka+qRzvKNSA/e5Bzpftq+bVIv1XPIFu 5MdQwg8c2JNC9C+2JqW1BpXqIMR1guPbkThTT5099MzCi3fEKNGPPyEpvgWl+oHC /0OyRuvh -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:15 2026 by rpki-client