This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/W_mPbXQdWoE3DWEm89aYtTyvXdM.roa File: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (raw, json) Hash identifier: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas= Subject key identifier: 5B:F9:8F:6D:74:1D:5A:81:37:0D:61:26:F3:D6:98:B5:3C:AF:5D:D3 Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Certificate serial: 019B7E38652835906089C0209F87076D138E Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/W_mPbXQdWoE3DWEm89aYtTyvXdM.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57152 IP address blocks: 5.250.255.0/24 maxlen: 24 185.123.54.0/24 maxlen: 24 194.53.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:65:28:35:90:60:89:c0:20:9f:87:07:6d:13:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bf98f6d741d5a81370d6126f3d698b53caf5dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:f4:6e:06:67:bf:f3:9b:df:99:00:1c:3d: be:17:c8:ee:67:64:65:5b:ad:93:ac:39:49:ad:18: 33:4c:6b:8f:6e:27:92:e6:d1:74:ce:ff:fa:6c:4e: 6c:f9:29:1e:4d:01:56:77:8f:67:5b:a2:16:48:45: 2a:63:db:c9:02:2b:bf:55:fc:1a:44:7a:d7:a8:65: 0e:f1:d2:04:d4:4a:62:6a:14:8a:15:8e:f1:81:0d: 84:ca:1a:ff:fb:f8:89:49:66:45:49:ad:60:e6:43: ab:b4:9e:5a:10:d4:31:10:43:94:69:2b:ff:34:1c: 65:5c:40:7f:c5:60:d4:eb:44:6e:64:56:0f:78:25: 81:74:74:3b:5a:5d:7e:51:c8:6a:1c:fd:04:f0:48: 40:a3:e0:ee:39:90:77:fa:99:0c:1b:5a:b8:46:a7: c8:ad:50:f0:a1:78:60:bd:9a:6d:06:c6:86:2e:9e: b8:ef:7a:26:0e:41:7a:a1:0e:23:62:02:ca:6c:66: ec:9f:48:01:0d:8a:d3:36:c2:fc:28:cd:78:af:fb: bf:0a:ef:e6:b7:49:fe:04:57:b5:fd:2a:ad:e1:ac: bd:12:5c:ec:f7:5b:dc:11:da:5e:f0:aa:f2:a0:f8: 70:bf:a0:04:be:8c:46:08:a7:42:76:ce:4d:67:0d: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F9:8F:6D:74:1D:5A:81:37:0D:61:26:F3:D6:98:B5:3C:AF:5D:D3 X509v3 Authority Key Identifier: keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/W_mPbXQdWoE3DWEm89aYtTyvXdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.250.255.0/24 185.123.54.0/24 194.53.138.0/24 Signature Algorithm: sha256WithRSAEncryption cd:0a:f1:87:10:12:20:59:4e:c3:1d:a8:01:0d:0d:10:8e:bf: 75:e5:ac:96:35:eb:68:61:f0:e7:6b:ff:da:d7:5e:2e:95:a7: 48:d2:60:82:df:28:7f:55:cc:06:00:c5:83:8c:74:e4:e6:8b: 19:24:4e:09:0d:47:24:a6:e1:0d:09:f7:1d:45:25:69:b3:23: 66:2a:cf:f6:7e:1b:1e:79:7f:fd:fe:d9:03:a5:95:e4:31:af: c6:af:fe:5f:a1:87:df:1f:02:7b:46:47:88:6c:50:8d:3e:12: 5f:ab:59:c7:f5:ee:e4:fe:97:a1:6b:25:71:c9:e5:44:03:a1: 41:ba:b9:6c:48:42:28:4c:23:b3:7f:e9:e0:5e:54:55:6e:0f: b4:49:0b:b4:72:2a:6b:55:15:73:3f:b5:15:9d:42:50:8e:a0: 19:f0:ac:01:cc:62:82:30:e8:90:10:b1:08:e9:98:70:56:d0: 81:7d:0c:83:7f:fe:a7:07:0a:19:4e:db:b9:6c:73:f9:af:45: 80:fc:44:3e:95:ba:ad:4d:a4:43:5c:8c:05:d9:b9:94:87:4f: 5b:e4:d8:23:96:a4:92:d7:0b:88:a9:cd:4e:de:52:10:a4:a3: 08:29:05:05:a6:59:61:c9:b7:12:cb:92:ce:d4:d8:6a:d7:3c: ee:99:af:e8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OGUoNZBgicAgn4cHbROOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzQzM2ZhZmE1OWYwZDUxMmEyYmViYjA5N2U2OTQ2M2Nj MDY3NTkwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmY5OGY2ZDc0MWQ1YTgxMzcwZDYxMjZmM2Q2OThiNTNjYWY1ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WP0bgZnv/Ob35kAHD2+F8juZ2Rl W62TrDlJrRgzTGuPbieS5tF0zv/6bE5s+SkeTQFWd49nW6IWSEUqY9vJAiu/Vfwa RHrXqGUO8dIE1EpiahSKFY7xgQ2Eyhr/+/iJSWZFSa1g5kOrtJ5aENQxEEOUaSv/ NBxlXEB/xWDU60RuZFYPeCWBdHQ7Wl1+UchqHP0E8EhAo+DuOZB3+pkMG1q4RqfI rVDwoXhgvZptBsaGLp6473omDkF6oQ4jYgLKbGbsn0gBDYrTNsL8KM14r/u/Cu/m t0n+BFe1/Sqt4ay9Elzs91vcEdpe8KryoPhwv6AEvoxGCKdCds5NZw0urQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFv5j210HVqBNw1hJvPWmLU8r13TMB8GA1UdIwQY MBaAFBx0M/r6WfDVEqK+uwl+aUY8wGdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0Nzkt MTJmNDFhMGNjMGMxLzEvV19tUGJYUWRXb0UzRFdFbTg5YVl0VHl2WGRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0NzktMTJmNDFhMGNjMGMx LzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABfr/AwQA uXs2AwQAwjWKMA0GCSqGSIb3DQEBCwUAA4IBAQDNCvGHEBIgWU7DHagBDQ0Qjr91 5ayWNetoYfDna//a114uladI0mCC3yh/VcwGAMWDjHTk5osZJE4JDUckpuENCfcd RSVpsyNmKs/2fhseeX/9/tkDpZXkMa/Gr/5foYffHwJ7RkeIbFCNPhJfq1nH9e7k /pehayVxyeVEA6FBurlsSEIoTCOzf+ngXlRVbg+0SQu0ciprVRVzP7UVnUJQjqAZ 8KwBzGKCMOiQELEI6ZhwVtCBfQyDf/6nBwoZTtu5bHP5r0WA/EQ+lbqtTaRDXIwF 2bmUh09b5NgjlqSS1wuIqc1O3lIQpKMIKQUFpllhybcSy5LO1Nhq1zzuma/o -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:38 2026 by rpki-client