This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/W5tQjrZIDLXtVoHvw5hDwW6uwDY.roa File: W5tQjrZIDLXtVoHvw5hDwW6uwDY.roa (raw, json) Hash identifier: lWLrwUZWZxYt6G9lXSlpuI1ib9i4hxha6uNBai2uKlk= Subject key identifier: 5B:9B:50:8E:B6:48:0C:B5:ED:56:81:EF:C3:98:43:C1:6E:AE:C0:36 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C747B44855A19DC34F2494E695D241 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/W5tQjrZIDLXtVoHvw5hDwW6uwDY.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200627 IP address blocks: 212.193.98.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:47:b4:48:55:a1:9d:c3:4f:24:94:e6:95:d2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b9b508eb6480cb5ed5681efc39843c16eaec036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:be:e4:2d:4b:e9:39:6b:b6:91:19:83:4e:a0: 79:e9:86:a6:f5:03:ac:11:39:5b:b1:04:64:89:0b: 60:07:64:d3:a3:71:4f:84:39:3e:4e:1e:88:8c:ac: 0d:3d:5b:d6:0e:bc:7e:bb:51:d0:16:3d:2b:b3:7a: 7d:91:ec:34:b4:44:d5:6e:bb:49:f6:7f:45:02:a3: 93:20:34:43:bc:8d:49:64:14:51:4a:62:7d:a9:93: e8:ea:b7:fa:78:4e:74:08:3c:1f:55:48:b0:1d:f8: 21:e7:fb:f5:9b:4d:e6:1b:29:4f:4d:f4:78:02:3d: 57:45:9d:2c:7f:61:a2:b6:16:07:e4:6d:aa:dc:06: fe:70:6f:da:d0:9b:af:99:cf:fe:a2:5d:a8:0f:7b: 38:3d:85:b4:65:62:c2:db:9a:e9:7c:02:c3:d8:19: 42:45:90:f5:4b:e9:31:b2:8c:8f:8b:91:20:5c:fa: ff:2b:ba:94:99:ed:09:1f:34:72:d2:34:a5:18:d9: dd:7f:48:be:61:b4:89:98:12:20:a7:10:cf:ab:75: 28:10:2f:60:14:00:6f:02:ec:87:b1:e8:c0:85:bf: be:79:60:2b:3c:30:67:fd:d3:d0:b7:89:1c:49:81: b0:01:7a:2a:cd:d9:7a:ea:61:0d:0c:80:92:59:8d: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9B:50:8E:B6:48:0C:B5:ED:56:81:EF:C3:98:43:C1:6E:AE:C0:36 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/W5tQjrZIDLXtVoHvw5hDwW6uwDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.193.98.0/24 Signature Algorithm: sha256WithRSAEncryption 00:c5:79:88:e3:f2:ac:38:73:22:92:2d:73:c9:65:38:96:43: 28:7d:bd:bb:94:fd:76:02:3e:fb:97:ff:a8:eb:0a:bd:7a:a0: b7:04:a0:14:ed:72:51:93:03:e7:bb:67:dd:33:26:12:a8:a6: b2:ff:94:7f:65:c5:d0:24:f6:0b:45:5a:0e:e2:80:6e:04:02: bd:2c:0b:97:8f:aa:77:ea:ae:63:c1:71:d9:6c:cf:cb:fd:bd: 8d:8c:c5:ed:19:e7:4a:ed:31:3c:4e:08:57:38:7c:45:58:2e: 69:fb:66:79:14:dc:05:92:4b:a3:d5:6a:91:73:c4:2d:91:0b: d5:61:ad:8d:ab:5d:17:5a:f9:86:6f:8f:3e:1d:d3:4a:44:0f: 82:40:3b:26:7a:8c:d7:a0:a9:57:49:a4:80:84:67:c1:67:61: 82:66:40:75:cd:bd:7e:48:7d:20:ac:dd:d2:6e:5e:c7:86:37: a0:29:da:5c:66:6e:c5:40:c3:a6:7b:b9:00:d2:33:86:58:47: 53:bd:b2:fa:4c:36:d8:c3:2c:dc:0a:31:ac:f0:42:2e:5e:7b: d2:75:9f:be:a3:dc:05:ad:72:ed:b1:44:e8:9f:cd:65:71:70: 44:fb:0b:e3:64:50:57:af:d8:fb:62:d0:5b:6d:5e:77:23:96: 10:18:0e:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0e0SFWhncNPJJTmldJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjliNTA4ZWI2NDgwY2I1ZWQ1NjgxZWZjMzk4NDNjMTZlYWVjMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r7kLUvpOWu2kRmDTqB56Yam9QOs ETlbsQRkiQtgB2TTo3FPhDk+Th6IjKwNPVvWDrx+u1HQFj0rs3p9kew0tETVbrtJ 9n9FAqOTIDRDvI1JZBRRSmJ9qZPo6rf6eE50CDwfVUiwHfgh5/v1m03mGylPTfR4 Aj1XRZ0sf2GithYH5G2q3Ab+cG/a0Juvmc/+ol2oD3s4PYW0ZWLC25rpfALD2BlC RZD1S+kxsoyPi5EgXPr/K7qUme0JHzRy0jSlGNndf0i+YbSJmBIgpxDPq3UoEC9g FABvAuyHsejAhb++eWArPDBn/dPQt4kcSYGwAXoqzdl66mENDICSWY1YjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFubUI62SAy17VaB78OYQ8FursA2MB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvVzV0UWpyWklETFh0Vm9Idnc1aER3VzZ1d0RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MFiMA0G CSqGSIb3DQEBCwUAA4IBAQAAxXmI4/KsOHMiki1zyWU4lkMofb27lP12Aj77l/+o 6wq9eqC3BKAU7XJRkwPnu2fdMyYSqKay/5R/ZcXQJPYLRVoO4oBuBAK9LAuXj6p3 6q5jwXHZbM/L/b2NjMXtGedK7TE8TghXOHxFWC5p+2Z5FNwFkkuj1WqRc8QtkQvV Ya2Nq10XWvmGb48+HdNKRA+CQDsmeozXoKlXSaSAhGfBZ2GCZkB1zb1+SH0grN3S bl7HhjegKdpcZm7FQMOme7kA0jOGWEdTvbL6TDbYwyzcCjGs8EIuXnvSdZ++o9wF rXLtsUTon81lcXBE+wvjZFBXr9j7YtBbbV53I5YQGA5z -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:30 2026 by rpki-client