This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/WIclx685icB5o3UOREAKLFzzP34.roa File: WIclx685icB5o3UOREAKLFzzP34.roa (raw, json) Hash identifier: uDpM1rHiGL2CuGW9o80RIXGPENrx4ls410ovEwWq5XE= Subject key identifier: 58:87:25:C7:AF:39:89:C0:79:A3:75:0E:44:40:0A:2C:5C:F3:3F:7E Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7 Certificate serial: 019B78A2D3EFE6BDA7F0B1723E438C71D3C2 Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/WIclx685icB5o3UOREAKLFzzP34.roa Signing time: Thu 01 Jan 2026 08:18:15 +0000 ROA not before: Thu 01 Jan 2026 08:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59659 IP address blocks: 5.159.120.0/21 maxlen: 21 185.220.88.0/22 maxlen: 22 185.221.144.0/22 maxlen: 22 2a07:c9c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d3:ef:e6:bd:a7:f0:b1:72:3e:43:8c:71:d3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7 Validity Not Before: Jan 1 08:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=588725c7af3989c079a3750e44400a2c5cf33f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:f0:03:c2:a1:a8:55:2e:46:ae:3a:1f:70: 16:17:9f:8b:e6:0c:90:1a:b7:ab:63:bb:8b:09:4f: ff:6e:e9:29:94:0b:6f:c7:ba:fa:50:4d:b4:34:1b: e1:14:99:d4:29:f2:67:ee:51:a7:32:0a:4a:ef:0b: d8:66:ee:0c:b4:c5:86:55:9d:21:48:18:79:ea:c9: ca:d9:7c:36:f3:00:2a:32:94:39:1e:a4:51:d1:e0: 42:7f:7c:22:26:c8:0d:13:a1:34:96:d0:8b:8f:01: 87:c8:c5:74:cc:b6:bf:cd:0b:14:9f:e7:3f:75:06: 96:43:46:09:d4:c1:8a:ec:39:e9:32:2a:75:2b:01: 89:98:5d:7a:6e:56:e2:a6:b4:54:d9:88:37:66:b9: 87:1b:5d:d7:12:cf:8c:c4:fa:dc:8c:d2:ae:56:05: 2c:f6:90:00:f8:99:6a:9b:94:3e:1b:5e:62:aa:9c: f8:94:56:5a:e2:a4:38:c9:2a:74:aa:0b:cb:0f:ce: 4e:01:c9:8c:62:4e:2f:b5:4a:a0:15:0e:58:0a:f6: 3f:95:85:ef:38:09:cd:ab:73:b4:9b:93:f4:e2:56: 45:21:ce:9a:01:0c:bc:f8:54:6d:dc:46:87:10:3c: c9:fa:7e:0b:43:b9:56:bf:6b:42:a7:4c:d9:c2:49: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:87:25:C7:AF:39:89:C0:79:A3:75:0E:44:40:0A:2C:5C:F3:3F:7E X509v3 Authority Key Identifier: keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/WIclx685icB5o3UOREAKLFzzP34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.120.0/21 185.220.88.0/22 185.221.144.0/22 IPv6: 2a07:c9c0::/29 Signature Algorithm: sha256WithRSAEncryption 55:80:8f:25:bf:ee:c6:c6:88:37:e5:b2:9c:79:f6:c1:75:b5: 49:75:98:b0:f1:39:51:41:c1:4c:17:1c:9c:20:16:91:c9:ca: 3e:08:a5:8b:2c:15:12:14:86:ca:24:5c:fb:c1:94:32:24:68: aa:0b:d2:c6:fe:2c:29:02:b3:d8:5b:83:99:99:92:d1:59:99: d0:a4:83:72:ac:02:b9:97:66:cb:50:5d:2d:56:93:31:ab:fa: b6:76:0e:11:3d:0b:ff:c4:a5:9b:dd:33:55:2a:cd:0f:97:bd: 1a:56:cb:bb:b8:b3:18:64:9d:a0:76:1c:ee:8f:01:cc:72:a2: bf:33:cc:13:ec:cb:81:f9:6e:7a:78:2f:40:21:0d:01:5e:b5: 1c:ee:f7:ae:63:6f:20:c7:b7:f6:15:11:32:8b:dd:12:6a:63: 25:aa:05:05:89:6d:8c:97:e2:c7:a8:1a:ac:74:57:63:f6:d1: 60:ef:5d:5e:7c:6a:31:d5:85:de:05:ff:95:81:d9:2c:09:9c: b7:c5:83:84:f8:73:95:2c:35:75:b5:8f:6d:62:67:ca:0e:bc: a4:72:62:7a:a2:5a:57:05:0c:f0:e8:4d:29:3e:c5:01:84:9a: 6b:34:4f:95:e1:3f:4b:30:2b:cc:90:d4:4c:e6:b2:3c:b7:6f: 38:d6:38:ce -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4otPv5r2n8LFyPkOMcdPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWNiYjg4ZDJiMWE4OTY2NTg1MDY3Nzg2NjJlNzVjNzMy YTY3ZTcwHhcNMjYwMTAxMDgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODg3MjVjN2FmMzk4OWMwNzlhMzc1MGU0NDQwMGEyYzVjZjMzZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl//wA8KhqFUuRq46H3AWF5+L5gyQ GrerY7uLCU//bukplAtvx7r6UE20NBvhFJnUKfJn7lGnMgpK7wvYZu4MtMWGVZ0h SBh56snK2Xw28wAqMpQ5HqRR0eBCf3wiJsgNE6E0ltCLjwGHyMV0zLa/zQsUn+c/ dQaWQ0YJ1MGK7DnpMip1KwGJmF16blbiprRU2Yg3ZrmHG13XEs+MxPrcjNKuVgUs 9pAA+Jlqm5Q+G15iqpz4lFZa4qQ4ySp0qgvLD85OAcmMYk4vtUqgFQ5YCvY/lYXv OAnNq3O0m5P04lZFIc6aAQy8+FRt3EaHEDzJ+n4LQ7lWv2tCp0zZwkmpFQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFiHJcevOYnAeaN1DkRACixc8z9+MB8GA1UdIwQY MBaAFOGcu4jSsaiWZYUGd4Zi51xzKmfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYt ZWZlYTYzZDA2ZjgwLzEvV0ljbHg2ODVpY0I1bzNVT1JFQUtMRnp6UDM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYtZWZlYTYzZDA2Zjgw LzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBZ94AwQC udxYAwQCud2QMA0EAgACMAcDBQMqB8nAMA0GCSqGSIb3DQEBCwUAA4IBAQBVgI8l v+7Gxog35bKcefbBdbVJdZiw8TlRQcFMFxycIBaRyco+CKWLLBUSFIbKJFz7wZQy JGiqC9LG/iwpArPYW4OZmZLRWZnQpINyrAK5l2bLUF0tVpMxq/q2dg4RPQv/xKWb 3TNVKs0Pl70aVsu7uLMYZJ2gdhzujwHMcqK/M8wT7MuB+W56eC9AIQ0BXrUc7veu Y28gx7f2FREyi90SamMlqgUFiW2Ml+LHqBqsdFdj9tFg711efGox1YXeBf+Vgdks CZy3xYOE+HOVLDV1tY9tYmfKDrykcmJ6olpXBQzw6E0pPsUBhJprNE+V4T9LMCvM kNRM5rI8t2841jjO -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:45 2026 by rpki-client