This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/weNArfvB6aIBhliGWgRmku9NM4k.roa File: weNArfvB6aIBhliGWgRmku9NM4k.roa (raw, json) Hash identifier: 5cqXzpfVcXD0jTHKSY2NMKnFRtchriM7ulhLtiSinGQ= Subject key identifier: C1:E3:40:AD:FB:C1:E9:A2:01:86:58:86:5A:04:66:92:EF:4D:33:89 Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a Certificate serial: 019B7834DF5C7B98EFF49CE4556513E6D240 Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/weNArfvB6aIBhliGWgRmku9NM4k.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50837 IP address blocks: 31.171.240.0/20 maxlen: 24 45.88.24.0/22 maxlen: 24 91.92.71.0/24 maxlen: 24 93.123.14.0/23 maxlen: 24 93.123.82.0/23 maxlen: 24 94.156.200.0/22 maxlen: 24 178.22.64.0/21 maxlen: 24 185.12.4.0/22 maxlen: 24 2a01:9980::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:df:5c:7b:98:ef:f4:9c:e4:55:65:13:e6:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e340adfbc1e9a2018658865a046692ef4d3389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:3c:39:c8:4d:97:ad:51:af:15:da:42:35: be:4b:9b:74:5a:56:8d:da:6c:71:92:bc:35:c5:5b: f5:47:36:37:56:0a:1f:4c:c0:6f:e4:5a:04:d5:ef: 3f:a1:a3:06:c6:2c:e8:2b:0f:58:9e:a2:68:29:80: 3c:05:d4:39:fe:3b:de:90:83:a9:88:0d:f4:3e:12: 1f:a2:b6:d0:ac:10:8c:09:64:49:0b:77:a7:fb:7e: c4:95:07:cc:63:5d:b4:bf:50:a6:16:fc:2e:d1:e6: bb:b0:11:bb:6f:08:df:cb:39:b8:ab:d3:6d:9e:a8: 87:e0:9e:8b:20:e0:1b:b0:58:ee:79:00:de:6c:b0: 34:3c:4b:b5:85:60:97:a9:5b:6a:6d:ee:55:30:77: 62:eb:9f:c1:8e:8e:72:27:1c:69:8e:a4:31:1e:08: 1e:20:b3:22:52:6e:11:11:65:f9:e6:5d:a1:74:1b: cd:3c:9e:c1:0b:98:2d:11:b0:88:3b:fd:f7:52:28: 7f:1d:9f:06:9a:ae:56:62:6c:6f:26:5a:ce:1d:bb: 02:b2:56:d9:73:17:5e:bb:91:94:3a:ad:af:a2:ee: ef:38:1b:92:70:67:15:56:ae:42:7f:e2:5a:57:09: 58:9e:b8:40:71:1a:61:f3:94:10:90:76:a9:6e:ee: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E3:40:AD:FB:C1:E9:A2:01:86:58:86:5A:04:66:92:EF:4D:33:89 X509v3 Authority Key Identifier: keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/weNArfvB6aIBhliGWgRmku9NM4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.240.0/20 45.88.24.0/22 91.92.71.0/24 93.123.14.0/23 93.123.82.0/23 94.156.200.0/22 178.22.64.0/21 185.12.4.0/22 IPv6: 2a01:9980::/32 Signature Algorithm: sha256WithRSAEncryption 0e:4e:f6:7a:c4:5d:3a:f5:bb:2b:68:75:91:d2:b6:6b:b0:4e: bf:b6:46:9f:66:01:19:66:1c:fd:04:3e:6e:d1:87:21:f3:2e: 4a:05:12:68:30:c5:8c:0b:88:49:86:65:21:bf:fb:14:9c:cb: a2:29:4c:de:9c:e2:75:63:df:e1:d5:48:76:fd:e4:b9:16:5b: a8:3a:c2:fd:88:0f:b2:8e:cb:45:b3:a1:29:d8:32:3c:8b:98: df:e9:b4:3f:55:06:19:b0:eb:21:6a:17:6b:76:1a:e0:f4:f2: 66:56:04:78:9e:34:6d:34:b6:4e:4c:18:f1:d6:a1:c6:01:52: e0:78:9c:07:f4:58:38:67:34:e4:b5:29:e3:8c:d9:76:7e:9a: 32:da:9c:0e:8a:0d:d7:9e:a7:36:09:ff:82:c8:b9:07:d0:61: e9:44:62:7b:3e:ca:7d:0d:82:1f:f6:17:00:46:13:46:c0:2d: d2:78:0d:c5:3e:3d:36:96:e4:b2:62:dc:b1:21:e6:7e:57:13: be:20:0a:d0:05:a4:d7:f4:73:af:61:07:e2:5c:68:19:2b:b3: b7:67:73:0b:c5:bc:33:02:d2:e0:87:3f:2a:cb:65:b5:d1:7f: 02:7d:ba:a9:72:3e:6c:d4:48:e6:77:86:7e:81:ea:fe:6e:cd: 9f:da:2d:87 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt4NN9ce5jv9JzkVWUT5tJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1 ZWMwOWEwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWUzNDBhZGZiYzFlOWEyMDE4NjU4ODY1YTA0NjY5MmVmNGQzMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ao8OchNl61RrxXaQjW+S5t0WlaN 2mxxkrw1xVv1RzY3VgofTMBv5FoE1e8/oaMGxizoKw9YnqJoKYA8BdQ5/jvekIOp iA30PhIforbQrBCMCWRJC3en+37ElQfMY120v1CmFvwu0ea7sBG7bwjfyzm4q9Nt nqiH4J6LIOAbsFjueQDebLA0PEu1hWCXqVtqbe5VMHdi65/Bjo5yJxxpjqQxHgge ILMiUm4REWX55l2hdBvNPJ7BC5gtEbCIO/33Uih/HZ8Gmq5WYmxvJlrOHbsCslbZ cxdeu5GUOq2vou7vOBuScGcVVq5Cf+JaVwlYnrhAcRph85QQkHapbu6crwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFMHjQK37wemiAYZYhloEZpLvTTOJMB8GA1UdIwQY MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt MDA4NmQwMjM4NWQ2LzEvd2VOQXJmdkI2YUlCaGxpR1dnUm1rdTlOTTRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2 LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQEH6vwAwQC LVgYAwQAW1xHAwQBXXsOAwQBXXtSAwQCXpzIAwQDshZAAwQCuQwEMA0EAgACMAcD BQAqAZmAMA0GCSqGSIb3DQEBCwUAA4IBAQAOTvZ6xF069bsraHWR0rZrsE6/tkaf ZgEZZhz9BD5u0Ych8y5KBRJoMMWMC4hJhmUhv/sUnMuiKUzenOJ1Y9/h1Uh2/eS5 FluoOsL9iA+yjstFs6Ep2DI8i5jf6bQ/VQYZsOshahdrdhrg9PJmVgR4njRtNLZO TBjx1qHGAVLgeJwH9Fg4ZzTktSnjjNl2fpoy2pwOig3Xnqc2Cf+CyLkH0GHpRGJ7 Psp9DYIf9hcARhNGwC3SeA3FPj02luSyYtyxIeZ+VxO+IArQBaTX9HOvYQfiXGgZ K7O3Z3MLxbwzAtLghz8qy2W10X8Cfbqpcj5s1Ejmd4Z+ger+bs2f2i2H -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:50 2026 by rpki-client