This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa File: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (raw, json) Hash identifier: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8= Subject key identifier: 5B:E2:FD:67:E7:AD:FE:19:3F:12:54:04:E3:1D:C9:89:DB:58:C4:9F Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9 Certificate serial: 019B7D5D120145549306E03CF85B6BF79F65 Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8893 IP address blocks: 217.72.128.0/20 maxlen: 20 2a02:d6a0::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:12:01:45:54:93:06:e0:3c:f8:5b:6b:f7:9f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9 Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5be2fd67e7adfe193f125404e31dc989db58c49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:f6:4a:17:87:ba:63:c2:d7:db:02:1c:cc: 98:8e:98:7b:c6:82:4f:b6:c4:d5:ff:00:c2:8f:45: 4a:cf:db:59:94:dc:bf:04:26:75:ec:e0:5b:05:39: cf:a2:f5:9e:23:96:ab:30:84:d9:6b:4c:82:c5:5b: 37:39:bb:fb:0a:11:45:c1:74:f8:5d:99:4b:00:89: 28:fb:3d:a2:72:56:4d:b0:b5:66:86:bd:96:df:3c: 9a:bd:18:dc:00:b5:3c:6a:ad:4f:7e:64:3f:93:57: d7:03:ce:8a:f9:51:e9:c8:0d:68:cd:d1:cc:12:97: d1:66:e4:45:74:6d:b8:e4:f4:5c:bf:4d:6e:a8:6d: c5:56:96:d1:92:06:6f:c7:e5:91:92:c1:60:ba:32: ae:b0:e7:c6:d5:63:90:25:5d:9e:d8:93:ce:69:bd: 6d:f1:73:7d:94:8f:03:ee:69:ed:13:9e:29:00:1f: 99:2a:4c:e3:f7:b6:38:65:1a:88:7f:bb:29:2d:ad: c2:43:56:ae:53:67:78:9c:a5:e5:cb:92:04:aa:05: 63:e8:c3:ca:c0:5a:72:26:1d:05:fd:d6:98:c3:82: 4c:17:ac:04:86:9d:f5:15:20:ba:5f:a7:34:38:67: 63:3e:27:d2:27:82:cf:64:ac:05:20:ef:3b:d6:1e: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E2:FD:67:E7:AD:FE:19:3F:12:54:04:E3:1D:C9:89:DB:58:C4:9F X509v3 Authority Key Identifier: keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.72.128.0/20 IPv6: 2a02:d6a0::/30 Signature Algorithm: sha256WithRSAEncryption b3:8a:3a:68:b6:a5:82:dd:78:9d:0a:b2:0f:0f:71:c6:59:d2: e1:04:a2:0e:70:66:6d:96:35:3a:f4:ad:e0:af:5e:9b:8e:83: c3:00:1b:25:b8:50:f4:68:24:56:c3:2d:a4:0a:2a:9f:44:b4: 47:82:a2:3e:10:f6:f4:ac:ee:51:c1:d8:70:df:be:7d:39:22: 2c:8e:3b:3b:bb:47:7e:50:ef:8b:e7:c8:fc:a9:57:c0:a2:45: 39:94:0f:32:f3:68:0a:24:50:75:7b:80:b0:49:14:b7:d5:99: 1e:0c:0d:6b:93:7d:6d:f8:f1:0e:85:2e:45:2d:48:27:fe:46: 09:c8:8f:02:45:a2:ba:7d:5f:1f:1f:98:58:c6:42:bd:a8:66: ea:3f:a3:e9:85:21:ef:91:13:28:71:89:06:2e:eb:3e:d1:ad: a4:3d:6e:cb:36:9c:a4:71:ae:35:82:3e:b1:98:73:10:bb:58: a5:5e:c4:70:d3:66:2c:ca:d9:37:1c:ec:f5:d2:16:98:c1:54: bf:7f:3a:48:69:3f:85:65:6f:c3:6f:04:72:09:0c:9f:0c:23: 59:f7:51:1d:03:09:95:17:cc:ce:e6:2e:c6:53:3d:13:10:48: 27:ce:61:64:2b:6d:3b:be:23:1b:17:01:c4:9f:ed:a8:e2:d4: ad:dd:93:db -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XRIBRVSTBuA8+Ftr959lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OGZlZWI2YTkwYTg2YWNmMTE4NzFlNGU1NzhhMmVhN2Vj MjgxZDkwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmUyZmQ2N2U3YWRmZTE5M2YxMjU0MDRlMzFkYzk4OWRiNThjNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0f2SheHumPC19sCHMyYjph7xoJP tsTV/wDCj0VKz9tZlNy/BCZ17OBbBTnPovWeI5arMITZa0yCxVs3Obv7ChFFwXT4 XZlLAIko+z2iclZNsLVmhr2W3zyavRjcALU8aq1PfmQ/k1fXA86K+VHpyA1ozdHM EpfRZuRFdG245PRcv01uqG3FVpbRkgZvx+WRksFgujKusOfG1WOQJV2e2JPOab1t 8XN9lI8D7mntE54pAB+ZKkzj97Y4ZRqIf7spLa3CQ1auU2d4nKXly5IEqgVj6MPK wFpyJh0F/daYw4JMF6wEhp31FSC6X6c0OGdjPifSJ4LPZKwFIO871h6FDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFvi/Wfnrf4ZPxJUBOMdyYnbWMSfMB8GA1UdIwQY MBaAFHaP7rapCoas8Rhx5OV4oup+woHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY2M2EtZWFmMS00YTg5LTgwNGMt MGMxZjRkMzM3ODNlLzEvVy1MOVotZXRfaGtfRWxRRTR4M0ppZHRZeEo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NjY2M2EtZWFmMS00YTg5LTgwNGMtMGMxZjRkMzM3ODNl LzEvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2UiAMA0E AgACMAcDBQIqAtagMA0GCSqGSIb3DQEBCwUAA4IBAQCzijpotqWC3XidCrIPD3HG WdLhBKIOcGZtljU69K3gr16bjoPDABsluFD0aCRWwy2kCiqfRLRHgqI+EPb0rO5R wdhw3759OSIsjjs7u0d+UO+L58j8qVfAokU5lA8y82gKJFB1e4CwSRS31ZkeDA1r k31t+PEOhS5FLUgn/kYJyI8CRaK6fV8fH5hYxkK9qGbqP6PphSHvkRMocYkGLus+ 0a2kPW7LNpykca41gj6xmHMQu1ilXsRw02Ysytk3HOz10haYwVS/fzpIaT+FZW/D bwRyCQyfDCNZ91EdAwmVF8zO5i7GUz0TEEgnzmFkK207viMbFwHEn+2o4tSt3ZPb -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:10 2026 by rpki-client