This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/W-auLweCazJVGZa2RWm9KCu-wKE.roa File: W-auLweCazJVGZa2RWm9KCu-wKE.roa (raw, json) Hash identifier: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s= Subject key identifier: 5B:E6:AE:2F:07:82:6B:32:55:19:96:B6:45:69:BD:28:2B:BE:C0:A1 Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019B78345B97CAFE0D35C41BCCED80BFB62B Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/W-auLweCazJVGZa2RWm9KCu-wKE.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43747 IP address blocks: 212.230.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5b:97:ca:fe:0d:35:c4:1b:cc:ed:80:bf:b6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5be6ae2f07826b32551996b64569bd282bbec0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:86:09:66:b4:17:e6:1b:56:66:d9:3e:6c: 89:6b:a5:2a:f7:19:e4:99:8a:01:0d:1c:c8:16:f0: a9:b7:c5:fa:c0:9a:47:0b:8c:67:6b:88:09:d7:a1: 2b:88:27:a5:63:20:53:67:3b:4b:38:da:2c:16:4b: 72:68:4a:a6:81:3b:5e:b3:ed:04:bc:d4:90:fd:dc: 6f:fb:c2:6c:21:cd:33:9e:7c:7e:b2:39:21:25:7d: 98:10:4f:1d:85:31:07:b3:21:e2:3c:0d:0e:0e:10: dc:32:d0:ee:b8:9c:dd:f3:ee:46:2d:87:c7:be:9b: 70:a4:22:1c:69:33:58:2f:55:6e:5d:82:8b:83:85: 8d:47:a3:c8:38:e2:74:a9:83:98:40:7e:a7:d9:9e: 91:6f:df:a6:86:8e:76:38:fc:ac:ec:fa:db:19:1d: de:3c:75:8a:c1:de:9b:95:1a:62:36:54:c3:d1:4a: 52:5f:dd:1a:40:5d:6a:e0:7f:e7:f4:1e:1b:1a:2f: 48:e3:b4:4e:65:91:dd:ee:59:b0:6b:11:da:bd:c3: 83:88:e2:76:22:87:e9:24:4e:94:9a:25:c9:83:09: f8:fe:e1:a6:fc:16:0a:43:ce:4d:c7:65:67:30:3e: ca:c5:89:23:d4:43:3b:a8:17:bb:58:e2:ec:c1:f3: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E6:AE:2F:07:82:6B:32:55:19:96:B6:45:69:BD:28:2B:BE:C0:A1 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/W-auLweCazJVGZa2RWm9KCu-wKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.230.163.0/24 Signature Algorithm: sha256WithRSAEncryption 35:9c:15:bb:66:53:53:d1:74:a8:9a:ff:04:a3:6f:f4:de:6f: 78:aa:b8:d7:3f:85:94:be:1c:94:ed:52:45:30:8c:61:4f:07: 1d:65:92:b8:78:d4:10:b3:f8:7b:c8:6f:e4:5b:94:cc:c7:ba: f9:62:71:ee:06:d6:2b:e1:20:33:78:38:26:b5:44:b6:87:ad: d7:70:43:3a:13:a9:46:70:1f:c7:df:c2:79:96:50:a5:ad:e7: ce:e8:3a:25:08:41:ea:28:83:79:05:5f:43:df:96:b8:4b:fb: 87:02:86:82:4e:c2:25:01:cb:36:07:4e:fe:a5:fd:1a:12:00: f9:5d:52:ec:b3:c8:89:11:f5:bd:e7:e9:7f:a2:46:61:c7:c6: b4:7d:1e:de:34:0e:d2:1e:ef:28:02:3d:c1:61:7f:44:f1:09: 1c:c8:ab:26:db:60:76:f3:72:ce:b5:95:e6:4e:7c:db:8f:7d: b2:d2:33:69:b3:6b:55:4d:d6:4f:3e:75:21:d3:9b:ba:38:07: 27:04:ae:2e:d9:1b:f5:b2:5f:5a:54:28:ad:4e:fb:2e:61:6f: 70:03:79:57:41:1b:82:84:c1:80:ea:bb:aa:6b:1b:e1:a8:57: 15:9d:7a:a5:b0:0e:35:31:3a:a2:7b:83:7c:d4:64:aa:0f:03: 93:d4:40:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFuXyv4NNcQbzO2Av7YrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmU2YWUyZjA3ODI2YjMyNTUxOTk2YjY0NTY5YmQyODJiYmVjMGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyaGCWa0F+YbVmbZPmyJa6Uq9xnk mYoBDRzIFvCpt8X6wJpHC4xna4gJ16EriCelYyBTZztLONosFktyaEqmgTtes+0E vNSQ/dxv+8JsIc0znnx+sjkhJX2YEE8dhTEHsyHiPA0ODhDcMtDuuJzd8+5GLYfH vptwpCIcaTNYL1VuXYKLg4WNR6PIOOJ0qYOYQH6n2Z6Rb9+mho52OPys7PrbGR3e PHWKwd6blRpiNlTD0UpSX90aQF1q4H/n9B4bGi9I47ROZZHd7lmwaxHavcODiOJ2 IofpJE6UmiXJgwn4/uGm/BYKQ85Nx2VnMD7KxYkj1EM7qBe7WOLswfN5WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvmri8HgmsyVRmWtkVpvSgrvsChMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvVy1hdUx3ZUNhekpWR1phMlJXbTlLQ3Utd0tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OajMA0G CSqGSIb3DQEBCwUAA4IBAQA1nBW7ZlNT0XSomv8Eo2/03m94qrjXP4WUvhyU7VJF MIxhTwcdZZK4eNQQs/h7yG/kW5TMx7r5YnHuBtYr4SAzeDgmtUS2h63XcEM6E6lG cB/H38J5llClrefO6DolCEHqKIN5BV9D35a4S/uHAoaCTsIlAcs2B07+pf0aEgD5 XVLss8iJEfW95+l/okZhx8a0fR7eNA7SHu8oAj3BYX9E8QkcyKsm22B283LOtZXm Tnzbj32y0jNps2tVTdZPPnUh05u6OAcnBK4u2Rv1sl9aVCitTvsuYW9wA3lXQRuC hMGA6ruqaxvhqFcVnXqlsA41MTqie4N81GSqDwOT1EAO -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:29 2026 by rpki-client