This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/W2dqeQoexNzO-eZu-b3E0MsHT4I.roa File: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (raw, json) Hash identifier: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0= Subject key identifier: 5B:67:6A:79:0A:1E:C4:DC:CE:F9:E6:6E:F9:BD:C4:D0:CB:07:4F:82 Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Certificate serial: 019B7834B5E8049EF2CF5272742E1B4082A6 Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/W2dqeQoexNzO-eZu-b3E0MsHT4I.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41899 IP address blocks: 212.37.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b5:e8:04:9e:f2:cf:52:72:74:2e:1b:40:82:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b676a790a1ec4dccef9e66ef9bdc4d0cb074f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:99:ff:ea:b6:45:1a:e1:43:9d:c7:b7:19: d2:f4:8a:d5:b1:0b:3f:8d:5b:db:8a:91:50:8a:aa: 27:66:c0:c1:68:96:23:2c:e4:18:e0:55:da:d4:8c: 61:98:bb:9f:fb:ee:93:ec:1d:c9:6c:86:1c:18:e9: 90:0c:e4:bc:37:ad:ec:44:89:83:65:7c:ad:52:66: 7f:0c:ae:03:46:ae:f6:5b:1f:c9:7d:b6:b4:99:70: bf:8e:84:ca:86:b8:1d:ff:25:ed:62:92:a1:32:c3: fa:16:38:11:10:7e:a9:bb:a3:04:b6:30:16:10:5d: c0:01:fb:1f:6d:ea:f8:de:dc:83:91:18:27:93:6c: 12:fb:4d:e1:e1:f6:76:79:bf:14:92:a4:4a:27:94: 60:37:d6:51:4d:a5:26:8e:06:0f:9b:53:13:81:13: b1:0f:6c:b6:cf:13:93:aa:1e:cf:87:37:a0:77:d6: 5c:15:36:05:15:6f:7d:29:ef:51:1b:54:8a:43:2a: 6a:f5:fa:2f:ec:77:38:34:91:88:75:67:4b:32:41: a2:14:66:be:47:4c:b1:5c:06:20:c7:02:fd:50:11: 3d:9b:6a:8a:e1:bf:00:d2:f4:0f:90:aa:2b:94:5b: b6:3a:20:dc:3a:9d:4d:ef:f4:b5:61:5d:ca:23:2b: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:67:6A:79:0A:1E:C4:DC:CE:F9:E6:6E:F9:BD:C4:D0:CB:07:4F:82 X509v3 Authority Key Identifier: keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/W2dqeQoexNzO-eZu-b3E0MsHT4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.37.64.0/23 Signature Algorithm: sha256WithRSAEncryption 25:24:80:0d:8d:24:52:62:56:57:1a:5f:7b:86:53:69:b9:0e: cb:43:c7:ef:b5:97:7f:c9:28:1e:0a:1a:72:4a:f0:be:88:7e: 75:52:0e:4f:c7:c2:29:f4:b8:4b:1c:1d:ee:40:6d:a9:f1:d5: 0e:e4:42:ac:f3:75:ab:16:6b:35:51:34:58:a5:3d:a7:91:aa: 01:a8:43:00:87:f9:84:fa:d6:77:3d:56:4b:12:ee:41:d4:6d: 07:29:9c:46:bc:2a:d1:19:9a:50:86:d1:17:4a:2f:c8:10:d8: c1:89:50:c3:41:c2:37:24:2c:cb:a0:96:4e:49:54:67:09:93: aa:df:fe:06:10:a4:5c:14:62:0f:22:a4:f2:77:5d:c9:c5:27: 3a:71:93:5b:5a:b7:10:00:aa:ba:aa:81:58:52:e4:e8:e6:02: 76:e9:05:48:16:bd:52:5f:f7:f5:7b:20:e4:f7:21:5f:e7:f8: 40:69:6a:df:f4:f0:a5:47:e6:97:5b:81:01:4d:33:45:e5:87: 42:f2:bc:d4:5b:de:a2:40:92:cc:9f:a9:69:d5:6c:b5:8b:2a: bb:d5:97:b7:c2:2d:70:a7:84:09:23:ae:97:c5:12:21:ea:b7: bd:3c:c9:ef:23:4b:f3:f3:e4:ed:15:41:20:db:eb:79:19:98: 9e:80:b9:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLXoBJ7yz1JydC4bQIKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4 MDZjOTEwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjY3NmE3OTBhMWVjNGRjY2VmOWU2NmVmOWJkYzRkMGNiMDc0ZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/OZ/+q2RRrhQ53HtxnS9IrVsQs/ jVvbipFQiqonZsDBaJYjLOQY4FXa1IxhmLuf++6T7B3JbIYcGOmQDOS8N63sRImD ZXytUmZ/DK4DRq72Wx/Jfba0mXC/joTKhrgd/yXtYpKhMsP6FjgREH6pu6MEtjAW EF3AAfsfber43tyDkRgnk2wS+03h4fZ2eb8UkqRKJ5RgN9ZRTaUmjgYPm1MTgROx D2y2zxOTqh7Phzegd9ZcFTYFFW99Ke9RG1SKQypq9fov7Hc4NJGIdWdLMkGiFGa+ R0yxXAYgxwL9UBE9m2qK4b8A0vQPkKorlFu2OiDcOp1N7/S1YV3KIyu9DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtnankKHsTczvnmbvm9xNDLB0+CMB8GA1UdIwQY MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt NGE4Nzc5ZTQ3OGM2LzEvVzJkcWVRb2V4TnpPLWVadS1iM0UwTXNIVDRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2 LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1CVAMA0G CSqGSIb3DQEBCwUAA4IBAQAlJIANjSRSYlZXGl97hlNpuQ7LQ8fvtZd/ySgeChpy SvC+iH51Ug5Px8Ip9LhLHB3uQG2p8dUO5EKs83WrFms1UTRYpT2nkaoBqEMAh/mE +tZ3PVZLEu5B1G0HKZxGvCrRGZpQhtEXSi/IENjBiVDDQcI3JCzLoJZOSVRnCZOq 3/4GEKRcFGIPIqTyd13JxSc6cZNbWrcQAKq6qoFYUuTo5gJ26QVIFr1SX/f1eyDk 9yFf5/hAaWrf9PClR+aXW4EBTTNF5YdC8rzUW96iQJLMn6lp1Wy1iyq71Ze3wi1w p4QJI66XxRIh6re9PMnvI0vz8+TtFUEg2+t5GZiegLlA -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:18 2026 by rpki-client