This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/W0KBm5HEcFXtVXifacsZfmIqvhY.roa File: W0KBm5HEcFXtVXifacsZfmIqvhY.roa (raw, json) Hash identifier: W8Izm3ucgflTtw/kXP/v/wyRWH1PXzlBhUPfbe4tfxo= Subject key identifier: 5B:42:81:9B:91:C4:70:55:ED:55:78:9F:69:CB:19:7E:62:2A:BE:16 Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc Certificate serial: 019B77594B086B7C3DC4555EE59B63B31AA3 Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/W0KBm5HEcFXtVXifacsZfmIqvhY.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12637 IP address blocks: 185.146.252.0/22 maxlen: 24 212.44.96.0/19 maxlen: 24 2a02:e9::/32 maxlen: 32 2a02:ea::/32 maxlen: 48 2a02:eb::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4b:08:6b:7c:3d:c4:55:5e:e5:9b:63:b3:1a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b42819b91c47055ed55789f69cb197e622abe16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:cc:86:59:b1:22:e9:00:6c:eb:55:3f:ad: ee:cc:83:63:da:e7:61:1a:1f:85:ad:32:8d:c4:1f: 04:85:6c:70:03:00:31:2b:dc:c4:98:83:e0:06:a4: b8:19:eb:1b:f1:10:f2:10:df:e0:66:db:2f:78:78: 32:bb:8d:a1:12:01:87:28:70:fb:36:de:9b:20:c7: 12:4c:72:38:25:83:7d:27:44:f8:e2:5b:ab:95:db: 12:38:c1:8d:3c:0d:2a:a5:60:c4:74:59:c0:8d:e4: 17:cc:bf:b9:a4:50:c6:3b:fe:f8:6b:87:c0:59:a3: 65:f8:f7:2c:6d:a1:d7:72:8d:10:8c:f7:95:5c:75: a9:9f:4a:52:58:58:9d:40:72:8c:1c:ac:89:ae:5d: 16:ea:06:21:5e:4c:00:5e:e7:aa:96:7d:9a:f9:11: 28:66:d1:f5:c0:83:9b:f5:fc:e0:42:6b:69:24:4f: e6:b7:fa:d6:87:6d:bf:63:f6:13:19:84:69:1f:99: e6:c7:6e:c9:be:2f:fa:8a:23:62:fe:32:53:27:f4: 45:ce:5d:da:bb:71:98:f9:97:85:0c:c4:43:07:f3: 8c:68:dd:45:9d:0f:75:97:b1:72:5a:e6:79:77:f4: 52:94:1f:74:74:bd:12:72:67:50:db:c3:7a:a3:70: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:81:9B:91:C4:70:55:ED:55:78:9F:69:CB:19:7E:62:2A:BE:16 X509v3 Authority Key Identifier: keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/W0KBm5HEcFXtVXifacsZfmIqvhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.252.0/22 212.44.96.0/19 IPv6: 2a02:e9::-2a02:eb:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption af:6a:9c:fe:4b:a4:ad:db:11:66:08:5e:73:bc:f3:e4:cd:cc: eb:1c:c8:36:09:20:1b:91:c1:f6:87:92:7d:6a:49:97:14:24: 53:02:27:82:ed:e1:2f:42:e8:83:02:25:77:c4:17:fd:08:9d: 78:b8:10:d1:fb:20:01:d9:40:75:95:3c:79:59:9e:25:b2:ed: e5:ce:fe:57:11:2a:bd:c6:42:ed:2a:c5:1b:13:ea:25:fd:1c: 5c:2f:c0:d1:23:32:29:e5:c5:61:a1:96:d1:29:ff:13:27:11: 37:1d:5a:d4:f3:9c:03:d7:20:c5:b5:56:d0:bc:5c:36:46:e4: b8:eb:5d:71:23:8e:15:1d:8b:db:47:08:0f:bd:a5:62:3d:85: d6:46:fe:93:62:c6:a0:7a:81:76:f7:80:2b:d2:15:d9:03:07: a8:30:84:11:f2:33:d7:9f:39:4b:b5:15:ef:54:da:c5:86:82: 97:d2:39:8d:d5:db:ee:86:76:ed:68:b7:ed:a4:2a:bf:a3:7a: eb:b0:45:21:79:2b:fd:db:74:fb:90:a9:25:2f:59:cd:47:cd: 81:87:d0:ef:93:d4:2c:f1:6a:8f:36:d9:83:b7:54:03:28:ed: ec:90:a5:0e:b4:78:5f:c2:51:15:98:56:9c:df:14:ac:4a:2f: be:3f:6d:05 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3WUsIa3w9xFVe5ZtjsxqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjQwNWUwMjgzNzQzY2Y1MjE4MGQ1YjEzODEyZGZiYTNk ZWQ3ZmMwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjQyODE5YjkxYzQ3MDU1ZWQ1NTc4OWY2OWNiMTk3ZTYyMmFiZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumvMhlmxIukAbOtVP63uzINj2udh Gh+FrTKNxB8EhWxwAwAxK9zEmIPgBqS4Gesb8RDyEN/gZtsveHgyu42hEgGHKHD7 Nt6bIMcSTHI4JYN9J0T44lurldsSOMGNPA0qpWDEdFnAjeQXzL+5pFDGO/74a4fA WaNl+PcsbaHXco0QjPeVXHWpn0pSWFidQHKMHKyJrl0W6gYhXkwAXueqln2a+REo ZtH1wIOb9fzgQmtpJE/mt/rWh22/Y/YTGYRpH5nmx27Jvi/6iiNi/jJTJ/RFzl3a u3GY+ZeFDMRDB/OMaN1FnQ91l7FyWuZ5d/RSlB90dL0ScmdQ28N6o3C/aQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFtCgZuRxHBV7VV4n2nLGX5iKr4WMB8GA1UdIwQY MBaAFHdkBeAoN0PPUhgNWxOBLfuj3tf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAt NmNhNTJlMDI5Y2JlLzEvVzBLQm01SEVjRlh0VlhpZmFjc1pmbUlxdmhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAtNmNhNTJlMDI5Y2Jl LzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuZL8AwQF 1CxgMBYEAgACMBAwDgMFACoCAOkDBQIqAgDoMA0GCSqGSIb3DQEBCwUAA4IBAQCv apz+S6St2xFmCF5zvPPkzczrHMg2CSAbkcH2h5J9akmXFCRTAieC7eEvQuiDAiV3 xBf9CJ14uBDR+yAB2UB1lTx5WZ4lsu3lzv5XESq9xkLtKsUbE+ol/RxcL8DRIzIp 5cVhoZbRKf8TJxE3HVrU85wD1yDFtVbQvFw2RuS4611xI44VHYvbRwgPvaViPYXW Rv6TYsageoF294Ar0hXZAweoMIQR8jPXnzlLtRXvVNrFhoKX0jmN1dvuhnbtaLft pCq/o3rrsEUheSv923T7kKklL1nNR82Bh9Dvk9Qs8WqPNtmDt1QDKO3skKUOtHhf wlEVmFac3xSsSi++P20F -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:23 2026 by rpki-client