This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa File: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (raw, json) Hash identifier: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4= Subject key identifier: 5A:D0:FA:98:A9:5F:9A:94:BB:28:C7:76:E4:8D:A7:1C:AC:D6:90:64 Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019B7C7FDCE11485BC6DD6FB6BC66DEEF6E8 Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa Signing time: Fri 02 Jan 2026 02:18:32 +0000 ROA not before: Fri 02 Jan 2026 02:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203172 IP address blocks: 123.253.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:dc:e1:14:85:bc:6d:d6:fb:6b:c6:6d:ee:f6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ad0fa98a95f9a94bb28c776e48da71cacd69064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:fe:dc:ac:36:f6:85:e4:7b:9d:d7:c4:8a: da:a4:60:a7:c7:cb:61:06:25:c0:5e:3a:b7:b6:fa: 53:e7:cc:77:03:66:7d:77:e9:09:3c:57:2b:7f:5f: 82:06:bd:b5:31:4b:44:6d:61:b5:4b:fc:b9:4c:12: 9f:e3:70:9c:0f:2a:57:01:95:29:8f:de:ae:34:cd: ab:5c:0f:27:18:d4:2d:db:d7:d1:3c:b4:7a:38:89: 6b:d5:69:3e:95:73:95:d5:56:9f:0b:08:e4:69:7f: f2:69:0b:42:75:f0:0c:9e:b0:f6:b5:77:8a:c3:2b: d6:c0:fe:08:be:a0:3e:b0:15:0f:86:4a:dc:87:08: b6:32:47:da:84:45:5e:f1:58:c3:c6:ec:d9:a5:b1: 2e:bb:d7:d4:20:eb:6b:9c:9f:00:71:9f:3e:4b:c2: d8:d4:2a:da:a5:a6:20:9a:60:9d:0a:17:96:59:ac: 38:39:ce:4b:46:5a:33:02:e9:f7:88:7e:ad:fe:17: 8b:7a:51:c4:c4:d2:d2:a6:1b:af:c7:d4:19:30:28: 83:2c:18:c0:80:97:ec:4a:cb:59:b1:f6:f2:64:74: e1:d3:67:d6:49:ae:60:c3:3c:ae:1b:c1:85:72:ea: e2:92:9b:b4:a4:d3:73:b6:95:91:2a:16:77:8b:0b: 26:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D0:FA:98:A9:5F:9A:94:BB:28:C7:76:E4:8D:A7:1C:AC:D6:90:64 X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.212.0/23 Signature Algorithm: sha256WithRSAEncryption 50:fb:1c:f0:7d:58:7f:60:06:44:c3:2e:0c:8a:50:ca:15:35: df:67:bf:30:46:16:a0:26:6d:1e:51:9e:fb:70:cf:44:91:0b: aa:37:2c:29:d4:b1:cc:05:82:0e:7b:ab:90:22:75:84:1d:33: fe:ea:ac:39:7a:a8:53:6e:fb:a3:82:ee:ae:7a:a2:ce:8c:09: 97:c9:59:19:c8:8f:9f:65:bd:85:e1:4a:a2:fc:5b:11:2d:50: 30:85:73:76:1b:94:d6:62:18:8a:b2:4d:51:4c:c1:d4:b8:94: 8c:3a:22:49:c3:b3:2f:8b:1c:a8:46:5a:ad:eb:b3:46:2c:89: 41:ce:70:9b:a4:08:1e:8b:2a:96:74:ba:26:65:45:72:79:9e: 44:8c:59:93:33:22:29:e0:6b:83:dd:fb:af:77:62:d2:24:71: 8c:b8:3b:5c:c2:05:cc:2f:90:27:b1:fa:3c:46:28:15:d8:cd: d2:95:7f:ae:6e:19:be:24:6d:8d:73:30:fe:a1:b3:b0:88:96: 3c:dc:e7:5c:5e:3a:86:81:0d:3a:95:3a:f9:ce:d9:7e:f6:1f: 93:ee:d0:ce:ea:6e:95:1f:3b:da:87:94:9d:52:a8:0f:48:59: 53:99:3a:c7:c4:77:ff:9b:38:79:44:eb:f2:94:85:08:57:46: 64:2b:ee:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f9zhFIW8bdb7a8Zt7vboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQwZmE5OGE5NWY5YTk0YmIyOGM3NzZlNDhkYTcxY2FjZDY5MDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRL+3Kw29oXke53XxIrapGCnx8th BiXAXjq3tvpT58x3A2Z9d+kJPFcrf1+CBr21MUtEbWG1S/y5TBKf43CcDypXAZUp j96uNM2rXA8nGNQt29fRPLR6OIlr1Wk+lXOV1VafCwjkaX/yaQtCdfAMnrD2tXeK wyvWwP4IvqA+sBUPhkrchwi2MkfahEVe8VjDxuzZpbEuu9fUIOtrnJ8AcZ8+S8LY 1CrapaYgmmCdCheWWaw4Oc5LRlozAun3iH6t/heLelHExNLSphuvx9QZMCiDLBjA gJfsSstZsfbyZHTh02fWSa5gwzyuG8GFcurikpu0pNNztpWRKhZ3iwsmyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrQ+pipX5qUuyjHduSNpxys1pBkMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvV3RENm1LbGZtcFM3S01kMjVJMm5IS3pXa0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBe/3UMA0G CSqGSIb3DQEBCwUAA4IBAQBQ+xzwfVh/YAZEwy4MilDKFTXfZ78wRhagJm0eUZ77 cM9EkQuqNywp1LHMBYIOe6uQInWEHTP+6qw5eqhTbvujgu6ueqLOjAmXyVkZyI+f Zb2F4Uqi/FsRLVAwhXN2G5TWYhiKsk1RTMHUuJSMOiJJw7MvixyoRlqt67NGLIlB znCbpAgeiyqWdLomZUVyeZ5EjFmTMyIp4GuD3fuvd2LSJHGMuDtcwgXML5Ansfo8 RigV2M3SlX+ubhm+JG2NczD+obOwiJY83OdcXjqGgQ06lTr5ztl+9h+T7tDO6m6V Hzvah5SdUqgPSFlTmTrHxHf/mzh5ROvylIUIV0ZkK+4x -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:06 2026 by rpki-client