This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/W51aSCH5iLe_5vEXYpA2X4F2HE8.roa File: W51aSCH5iLe_5vEXYpA2X4F2HE8.roa (raw, json) Hash identifier: ZbZbQYSFnkBpfEvsfFoB6giW5sjyWzNWyKbHcpK0sVE= Subject key identifier: 5B:9D:5A:48:21:F9:88:B7:BF:E6:F1:17:62:90:36:5F:81:76:1C:4F Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86 Certificate serial: 019B7E37865CC380A34D1F5ED799425FC0FF Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/W51aSCH5iLe_5vEXYpA2X4F2HE8.roa Signing time: Fri 02 Jan 2026 10:18:46 +0000 ROA not before: Fri 02 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 185.212.124.0/22 maxlen: 22 185.212.124.0/23 maxlen: 23 185.212.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:86:5c:c3:80:a3:4d:1f:5e:d7:99:42:5f:c0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86 Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b9d5a4821f988b7bfe6f1176290365f81761c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:20:4e:2d:71:10:d7:00:67:f7:62:af:a0: ff:b6:2a:8e:40:e9:99:a6:f2:02:59:b5:67:03:40: 93:59:4c:c2:4c:c9:1f:6b:ab:56:1e:1f:f6:80:09: 2b:4d:73:a9:d2:39:c0:3a:7e:c7:e6:e2:90:c4:94: 21:9e:49:e3:e0:18:7c:6b:61:b7:5e:95:81:7f:30: 5f:2d:1a:63:d4:9b:b5:4d:18:5c:7e:aa:61:3f:1d: ee:75:ce:a6:e6:50:5a:82:7b:5b:8f:e6:5d:b3:59: 67:c0:86:5b:91:60:c7:fb:8e:8f:0d:9f:ce:bb:10: 2b:3a:50:f9:a9:2c:36:43:33:f2:6a:28:3f:4d:e0: 46:ca:83:e3:52:6a:4b:17:f2:55:e3:a2:9c:13:05: b7:c4:d9:53:87:a3:25:a8:7a:c2:5c:95:9c:26:45: 7b:6f:54:20:4e:cb:60:0c:33:b7:fd:54:0d:be:96: 27:00:b4:b2:d1:d7:32:ec:8c:7d:ba:ed:18:d3:b6: 6c:85:34:c9:6c:64:d1:b7:02:96:12:3a:0e:34:91: 44:a4:98:80:a8:45:c4:b6:f7:71:32:6b:7d:a7:5b: e8:0d:45:7f:92:04:c2:30:5f:1a:d9:f3:8c:95:4b: 4e:e5:f7:77:e7:3f:f4:b0:f8:9d:22:41:01:3c:66: 3d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9D:5A:48:21:F9:88:B7:BF:E6:F1:17:62:90:36:5F:81:76:1C:4F X509v3 Authority Key Identifier: keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/W51aSCH5iLe_5vEXYpA2X4F2HE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.124.0/22 Signature Algorithm: sha256WithRSAEncryption 29:e8:bd:b5:9c:ff:7f:5f:29:92:f9:2f:be:07:c9:3f:08:e1: 40:08:a9:22:83:a7:f0:4b:75:ae:fa:58:66:8a:ec:3a:5a:92: 53:e0:6e:d7:da:b8:ea:17:46:b7:ba:8c:66:24:54:4d:f7:3a: 09:a6:bd:30:90:96:41:c9:f1:bc:8b:b0:31:5e:e4:4b:82:94: aa:af:7b:b5:90:22:31:5c:b4:6a:a8:6d:91:1d:37:d7:c1:94: ad:16:12:6c:92:be:04:95:17:b1:52:79:2c:a7:17:17:a1:f6: c0:de:6a:e5:8c:13:a7:21:f6:0a:6c:f0:a9:a9:aa:32:f2:4e: 35:ee:b0:27:70:e4:be:13:4f:e0:53:7a:b6:00:99:7d:65:39: 98:56:8b:0a:7b:ce:fb:1e:db:79:e2:e0:e2:a3:50:e9:57:4d: cc:6d:1c:cf:c5:fb:a0:29:ff:b2:8c:63:6e:c7:4c:82:4e:79: c0:a5:17:e1:27:13:eb:87:f7:d6:96:dc:39:ea:fc:c4:ed:ed: 9a:70:1a:8d:ce:92:6f:36:81:7f:85:0d:a8:cf:14:c6:c6:5f: 9d:4d:07:29:e4:f9:30:6b:ac:19:cf:95:8b:6d:21:ce:96:8d: 15:26:60:6d:d0:27:e1:03:49:52:bf:7e:dc:aa:7d:28:44:46: 19:21:95:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N4Zcw4CjTR9e15lCX8D/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYmM5ZTkxMDMxNmJlMmYwNDMzYWE5NTM5MmNkNjczOWRj MjZiODYwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjlkNWE0ODIxZjk4OGI3YmZlNmYxMTc2MjkwMzY1ZjgxNzYxYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXAgTi1xENcAZ/dir6D/tiqOQOmZ pvICWbVnA0CTWUzCTMkfa6tWHh/2gAkrTXOp0jnAOn7H5uKQxJQhnknj4Bh8a2G3 XpWBfzBfLRpj1Ju1TRhcfqphPx3udc6m5lBagntbj+Zds1lnwIZbkWDH+46PDZ/O uxArOlD5qSw2QzPyaig/TeBGyoPjUmpLF/JV46KcEwW3xNlTh6MlqHrCXJWcJkV7 b1QgTstgDDO3/VQNvpYnALSy0dcy7Ix9uu0Y07ZshTTJbGTRtwKWEjoONJFEpJiA qEXEtvdxMmt9p1voDUV/kgTCMF8a2fOMlUtO5fd35z/0sPidIkEBPGY9qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFudWkgh+Yi3v+bxF2KQNl+BdhxPMB8GA1UdIwQY MBaAFP28npEDFr4vBDOqlTks1nOdwmuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYt YTE0NmQ2MDQ3MzM3LzEvVzUxYVNDSDVpTGVfNXZFWFlwQTJYNEYySEU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYtYTE0NmQ2MDQ3MzM3 LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudR8MA0G CSqGSIb3DQEBCwUAA4IBAQAp6L21nP9/XymS+S++B8k/COFACKkig6fwS3Wu+lhm iuw6WpJT4G7X2rjqF0a3uoxmJFRN9zoJpr0wkJZByfG8i7AxXuRLgpSqr3u1kCIx XLRqqG2RHTfXwZStFhJskr4ElRexUnkspxcXofbA3mrljBOnIfYKbPCpqaoy8k41 7rAncOS+E0/gU3q2AJl9ZTmYVosKe877Htt54uDio1DpV03MbRzPxfugKf+yjGNu x0yCTnnApRfhJxPrh/fWltw56vzE7e2acBqNzpJvNoF/hQ2ozxTGxl+dTQcp5Pkw a6wZz5WLbSHOlo0VJmBt0CfhA0lSv37cqn0oREYZIZWr -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:37 2026 by rpki-client