This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa File: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (raw, json) Hash identifier: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec= Subject key identifier: 5A:25:ED:DE:F2:D1:B0:46:C7:3B:85:7A:F4:4A:E7:A7:D3:DA:DC:37 Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb Certificate serial: 019B77590C1245D3E344D9625B743E342989 Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61060 IP address blocks: 37.44.8.0/21 maxlen: 21 45.66.112.0/22 maxlen: 22 185.144.4.0/22 maxlen: 22 185.144.5.0/24 maxlen: 24 185.172.160.0/22 maxlen: 22 193.5.148.0/24 maxlen: 24 2a10:40::/32 maxlen: 32 2a10:41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0c:12:45:d3:e3:44:d9:62:5b:74:3e:34:29:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a25eddef2d1b046c73b857af44ae7a7d3dadc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:63:d9:df:5b:08:19:af:54:22:e4:b5:e5:c8: 7d:65:5a:a1:00:da:41:ad:ac:c7:bd:80:b3:c4:85: ea:7a:ab:ed:c0:b3:7c:f8:b4:61:0b:13:7b:08:97: 5b:f0:7b:eb:bf:c7:0f:3a:26:5b:ef:fb:b5:fa:22: d0:9e:3c:cb:b8:80:1a:e2:3b:89:9c:0e:1c:15:20: 00:92:a1:d4:54:d4:0e:4f:f5:cc:d6:12:b0:42:61: 2a:3d:12:1d:d8:fb:c8:a8:c2:63:c3:17:10:f7:b4: be:42:00:bd:3d:41:1b:df:1f:58:0a:60:f5:fc:e3: f4:42:59:a2:1d:4e:1f:7e:76:94:56:35:af:42:10: 7f:d1:db:89:37:b5:ff:f2:a7:6f:7e:35:c9:ff:0d: c4:1b:94:02:df:85:58:7d:97:35:35:63:e0:5b:b2: a5:96:cb:e0:07:c9:79:e0:a4:50:ce:53:3b:df:48: 28:3c:5f:d7:b3:66:a0:33:aa:79:7f:6c:d8:3d:3c: 5a:b7:8b:b0:fc:5d:0f:28:a7:94:21:cc:d2:16:be: 7f:fb:ad:96:35:43:1e:5d:f0:66:0c:4d:84:e7:92: 11:d8:d2:67:24:cd:08:0a:f9:84:32:c3:f2:e4:fb: 9a:39:d3:92:f9:37:9a:51:52:97:22:1f:b7:fe:8b: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:25:ED:DE:F2:D1:B0:46:C7:3B:85:7A:F4:4A:E7:A7:D3:DA:DC:37 X509v3 Authority Key Identifier: keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.8.0/21 45.66.112.0/22 185.144.4.0/22 185.172.160.0/22 193.5.148.0/24 IPv6: 2a10:40::/31 Signature Algorithm: sha256WithRSAEncryption 39:59:a1:57:09:7d:f1:62:38:be:86:5c:8c:ec:7d:db:b4:8b: ae:75:f8:28:e1:45:ff:6d:96:07:af:54:a3:ed:da:db:08:90: 4a:e0:9b:dd:5c:5b:ca:80:45:02:24:fb:34:8f:60:19:87:14: 8a:c6:1b:1e:8d:ec:6d:2c:a9:63:9d:2e:d2:c7:08:6b:40:ff: 8a:38:3b:f2:43:cf:15:0d:b2:d5:60:89:60:b3:30:1c:7a:6d: 0f:d1:6b:11:cf:71:58:5a:30:b1:e0:68:34:7d:d2:5b:1f:e8: 81:fe:e0:81:44:41:22:fd:c3:7b:0d:8f:26:5d:a0:39:52:82: a1:bf:8a:c6:e5:ed:06:83:1f:63:59:78:be:49:b0:1e:04:14: 1e:6e:2f:a9:7d:cd:a7:e1:f9:67:72:f6:de:75:fa:5b:7a:53: 8e:c3:52:fe:4d:02:91:15:c1:24:ef:c9:c3:41:96:4c:19:ff: 77:08:71:64:2e:6e:37:8c:97:60:a4:11:7a:09:eb:af:0b:e5: 24:fb:99:36:95:e2:10:1c:c0:d1:ae:53:a0:4e:98:c1:83:db: 21:32:f5:51:50:73:3d:70:8d:48:b7:ef:24:41:b3:42:fd:fa: a4:83:66:22:32:47:e4:58:26:1d:44:32:ce:8b:f5:46:10:45: 8c:dc:0e:0d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt3WQwSRdPjRNliW3Q+NCmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllODFkZGFhZDg4ZjcwNzE2MTJkN2MzYjc2MThlMjRkMWE1 MjMzYmIwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTI1ZWRkZWYyZDFiMDQ2YzczYjg1N2FmNDRhZTdhN2QzZGFkYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmPZ31sIGa9UIuS15ch9ZVqhANpB razHvYCzxIXqeqvtwLN8+LRhCxN7CJdb8Hvrv8cPOiZb7/u1+iLQnjzLuIAa4juJ nA4cFSAAkqHUVNQOT/XM1hKwQmEqPRId2PvIqMJjwxcQ97S+QgC9PUEb3x9YCmD1 /OP0QlmiHU4ffnaUVjWvQhB/0duJN7X/8qdvfjXJ/w3EG5QC34VYfZc1NWPgW7Kl lsvgB8l54KRQzlM730goPF/Xs2agM6p5f2zYPTxat4uw/F0PKKeUIczSFr5/+62W NUMeXfBmDE2E55IR2NJnJM0ICvmEMsPy5PuaOdOS+TeaUVKXIh+3/ovfBQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFFol7d7y0bBGxzuFevRK56fT2tw3MB8GA1UdIwQY MBaAFJ6B3arYj3BxYS18O3YY4k0aUjO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYt YmY2OWIxMmE2NzQ0LzEvV2lYdDN2TFJzRWJITzRWNjlFcm5wOVBhM0RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYtYmY2OWIxMmE2NzQ0 LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDJSwIAwQC LUJwAwQCuZAEAwQCuaygAwQAwQWUMA0EAgACMAcDBQEqEABAMA0GCSqGSIb3DQEB CwUAA4IBAQA5WaFXCX3xYji+hlyM7H3btIuudfgo4UX/bZYHr1Sj7drbCJBK4Jvd XFvKgEUCJPs0j2AZhxSKxhsejextLKljnS7SxwhrQP+KODvyQ88VDbLVYIlgszAc em0P0WsRz3FYWjCx4Gg0fdJbH+iB/uCBREEi/cN7DY8mXaA5UoKhv4rG5e0Ggx9j WXi+SbAeBBQebi+pfc2n4flncvbedfpbelOOw1L+TQKRFcEk78nDQZZMGf93CHFk Lm43jJdgpBF6CeuvC+Uk+5k2leIQHMDRrlOgTpjBg9shMvVRUHM9cI1It+8kQbNC /fqkg2YiMkfkWCYdRDLOi/VGEEWM3A4N -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:34 2026 by rpki-client