This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa File: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (raw, json) Hash identifier: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg= Subject key identifier: C2:D5:89:11:84:45:48:6F:50:BF:77:2D:4A:5B:7E:3E:F0:BD:63:15 Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Certificate serial: 019B7D5B8DDCB471D19C402F60F78AD9E293 Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa Signing time: Fri 02 Jan 2026 06:18:30 +0000 ROA not before: Fri 02 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43447 IP address blocks: 5.184.0.0/16 maxlen: 24 31.60.0.0/14 maxlen: 25 37.47.0.0/16 maxlen: 24 37.108.0.0/16 maxlen: 25 37.225.0.0/16 maxlen: 25 46.134.0.0/16 maxlen: 25 87.96.0.0/17 maxlen: 24 91.94.0.0/16 maxlen: 24 178.56.0.0/16 maxlen: 24 2a00:f40::/29 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:8d:dc:b4:71:d1:9c:40:2f:60:f7:8a:d9:e2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Validity Not Before: Jan 2 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2d589118445486f50bf772d4a5b7e3ef0bd6315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:e4:07:be:e7:61:23:01:36:a9:6b:b4:ec: a9:3f:82:ef:8d:32:54:92:4f:43:f6:f1:c9:d3:b8: b3:3c:c8:a6:7b:81:b2:05:6e:9c:af:69:e9:3c:f6: a4:a0:28:a1:0f:af:a5:41:8a:b6:33:a9:73:5c:ac: fa:57:a1:3c:e2:9f:68:49:38:8f:d3:fc:6f:72:fc: e0:7d:1f:7a:af:1e:96:9e:39:a0:a7:c2:73:be:35: 76:28:d9:11:69:b9:9b:30:25:36:d8:6e:21:5d:38: f7:03:8b:e0:82:70:b2:a2:af:1b:e0:10:6e:53:d9: d2:49:60:f3:6b:4d:e5:da:55:32:09:d1:f3:2e:3f: 14:71:1c:39:ee:af:6b:69:91:25:d4:46:aa:1d:69: c3:9f:fd:ee:dd:a6:9d:da:ed:d7:48:3e:90:2d:bf: 17:80:8c:f2:df:4b:5b:9c:89:44:93:52:95:03:33: 74:d6:e6:cd:ab:b2:25:d8:e0:a7:7f:cc:4e:ba:1f: 2f:45:13:52:ec:bc:4e:58:95:6e:42:74:b5:50:22: bf:cb:bc:7c:9c:39:25:52:8f:3e:75:94:7a:39:69: cc:68:e9:28:f5:8f:6c:cd:14:bb:5d:91:fb:80:b1: f1:76:7b:3b:81:d1:54:9f:7c:3b:6c:8d:eb:e3:08: 48:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D5:89:11:84:45:48:6F:50:BF:77:2D:4A:5B:7E:3E:F0:BD:63:15 X509v3 Authority Key Identifier: keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.184.0.0/16 31.60.0.0/14 37.47.0.0/16 37.108.0.0/16 37.225.0.0/16 46.134.0.0/16 87.96.0.0/17 91.94.0.0/16 178.56.0.0/16 IPv6: 2a00:f40::/29 Signature Algorithm: sha256WithRSAEncryption 57:79:e7:8b:2d:5c:7a:89:f4:d0:6c:be:6b:7a:75:12:1f:a4: df:75:32:83:82:d6:a0:70:a6:10:53:d4:f9:f3:23:c9:5c:0a: ae:a8:71:9f:46:0b:e8:ad:63:08:32:7e:a9:ea:32:d8:b6:60: 8a:8b:27:4b:fc:42:39:39:da:8b:db:5e:64:c6:cb:0b:66:44: 3b:c8:e2:73:86:b9:fa:db:dc:e1:d6:71:fd:3d:e7:5e:26:90: 5c:c5:a3:79:aa:70:ac:fa:79:16:16:5f:81:c5:fa:c5:40:b3: 3b:d5:3b:3e:84:d3:92:64:6d:35:ec:d4:23:a1:7e:86:85:1c: c5:c4:87:30:a3:4c:34:38:ef:37:d6:33:a1:8a:18:71:3c:c2: e2:bd:44:41:b4:5c:2a:c0:18:58:8f:a4:d7:08:e6:86:7b:eb: 40:8e:01:0c:66:14:37:18:fd:6e:dd:5c:1d:7c:f8:71:40:8c: c0:c2:c9:d6:1e:88:54:76:4a:33:bc:e1:d7:c6:b5:90:d4:e2: fa:96:c8:7a:85:1e:4b:f0:3b:d1:eb:d8:f2:20:89:b3:42:37: 61:f3:66:93:ba:de:34:88:d6:57:b8:f2:64:7f:2f:c5:a8:b5: f1:63:ea:ca:d5:83:b8:53:76:74:a2:42:80:08:56:22:d0:b7: 19:77:94:e4 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt9W43ctHHRnEAvYPeK2eKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw Yzc3MTQwHhcNMjYwMTAyMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmQ1ODkxMTg0NDU0ODZmNTBiZjc3MmQ0YTViN2UzZWYwYmQ2MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jHkB77nYSMBNqlrtOypP4LvjTJU kk9D9vHJ07izPMime4GyBW6cr2npPPakoCihD6+lQYq2M6lzXKz6V6E84p9oSTiP 0/xvcvzgfR96rx6Wnjmgp8JzvjV2KNkRabmbMCU22G4hXTj3A4vggnCyoq8b4BBu U9nSSWDza03l2lUyCdHzLj8UcRw57q9raZEl1EaqHWnDn/3u3aad2u3XSD6QLb8X gIzy30tbnIlEk1KVAzN01ubNq7Il2OCnf8xOuh8vRRNS7LxOWJVuQnS1UCK/y7x8 nDklUo8+dZR6OWnMaOko9Y9szRS7XZH7gLHxdns7gdFUn3w7bI3r4whIfwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFMLViRGERUhvUL93LUpbfj7wvWMVMB8GA1UdIwQY MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt Y2I4YjNhMDk0MjA5LzEvd3RXSkVZUkZTRzlRdjNjdFNsdC1QdkM5WXhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5 LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwMABbgDAwIf PAMDACUvAwMAJWwDAwAl4QMDAC6GAwQHV2AAAwMAW14DAwCyODANBAIAAjAHAwUD KgAPQDANBgkqhkiG9w0BAQsFAAOCAQEAV3nniy1ceon00Gy+a3p1Eh+k33Uyg4LW oHCmEFPU+fMjyVwKrqhxn0YL6K1jCDJ+qeoy2LZgiosnS/xCOTnai9teZMbLC2ZE O8jic4a5+tvc4dZx/T3nXiaQXMWjeapwrPp5FhZfgcX6xUCzO9U7PoTTkmRtNezU I6F+hoUcxcSHMKNMNDjvN9YzoYoYcTzC4r1EQbRcKsAYWI+k1wjmhnvrQI4BDGYU Nxj9bt1cHXz4cUCMwMLJ1h6IVHZKM7zh18a1kNTi+pbIeoUeS/A70evY8iCJs0I3 YfNmk7reNIjWV7jyZH8vxai18WPqytWDuFN2dKJCgAhWItC3GXeU5A== -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:16 2026 by rpki-client