This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa File: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (raw, json) Hash identifier: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g= Subject key identifier: 59:78:F9:55:87:B9:7D:95:7D:2B:31:23:0A:33:D1:D7:FC:EF:81:F6 Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Certificate serial: 019B7A5A90C9465DC9406B92B0459FAFE044 Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201708 IP address blocks: 185.62.172.0/23 maxlen: 23 185.62.172.0/24 maxlen: 24 185.62.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:90:c9:46:5d:c9:40:6b:92:b0:45:9f:af:e0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5978f95587b97d957d2b31230a33d1d7fcef81f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:93:75:97:73:68:50:84:91:00:0b:80:c9:3e: 91:70:2d:0a:d7:e6:a3:7d:b6:02:f2:40:f5:55:8b: bf:66:37:5d:b4:76:bb:51:c4:84:44:ea:ef:ce:80: a6:46:df:cd:5b:0b:d9:25:8d:b2:09:c5:a7:f6:1a: 78:61:ae:9e:21:e0:6d:b6:86:f6:03:07:ae:db:e3: ab:bd:ba:21:cd:3f:f4:f3:58:3e:5a:d5:c0:f6:da: 98:23:7e:ac:4d:5d:48:c9:5a:53:41:26:0c:fa:50: 6e:e7:f0:88:e6:fc:99:b7:35:cb:fc:84:04:73:90: ee:6d:99:3d:60:ed:82:51:4c:a6:4a:ff:6f:6f:1d: db:18:bb:c3:16:98:ef:3e:3b:80:d0:c2:f1:81:16: 75:bb:0d:2c:ae:1e:c1:be:a2:0b:58:9d:81:2d:35: d5:ba:69:65:fd:81:90:23:6e:11:e6:da:7e:74:c5: 9f:a0:c7:62:3e:05:15:01:61:12:67:b6:ca:7e:0c: 8a:12:cc:5f:35:90:fd:6b:20:e3:dd:44:6d:95:f0: b1:ca:2c:ce:44:bc:65:e9:b8:b7:95:4e:95:e3:58: 2f:97:39:61:94:d2:b7:67:7e:bb:74:1b:06:23:bf: 00:09:85:70:bc:1a:fe:b1:c0:74:68:20:ed:6d:18: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:78:F9:55:87:B9:7D:95:7D:2B:31:23:0A:33:D1:D7:FC:EF:81:F6 X509v3 Authority Key Identifier: keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.172.0/23 Signature Algorithm: sha256WithRSAEncryption 58:71:e8:56:9d:69:79:68:d4:03:36:3e:9f:f2:89:5a:b7:a4: bc:03:e8:13:33:56:d5:50:08:79:7e:2c:9e:10:3d:23:25:e8: 09:98:ab:11:55:00:5c:8d:52:cb:78:57:43:0f:b4:e1:d2:e3: 31:8e:f0:f9:49:a4:c7:8c:2c:08:f4:85:db:01:37:0d:b5:ba: d4:61:80:d4:f7:a0:77:2a:fc:58:f4:a0:29:18:f5:ae:8e:3b: 31:49:2d:32:c8:29:b0:52:91:ba:c6:79:92:b2:38:c9:10:13: d5:74:7a:b2:de:a2:7d:c2:7e:e8:2b:52:fa:da:14:0f:79:82: 72:09:2d:ce:f4:c6:af:0d:48:2c:3a:bd:0a:7f:f5:b2:dd:22: 55:a7:01:51:96:be:0e:97:aa:c9:b8:75:43:97:fd:7e:5b:89: a2:a6:9e:63:ae:d8:ad:99:31:8c:af:0d:04:d8:e3:44:99:47: cb:af:34:d8:22:91:1d:89:65:50:dd:83:8b:32:bb:7a:8e:cd: 56:15:1c:72:81:dd:2b:8a:27:8a:9b:27:e9:ce:5b:fe:15:f1: 13:3d:36:98:26:64:b1:d5:bc:21:52:ce:ab:5b:d5:a2:fc:2b: 4e:ad:9a:d3:f1:98:12:06:ba:6e:3d:65:58:87:e5:26:eb:d9: 45:ed:58:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WpDJRl3JQGuSsEWfr+BEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj NjZhZWIwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTc4Zjk1NTg3Yjk3ZDk1N2QyYjMxMjMwYTMzZDFkN2ZjZWY4MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JN1l3NoUISRAAuAyT6RcC0K1+aj fbYC8kD1VYu/ZjddtHa7UcSEROrvzoCmRt/NWwvZJY2yCcWn9hp4Ya6eIeBttob2 Aweu2+OrvbohzT/081g+WtXA9tqYI36sTV1IyVpTQSYM+lBu5/CI5vyZtzXL/IQE c5DubZk9YO2CUUymSv9vbx3bGLvDFpjvPjuA0MLxgRZ1uw0srh7BvqILWJ2BLTXV umll/YGQI24R5tp+dMWfoMdiPgUVAWESZ7bKfgyKEsxfNZD9ayDj3URtlfCxyizO RLxl6bi3lU6V41gvlzlhlNK3Z367dBsGI78ACYVwvBr+scB0aCDtbRjoVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFl4+VWHuX2VfSsxIwoz0df874H2MB8GA1UdIwQY MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt MjU0NTVhOGRkZDQ1LzEvV1hqNVZZZTVmWlY5S3pFakNqUFIxX3p2Z2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1 LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuT6sMA0G CSqGSIb3DQEBCwUAA4IBAQBYcehWnWl5aNQDNj6f8olat6S8A+gTM1bVUAh5fiye ED0jJegJmKsRVQBcjVLLeFdDD7Th0uMxjvD5SaTHjCwI9IXbATcNtbrUYYDU96B3 KvxY9KApGPWujjsxSS0yyCmwUpG6xnmSsjjJEBPVdHqy3qJ9wn7oK1L62hQPeYJy CS3O9MavDUgsOr0Kf/Wy3SJVpwFRlr4Ol6rJuHVDl/1+W4mipp5jrtitmTGMrw0E 2ONEmUfLrzTYIpEdiWVQ3YOLMrt6js1WFRxygd0riieKmyfpzlv+FfETPTaYJmSx 1bwhUs6rW9Wi/CtOrZrT8ZgSBrpuPWVYh+Um69lF7Vgd -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:07 2026 by rpki-client