This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/WtgMSRP5OEmkxWvX-DhuOQDwMBk.roa File: WtgMSRP5OEmkxWvX-DhuOQDwMBk.roa (raw, json) Hash identifier: l1AreQt6W2uLe+jTGiT0wGfZWGbfEdoV2rC3OiVwsTw= Subject key identifier: 5A:D8:0C:49:13:F9:38:49:A4:C5:6B:D7:F8:38:6E:39:00:F0:30:19 Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8 Certificate serial: 019B7B366F046D2EAD5BB03D4122011FFEAC Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/WtgMSRP5OEmkxWvX-DhuOQDwMBk.roa Signing time: Thu 01 Jan 2026 20:18:43 +0000 ROA not before: Thu 01 Jan 2026 20:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12731 IP address blocks: 62.201.160.0/19 maxlen: 24 185.34.67.0/24 maxlen: 24 185.53.220.0/22 maxlen: 24 213.128.128.0/19 maxlen: 24 2001:868::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6f:04:6d:2e:ad:5b:b0:3d:41:22:01:1f:fe:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ad80c4913f93849a4c56bd7f8386e3900f03019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:76:63:32:b4:f6:00:75:75:42:30:b1:9a: 7f:8c:77:3b:59:37:37:b4:a4:a4:00:e7:44:7b:58: ed:63:cf:3d:ba:cc:02:6a:18:e7:6f:8e:da:1c:46: aa:c8:cc:9a:83:65:80:be:bc:29:6c:9d:d4:0d:0f: 33:3f:76:c7:96:ec:f7:f6:cf:b3:16:51:eb:7d:15: 8a:54:8c:f0:8b:ab:fb:48:ff:04:e5:82:fe:dd:c7: b0:a0:85:03:19:a0:e9:2b:c9:5b:42:ad:28:4e:55: bc:a3:63:01:4b:09:a8:fa:2d:29:63:1e:2a:66:1e: eb:5c:3c:1f:dc:99:af:17:df:fb:f5:ac:62:a1:96: 3e:a5:2b:ad:36:45:81:57:42:7a:48:99:2b:7a:30: 10:e4:74:1d:1e:97:48:5b:73:53:e4:00:58:8e:a1: f8:39:d6:68:b6:05:ad:4c:65:92:f4:2f:1b:0f:70: da:6d:e2:e9:96:cd:5b:da:7b:c4:f9:07:5b:c4:d4: a9:91:23:26:26:2a:c8:15:3f:dd:47:f8:01:86:51: bc:4a:f7:64:1c:a7:db:4d:aa:d6:1e:0c:1b:8a:bf: 59:50:c3:55:12:2d:07:2a:6d:ca:1e:79:8f:20:5c: 7f:0b:e0:35:49:f7:66:8c:f8:20:3f:5b:e5:3f:f9: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:0C:49:13:F9:38:49:A4:C5:6B:D7:F8:38:6E:39:00:F0:30:19 X509v3 Authority Key Identifier: keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/WtgMSRP5OEmkxWvX-DhuOQDwMBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.160.0/19 185.34.67.0/24 185.53.220.0/22 213.128.128.0/19 IPv6: 2001:868::/29 Signature Algorithm: sha256WithRSAEncryption 92:c3:dc:a2:95:3b:20:f4:0a:40:84:81:ea:bd:15:99:26:58: 3c:54:1a:0c:2a:55:1d:85:d5:14:14:27:6c:4c:8f:95:8c:66: 82:2f:f3:ce:d0:1d:87:f6:b0:fe:30:12:0f:46:c4:50:22:34: 3c:98:8b:0d:0d:98:a7:3a:52:ef:f5:92:a5:43:d0:8c:3a:44: 8f:6f:9b:92:05:c0:d4:81:98:5b:36:31:98:5a:78:7f:29:31: 12:00:d6:cd:b3:54:97:f1:49:d5:ef:7c:75:ff:1c:b3:11:8c: 65:d9:b3:fd:7c:da:c5:a8:00:b1:e7:69:d9:6f:16:f7:6b:4e: 64:10:4f:e1:6c:ae:0b:ff:28:9a:e6:68:b3:1d:bd:0f:b6:63: ff:3a:3a:1d:04:68:94:46:71:c1:20:63:27:be:b5:d1:4d:ce: 1e:13:64:6e:41:11:79:28:8e:a3:96:d7:c3:b5:88:75:6f:d8: 75:63:47:34:79:77:9f:85:9c:82:a0:1e:ef:c1:d9:10:e3:4a: f3:b8:b9:2c:c7:1b:c0:e8:e2:cf:4a:0f:96:45:6b:e8:c1:0a: 19:87:54:e5:ba:30:50:80:37:35:42:1b:7a:b9:be:30:38:97: 5d:a1:5b:56:a0:f5:64:6b:eb:2c:b8:41:be:f7:5b:3f:93:4e: 7f:50:af:d6 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7Nm8EbS6tW7A9QSIBH/6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZDg4MGU4ODcwNzdmYWQ4MmI3NGM5OTgwMTBmYTliMjUz ZTBlYTgwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ4MGM0OTEzZjkzODQ5YTRjNTZiZDdmODM4NmUzOTAwZjAzMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW92YzK09gB1dUIwsZp/jHc7WTc3 tKSkAOdEe1jtY889uswCahjnb47aHEaqyMyag2WAvrwpbJ3UDQ8zP3bHluz39s+z FlHrfRWKVIzwi6v7SP8E5YL+3cewoIUDGaDpK8lbQq0oTlW8o2MBSwmo+i0pYx4q Zh7rXDwf3JmvF9/79axioZY+pSutNkWBV0J6SJkrejAQ5HQdHpdIW3NT5ABYjqH4 OdZotgWtTGWS9C8bD3DabeLpls1b2nvE+QdbxNSpkSMmJirIFT/dR/gBhlG8Svdk HKfbTarWHgwbir9ZUMNVEi0HKm3KHnmPIFx/C+A1SfdmjPggP1vlP/kIPQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFFrYDEkT+ThJpMVr1/g4bjkA8DAZMB8GA1UdIwQY MBaAFOnYgOiHB3+tgrdMmYAQ+pslPg6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYt ZmFjZjQ4NTg2MjQ5LzEvV3RnTVNSUDVPRW1reFd2WC1EaHVPUUR3TUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYtZmFjZjQ4NTg2MjQ5 LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFPsmgAwQA uSJDAwQCuTXcAwQF1YCAMA0EAgACMAcDBQMgAQhoMA0GCSqGSIb3DQEBCwUAA4IB AQCSw9yilTsg9ApAhIHqvRWZJlg8VBoMKlUdhdUUFCdsTI+VjGaCL/PO0B2H9rD+ MBIPRsRQIjQ8mIsNDZinOlLv9ZKlQ9CMOkSPb5uSBcDUgZhbNjGYWnh/KTESANbN s1SX8UnV73x1/xyzEYxl2bP9fNrFqACx52nZbxb3a05kEE/hbK4L/yia5mizHb0P tmP/OjodBGiURnHBIGMnvrXRTc4eE2RuQRF5KI6jltfDtYh1b9h1Y0c0eXefhZyC oB7vwdkQ40rzuLksxxvA6OLPSg+WRWvowQoZh1TlujBQgDc1Qht6ub4wOJddoVtW oPVka+ssuEG+91s/k05/UK/W -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:25 2026 by rpki-client