This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WmS9Un5fMNsbXu1vSNTObeM4qlo.roa File: WmS9Un5fMNsbXu1vSNTObeM4qlo.roa (raw, json) Hash identifier: /ugX7bjkmF+5SBu5LNrR25QkRzUlA34k60zoKlPSu0o= Subject key identifier: 5A:64:BD:52:7E:5F:30:DB:1B:5E:ED:6F:48:D4:CE:6D:E3:38:AA:5A Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A237EEFD2345C2DA8020E736F3D4DF Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WmS9Un5fMNsbXu1vSNTObeM4qlo.roa Signing time: Thu 01 Jan 2026 08:17:35 +0000 ROA not before: Thu 01 Jan 2026 08:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 212.135.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:37:ee:fd:23:45:c2:da:80:20:e7:36:f3:d4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a64bd527e5f30db1b5eed6f48d4ce6de338aa5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:0c:0e:7c:82:ef:69:39:8c:c5:9b:75:25: 1a:08:0b:02:71:dd:b4:0c:68:9a:da:8a:4e:d9:9c: ec:8c:51:5c:ea:1b:05:f3:4f:61:bd:64:09:30:19: 39:51:4d:a0:d6:e6:10:05:4d:12:df:76:01:ba:2c: c1:c4:b1:52:53:04:ad:de:40:22:8f:84:94:42:8e: 9c:27:6e:0f:12:7d:b5:50:63:22:21:b0:11:9d:6e: 56:67:b2:7b:c6:c1:91:84:52:71:ff:9a:f3:9c:6f: 41:66:fe:a3:50:cf:7d:b4:8f:36:5c:ba:87:58:b9: 69:99:8a:97:e9:30:89:9a:6c:e9:68:72:fa:e8:06: 30:11:39:bb:3e:7f:7b:d1:41:84:91:09:64:a4:0a: 9e:cc:18:9b:a2:46:95:1d:16:75:e1:95:4a:d9:a6: b1:b4:5d:09:27:95:3c:e5:d6:47:b1:e1:84:c1:01: 06:e7:3a:ca:c9:53:f3:87:0e:91:62:06:b5:55:72: f3:6a:c9:91:4f:be:78:34:76:2c:08:60:c7:6e:88: f7:72:f2:72:1c:20:b9:41:5a:90:6d:69:6c:d1:b8: 29:90:05:d8:c7:c6:f5:51:37:3f:eb:f6:b8:d1:76: 41:46:3e:e1:7a:1b:cf:4c:38:0b:a9:72:b2:d6:99: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:64:BD:52:7E:5F:30:DB:1B:5E:ED:6F:48:D4:CE:6D:E3:38:AA:5A X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WmS9Un5fMNsbXu1vSNTObeM4qlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.192.0/22 Signature Algorithm: sha256WithRSAEncryption 03:68:ba:ac:3c:02:4c:98:12:b7:10:d3:82:2a:b5:09:76:d8: af:6e:2a:92:48:6d:db:e1:4d:9a:a5:2d:2f:58:97:ae:a2:e5: 90:dc:ab:f3:0e:d6:d3:27:2b:3c:69:71:79:fb:f5:d8:b0:b6: 5a:39:aa:07:07:e0:9a:53:24:43:68:73:29:cc:d4:cd:60:62: 6e:b6:5d:aa:7c:e0:ec:f2:82:6c:03:91:7d:2e:01:bb:18:3f: 73:9b:e2:a8:06:96:cf:cc:be:c3:84:62:cd:25:40:a0:67:7c: a4:6d:2d:c3:6d:ea:7b:e1:b3:af:c9:66:a6:02:ed:93:6c:b2: 4c:02:19:c5:69:79:48:d9:31:86:bc:8a:98:5b:c3:9d:6d:e1: dd:59:f6:a2:82:10:af:61:46:22:9a:e1:f6:65:00:78:a0:64: e1:9c:b4:9e:28:25:ea:0f:16:2f:ff:f6:3d:91:74:3f:30:76: f5:d7:43:e8:63:1b:56:b7:21:95:42:d9:08:f4:22:5b:7a:74: d6:b6:28:f8:2f:b4:2b:47:b3:57:cf:22:7c:5a:ce:4e:ab:2f: c0:b4:07:17:bf:39:18:11:95:16:73:f5:0f:11:56:90:98:9a: 93:73:30:42:88:9f:9d:1b:df:1c:31:8f:56:2a:e4:2a:ea:61: 35:5e:9e:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ojfu/SNFwtqAIOc289TfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTY0YmQ1MjdlNWYzMGRiMWI1ZWVkNmY0OGQ0Y2U2ZGUzMzhhYTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJAMDnyC72k5jMWbdSUaCAsCcd20 DGia2opO2ZzsjFFc6hsF809hvWQJMBk5UU2g1uYQBU0S33YBuizBxLFSUwSt3kAi j4SUQo6cJ24PEn21UGMiIbARnW5WZ7J7xsGRhFJx/5rznG9BZv6jUM99tI82XLqH WLlpmYqX6TCJmmzpaHL66AYwETm7Pn970UGEkQlkpAqezBibokaVHRZ14ZVK2aax tF0JJ5U85dZHseGEwQEG5zrKyVPzhw6RYga1VXLzasmRT754NHYsCGDHboj3cvJy HCC5QVqQbWls0bgpkAXYx8b1UTc/6/a40XZBRj7hehvPTDgLqXKy1pk8GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFpkvVJ+XzDbG17tb0jUzm3jOKpaMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvV21TOVVuNWZNTnNiWHUxdlNOVE9iZU00cWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1IfAMA0G CSqGSIb3DQEBCwUAA4IBAQADaLqsPAJMmBK3ENOCKrUJdtivbiqSSG3b4U2apS0v WJeuouWQ3KvzDtbTJys8aXF5+/XYsLZaOaoHB+CaUyRDaHMpzNTNYGJutl2qfODs 8oJsA5F9LgG7GD9zm+KoBpbPzL7DhGLNJUCgZ3ykbS3Dbep74bOvyWamAu2TbLJM AhnFaXlI2TGGvIqYW8OdbeHdWfaighCvYUYimuH2ZQB4oGThnLSeKCXqDxYv//Y9 kXQ/MHb110PoYxtWtyGVQtkI9CJbenTWtij4L7QrR7NXzyJ8Ws5Oqy/AtAcXvzkY EZUWc/UPEVaQmJqTczBCiJ+dG98cMY9WKuQq6mE1Xp4P -----END CERTIFICATE-----Generated at Mon Jan 12 00:54:10 2026 by rpki-client