This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w1SV9CBng7G1L-8BwBaXAjHCtYs.roa File: w1SV9CBng7G1L-8BwBaXAjHCtYs.roa (raw, json) Hash identifier: 1TEHq+ZnMgBI99uGkdlKkTJ6IoctVOlEJKcmjz7e6GE= Subject key identifier: C3:54:95:F4:20:67:83:B1:B5:2F:EF:01:C0:16:97:02:31:C2:B5:8B Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0F8F03B4A4DB5E26D0B276A65711 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w1SV9CBng7G1L-8BwBaXAjHCtYs.roa Signing time: Fri 02 Jan 2026 06:17:58 +0000 ROA not before: Fri 02 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49699 IP address blocks: 5.104.170.0/24 maxlen: 24 5.104.171.0/24 maxlen: 24 5.104.172.0/24 maxlen: 24 5.104.173.0/24 maxlen: 24 78.142.50.0/24 maxlen: 24 79.124.30.0/24 maxlen: 24 82.118.239.0/24 maxlen: 24 82.118.241.0/24 maxlen: 24 87.246.3.0/24 maxlen: 24 87.246.24.0/24 maxlen: 24 130.185.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0f:8f:03:b4:a4:db:5e:26:d0:b2:76:a6:57:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c35495f4206783b1b52fef01c016970231c2b58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:b5:e3:19:d9:34:08:bb:64:8a:4c:67:96: 5e:42:ab:2f:04:a9:77:d7:45:f1:4a:86:8b:a0:d5: 77:26:2a:d7:ab:9a:53:43:5c:b9:f2:16:7c:43:3a: c0:8f:63:e1:8f:c7:cc:04:d9:b3:c3:e2:6f:85:eb: 35:db:3a:35:93:04:75:96:29:42:6a:78:88:77:6d: ad:1c:e9:fc:76:44:f1:f1:2f:e8:dd:6d:34:ca:60: 8b:be:1f:12:70:6c:f7:d2:99:06:00:31:45:32:17: 15:2e:8a:7f:9b:09:42:a5:9c:00:bb:f2:99:af:1b: 09:8a:37:16:82:66:aa:75:ce:01:13:a1:4c:79:f4: 81:21:d4:d8:0d:98:c9:f0:eb:77:86:7f:59:a5:57: aa:11:3c:1c:9c:b9:a9:19:4f:df:82:75:d7:c6:8a: 09:94:88:d7:c3:e1:da:2c:87:3a:19:e0:2c:f0:ad: 71:e6:6d:18:bd:39:33:35:8e:d5:30:75:ff:5b:97: a9:aa:9f:54:82:fe:92:55:be:e0:83:97:92:e5:e6: 0f:2e:83:6d:cc:16:17:b0:89:a7:94:a8:e2:7e:4b: 06:0d:3a:b7:2b:cb:01:79:a7:cb:28:6c:90:10:16: f4:5c:68:81:e2:17:be:a5:15:4b:2e:57:15:bb:f4: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:54:95:F4:20:67:83:B1:B5:2F:EF:01:C0:16:97:02:31:C2:B5:8B X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w1SV9CBng7G1L-8BwBaXAjHCtYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.170.0-5.104.173.255 78.142.50.0/24 79.124.30.0/24 82.118.239.0/24 82.118.241.0/24 87.246.3.0/24 87.246.24.0/24 130.185.253.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:02:e6:e1:0d:a1:5f:e1:d9:72:5b:55:14:82:60:34:21:a5: 39:99:24:ed:fa:6c:03:dd:5a:33:83:bb:1c:4e:37:90:00:da: 39:ff:fc:92:2f:e0:8e:59:b7:81:c6:77:f4:01:83:52:a5:db: 74:86:f4:91:c3:2d:9d:1f:d5:a9:b7:5e:42:11:b8:bf:df:e3: 03:95:72:19:0a:f0:1c:c3:95:70:43:ae:03:57:52:f9:fa:c4: 3f:ef:05:20:24:ad:3c:f7:36:32:4e:63:a5:4c:2f:57:65:77: 82:85:3b:e1:ef:88:c5:81:ca:ef:50:bd:4a:76:8a:26:95:5b: ee:65:84:2d:fd:d8:78:fd:59:8d:a8:24:a3:f7:76:bc:d6:50: 14:e8:ca:48:3b:ef:a8:c6:55:5f:3d:41:9c:19:13:26:ad:77: a3:95:cb:cf:45:0d:9c:9a:6f:82:5d:b6:55:a0:a3:2a:88:06: 06:84:f5:c0:8f:3f:1f:ec:a0:e0:03:e5:99:87:a7:be:f0:06: 55:bb:ef:11:14:0a:58:58:ca:be:1e:82:11:fb:8f:20:fb:0b: e6:34:a1:27:ce:71:95:9a:76:5b:cc:27:c8:b3:a8:a6:ba:a9: 6c:94:63:f5:ca:97:e9:30:16:4a:0a:57:50:9a:92:a8:e5:94: 68:57:c8:99 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt9Ww+PA7Sk214m0LJ2plcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzU0OTVmNDIwNjc4M2IxYjUyZmVmMDFjMDE2OTcwMjMxYzJiNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0214xnZNAi7ZIpMZ5ZeQqsvBKl3 10XxSoaLoNV3JirXq5pTQ1y58hZ8QzrAj2Phj8fMBNmzw+Jvhes12zo1kwR1lilC aniId22tHOn8dkTx8S/o3W00ymCLvh8ScGz30pkGADFFMhcVLop/mwlCpZwAu/KZ rxsJijcWgmaqdc4BE6FMefSBIdTYDZjJ8Ot3hn9ZpVeqETwcnLmpGU/fgnXXxooJ lIjXw+HaLIc6GeAs8K1x5m0YvTkzNY7VMHX/W5epqp9Ugv6SVb7gg5eS5eYPLoNt zBYXsImnlKjifksGDTq3K8sBeafLKGyQEBb0XGiB4he+pRVLLlcVu/S6sQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFMNUlfQgZ4OxtS/vAcAWlwIxwrWLMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvdzFTVjlDQm5nN0cxTC04QndCYVhBakhDdFlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAEFaKoD BAEFaKwDBABOjjIDBABPfB4DBABSdu8DBABSdvEDBABX9gMDBABX9hgDBACCuf0w DQYJKoZIhvcNAQELBQADggEBAG8C5uENoV/h2XJbVRSCYDQhpTmZJO36bAPdWjOD uxxON5AA2jn//JIv4I5Zt4HGd/QBg1Kl23SG9JHDLZ0f1am3XkIRuL/f4wOVchkK 8BzDlXBDrgNXUvn6xD/vBSAkrTz3NjJOY6VML1dld4KFO+HviMWByu9QvUp2iiaV W+5lhC392Hj9WY2oJKP3drzWUBToykg776jGVV89QZwZEyatd6OVy89FDZyab4Jd tlWgoyqIBgaE9cCPPx/soOAD5ZmHp77wBlW77xEUClhYyr4eghH7jyD7C+Y0oSfO cZWadlvMJ8izqKa6qWyUY/XKl+kwFkoKV1CakqjllGhXyJk= -----END CERTIFICATE-----Generated at Fri Jan 23 18:50:55 2026 by rpki-client