This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/W_JkX85_ct4GRSLcGoldQL-kGPA.roa File: W_JkX85_ct4GRSLcGoldQL-kGPA.roa (raw, json) Hash identifier: WgkqO2cDEqnzPNEaCztWMFeZ7r1F7V2prpGk8g/jk+g= Subject key identifier: 5B:F2:64:5F:CE:7F:72:DE:06:45:22:DC:1A:89:5D:40:BF:A4:18:F0 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B9E3B718F9DC6F1871F2F2329E048F4F2 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/W_JkX85_ct4GRSLcGoldQL-kGPA.roa Signing time: Thu 08 Jan 2026 15:30:54 +0000 ROA not before: Thu 08 Jan 2026 15:30:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 188.209.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:3b:71:8f:9d:c6:f1:87:1f:2f:23:29:e0:48:f4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 8 15:30:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bf2645fce7f72de064522dc1a895d40bfa418f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:6f:6d:91:5c:22:70:92:eb:73:f8:35:f0: e7:ad:5d:f6:c8:b8:fb:c9:39:77:4f:fe:3d:54:0b: 87:1b:22:bd:a3:f0:99:90:88:b1:66:d3:92:58:0b: 56:28:17:77:ec:67:4d:c8:e5:7b:ee:94:50:fe:04: 9f:26:09:60:d8:35:0a:7c:86:cb:6e:8c:ed:70:f7: 4f:57:fb:b6:33:b9:9c:cf:97:58:b6:7d:b8:2f:24: ff:98:7b:44:b8:c9:2e:88:9f:73:f9:c3:0a:e6:9f: 20:b9:6c:35:03:5f:a7:f2:75:de:3a:4f:51:79:f0: 7a:39:d8:d5:8f:16:b8:2c:eb:bf:66:92:61:2a:52: d9:b6:9b:d2:a5:eb:77:5b:0c:a6:e2:40:9c:1c:3c: 43:f6:cb:06:ab:23:34:9f:60:26:bb:b4:cf:57:ea: 9c:85:d6:1e:5e:a9:a9:ad:45:a7:d5:ff:a9:fa:0d: f7:57:5c:2a:95:2f:d3:a1:74:c5:c7:ff:94:9d:3c: 5b:99:88:d1:ec:ae:af:c1:c2:ca:7f:a1:01:27:94: ef:26:cb:75:34:b4:ac:90:cc:29:25:68:70:a5:d9: 6c:f7:e7:c8:4e:c0:18:32:1d:89:3f:83:d3:0e:81: 45:7f:63:5c:6f:b6:59:f6:4c:f0:0e:fa:8e:a3:00: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F2:64:5F:CE:7F:72:DE:06:45:22:DC:1A:89:5D:40:BF:A4:18:F0 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/W_JkX85_ct4GRSLcGoldQL-kGPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.139.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:0b:c9:ed:35:d8:2b:1e:bc:36:71:17:aa:67:81:9f:2a:64: d4:6b:04:5c:5d:90:57:77:1e:4d:47:a1:d6:a4:9b:8d:27:f3: a3:ad:95:9d:79:9e:82:1c:a7:b6:ca:1a:50:1f:c6:fe:b1:62: 0a:f0:c1:f9:59:23:65:d5:72:ec:25:a9:f5:d2:72:58:a7:9c: f9:74:ca:5e:92:57:83:08:4d:e2:a5:b7:61:af:0c:b4:fa:1d: 90:71:7e:7f:02:44:14:cb:f2:d8:f5:56:fa:9f:73:65:93:a1: 30:d1:52:3f:dd:18:8c:29:a8:be:48:ed:17:3d:79:b7:bf:97: f1:89:71:22:47:4a:70:17:10:28:e7:e1:a3:fc:54:5d:7c:97: c3:c5:01:21:09:fa:16:d5:7d:8f:48:9d:f9:d6:ea:5e:ee:1c: 87:44:a4:71:d9:fa:8e:11:8d:78:0b:f0:67:41:ab:d1:b8:14: 31:bf:d9:4f:ae:cf:c7:1d:b0:7b:93:f9:1b:c4:09:c0:3a:99: 01:c1:08:35:44:80:9b:b9:49:03:98:e9:2a:57:98:3a:65:29: 0d:99:d2:5b:93:27:43:12:99:7a:1a:29:e0:cc:78:47:81:69: 71:9b:5e:0c:3d:48:c5:9f:f4:52:8f:43:4d:76:b2:3e:8c:2a: 6c:85:04:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZueO3GPncbxhx8vIyngSPTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTA4MTUzMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmYyNjQ1ZmNlN2Y3MmRlMDY0NTIyZGMxYTg5NWQ0MGJmYTQxOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIpvbZFcInCS63P4NfDnrV32yLj7 yTl3T/49VAuHGyK9o/CZkIixZtOSWAtWKBd37GdNyOV77pRQ/gSfJglg2DUKfIbL boztcPdPV/u2M7mcz5dYtn24LyT/mHtEuMkuiJ9z+cMK5p8guWw1A1+n8nXeOk9R efB6OdjVjxa4LOu/ZpJhKlLZtpvSpet3Wwym4kCcHDxD9ssGqyM0n2Amu7TPV+qc hdYeXqmprUWn1f+p+g33V1wqlS/ToXTFx/+UnTxbmYjR7K6vwcLKf6EBJ5TvJst1 NLSskMwpJWhwpdls9+fITsAYMh2JP4PTDoFFf2Ncb7ZZ9kzwDvqOowDfhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvyZF/Of3LeBkUi3BqJXUC/pBjwMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvV19Ka1g4NV9jdDRHUlNMY0dvbGRRTC1rR1BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGLMA0G CSqGSIb3DQEBCwUAA4IBAQAMC8ntNdgrHrw2cReqZ4GfKmTUawRcXZBXdx5NR6HW pJuNJ/OjrZWdeZ6CHKe2yhpQH8b+sWIK8MH5WSNl1XLsJan10nJYp5z5dMpekleD CE3ipbdhrwy0+h2QcX5/AkQUy/LY9Vb6n3Nlk6Ew0VI/3RiMKai+SO0XPXm3v5fx iXEiR0pwFxAo5+Gj/FRdfJfDxQEhCfoW1X2PSJ351upe7hyHRKRx2fqOEY14C/Bn QavRuBQxv9lPrs/HHbB7k/kbxAnAOpkBwQg1RICbuUkDmOkqV5g6ZSkNmdJbkydD Epl6GingzHhHgWlxm14MPUjFn/RSj0NNdrI+jCpshQSc -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:54 2026 by rpki-client