This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/weXsXX2WSYDBaNEiTh-VYwuFmSU.roa File: weXsXX2WSYDBaNEiTh-VYwuFmSU.roa (raw, json) Hash identifier: Vc+BVO2agyQBGiy9Yg7XoT6uh2VRK3bHqRMi/xUSgz0= Subject key identifier: C1:E5:EC:5D:7D:96:49:80:C1:68:D1:22:4E:1F:95:63:0B:85:99:25 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E58A3151BCD1940D3C9B16BB9410 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/weXsXX2WSYDBaNEiTh-VYwuFmSU.roa Signing time: Fri 02 Jan 2026 00:19:31 +0000 ROA not before: Fri 02 Jan 2026 00:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200275 IP address blocks: 5.231.127.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e5:8a:31:51:bc:d1:94:0d:3c:9b:16:bb:94:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e5ec5d7d964980c168d1224e1f95630b859925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:33:46:e1:7b:22:15:25:0b:9f:c3:63:4f: be:f0:f9:82:af:a3:18:80:61:f0:62:53:4e:ef:62: 5f:82:0c:aa:23:8e:a9:eb:e6:a3:5b:05:cf:dd:a5: ad:86:1c:f8:a6:9a:65:29:c3:d1:fe:73:91:7a:d8: c6:38:b9:19:38:12:30:39:d2:91:89:8e:fd:bc:d4: b3:f8:ee:3c:fd:12:57:9c:7e:10:c0:02:e2:9f:ae: f1:39:96:45:7c:95:40:56:86:32:f5:77:60:93:1d: 6f:6c:fc:28:18:8a:01:3e:7d:58:e0:73:09:e4:a6: b8:bf:73:c1:27:3d:f2:eb:1b:7e:0e:6f:ff:0f:d7: 6a:07:b4:75:f7:92:37:bc:98:93:b3:a5:01:49:98: a0:ca:26:ce:fc:04:6c:08:bd:5c:c9:f6:f8:c7:a1: d5:ec:c8:57:5e:15:95:6f:30:a1:08:b3:f3:47:8e: 3f:3b:ec:57:bb:8e:b1:df:4c:f2:69:7e:ca:0f:f5: 39:52:5e:b7:93:90:e0:48:cf:4a:04:f7:c5:70:08: 23:d2:81:ba:4b:75:90:86:87:24:b0:1d:9a:c8:0c: 86:93:41:f6:75:53:18:32:73:0e:c9:7d:55:46:28: 5b:ec:e1:8d:ca:c1:71:26:b5:e1:42:26:ef:4d:ea: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E5:EC:5D:7D:96:49:80:C1:68:D1:22:4E:1F:95:63:0B:85:99:25 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/weXsXX2WSYDBaNEiTh-VYwuFmSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.127.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:dc:e6:9f:b1:6b:5b:64:0e:f9:80:bd:0c:2c:4e:0f:68:c6: e1:29:22:97:09:f0:6d:f3:4f:88:35:2d:50:32:ca:39:46:7d: 6a:b1:b5:37:5a:3e:1f:a8:73:2e:5f:d5:02:f3:bb:37:10:4f: 0c:64:bc:0c:70:a7:bf:7d:1d:63:85:d4:60:5b:df:aa:ab:ba: c2:18:ed:fc:41:17:89:46:80:30:38:08:9d:d9:45:d5:7d:0a: cf:3f:0f:87:8e:06:64:62:40:7c:16:a3:42:f2:54:fa:4c:dd: 04:d1:59:14:87:f9:99:ec:25:5d:91:a3:74:b1:f6:ad:57:a0: 36:55:9c:be:7a:64:d9:db:44:0a:96:84:46:38:83:b4:b9:a2: 7c:aa:48:93:51:63:d6:93:15:86:b2:3e:f8:b6:ea:b2:c7:7c: d8:49:c9:70:ca:da:de:1b:4c:23:f2:2c:70:05:bf:dc:0c:e3: 8e:78:9c:8f:df:78:e4:6a:28:35:ed:9d:7a:20:85:b2:17:52: 57:b7:e0:14:3d:d5:94:d5:9b:08:99:0f:5e:e4:d5:95:15:70: 22:c0:72:0e:4f:da:d9:83:2e:71:e3:0f:89:5d:a7:7b:5c:76: 99:cd:07:83:45:52:0b:22:0d:85:c1:97:ca:38:24:93:81:8c: 01:bc:fb:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuWKMVG80ZQNPJsWu5QQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU1ZWM1ZDdkOTY0OTgwYzE2OGQxMjI0ZTFmOTU2MzBiODU5OTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7IzRuF7IhUlC5/DY0++8PmCr6MY gGHwYlNO72JfggyqI46p6+ajWwXP3aWthhz4ppplKcPR/nORetjGOLkZOBIwOdKR iY79vNSz+O48/RJXnH4QwALin67xOZZFfJVAVoYy9Xdgkx1vbPwoGIoBPn1Y4HMJ 5Ka4v3PBJz3y6xt+Dm//D9dqB7R195I3vJiTs6UBSZigyibO/ARsCL1cyfb4x6HV 7MhXXhWVbzChCLPzR44/O+xXu46x30zyaX7KD/U5Ul63k5DgSM9KBPfFcAgj0oG6 S3WQhocksB2ayAyGk0H2dVMYMnMOyX1VRihb7OGNysFxJrXhQibvTep/uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMHl7F19lkmAwWjRIk4flWMLhZklMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvd2VYc1hYMldTWURCYU5FaVRoLVZZd3VGbVNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABed/MA0G CSqGSIb3DQEBCwUAA4IBAQAs3OafsWtbZA75gL0MLE4PaMbhKSKXCfBt80+INS1Q Mso5Rn1qsbU3Wj4fqHMuX9UC87s3EE8MZLwMcKe/fR1jhdRgW9+qq7rCGO38QReJ RoAwOAid2UXVfQrPPw+HjgZkYkB8FqNC8lT6TN0E0VkUh/mZ7CVdkaN0sfatV6A2 VZy+emTZ20QKloRGOIO0uaJ8qkiTUWPWkxWGsj74tuqyx3zYSclwytreG0wj8ixw Bb/cDOOOeJyP33jkaig17Z16IIWyF1JXt+AUPdWU1ZsImQ9e5NWVFXAiwHIOT9rZ gy5x4w+JXad7XHaZzQeDRVILIg2FwZfKOCSTgYwBvPt2 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:40 2026 by rpki-client