This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W-X1HVqMYhs50lGf77xy6xfjNDI.roa File: W-X1HVqMYhs50lGf77xy6xfjNDI.roa (raw, json) Hash identifier: 60j5HG8ZYCFN0rjHWnCfULDJeuqUiSHTeb2+wVk35Jo= Subject key identifier: 5B:E5:F5:1D:5A:8C:62:1B:39:D2:51:9F:EF:BC:72:EB:17:E3:34:32 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39220B4B72D776EDEF54B5BE14809C Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W-X1HVqMYhs50lGf77xy6xfjNDI.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46475 IP address blocks: 163.5.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:22:0b:4b:72:d7:76:ed:ef:54:b5:be:14:80:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5be5f51d5a8c621b39d2519fefbc72eb17e33432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:00:b3:c8:76:4f:e9:97:c6:5e:39:7c:cf: 22:ae:27:ef:19:3e:b0:ae:61:ae:1e:db:48:11:5a: 94:a8:a4:0a:dd:58:9c:e1:86:fd:4c:57:71:0f:4e: a6:87:da:bb:d1:fb:e5:be:aa:f0:80:bb:30:72:0a: 61:cf:df:48:50:ac:26:c8:6a:4b:84:1a:8c:e7:68: 20:11:68:69:f1:2a:74:fa:83:00:ae:d5:2e:32:de: 76:e5:82:6a:de:d8:1c:49:36:52:2f:34:ee:af:b6: c1:8a:08:cf:04:77:74:0f:d6:76:11:0c:6c:a0:07: 2e:7d:4d:33:81:a4:ea:88:b3:1a:99:e3:ff:6b:bf: ba:2c:c4:5e:ce:ce:4f:8c:6e:eb:4c:59:58:68:c1: 08:84:2d:b4:a5:63:90:8b:64:94:35:13:11:18:cc: 03:20:c3:0e:22:32:b5:eb:9c:2c:f5:2f:8c:8b:3d: 2d:60:02:2a:c5:22:dc:01:03:71:1e:63:d0:1e:af: c4:46:ab:cc:e6:4e:35:67:df:57:45:a0:0d:7f:fa: 7b:95:17:22:36:cf:cc:a4:4e:fa:97:26:1d:83:c4: d4:b0:66:db:67:4f:e5:54:c1:b5:b9:65:f4:02:ee: 8c:59:de:04:9d:75:e7:c4:1a:8e:28:94:94:9a:9f: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E5:F5:1D:5A:8C:62:1B:39:D2:51:9F:EF:BC:72:EB:17:E3:34:32 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W-X1HVqMYhs50lGf77xy6xfjNDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.164.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:3e:b8:b0:44:f4:4d:a4:fa:07:cc:ba:e8:ad:4d:b4:6c:89: b6:5e:52:d7:64:f4:4c:cb:1f:54:1d:1c:38:9e:8c:bb:fc:4d: 8d:52:67:5d:a0:55:af:51:a4:4a:94:3e:5f:6b:eb:9e:8a:db: 1f:fb:9d:40:3b:7a:a6:0a:46:7c:a0:38:5b:4a:5c:41:8d:ea: 62:0e:17:0e:ca:e9:a4:7b:31:16:d5:e0:b3:07:8f:0e:24:7f: 91:f2:16:cb:5c:5d:93:12:a2:c1:f4:bd:2d:92:f1:c7:72:41: 95:16:7c:27:12:99:bb:fd:3f:60:64:6f:d0:ee:2d:8a:f8:8e: d8:e0:1a:60:61:d8:8e:82:96:5c:02:a8:6b:8f:6d:01:89:0a: e6:80:4b:e8:a6:53:4e:d8:b6:56:d5:d0:f8:0a:a7:9d:3a:6e: ea:29:67:4d:51:8a:d3:03:a6:ed:cc:64:c1:0f:55:78:e2:9c: 30:ea:b5:6c:81:e3:5a:63:6a:55:b2:87:11:bd:61:5d:7a:45: c2:a0:78:ac:5e:8e:6b:19:c4:74:cb:2c:76:6e:a5:e1:58:bf: f5:f9:92:4e:58:b6:03:c7:b1:1d:5c:29:50:21:38:37:61:58: fe:16:e7:a7:76:f1:31:d8:02:96:cf:56:38:8b:d1:c2:2d:e8: 2d:79:97:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSILS3LXdu3vVLW+FICcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmU1ZjUxZDVhOGM2MjFiMzlkMjUxOWZlZmJjNzJlYjE3ZTMzNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HkAs8h2T+mXxl45fM8irifvGT6w rmGuHttIEVqUqKQK3Vic4Yb9TFdxD06mh9q70fvlvqrwgLswcgphz99IUKwmyGpL hBqM52ggEWhp8Sp0+oMArtUuMt525YJq3tgcSTZSLzTur7bBigjPBHd0D9Z2EQxs oAcufU0zgaTqiLMameP/a7+6LMRezs5PjG7rTFlYaMEIhC20pWOQi2SUNRMRGMwD IMMOIjK165ws9S+Miz0tYAIqxSLcAQNxHmPQHq/ERqvM5k41Z99XRaANf/p7lRci Ns/MpE76lyYdg8TUsGbbZ0/lVMG1uWX0Au6MWd4EnXXnxBqOKJSUmp+GOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvl9R1ajGIbOdJRn++8cusX4zQyMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvVy1YMUhWcU1ZaHM1MGxHZjc3eHk2eGZqTkRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWkMA0G CSqGSIb3DQEBCwUAA4IBAQCfPriwRPRNpPoHzLrorU20bIm2XlLXZPRMyx9UHRw4 noy7/E2NUmddoFWvUaRKlD5fa+ueitsf+51AO3qmCkZ8oDhbSlxBjepiDhcOyumk ezEW1eCzB48OJH+R8hbLXF2TEqLB9L0tkvHHckGVFnwnEpm7/T9gZG/Q7i2K+I7Y 4BpgYdiOgpZcAqhrj20BiQrmgEvoplNO2LZW1dD4CqedOm7qKWdNUYrTA6btzGTB D1V44pww6rVsgeNaY2pVsocRvWFdekXCoHisXo5rGcR0yyx2bqXhWL/1+ZJOWLYD x7EdXClQITg3YVj+FuendvEx2AKWz1Y4i9HCLegteZcL -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:57 2026 by rpki-client