This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/wELXb2upKDUk9ug1VUWo0G60EVg.roa File: wELXb2upKDUk9ug1VUWo0G60EVg.roa (raw, json) Hash identifier: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk= Subject key identifier: C0:42:D7:6F:6B:A9:28:35:24:F6:E8:35:55:45:A8:D0:6E:B4:11:58 Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0 Certificate serial: 019B7A5B766314011F3A15EA9CEB636F5DC1 Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/wELXb2upKDUk9ug1VUWo0G60EVg.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398485 IP address blocks: 195.5.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:76:63:14:01:1f:3a:15:ea:9c:eb:63:6f:5d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c042d76f6ba9283524f6e8355545a8d06eb41158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:50:a2:4b:d1:f0:e4:4c:53:67:e2:55:91: 33:e8:1e:42:45:f6:94:00:70:8c:5f:b9:bb:6b:2a: 7c:54:d3:88:e3:68:5f:3d:60:40:2a:ae:59:6e:65: 07:96:4e:ae:a9:e7:6b:2f:01:49:c9:e1:c8:55:98: 33:6f:ea:9a:f1:0f:1f:63:6e:de:a0:86:3a:1e:d4: ac:5e:cc:83:c5:64:06:74:73:73:f4:56:5a:b7:ad: ca:ae:e2:3b:1f:d4:73:f8:f8:40:64:d3:ac:e8:bc: 03:91:4b:d1:c3:bd:b0:b9:2e:02:22:af:04:53:ab: bc:2f:f1:c7:77:af:4f:24:19:3d:1b:d4:30:77:9f: 46:c2:44:b4:0e:9b:09:80:1c:c3:3f:c6:b2:c9:1d: f2:43:a8:4a:dd:fb:70:9d:79:76:13:9b:e4:29:72: f8:51:86:89:cf:a5:fa:94:46:ec:40:18:ac:47:ad: 26:c8:5c:a9:69:88:21:c5:ab:d2:ef:ae:e8:f9:99: bb:38:ff:2e:34:d2:a6:0b:46:51:f4:3b:dc:03:29: c6:e9:7d:fa:b2:f2:0a:3f:8f:97:b6:5a:75:5e:51: a6:68:3f:73:37:86:63:b9:a9:cd:0e:72:c5:f5:aa: 93:92:72:d7:af:4c:e0:03:75:99:b4:57:d8:20:5c: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:42:D7:6F:6B:A9:28:35:24:F6:E8:35:55:45:A8:D0:6E:B4:11:58 X509v3 Authority Key Identifier: keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/wELXb2upKDUk9ug1VUWo0G60EVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.5.171.0/24 Signature Algorithm: sha256WithRSAEncryption 53:b6:a2:fa:f6:be:36:65:9f:d1:d8:fc:ec:4f:8d:5e:97:65: 05:c7:88:0a:a5:f7:dc:2e:b1:26:ff:b4:62:82:ec:75:f6:90: 7c:cb:44:d2:f1:5c:00:49:6c:57:75:2b:d9:a4:23:2b:69:54: 9f:47:55:e6:7c:ed:27:9d:ba:d6:83:61:04:cc:0e:70:87:e0: 21:f5:60:95:7a:9e:e9:7d:8d:93:5a:86:23:81:18:a9:62:25: 34:86:19:70:6b:b3:06:ec:27:db:1c:73:5a:66:b8:90:a2:34: b5:76:30:17:28:54:57:75:32:e1:31:5a:6c:a5:c8:ad:c0:10: e9:af:f1:da:30:2c:5b:49:0c:3b:26:df:55:f5:0c:f4:20:d4: 7e:54:75:82:2c:33:2a:38:b4:61:e9:0a:fe:2b:f1:7a:cd:c7: ac:32:af:ee:cb:e3:a5:5e:a2:62:c5:08:19:6c:a0:28:d1:95: b0:37:59:ee:fb:02:91:b4:c2:61:65:6e:9e:29:59:c7:02:cf: 6c:e8:15:46:a7:6a:d5:84:47:2f:b8:93:3e:b8:00:e9:0f:e1: 43:ea:0c:07:85:9c:d3:3d:39:2e:17:79:4f:97:b9:c5:c5:c0: 76:33:10:f4:3b:74:3b:ac:2e:ef:82:63:3f:9e:fb:5d:27:9a: 8c:e1:78:aa -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6W3ZjFAEfOhXqnOtjb13BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjY0N2RmMjE4ZTJjNmYzZmQxY2Y1NDlkMjdkZjRlNTBj ZDZkYjAwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDQyZDc2ZjZiYTkyODM1MjRmNmU4MzU1NTQ1YThkMDZlYjQxMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gVQokvR8ORMU2fiVZEz6B5CRfaU AHCMX7m7ayp8VNOI42hfPWBAKq5ZbmUHlk6uqedrLwFJyeHIVZgzb+qa8Q8fY27e oIY6HtSsXsyDxWQGdHNz9FZat63KruI7H9Rz+PhAZNOs6LwDkUvRw72wuS4CIq8E U6u8L/HHd69PJBk9G9Qwd59GwkS0DpsJgBzDP8ayyR3yQ6hK3ftwnXl2E5vkKXL4 UYaJz6X6lEbsQBisR60myFypaYghxavS767o+Zm7OP8uNNKmC0ZR9DvcAynG6X36 svIKP4+Xtlp1XlGmaD9zN4ZjuanNDnLF9aqTknLXr0zgA3WZtFfYIFyBwwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMBC129rqSg1JPboNVVFqNButBFYMB8GA1UdIwQY MBaAFPr2R98hjixvP9HPVJ0n305QzW2wMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12WkgzeUdPTEc4XzBjOVVuU2ZmVGxETmJiQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNDVhNTcyLWI4MDgtNDBmNS04YjI1 LWRkY2ExNTNhMjBhYi8xL3dFTFhiMnVwS0RVazl1ZzFWVVdvMEc2MEVWZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTQvNDVhNTcyLWI4MDgtNDBmNS04YjI1LWRkY2ExNTNhMjBh Yi8xLzEtdlpIM3lHT0xHOF8wYzlVblNmZlRsRE5iYkEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDBasw DQYJKoZIhvcNAQELBQADggEBAFO2ovr2vjZln9HY/OxPjV6XZQXHiAql99wusSb/ tGKC7HX2kHzLRNLxXABJbFd1K9mkIytpVJ9HVeZ87SedutaDYQTMDnCH4CH1YJV6 nul9jZNahiOBGKliJTSGGXBrswbsJ9scc1pmuJCiNLV2MBcoVFd1MuExWmylyK3A EOmv8dowLFtJDDsm31X1DPQg1H5UdYIsMyo4tGHpCv4r8XrNx6wyr+7L46VeomLF CBlsoCjRlbA3We77ApG0wmFlbp4pWccCz2zoFUanatWERy+4kz64AOkP4UPqDAeF nNM9OS4XeU+XucXFwHYzEPQ7dDusLu+CYz+e+10nmozheKo= -----END CERTIFICATE-----Generated at Thu Feb 5 10:46:09 2026 by rpki-client