This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/W-LFdXJpQLdmO9rIYC8JOFXBGas.roa File: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (raw, json) Hash identifier: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA= Subject key identifier: 5B:E2:C5:75:72:69:40:B7:66:3B:DA:C8:60:2F:09:38:55:C1:19:AB Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B7C7EFA770D3C46F2B2D4084BD77610DA Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/W-LFdXJpQLdmO9rIYC8JOFXBGas.roa Signing time: Fri 02 Jan 2026 02:17:34 +0000 ROA not before: Fri 02 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 78.142.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 02:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:fa:77:0d:3c:46:f2:b2:d4:08:4b:d7:76:10:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 2 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5be2c575726940b7663bdac8602f093855c119ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:e6:12:17:9a:93:61:3f:08:ce:b9:1d:cf: d6:f7:e0:18:0e:41:99:5c:67:93:82:ae:73:44:cb: e5:7f:d2:50:ad:50:50:3a:cf:05:c6:69:26:31:1d: 30:48:a2:64:a8:f4:9f:ed:ae:0e:d6:fc:ab:5e:20: 13:d5:0e:ca:82:f8:f4:01:9f:a2:b1:9c:19:de:c5: 5f:02:3b:3e:1e:c9:f2:e1:54:6d:54:a6:00:22:74: e6:77:ec:8f:4b:07:d8:61:79:2c:12:60:9f:fc:ea: ff:79:1f:bb:43:02:f5:a4:c7:7e:fe:8a:76:0e:a0: a0:b3:2b:e7:c6:82:4a:28:bb:cf:f8:19:e5:89:74: 1e:8b:16:c2:70:31:9d:f7:e9:fb:93:3c:49:16:bc: b5:43:fd:91:1a:b1:1a:49:46:82:40:d3:36:1b:fd: c4:79:73:ff:81:9f:41:68:d9:fd:3a:d6:98:ea:0f: df:70:29:96:ef:e1:3b:ea:bc:65:72:34:e4:26:bf: e7:b8:f3:48:da:18:a5:ff:fe:af:eb:7d:26:ca:73: 54:28:05:b4:5a:d8:88:bd:93:51:95:1a:5d:5b:21: 63:53:1a:9e:2d:7c:be:a4:9f:ec:c3:09:c0:57:21: f8:7c:13:07:bb:05:1e:25:36:2d:58:dd:2c:a1:e3: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E2:C5:75:72:69:40:B7:66:3B:DA:C8:60:2F:09:38:55:C1:19:AB X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/W-LFdXJpQLdmO9rIYC8JOFXBGas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.216.0/22 Signature Algorithm: sha256WithRSAEncryption bc:02:2f:0a:b0:92:f1:4c:a2:34:26:f5:43:b0:a5:71:be:82: 31:11:ab:b7:05:e3:7b:48:40:0c:a5:31:66:2f:77:f0:cd:dc: de:fd:cd:bb:8f:a4:5b:74:f3:c9:d9:8e:70:9d:f1:78:78:64: 54:48:af:eb:83:e0:3e:1c:eb:c1:aa:a9:39:ae:27:75:23:c6: 29:ba:9f:a7:06:aa:96:6d:c0:95:9e:c7:37:e3:c1:1b:9b:6c: e9:9f:35:9e:6c:64:b7:f7:73:42:57:0e:81:40:99:3f:91:3b: c9:27:61:d8:97:38:54:eb:27:5f:ee:ab:8f:01:b7:16:f5:a1: 7c:fe:c7:16:25:ba:3d:2c:59:b6:e2:76:19:43:13:51:ba:19: 4d:18:3a:6c:08:a1:0f:a8:45:1e:99:d4:d7:ff:7f:6c:5b:1a: 2a:f0:86:79:6b:71:22:08:54:77:99:6e:f5:77:20:3b:31:84: f2:cd:d3:dc:69:ac:2c:9b:ff:75:d3:06:4e:8d:a3:2e:b1:42: 7a:53:ea:5e:cd:de:21:19:cd:3f:ef:e8:47:49:bf:6c:67:95: 37:d5:13:92:b3:23:bb:e9:09:e2:79:f5:b5:8c:f0:02:73:f8: c2:48:3d:03:06:b3:67:1e:9a:c9:ee:ba:35:74:c6:b3:8d:24: ce:f1:e8:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fvp3DTxG8rLUCEvXdhDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTAyMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmUyYzU3NTcyNjk0MGI3NjYzYmRhYzg2MDJmMDkzODU1YzExOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrHmEheak2E/CM65Hc/W9+AYDkGZ XGeTgq5zRMvlf9JQrVBQOs8FxmkmMR0wSKJkqPSf7a4O1vyrXiAT1Q7Kgvj0AZ+i sZwZ3sVfAjs+Hsny4VRtVKYAInTmd+yPSwfYYXksEmCf/Or/eR+7QwL1pMd+/op2 DqCgsyvnxoJKKLvP+BnliXQeixbCcDGd9+n7kzxJFry1Q/2RGrEaSUaCQNM2G/3E eXP/gZ9BaNn9OtaY6g/fcCmW7+E76rxlcjTkJr/nuPNI2hil//6v630mynNUKAW0 WtiIvZNRlRpdWyFjUxqeLXy+pJ/swwnAVyH4fBMHuwUeJTYtWN0soeM1pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvixXVyaUC3ZjvayGAvCThVwRmrMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvVy1MRmRYSnBRTGRtTzlySVlDOEpPRlhCR2FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTo7YMA0G CSqGSIb3DQEBCwUAA4IBAQC8Ai8KsJLxTKI0JvVDsKVxvoIxEau3BeN7SEAMpTFm L3fwzdze/c27j6RbdPPJ2Y5wnfF4eGRUSK/rg+A+HOvBqqk5rid1I8Ypup+nBqqW bcCVnsc348Ebm2zpnzWebGS393NCVw6BQJk/kTvJJ2HYlzhU6ydf7quPAbcW9aF8 /scWJbo9LFm24nYZQxNRuhlNGDpsCKEPqEUemdTX/39sWxoq8IZ5a3EiCFR3mW71 dyA7MYTyzdPcaawsm/910wZOjaMusUJ6U+pezd4hGc0/7+hHSb9sZ5U31ROSsyO7 6QniefW1jPACc/jCSD0DBrNnHprJ7ro1dMazjSTO8eiU -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:40 2026 by rpki-client