This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/wQqL74bFe8j7ZgGhJJf3Um2lw9c.roa File: wQqL74bFe8j7ZgGhJJf3Um2lw9c.roa (raw, json) Hash identifier: a4TC4G5pd+6RJjP5VYoLbvJP2ri9WiYaxYH3XNF/pwg= Subject key identifier: C1:0A:8B:EF:86:C5:7B:C8:FB:66:01:A1:24:97:F7:52:6D:A5:C3:D7 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381D85AA0FAF4F4934DEDC2E88B2DC Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/wQqL74bFe8j7ZgGhJJf3Um2lw9c.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39558 IP address blocks: 5.8.20.0/22 maxlen: 24 5.189.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1d:85:aa:0f:af:4f:49:34:de:dc:2e:88:b2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c10a8bef86c57bc8fb6601a12497f7526da5c3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ad:bf:e0:76:0f:fe:46:64:0c:f5:cd:f6:b9: 07:45:9c:72:be:e8:0c:f7:50:45:ff:94:d9:da:2d: ef:c3:91:44:14:96:83:40:ad:16:a6:a0:1c:b8:5a: ab:96:0c:90:e9:5b:35:43:e8:e7:e9:c1:81:d3:5b: ff:77:25:9d:f4:8d:eb:2f:d1:0d:27:b4:e4:c8:a1: c8:3f:87:10:f9:dc:3d:29:94:0f:ec:3f:37:52:07: 23:68:93:2f:c5:a4:a6:67:c7:60:3b:c5:98:f1:ba: 9b:11:dd:61:60:5f:6b:fd:cd:4f:e4:6e:3c:d9:94: 87:88:19:3c:72:9a:ab:87:15:47:e0:d8:51:f6:5b: 25:2d:46:7c:ce:6b:eb:2a:44:73:20:3e:5b:91:67: b7:19:bf:80:a4:76:90:66:ee:37:60:5f:65:e8:3c: 1b:30:96:f1:cd:7c:93:36:6b:71:d8:61:8d:68:a0: 8e:7a:de:aa:5f:5d:59:a5:aa:dd:bd:34:5e:fa:21: 68:90:9b:07:77:97:4a:25:8e:d1:52:b6:b6:e2:24: ae:7d:44:65:b7:ba:5a:90:7a:2b:22:ba:6e:0f:81: c0:97:60:3c:08:94:b9:6a:06:24:32:31:80:d8:42: a3:3a:36:83:e8:dd:31:81:95:a2:82:65:c7:b1:06: 45:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0A:8B:EF:86:C5:7B:C8:FB:66:01:A1:24:97:F7:52:6D:A5:C3:D7 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/wQqL74bFe8j7ZgGhJJf3Um2lw9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.20.0/22 5.189.252.0/24 Signature Algorithm: sha256WithRSAEncryption 47:7a:07:01:44:db:14:3d:98:c9:a6:ee:ab:33:ee:bd:96:ac: ea:c4:24:6f:05:57:17:1d:bc:1d:82:45:fb:25:bf:5c:c6:91: 7a:2d:69:98:18:55:c8:a4:47:03:17:c6:27:b0:5b:10:f0:7a: 1e:19:47:09:08:97:53:18:16:da:3b:ae:d6:f2:c3:5c:41:71: 3f:19:04:16:06:62:8f:99:ad:5d:f4:89:9c:d5:54:0a:26:c2: aa:d3:f9:56:b1:6e:d6:83:01:84:a7:9e:d9:37:1c:07:90:0a: 08:4f:f6:b7:79:16:e9:62:90:e2:1a:e0:3a:fd:ad:c2:65:3d: 2f:cc:e0:f8:c7:ab:a0:05:0e:02:5c:4a:79:84:84:21:51:49: 53:00:51:e6:07:72:cb:c6:6f:7d:59:b3:d4:12:72:bf:fa:58: f4:b0:8e:9a:c1:8a:c5:c7:38:48:16:8d:d7:ec:fc:5b:0e:f4: 18:35:cc:04:14:03:86:9b:84:c6:9b:6e:aa:6f:53:0f:c7:9d: f5:27:e5:b8:64:7f:60:f9:e9:d0:54:9c:84:c1:73:34:02:b7: ba:49:80:a8:0a:f6:3f:49:c3:63:a1:b0:6e:92:2b:93:fe:6e: de:13:df:c9:fa:5e:41:0b:3a:48:0e:48:62:a4:fa:3c:54:e0: 25:c4:25:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OB2Fqg+vT0k03twuiLLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTBhOGJlZjg2YzU3YmM4ZmI2NjAxYTEyNDk3Zjc1MjZkYTVjM2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA762/4HYP/kZkDPXN9rkHRZxyvugM 91BF/5TZ2i3vw5FEFJaDQK0WpqAcuFqrlgyQ6Vs1Q+jn6cGB01v/dyWd9I3rL9EN J7TkyKHIP4cQ+dw9KZQP7D83UgcjaJMvxaSmZ8dgO8WY8bqbEd1hYF9r/c1P5G48 2ZSHiBk8cpqrhxVH4NhR9lslLUZ8zmvrKkRzID5bkWe3Gb+ApHaQZu43YF9l6Dwb MJbxzXyTNmtx2GGNaKCOet6qX11ZpardvTRe+iFokJsHd5dKJY7RUra24iSufURl t7pakHorIrpuD4HAl2A8CJS5agYkMjGA2EKjOjaD6N0xgZWigmXHsQZFfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMEKi++GxXvI+2YBoSSX91JtpcPXMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvd1FxTDc0YkZlOGo3WmdHaEpKZjNVbTJsdzljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBQgUAwQA Bb38MA0GCSqGSIb3DQEBCwUAA4IBAQBHegcBRNsUPZjJpu6rM+69lqzqxCRvBVcX HbwdgkX7Jb9cxpF6LWmYGFXIpEcDF8YnsFsQ8HoeGUcJCJdTGBbaO67W8sNcQXE/ GQQWBmKPma1d9Imc1VQKJsKq0/lWsW7WgwGEp57ZNxwHkAoIT/a3eRbpYpDiGuA6 /a3CZT0vzOD4x6ugBQ4CXEp5hIQhUUlTAFHmB3LLxm99WbPUEnK/+lj0sI6awYrF xzhIFo3X7PxbDvQYNcwEFAOGm4TGm26qb1MPx531J+W4ZH9g+enQVJyEwXM0Are6 SYCoCvY/ScNjobBukiuT/m7eE9/J+l5BCzpIDkhipPo8VOAlxCVR -----END CERTIFICATE-----Generated at Tue Jan 20 09:22:23 2026 by rpki-client