This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/WmQL_VXpmFEvvoiR5PkxFDta9mk.roa File: WmQL_VXpmFEvvoiR5PkxFDta9mk.roa (raw, json) Hash identifier: 17mQDCBUS/Kj6BwRHUdOrAKzENyd7WfmRdfkyMXwsNg= Subject key identifier: 5A:64:0B:FD:55:E9:98:51:2F:BE:88:91:E4:F9:31:14:3B:5A:F6:69 Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06 Certificate serial: 019B7758FF749C547404F2001A5FBD743269 Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/WmQL_VXpmFEvvoiR5PkxFDta9mk.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35280 IP address blocks: 128.139.0.0/17 maxlen: 17 128.139.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ff:74:9c:54:74:04:f2:00:1a:5f:bd:74:32:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a640bfd55e998512fbe8891e4f931143b5af669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:c8:4e:41:c2:bc:91:48:1a:07:d3:93:44: 99:de:da:24:31:fb:73:0f:5b:b5:8d:b8:e1:fb:bc: 79:5a:14:13:c8:0f:ec:04:a7:ac:53:02:d5:17:00: 86:33:ff:a6:9c:7a:cc:66:d3:c1:f4:3a:cb:78:3c: de:d4:7b:ab:c3:99:27:cb:cb:78:ba:3d:d4:5d:f6: f6:7c:fa:70:e5:bf:10:4e:9c:83:24:ca:cc:b7:1e: f6:ac:43:1e:61:d5:da:6f:20:75:cf:05:30:b0:88: 33:4a:c1:c4:af:73:06:78:0c:42:f3:63:e8:ec:43: 35:6c:2f:27:56:9c:fa:eb:b0:07:31:9d:24:1d:16: d7:7a:5f:d2:1c:d2:7e:5d:07:bd:34:4b:7f:94:b3: 12:a6:a0:e5:f2:71:15:0e:bf:44:7e:59:ef:37:1b: b4:f1:53:5b:af:71:34:77:79:7c:96:25:61:09:d6: 75:b7:1e:d0:a4:fe:b6:0f:aa:df:94:9f:02:15:6c: 73:4b:72:c2:b5:84:78:f6:4b:7d:dd:83:41:68:c2: 1d:fc:c3:de:e4:ab:e4:2d:86:c4:29:be:c7:31:89: 53:33:a9:c3:22:9c:fd:7c:1b:ac:86:ac:d8:0a:5a: 5a:eb:3d:22:10:47:47:2d:58:16:ae:92:9f:e7:b9: f8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:64:0B:FD:55:E9:98:51:2F:BE:88:91:E4:F9:31:14:3B:5A:F6:69 X509v3 Authority Key Identifier: keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/WmQL_VXpmFEvvoiR5PkxFDta9mk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.139.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:f5:be:4d:d6:69:a9:43:eb:9a:62:6c:28:8e:d9:e2:14:2e: 46:fd:4a:45:68:fd:69:62:38:48:d6:dc:3f:0f:b4:f1:0d:76: b8:a5:5b:d9:a9:e9:c5:3a:bf:09:bc:7e:72:07:8b:ae:26:a7: ce:39:03:6f:4a:79:ae:e0:c4:dc:72:26:9f:1f:98:5a:57:fc: 0d:9e:b1:97:da:12:a7:97:89:18:9a:29:95:26:2b:e7:4b:eb: 0c:82:b1:17:f2:fa:6b:42:a2:3a:68:b9:c6:11:84:16:33:ff: 0c:01:59:38:17:18:58:8c:01:b3:6a:f3:08:49:ef:e9:ec:4d: 71:86:62:45:3d:7c:d0:d7:59:1b:28:b4:05:6d:c3:cf:3e:dd: 80:ec:7b:c8:9e:e4:59:92:fb:73:84:b2:9e:ed:0f:ed:7a:89: e5:c0:6a:07:9f:b7:18:23:3e:ca:cf:f5:d2:5b:50:c2:de:12: 2b:9d:48:69:8f:19:d1:f4:c9:a7:32:72:40:8a:ad:a2:e9:6f: 72:bf:6a:d3:97:ad:c8:de:4d:66:a1:46:35:4e:ad:de:71:11: 50:6e:d8:ff:03:0c:24:e9:80:d6:63:d5:29:b5:24:2c:10:fd: e5:55:2b:6f:de:af:68:ae:3a:53:2c:d5:c3:1f:31:2e:b1:89: 07:d8:f5:16 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WP90nFR0BPIAGl+9dDJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz OGJhMDYwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTY0MGJmZDU1ZTk5ODUxMmZiZTg4OTFlNGY5MzExNDNiNWFmNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy83ITkHCvJFIGgfTk0SZ3tokMftz D1u1jbjh+7x5WhQTyA/sBKesUwLVFwCGM/+mnHrMZtPB9DrLeDze1Hurw5kny8t4 uj3UXfb2fPpw5b8QTpyDJMrMtx72rEMeYdXabyB1zwUwsIgzSsHEr3MGeAxC82Po 7EM1bC8nVpz667AHMZ0kHRbXel/SHNJ+XQe9NEt/lLMSpqDl8nEVDr9EflnvNxu0 8VNbr3E0d3l8liVhCdZ1tx7QpP62D6rflJ8CFWxzS3LCtYR49kt93YNBaMId/MPe 5KvkLYbEKb7HMYlTM6nDIpz9fBushqzYClpa6z0iEEdHLVgWrpKf57n4xwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFFpkC/1V6ZhRL76IkeT5MRQ7WvZpMB8GA1UdIwQY MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt OWQwYzYyMDczNWYxLzEvV21RTF9WWHBtRkV2dm9pUjVQa3hGRHRhOW1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIswDQYJ KoZIhvcNAQELBQADggEBAAv1vk3WaalD65pibCiO2eIULkb9SkVo/WliOEjW3D8P tPENdrilW9mp6cU6vwm8fnIHi64mp845A29Kea7gxNxyJp8fmFpX/A2esZfaEqeX iRiaKZUmK+dL6wyCsRfy+mtCojpoucYRhBYz/wwBWTgXGFiMAbNq8whJ7+nsTXGG YkU9fNDXWRsotAVtw88+3YDse8ie5FmS+3OEsp7tD+16ieXAageftxgjPsrP9dJb UMLeEiudSGmPGdH0yacyckCKraLpb3K/atOXrcjeTWahRjVOrd5xEVBu2P8DDCTp gNZj1Sm1JCwQ/eVVK2/er2iuOlMs1cMfMS6xiQfY9RY= -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:40 2026 by rpki-client