This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/WJ5q-_YpjemWY4gDwOrsfg8-7ps.roa File: WJ5q-_YpjemWY4gDwOrsfg8-7ps.roa (raw, json) Hash identifier: 7c7RZOTv3Be2R6ZcFGTG+yBTp0jpJb35qh0V1e0nACU= Subject key identifier: 58:9E:6A:FB:F6:29:8D:E9:96:63:88:03:C0:EA:EC:7E:0F:3E:EE:9B Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0 Certificate serial: 019B7CEE273C22D8D5F91D2D04722EA93E50 Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/WJ5q-_YpjemWY4gDwOrsfg8-7ps.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200287 IP address blocks: 80.243.232.0/22 maxlen: 24 80.243.232.0/24 maxlen: 24 80.243.233.0/24 maxlen: 24 80.243.234.0/24 maxlen: 24 80.243.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:27:3c:22:d8:d5:f9:1d:2d:04:72:2e:a9:3e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=589e6afbf6298de996638803c0eaec7e0f3eee9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:3c:2d:13:e5:93:e2:77:ae:0f:d2:dd:9a: c2:55:c3:f2:5d:bc:58:47:91:75:77:1c:26:4b:ff: 10:b4:b2:b3:d3:6b:e3:68:18:c5:87:55:d6:a5:6a: 51:c1:b7:ed:d6:ba:86:ed:d3:87:61:9a:67:7c:fd: 4b:ea:7c:40:41:66:26:5e:d9:5d:64:d1:a0:b1:34: 73:47:3e:df:70:40:73:e8:7e:93:d4:35:36:37:95: fd:8e:22:6b:4d:cb:cc:6a:1e:8a:28:9c:9f:5d:ad: 7c:87:1d:cb:e8:47:f1:5c:b9:56:74:ef:af:e2:d4: 20:33:f3:c2:c5:d5:0e:0d:f9:2c:bf:37:3a:2f:bd: ef:87:f1:bc:64:18:e2:38:6c:d0:b6:a7:b6:05:2d: e0:68:ab:b3:41:91:38:d3:99:88:82:3e:14:bd:44: 01:2a:77:24:c9:a1:c1:83:e6:e1:ac:4b:b2:82:23: f3:bd:a6:99:3c:c3:63:0b:a0:69:6f:f0:f7:29:d1: 32:2a:62:26:60:c4:c7:43:e4:0b:31:7a:ea:f8:40: 67:10:43:67:ce:5e:0b:f1:23:38:ef:7c:f6:b1:00: ad:09:f4:f6:59:76:2c:24:05:8b:01:9d:56:4c:f2: 1d:97:2e:84:f5:e5:f8:8f:49:b5:d4:f3:15:0b:33: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:6A:FB:F6:29:8D:E9:96:63:88:03:C0:EA:EC:7E:0F:3E:EE:9B X509v3 Authority Key Identifier: keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/WJ5q-_YpjemWY4gDwOrsfg8-7ps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.243.232.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:c2:88:32:17:e4:2a:d5:51:4a:14:45:52:0f:a6:dd:3c:47: 0f:fb:92:1a:21:02:d7:9a:a6:d1:79:92:f3:bf:0d:8f:b5:22: 0b:4a:0d:e7:93:f6:ef:74:60:a8:b5:a6:2b:23:3a:9f:07:f4: 0c:67:12:95:bf:88:7e:a2:79:58:18:9f:3f:ae:20:eb:61:1d: 37:64:00:31:3e:73:2b:7f:84:12:5d:5f:6e:63:1e:d7:38:80: 98:36:68:c2:8e:03:cb:b2:89:83:f6:32:de:da:f8:b7:9a:8d: 92:64:2d:09:4e:ea:4d:d9:6f:b7:bd:f9:89:96:af:b0:37:1d: e2:38:ec:72:48:23:f8:0e:bb:dd:0a:31:a6:67:a2:74:d1:2f: 9a:5a:58:e6:39:9f:dc:3e:04:43:8f:ed:61:47:90:97:4b:d4: 45:8d:61:41:e6:40:15:69:ee:0e:7f:31:ff:1a:da:98:11:eb: 9a:a2:ab:c5:2b:98:66:b6:9e:31:4b:bf:92:ed:f2:f1:42:96: 21:13:37:9d:90:8f:23:4b:39:ab:fa:7a:e3:af:46:42:01:be: 3a:b9:cd:f3:2b:8c:32:8a:37:63:a4:ef:80:84:2f:d3:fc:a9: b1:96:f6:35:31:50:fe:9d:3e:b5:f1:7f:5e:49:fb:1a:c0:9f: 76:95:10:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ic8ItjV+R0tBHIuqT5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzIyNGM1MDE3ZDM0ZWNkYzI4ZDBjZjM2NDQyZDY1YmVm OWUwYTAwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODllNmFmYmY2Mjk4ZGU5OTY2Mzg4MDNjMGVhZWM3ZTBmM2VlZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNw8LRPlk+J3rg/S3ZrCVcPyXbxY R5F1dxwmS/8QtLKz02vjaBjFh1XWpWpRwbft1rqG7dOHYZpnfP1L6nxAQWYmXtld ZNGgsTRzRz7fcEBz6H6T1DU2N5X9jiJrTcvMah6KKJyfXa18hx3L6EfxXLlWdO+v 4tQgM/PCxdUODfksvzc6L73vh/G8ZBjiOGzQtqe2BS3gaKuzQZE405mIgj4UvUQB KnckyaHBg+bhrEuygiPzvaaZPMNjC6Bpb/D3KdEyKmImYMTHQ+QLMXrq+EBnEENn zl4L8SM473z2sQCtCfT2WXYsJAWLAZ1WTPIdly6E9eX4j0m11PMVCzPXPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFieavv2KY3plmOIA8Dq7H4PPu6bMB8GA1UdIwQY MBaAFKIyJMUBfTTs3CjQzzZELWW++eCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTkt ZmVjOGE4MGVkMjMzLzEvV0o1cS1fWXBqZW1XWTRnRHdPcnNmZzgtN3BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTktZmVjOGE4MGVkMjMz LzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUPPoMA0G CSqGSIb3DQEBCwUAA4IBAQBOwogyF+Qq1VFKFEVSD6bdPEcP+5IaIQLXmqbReZLz vw2PtSILSg3nk/bvdGCotaYrIzqfB/QMZxKVv4h+onlYGJ8/riDrYR03ZAAxPnMr f4QSXV9uYx7XOICYNmjCjgPLsomD9jLe2vi3mo2SZC0JTupN2W+3vfmJlq+wNx3i OOxySCP4DrvdCjGmZ6J00S+aWljmOZ/cPgRDj+1hR5CXS9RFjWFB5kAVae4OfzH/ GtqYEeuaoqvFK5hmtp4xS7+S7fLxQpYhEzedkI8jSzmr+nrjr0ZCAb46uc3zK4wy ijdjpO+AhC/T/KmxlvY1MVD+nT618X9eSfsawJ92lRBZ -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:16 2026 by rpki-client