This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/W4Z6C6oVcGAEWgEAe9uHh4QZGNg.roa File: W4Z6C6oVcGAEWgEAe9uHh4QZGNg.roa (raw, json) Hash identifier: JBWCR4ETP9lpgiwsN1IBWo1OdlifS1hwuf+AUuAfTdI= Subject key identifier: 5B:86:7A:0B:AA:15:70:60:04:5A:01:00:7B:DB:87:87:84:19:18:D8 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EBC5077BEF673DBCCB8ED14639BF2 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/W4Z6C6oVcGAEWgEAe9uHh4QZGNg.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 188.255.210.0/24 maxlen: 24 188.255.239.0/24 maxlen: 24 212.69.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bc:50:77:be:f6:73:db:cc:b8:ed:14:63:9b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b867a0baa157060045a01007bdb8787841918d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:3d:86:76:71:b9:4a:07:fd:a7:6c:77:25: 3d:54:8d:84:aa:49:02:87:8f:36:40:59:8c:a9:d6: db:02:e5:46:02:ee:6a:da:e6:b9:28:49:d2:7e:de: 5e:8a:17:01:32:cd:26:c7:74:40:8d:f2:16:e9:2e: 5b:20:c6:db:6a:2c:cf:64:16:9b:58:45:06:d4:d8: 4b:39:ec:24:9e:67:63:31:0e:61:1b:eb:16:4f:44: d1:d1:ee:6f:35:f9:b0:b9:de:42:71:d0:21:83:fa: 2b:6d:bd:00:b6:a3:61:16:0d:4d:39:62:b5:b8:28: 4a:0e:af:8d:b7:68:0c:62:7c:9f:05:eb:91:b9:95: 62:09:90:6e:4c:89:84:c1:ab:5e:1d:24:86:3a:63: a1:fb:7a:7d:20:4e:5c:55:38:1e:e6:5d:b4:e1:80: 10:99:db:39:a4:46:56:af:86:00:3c:78:67:9c:3f: df:fe:f2:16:a9:10:10:93:62:89:5a:f7:21:c1:e8: 5c:4a:36:6d:f6:36:f2:d3:95:a3:57:77:87:57:98: 77:5f:48:92:e2:ac:ab:eb:d1:cd:35:8f:65:a1:ec: 41:83:22:60:ae:f0:82:6d:0a:d5:a8:97:4c:88:08: e0:95:c6:40:d5:13:d0:94:25:f9:b7:f1:b1:4a:a6: 43:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:7A:0B:AA:15:70:60:04:5A:01:00:7B:DB:87:87:84:19:18:D8 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/W4Z6C6oVcGAEWgEAe9uHh4QZGNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.210.0/24 188.255.239.0/24 212.69.1.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:31:51:ea:e9:d5:f6:31:35:d8:ec:5e:50:be:be:08:1f:11: 3c:ed:5d:4b:b5:0d:82:20:a7:05:30:0a:08:fc:43:fc:44:93: 09:5a:ac:27:c4:f0:91:ca:28:08:d0:bf:9a:1d:0e:ab:d9:76: 83:a4:fc:de:4c:2f:c3:ea:1c:67:06:06:9c:2e:92:37:45:d2: 4f:a0:e2:91:fb:08:50:ad:4e:6a:a4:e2:6e:4e:35:1b:af:75: 17:28:1d:ea:2d:5e:45:f2:9f:5f:94:29:e4:e8:10:cd:59:ae: b8:08:da:e4:46:81:b6:e4:90:1c:b0:ba:05:79:c5:0a:0b:66: 91:7f:8a:77:fd:5f:66:8c:f8:9b:95:ed:fa:1c:9c:d2:9a:aa: f9:95:24:f5:a0:40:18:25:f6:3a:a8:54:df:95:99:6c:7c:2e: 34:30:dc:69:89:68:ef:a6:95:35:b3:f5:1e:55:93:cb:3a:32: a3:32:40:8e:bc:31:79:77:7d:98:50:23:2f:3d:ca:36:22:66: 2f:f8:7c:ff:5c:35:32:43:9a:3a:47:fb:62:6a:5d:90:72:83: 30:e4:18:a5:55:88:e5:30:ff:72:42:63:a9:3a:7b:76:98:ea: c8:28:2e:75:a5:bf:df:ed:c3:7e:c0:81:55:14:18:f3:65:03: e0:1c:42:80 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5frxQd772c9vMuO0UY5vyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjg2N2EwYmFhMTU3MDYwMDQ1YTAxMDA3YmRiODc4Nzg0MTkxOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDc9hnZxuUoH/adsdyU9VI2EqkkC h482QFmMqdbbAuVGAu5q2ua5KEnSft5eihcBMs0mx3RAjfIW6S5bIMbbaizPZBab WEUG1NhLOewknmdjMQ5hG+sWT0TR0e5vNfmwud5CcdAhg/orbb0AtqNhFg1NOWK1 uChKDq+Nt2gMYnyfBeuRuZViCZBuTImEwateHSSGOmOh+3p9IE5cVTge5l204YAQ mds5pEZWr4YAPHhnnD/f/vIWqRAQk2KJWvchwehcSjZt9jby05WjV3eHV5h3X0iS 4qyr69HNNY9loexBgyJgrvCCbQrVqJdMiAjglcZA1RPQlCX5t/GxSqZDgwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFuGeguqFXBgBFoBAHvbh4eEGRjYMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvVzRaNkM2b1ZjR0FFV2dFQWU5dUhoNFFaR05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvP/SAwQA vP/vAwQA1EUBMA0GCSqGSIb3DQEBCwUAA4IBAQAaMVHq6dX2MTXY7F5Qvr4IHxE8 7V1LtQ2CIKcFMAoI/EP8RJMJWqwnxPCRyigI0L+aHQ6r2XaDpPzeTC/D6hxnBgac LpI3RdJPoOKR+whQrU5qpOJuTjUbr3UXKB3qLV5F8p9flCnk6BDNWa64CNrkRoG2 5JAcsLoFecUKC2aRf4p3/V9mjPible36HJzSmqr5lST1oEAYJfY6qFTflZlsfC40 MNxpiWjvppU1s/UeVZPLOjKjMkCOvDF5d32YUCMvPco2ImYv+Hz/XDUyQ5o6R/ti al2QcoMw5BilVYjlMP9yQmOpOnt2mOrIKC51pb/f7cN+wIFVFBjzZQPgHEKA -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:35 2026 by rpki-client