This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/W4rXs973I72wlBGGxrG6cyihd0g.roa File: W4rXs973I72wlBGGxrG6cyihd0g.roa (raw, json) Hash identifier: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo= Subject key identifier: 5B:8A:D7:B3:DE:F7:23:BD:B0:94:11:86:C6:B1:BA:73:28:A1:77:48 Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19 Certificate serial: 019B7A5B82C3CC4B290164BA180DAD2D360A Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/W4rXs973I72wlBGGxrG6cyihd0g.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 5.42.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:82:c3:cc:4b:29:01:64:ba:18:0d:ad:2d:36:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b8ad7b3def723bdb0941186c6b1ba7328a17748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:41:38:f5:6a:1b:0d:82:69:c8:9d:81:25: a4:bf:37:21:f2:3f:bf:a9:78:a3:b4:60:74:af:53: 67:e1:a7:8d:12:6b:95:99:c8:e6:1b:22:5d:cd:c6: 48:9e:37:1d:15:72:6d:32:c9:f1:c5:c4:21:91:b5: 68:2b:28:c2:ec:6c:fa:fb:97:69:26:2d:da:ed:cb: 93:44:a2:88:92:f8:a6:9e:04:9c:5d:e8:a2:dc:6b: d6:31:31:9e:22:01:8b:b0:0f:64:30:2c:d1:65:f3: 20:a7:23:69:46:d6:5d:60:62:70:ff:ae:e5:59:c5: 86:0c:da:e2:7d:33:b4:23:73:2f:fc:a4:1c:6f:f5: 4a:ef:65:fc:7e:2d:46:c1:58:ad:fc:ff:c4:0e:6e: 5c:3e:82:c7:df:c9:90:78:21:38:25:ec:dd:ee:b0: 16:5f:90:3f:7c:f2:a4:05:6c:71:46:40:b6:1f:8e: 5d:c2:92:b0:b5:e8:6c:31:e6:1a:61:5f:40:54:6b: c9:e6:0d:90:3f:92:d8:86:5b:97:43:42:07:6c:49: 6b:26:36:13:34:dd:76:3d:37:12:c8:90:a4:3b:ad: c6:bf:d0:ff:69:4c:b3:25:29:fa:69:ec:10:24:fb: 53:b5:2d:c3:8d:41:dd:26:a8:74:65:2f:25:8c:16: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8A:D7:B3:DE:F7:23:BD:B0:94:11:86:C6:B1:BA:73:28:A1:77:48 X509v3 Authority Key Identifier: keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/W4rXs973I72wlBGGxrG6cyihd0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.127.0/24 Signature Algorithm: sha256WithRSAEncryption c3:68:22:fd:00:c1:7a:fa:ba:03:c9:ec:75:16:3f:16:55:98: c6:5a:3e:48:c7:51:78:27:ce:82:48:23:ff:d8:6b:cc:e1:72: c2:6e:93:ef:72:21:14:31:e5:6e:f5:b6:0c:89:6a:ed:85:b6: c9:6e:2c:c0:e3:d7:1e:6a:96:b6:9a:2f:82:d6:91:f2:e7:c2: 66:35:10:9b:79:59:42:5c:55:a7:69:93:77:a3:de:eb:bb:18: 39:d6:7f:1f:54:f3:a2:ab:16:5f:43:3b:8f:c5:5e:38:58:27: 12:22:fc:bf:0d:63:54:dc:86:84:00:49:69:40:cc:8d:9a:9a: 1e:d6:53:36:d0:e9:33:e6:1b:10:bd:8b:d4:cf:3e:d2:af:e3: 5f:79:47:57:1b:30:36:f3:c7:36:2b:72:cb:a6:f5:ae:f7:f3: d6:99:5e:81:09:19:28:3e:77:62:cc:2d:4e:4d:f3:f3:3d:2d: c1:ec:39:32:1e:21:fd:a0:52:ae:91:1d:94:49:f6:95:a7:af: 32:c6:05:75:28:52:5a:86:95:9e:5c:ca:fa:7d:46:04:b2:b1: 64:00:78:58:49:2a:38:25:b6:9b:5a:31:e3:d4:0b:a6:76:fe: 41:b1:bd:46:c9:ae:dc:d3:68:ea:d7:51:32:b8:36:08:43:e2: d0:02:31:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4LDzEspAWS6GA2tLTYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZWE2NjBkZGI2MTAwZTdkMzJlNWQzNjY4OWE3NzdjYTlj YWZhMTkwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjhhZDdiM2RlZjcyM2JkYjA5NDExODZjNmIxYmE3MzI4YTE3NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1ZBOPVqGw2CacidgSWkvzch8j+/ qXijtGB0r1Nn4aeNEmuVmcjmGyJdzcZInjcdFXJtMsnxxcQhkbVoKyjC7Gz6+5dp Ji3a7cuTRKKIkvimngScXeii3GvWMTGeIgGLsA9kMCzRZfMgpyNpRtZdYGJw/67l WcWGDNrifTO0I3Mv/KQcb/VK72X8fi1GwVit/P/EDm5cPoLH38mQeCE4Jezd7rAW X5A/fPKkBWxxRkC2H45dwpKwtehsMeYaYV9AVGvJ5g2QP5LYhluXQ0IHbElrJjYT NN12PTcSyJCkO63Gv9D/aUyzJSn6aewQJPtTtS3DjUHdJqh0ZS8ljBbF2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFuK17Pe9yO9sJQRhsaxunMooXdIMB8GA1UdIwQY MBaAFKTqZg3bYQDn0y5dNmiad3ypyvoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEt NmY2MjJmZDE4ZDMwLzEvVzRyWHM5NzNJNzJ3bEJHR3hyRzZjeWloZDBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEtNmY2MjJmZDE4ZDMw LzEvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSp/MA0G CSqGSIb3DQEBCwUAA4IBAQDDaCL9AMF6+roDyex1Fj8WVZjGWj5Ix1F4J86CSCP/ 2GvM4XLCbpPvciEUMeVu9bYMiWrthbbJbizA49ceapa2mi+C1pHy58JmNRCbeVlC XFWnaZN3o97ruxg51n8fVPOiqxZfQzuPxV44WCcSIvy/DWNU3IaEAElpQMyNmpoe 1lM20Okz5hsQvYvUzz7Sr+NfeUdXGzA288c2K3LLpvWu9/PWmV6BCRkoPndizC1O TfPzPS3B7DkyHiH9oFKukR2USfaVp68yxgV1KFJahpWeXMr6fUYEsrFkAHhYSSo4 JbabWjHj1Aumdv5Bsb1Gya7c02jq11EyuDYIQ+LQAjFD -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:14 2026 by rpki-client