This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa File: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (raw, json) Hash identifier: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A= Subject key identifier: C3:E1:97:2F:E4:3B:0D:CD:8A:C4:31:FB:7F:09:28:BF:C6:88:C9:86 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B7BA3D8A4C871EEB5AC3C8AB6C60E8B57 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204721 IP address blocks: 5.105.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d8:a4:c8:71:ee:b5:ac:3c:8a:b6:c6:0e:8b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3e1972fe43b0dcd8ac431fb7f0928bfc688c986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bb:4b:85:fd:cf:c4:5f:ca:9c:57:c9:85:db: 19:47:8c:6b:2f:0e:98:84:0f:f1:20:e6:63:89:11: 5b:be:12:bc:f2:2f:fc:ce:1f:0d:f2:a2:51:10:ce: d9:53:07:4a:48:f3:be:c3:c2:16:77:e4:3b:90:42: 45:3c:24:35:08:3c:17:74:5c:40:0c:da:94:b8:39: fc:47:ca:75:9a:0c:cf:b1:1a:f9:16:5c:c9:d8:4e: 90:b5:f5:78:41:42:04:35:b5:c9:64:eb:9a:9b:fc: 75:34:28:9b:cf:29:1a:47:c0:53:98:d9:aa:ae:d6: 3a:8c:bf:d5:67:39:fa:d7:a9:b1:ff:c4:6b:13:72: b4:a1:3a:a0:87:63:ee:a5:4a:38:8e:17:56:32:ee: 40:71:bd:06:b0:74:00:dc:aa:7a:d8:25:22:c4:8d: 21:2a:e5:32:72:b5:e0:40:cc:c4:89:9d:31:b3:4f: c5:e2:6c:4f:3d:f0:0f:58:a0:cf:ca:df:8e:a4:2b: c4:ed:f2:10:53:a4:66:cb:62:5f:f8:61:a4:7e:6e: b5:13:fc:05:cc:80:57:9f:54:29:e2:d0:58:15:d3: 95:0b:30:3e:81:6b:d6:86:74:b1:d3:fc:b5:2a:11: 97:43:b3:18:27:5f:b4:c8:f9:e2:05:43:35:d3:92: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E1:97:2F:E4:3B:0D:CD:8A:C4:31:FB:7F:09:28:BF:C6:88:C9:86 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.105.59.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:2e:22:3b:69:b1:91:d5:43:84:33:9c:b1:ec:c5:4d:2e:81: bb:37:af:51:f1:e5:32:51:44:01:eb:91:5e:5b:84:e5:e4:44: 6b:49:1e:82:18:a5:ea:0e:7c:63:36:9f:1e:1a:9a:00:2b:c1: 52:a9:49:98:f7:03:2a:33:94:c7:0f:f9:0c:98:7e:40:28:b5: 8a:1d:f8:de:27:86:c9:bf:6b:e1:2a:87:64:3d:9a:be:97:02: 21:c1:d9:f7:fc:bb:4d:17:88:25:21:ce:8e:16:3b:f5:c5:20: 5f:39:ad:08:ee:b6:49:de:7a:d5:b0:9f:39:39:37:e9:63:ac: c4:12:8c:8e:d5:15:b9:12:6f:2d:ad:68:5a:c3:f3:15:18:7d: 3c:01:9d:41:8b:a8:52:40:ba:f9:9c:41:51:8c:40:c7:7b:f8: b5:ea:c2:05:eb:19:86:53:1f:0f:8d:ef:3b:2b:65:5c:44:33: 79:67:81:f1:f5:af:a8:df:d5:f3:0d:a7:48:c4:1d:77:ab:b6: 8f:f8:10:e5:a5:2a:c4:1d:59:b2:24:df:de:4a:44:bb:d2:b8: 6b:18:ad:28:8f:e9:29:89:6e:14:a5:e6:ad:f0:3a:0e:04:65: f8:81:d1:69:05:e5:70:fe:b4:59:dc:c5:34:b0:cc:4d:9a:77: 25:ae:99:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9ikyHHutaw8irbGDotXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2UxOTcyZmU0M2IwZGNkOGFjNDMxZmI3ZjA5MjhiZmM2ODhjOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3btLhf3PxF/KnFfJhdsZR4xrLw6Y hA/xIOZjiRFbvhK88i/8zh8N8qJREM7ZUwdKSPO+w8IWd+Q7kEJFPCQ1CDwXdFxA DNqUuDn8R8p1mgzPsRr5FlzJ2E6QtfV4QUIENbXJZOuam/x1NCibzykaR8BTmNmq rtY6jL/VZzn616mx/8RrE3K0oTqgh2PupUo4jhdWMu5Acb0GsHQA3Kp62CUixI0h KuUycrXgQMzEiZ0xs0/F4mxPPfAPWKDPyt+OpCvE7fIQU6Rmy2Jf+GGkfm61E/wF zIBXn1Qp4tBYFdOVCzA+gWvWhnSx0/y1KhGXQ7MYJ1+0yPniBUM105J2HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMPhly/kOw3NisQx+38JKL/GiMmGMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvdy1HWEwtUTdEYzJLeERIN2Z3a292OGFJeVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWk7MA0G CSqGSIb3DQEBCwUAA4IBAQAcLiI7abGR1UOEM5yx7MVNLoG7N69R8eUyUUQB65Fe W4Tl5ERrSR6CGKXqDnxjNp8eGpoAK8FSqUmY9wMqM5THD/kMmH5AKLWKHfjeJ4bJ v2vhKodkPZq+lwIhwdn3/LtNF4glIc6OFjv1xSBfOa0I7rZJ3nrVsJ85OTfpY6zE EoyO1RW5Em8trWhaw/MVGH08AZ1Bi6hSQLr5nEFRjEDHe/i16sIF6xmGUx8Pje87 K2VcRDN5Z4Hx9a+o39XzDadIxB13q7aP+BDlpSrEHVmyJN/eSkS70rhrGK0oj+kp iW4Upeat8DoOBGX4gdFpBeVw/rRZ3MU0sMxNmnclrplr -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:05 2026 by rpki-client