This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/W5YPZIWt_0e5pMIwE3ftH-7D8_c.roa File: W5YPZIWt_0e5pMIwE3ftH-7D8_c.roa (raw, json) Hash identifier: t67PIpwJMoJ8jovrWD6X9Mx3ZJ5TJP9SELrIwjLAx8k= Subject key identifier: 5B:96:0F:64:85:AD:FF:47:B9:A4:C2:30:13:77:ED:1F:EE:C3:F3:F7 Certificate issuer: /CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69 Certificate serial: 019B379C02C1686A5F51C0A429A053EA8384 Authority key identifier: CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/W5YPZIWt_0e5pMIwE3ftH-7D8_c.roa Signing time: Fri 19 Dec 2025 17:15:29 +0000 ROA not before: Fri 19 Dec 2025 17:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207132 IP address blocks: 185.190.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:9c:02:c1:68:6a:5f:51:c0:a4:29:a0:53:ea:83:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69 Validity Not Before: Dec 19 17:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b960f6485adff47b9a4c2301377ed1feec3f3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:1d:76:d5:2c:95:0c:52:ff:d5:a5:1d:c2: 7c:b1:3e:fe:6f:8a:f9:0a:3b:66:b6:fa:e9:4c:7c: 79:e4:22:12:a0:e9:e3:92:3b:c8:46:22:11:c5:71: f0:89:d8:e7:df:94:53:b8:f2:84:72:02:de:e4:c8: e2:a5:4b:09:3c:d7:69:f8:39:13:58:0d:aa:5e:04: 3a:c3:a0:20:9f:93:bc:91:63:14:ae:69:3d:54:28: 16:76:31:79:bd:52:70:68:90:84:79:45:fc:bc:94: 64:b9:9c:31:33:5b:c7:db:9f:ad:38:04:91:e6:09: 13:42:de:f3:0c:3f:a9:c7:83:13:39:93:69:f1:30: ba:1a:51:11:ff:21:d7:d8:3a:9f:15:f5:31:e0:3d: ae:8c:b3:46:81:a9:26:ec:ef:17:48:3c:79:2a:e7: 44:45:70:8f:e5:3c:9d:8f:b7:e9:98:5c:e7:4f:bf: 44:05:1e:a3:b5:c9:c4:62:2d:c9:85:cd:e8:dd:35: 82:12:08:98:8a:3b:9b:3a:24:12:1c:10:1b:4d:88: a1:64:b0:02:37:19:78:36:df:86:21:01:ec:b6:f5: d9:33:2b:58:4b:67:58:04:ac:32:80:52:b9:d9:c8: 92:51:7e:96:33:55:d6:3e:ef:ca:d3:37:96:9c:3d: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:96:0F:64:85:AD:FF:47:B9:A4:C2:30:13:77:ED:1F:EE:C3:F3:F7 X509v3 Authority Key Identifier: keyid:CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/W5YPZIWt_0e5pMIwE3ftH-7D8_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.136.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:f6:fb:47:72:da:10:be:79:b3:a8:a2:c1:ad:7c:8b:dc:5a: 6c:ae:aa:2e:ff:e4:f0:96:83:f9:37:74:70:58:d1:f8:14:ad: 62:a8:98:47:2d:26:b2:3a:c8:5c:ef:af:a4:21:bd:66:3f:b6: a3:77:20:fe:92:65:17:c7:72:b7:40:b2:b2:e8:a9:84:df:00: b9:b5:83:9e:ce:21:36:77:84:54:8d:85:64:03:1c:ec:7c:c3: aa:0b:a2:2a:04:6b:b9:6d:77:6d:6b:bf:6d:0b:cd:d1:8f:51: d7:a7:c6:01:6c:da:a9:7f:33:17:e9:ff:e4:f2:fd:b8:61:db: d0:c2:71:43:c0:60:5f:25:ef:b3:02:42:4b:96:37:d6:98:0f: d3:a4:c7:2c:70:60:32:8f:28:e5:ef:d7:f6:e7:83:d9:dd:48: 89:fb:dc:a4:e2:86:f0:9a:4c:a2:33:43:1e:41:b4:91:aa:0e: 63:d3:91:b5:86:be:e5:28:e7:90:41:5f:83:c6:33:71:a8:f7: 6b:aa:5b:fd:64:58:e5:86:66:df:bf:db:33:9c:ba:b4:e1:c5: 1d:0a:34:04:bd:07:53:2f:c3:23:c2:b0:fe:29:2f:45:df:12: 8a:ba:af:a4:48:66:ae:54:5a:18:9d:80:7d:24:89:e7:4a:7a: df:98:2d:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs3nALBaGpfUcCkKaBT6oOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjN2ZjNTVmZjBlYzI0NjIzNGE0ZTNjYWZlNjZhYWNmMjgz YThmNjkwHhcNMjUxMjE5MTcxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjk2MGY2NDg1YWRmZjQ3YjlhNGMyMzAxMzc3ZWQxZmVlYzNmM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9MddtUslQxS/9WlHcJ8sT7+b4r5 CjtmtvrpTHx55CISoOnjkjvIRiIRxXHwidjn35RTuPKEcgLe5MjipUsJPNdp+DkT WA2qXgQ6w6Agn5O8kWMUrmk9VCgWdjF5vVJwaJCEeUX8vJRkuZwxM1vH25+tOASR 5gkTQt7zDD+px4MTOZNp8TC6GlER/yHX2DqfFfUx4D2ujLNGgakm7O8XSDx5KudE RXCP5Tydj7fpmFznT79EBR6jtcnEYi3Jhc3o3TWCEgiYijubOiQSHBAbTYihZLAC Nxl4Nt+GIQHstvXZMytYS2dYBKwygFK52ciSUX6WM1XWPu/K0zeWnD3DnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFuWD2SFrf9HuaTCMBN37R/uw/P3MB8GA1UdIwQY MBaAFMx/xV/w7CRiNKTjyv5mqs8oOo9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhfRlhfRHNKR0kwcE9QS19tYXF6eWc2ajJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82NTMxMjgtNTQ5MS00NTk0LTk4MGYt NDcwZDJiODQ2MzkzLzEvVzVZUFpJV3RfMGU1cE1Jd0UzZnRILTdEOF9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82NTMxMjgtNTQ5MS00NTk0LTk4MGYtNDcwZDJiODQ2Mzkz LzEvekhfRlhfRHNKR0kwcE9QS19tYXF6eWc2ajJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub6IMA0G CSqGSIb3DQEBCwUAA4IBAQBd9vtHctoQvnmzqKLBrXyL3Fpsrqou/+TwloP5N3Rw WNH4FK1iqJhHLSayOshc76+kIb1mP7ajdyD+kmUXx3K3QLKy6KmE3wC5tYOeziE2 d4RUjYVkAxzsfMOqC6IqBGu5bXdta79tC83Rj1HXp8YBbNqpfzMX6f/k8v24YdvQ wnFDwGBfJe+zAkJLljfWmA/TpMcscGAyjyjl79f254PZ3UiJ+9yk4obwmkyiM0Me QbSRqg5j05G1hr7lKOeQQV+DxjNxqPdrqlv9ZFjlhmbfv9sznLq04cUdCjQEvQdT L8MjwrD+KS9F3xKKuq+kSGauVFoYnYB9JInnSnrfmC17 -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:32 2025 by rpki-client