This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/W9xaJeA3RdjL7ZURoBAfHYKpbpA.roa File: W9xaJeA3RdjL7ZURoBAfHYKpbpA.roa (raw, json) Hash identifier: uj8H5eTLBr1gPNFQuaCxy8xIYKyHOwh/HEUJd6NH5bA= Subject key identifier: 5B:DC:5A:25:E0:37:45:D8:CB:ED:95:11:A0:10:1F:1D:82:A9:6E:90 Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Certificate serial: 019B7F15628111E0A04941828C59BD8E9A24 Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/W9xaJeA3RdjL7ZURoBAfHYKpbpA.roa Signing time: Fri 02 Jan 2026 14:21:06 +0000 ROA not before: Fri 02 Jan 2026 14:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 31.169.68.0/24 maxlen: 24 31.169.68.0/26 maxlen: 26 31.169.68.64/28 maxlen: 28 31.169.68.80/28 maxlen: 28 31.169.68.96/28 maxlen: 28 31.169.68.112/28 maxlen: 28 31.169.68.128/28 maxlen: 28 31.169.68.144/28 maxlen: 28 31.169.68.160/28 maxlen: 28 31.169.68.176/28 maxlen: 28 31.169.68.192/28 maxlen: 28 31.169.68.208/28 maxlen: 28 31.169.68.224/28 maxlen: 28 31.169.68.240/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:62:81:11:e0:a0:49:41:82:8c:59:bd:8e:9a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Validity Not Before: Jan 2 14:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bdc5a25e03745d8cbed9511a0101f1d82a96e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:d5:0c:e0:ab:de:73:e7:1f:a8:9f:a3:83: b1:40:c9:68:eb:a8:8c:2f:f3:4a:08:42:d7:e6:86: b9:2c:7c:ff:26:00:23:a7:4a:25:74:68:71:9a:ff: 1c:52:bc:fe:59:50:0c:f2:c1:8d:ce:8e:53:41:2d: 0b:1d:82:12:4e:30:6f:7c:c7:bf:8d:44:dc:e8:8b: 7e:34:02:9a:a7:f1:8a:05:53:a1:0f:d0:c5:e7:e6: 27:59:d7:97:45:2a:a3:e2:a7:b5:4a:ba:25:37:14: 34:24:4c:ab:35:49:3b:20:7d:7c:b4:8e:d1:89:9e: 87:03:32:c5:6d:5f:7f:ce:05:dd:43:4f:b1:83:95: e3:97:69:f4:6e:22:b8:68:df:e3:cc:8c:0c:b7:71: 71:2a:50:64:d8:e4:3b:a1:29:3f:68:d9:a4:ef:b8: 92:48:86:c0:20:0b:c7:58:7c:2a:e2:50:b5:4a:55: 30:3f:d7:d0:4b:20:f8:70:5a:a0:b4:e7:eb:ca:63: f4:31:b7:f2:5c:f3:26:58:a8:1f:c3:21:c2:29:96: d8:cc:f4:fe:34:b0:b5:6f:df:99:2d:5a:6a:d2:4c: ef:f9:eb:81:0c:1e:cc:99:25:db:f9:bd:2b:ca:d4: de:af:95:bd:37:40:81:5d:bb:7d:a8:a7:fd:63:9f: 77:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DC:5A:25:E0:37:45:D8:CB:ED:95:11:A0:10:1F:1D:82:A9:6E:90 X509v3 Authority Key Identifier: keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/W9xaJeA3RdjL7ZURoBAfHYKpbpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.68.0/24 Signature Algorithm: sha256WithRSAEncryption 89:04:de:b4:6d:e8:95:e2:60:90:8a:95:90:9a:83:4d:c0:4d: 86:51:e6:ff:f5:2e:e8:2b:22:39:93:90:e2:3d:08:5f:1a:4a: 65:e0:1f:a3:fd:9e:78:54:33:8d:08:1d:cb:e0:55:b4:97:6e: 09:f4:7c:70:46:45:25:fd:ca:87:68:af:53:7e:3a:1d:27:c8: d6:1e:9a:52:6f:30:63:57:0f:08:ff:13:41:db:00:15:28:ca: 74:7e:6c:ee:f1:a8:a0:67:b7:38:21:2c:a9:51:32:57:5f:da: 22:29:95:c9:b6:7b:48:3d:13:4c:c7:52:8d:58:a2:ed:68:69: c4:5a:a9:86:b3:45:12:90:63:4e:d5:90:91:d6:b3:c7:04:3b: 4f:94:56:0c:87:40:77:39:0c:6b:c3:34:09:66:d7:c3:dd:b7: f6:cf:d1:9d:ae:f3:e8:86:cb:4c:29:02:df:a3:16:b5:b2:ff: 50:73:72:b6:6f:74:3b:99:5b:b7:b3:7d:fa:05:07:4f:7a:7d: 98:96:47:97:b5:08:a2:5f:33:b0:83:30:f2:8a:26:d1:4b:99: 80:d0:53:b9:40:02:ce:7b:18:94:df:26:29:81:b3:ec:99:69: 58:0a:5f:2d:5a:8d:b3:68:30:6c:29:07:2c:d9:c0:63:5b:53: da:6f:72:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FWKBEeCgSUGCjFm9jpokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTEzM2VhMWU0MGZjMTNlMDc0ZTMyNzcxMGE1MzQ0YTk2 MGI1YzAwHhcNMjYwMTAyMTQyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmRjNWEyNWUwMzc0NWQ4Y2JlZDk1MTFhMDEwMWYxZDgyYTk2ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RzVDOCr3nPnH6ifo4OxQMlo66iM L/NKCELX5oa5LHz/JgAjp0oldGhxmv8cUrz+WVAM8sGNzo5TQS0LHYISTjBvfMe/ jUTc6It+NAKap/GKBVOhD9DF5+YnWdeXRSqj4qe1SrolNxQ0JEyrNUk7IH18tI7R iZ6HAzLFbV9/zgXdQ0+xg5Xjl2n0biK4aN/jzIwMt3FxKlBk2OQ7oSk/aNmk77iS SIbAIAvHWHwq4lC1SlUwP9fQSyD4cFqgtOfrymP0MbfyXPMmWKgfwyHCKZbYzPT+ NLC1b9+ZLVpq0kzv+euBDB7MmSXb+b0rytTer5W9N0CBXbt9qKf9Y593IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvcWiXgN0XYy+2VEaAQHx2CqW6QMB8GA1UdIwQY MBaAFHThM+oeQPwT4HTjJ3EKU0SpYLXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMt MmNiOWUyMTcyZjk3LzEvVzl4YUplQTNSZGpMN1pVUm9CQWZIWUtwYnBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMtMmNiOWUyMTcyZjk3 LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6lEMA0G CSqGSIb3DQEBCwUAA4IBAQCJBN60beiV4mCQipWQmoNNwE2GUeb/9S7oKyI5k5Di PQhfGkpl4B+j/Z54VDONCB3L4FW0l24J9HxwRkUl/cqHaK9TfjodJ8jWHppSbzBj Vw8I/xNB2wAVKMp0fmzu8aigZ7c4ISypUTJXX9oiKZXJtntIPRNMx1KNWKLtaGnE WqmGs0USkGNO1ZCR1rPHBDtPlFYMh0B3OQxrwzQJZtfD3bf2z9GdrvPohstMKQLf oxa1sv9Qc3K2b3Q7mVu3s336BQdPen2YlkeXtQiiXzOwgzDyiibRS5mA0FO5QALO exiU3yYpgbPsmWlYCl8tWo2zaDBsKQcs2cBjW1Pab3Ip -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:21 2026 by rpki-client