This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/W32EXHxq22OlcTVnqttBuo0upGc.roa File: W32EXHxq22OlcTVnqttBuo0upGc.roa (raw, json) Hash identifier: 3SFYrWm7yZX8uwa5UCdQqXgJvLnz3O5KxmucXeD0Uq0= Subject key identifier: 5B:7D:84:5C:7C:6A:DB:63:A5:71:35:67:AA:DB:41:BA:8D:2E:A4:67 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA3FC4930CB7DF8821AD71F7B36C65F Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/W32EXHxq22OlcTVnqttBuo0upGc.roa Signing time: Thu 01 Jan 2026 22:18:23 +0000 ROA not before: Thu 01 Jan 2026 22:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35196 IP address blocks: 185.105.117.240/32 maxlen: 32 193.109.85.20/32 maxlen: 32 193.124.176.10/32 maxlen: 32 193.124.176.104/32 maxlen: 32 193.124.176.142/32 maxlen: 32 195.47.250.0/24 maxlen: 24 2a09:5302::/32 maxlen: 32 2a09:5302:ffff::/48 maxlen: 48 2a0a:9300:2::/48 maxlen: 48 2a0a:9300:d0::/48 maxlen: 48 2a0a:9300:d1::/48 maxlen: 48 2a0a:9300:d2::/48 maxlen: 48 2a0a:9300:1000::/48 maxlen: 48 2a0a:9302:1::/48 maxlen: 48 2a0e:d603::/32 maxlen: 32 2a0f:7b82::/32 maxlen: 32 2a0f:7b83::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fc:49:30:cb:7d:f8:82:1a:d7:1f:7b:36:c6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b7d845c7c6adb63a5713567aadb41ba8d2ea467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:95:b7:f6:3e:15:3f:27:54:44:c9:ab:65: 25:91:a0:e9:a8:8a:67:95:2b:3b:f6:7c:56:f6:7c: cd:e8:18:90:bd:07:17:a9:92:73:92:87:ed:6b:0a: 25:84:87:5e:bd:2c:9f:d7:7f:2d:c1:f3:0a:89:2d: 5d:c0:9c:02:af:6b:44:50:17:52:c9:ca:10:8e:60: e1:a0:16:39:9e:7d:ea:27:64:ef:a3:8c:68:18:d1: 1b:3f:6b:2a:84:ee:e4:11:fa:04:d6:ee:07:b0:d0: d8:37:71:18:a7:c2:d4:8c:48:fe:87:71:00:ba:a0: 07:8d:c5:cb:ce:99:ba:b3:cc:3a:88:99:39:a9:0a: a3:5b:c8:38:72:b1:b0:83:33:a6:20:78:97:69:f7: da:f5:23:7a:e3:86:e3:b4:b9:02:39:ca:7b:dc:a3: 53:11:4f:1a:a1:6a:f5:aa:26:6f:26:87:7f:a0:d3: 81:7b:03:ab:4b:37:c0:63:89:a7:d8:55:21:b7:82: 21:ee:88:97:e9:96:27:1a:0d:c8:41:1a:0d:db:77: 4f:4e:e3:05:52:1b:a1:ee:0d:ee:1b:f5:cf:de:dd: 4f:54:52:8d:2a:92:c5:b8:9f:64:33:96:f4:8e:14: 84:f3:3f:01:2d:01:d4:2f:06:d0:2e:fe:70:a9:23: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7D:84:5C:7C:6A:DB:63:A5:71:35:67:AA:DB:41:BA:8D:2E:A4:67 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/W32EXHxq22OlcTVnqttBuo0upGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.117.240/32 193.109.85.20/32 193.124.176.10/32 193.124.176.104/32 193.124.176.142/32 195.47.250.0/24 IPv6: 2a09:5302::/32 2a0a:9300:2::/48 2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff 2a0a:9300:1000::/48 2a0a:9302:1::/48 2a0e:d603::/32 2a0f:7b82::/31 Signature Algorithm: sha256WithRSAEncryption b2:bc:20:6d:b9:59:be:bb:a6:d8:34:69:ef:a0:5d:2e:69:d1: 69:36:b2:9d:30:8a:a1:5c:85:0b:df:9c:95:76:b1:05:2f:14: 20:fc:d0:35:d2:1e:4e:f1:7f:84:93:db:b9:9b:40:ff:7c:1d: 20:35:24:4c:4c:dd:46:6c:32:33:0a:2d:10:01:8e:66:e1:cc: 19:59:81:27:f9:28:cc:44:93:5f:e8:72:8c:d3:cc:44:17:34: e9:6c:84:9b:ec:dd:05:7f:a8:cc:5b:24:09:a5:6f:b4:8c:66: 19:36:8a:dc:fe:4f:3c:d4:52:b9:a1:8e:54:c6:77:36:3d:6e: ba:27:27:b0:4b:f0:95:c2:62:34:f8:80:24:66:29:35:cc:9b: 3d:3d:39:bd:c8:aa:18:5c:36:f8:be:9c:31:8a:1e:8f:a5:38: 98:10:ef:5d:b3:c9:df:56:46:44:36:ec:24:ae:41:41:b4:8e: eb:c8:0d:4f:b4:b2:8b:01:14:6a:30:b1:50:a5:4a:56:c8:c4: f2:22:59:34:fd:b8:d7:7f:0b:3e:f8:e4:70:01:50:8e:88:8a: c9:d2:b5:a6:aa:23:e1:be:ff:f4:a9:f2:f2:1d:d7:73:c9:9d: c5:b3:16:c9:6f:26:55:5f:f4:68:23:78:cc:80:36:97:82:f4: ba:e9:b3:08 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZt7o/xJMMt9+IIa1x97NsZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjdkODQ1YzdjNmFkYjYzYTU3MTM1NjdhYWRiNDFiYThkMmVhNDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLmVt/Y+FT8nVETJq2UlkaDpqIpn lSs79nxW9nzN6BiQvQcXqZJzkoftawolhIdevSyf138twfMKiS1dwJwCr2tEUBdS ycoQjmDhoBY5nn3qJ2Tvo4xoGNEbP2sqhO7kEfoE1u4HsNDYN3EYp8LUjEj+h3EA uqAHjcXLzpm6s8w6iJk5qQqjW8g4crGwgzOmIHiXaffa9SN644bjtLkCOcp73KNT EU8aoWr1qiZvJod/oNOBewOrSzfAY4mn2FUht4Ih7oiX6ZYnGg3IQRoN23dPTuMF Uhuh7g3uG/XP3t1PVFKNKpLFuJ9kM5b0jhSE8z8BLQHULwbQLv5wqSM8VQIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFFt9hFx8attjpXE1Z6rbQbqNLqRnMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvVzMyRVhIeHEyMk9sY1RWbnF0dEJ1bzB1cEdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wLwQCAAEwKQMFALlpdfAD BQDBbVUUAwUAwXywCgMFAMF8sGgDBQDBfLCOAwQAwy/6MEoEAgACMEQDBQAqCVMC AwcAKgqTAAACMBIDBwQqCpMAANADBwAqCpMAANIDBwAqCpMAEAADBwAqCpMCAAED BQAqDtYDAwUBKg97gjANBgkqhkiG9w0BAQsFAAOCAQEAsrwgbblZvrum2DRp76Bd LmnRaTaynTCKoVyFC9+clXaxBS8UIPzQNdIeTvF/hJPbuZtA/3wdIDUkTEzdRmwy MwotEAGOZuHMGVmBJ/kozESTX+hyjNPMRBc06WyEm+zdBX+ozFskCaVvtIxmGTaK 3P5PPNRSuaGOVMZ3Nj1uuicnsEvwlcJiNPiAJGYpNcybPT05vciqGFw2+L6cMYoe j6U4mBDvXbPJ31ZGRDbsJK5BQbSO68gNT7SyiwEUajCxUKVKVsjE8iJZNP24138L PvjkcAFQjoiKydK1pqoj4b7/9Kny8h3Xc8mdxbMWyW8mVV/0aCN4zIA2l4L0uumz CA== -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:47 2026 by rpki-client