This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/W1STJEtiaQZVxAfap8-hIOmAy4Y.roa File: W1STJEtiaQZVxAfap8-hIOmAy4Y.roa (raw, json) Hash identifier: Zv6laNgDqynt8I+xz9NJy8SSY/DVkugCDiD2aW/rzHE= Subject key identifier: 5B:54:93:24:4B:62:69:06:55:C4:07:DA:A7:CF:A1:20:E9:80:CB:86 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB7FC73ED90288A100A3F10E6B603D Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/W1STJEtiaQZVxAfap8-hIOmAy4Y.roa Signing time: Fri 02 Jan 2026 08:20:47 +0000 ROA not before: Fri 02 Jan 2026 08:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 45.131.162.0/24 maxlen: 24 88.214.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7f:c7:3e:d9:02:88:a1:00:a3:f1:0e:6b:60:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b5493244b62690655c407daa7cfa120e980cb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:42:fc:53:e0:8b:83:84:18:1c:0b:c2:7f: cf:48:c3:52:f8:80:19:ee:01:15:4a:ac:fb:77:1a: 35:2a:ba:b1:c3:bd:66:a5:83:99:13:17:cf:3e:e6: a2:f0:1c:c6:06:ca:ea:83:6a:d3:fe:40:f4:da:ff: fa:de:ae:e2:b1:d2:e8:13:4d:76:49:48:1c:8c:19: 04:8b:7a:11:70:9c:86:02:e7:56:29:51:16:c1:4f: 9d:b8:3e:50:27:e7:c7:22:a5:b9:49:98:73:2a:59: 64:15:4e:6e:ac:04:4d:2f:40:04:a3:f1:97:e4:97: 86:fa:d8:d8:89:a6:92:f6:73:e8:3f:52:b5:d3:85: 6e:5e:73:bb:26:d9:db:55:75:72:30:ee:a3:c5:a5: 13:80:16:db:ad:24:3b:b3:59:5e:dd:63:b1:ea:75: 7c:15:06:a4:82:87:d8:8f:a7:8c:9a:c1:8d:8b:5e: 96:c8:c8:ea:54:8b:7c:0a:28:28:3f:c3:51:79:60: 7b:cb:1b:36:1e:85:45:a2:2d:b3:d7:7b:4e:9b:28: e5:62:eb:97:6b:b7:de:0d:17:5f:51:c7:6b:3c:25: 7e:45:07:02:25:d3:4a:dd:25:a6:e6:2d:7d:ae:b9: 6d:17:80:3f:ec:ba:33:23:ce:5d:51:b7:c3:fd:1e: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:93:24:4B:62:69:06:55:C4:07:DA:A7:CF:A1:20:E9:80:CB:86 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/W1STJEtiaQZVxAfap8-hIOmAy4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.162.0/24 88.214.51.0/24 Signature Algorithm: sha256WithRSAEncryption 03:fe:c6:9b:94:2a:0f:69:c1:23:74:b0:93:c6:d3:f2:aa:50: d7:20:c0:3c:20:f5:3e:e8:55:27:bb:df:3f:28:cd:df:cf:cd: 4d:ab:51:91:2b:a9:80:69:95:24:73:29:ad:ba:c1:91:b5:9e: ce:76:85:df:89:25:57:d0:85:3c:ca:90:51:d3:67:58:35:9f: b5:6f:ce:cf:73:cd:ce:53:dd:f4:03:0f:7f:3d:5e:ab:06:75: 81:ed:be:fc:cd:c0:c8:c9:dd:3d:e2:5a:8e:d2:fe:86:06:7a: b4:69:2f:ae:9f:de:fa:d2:10:ec:1d:8b:e1:89:77:cb:8c:41: 66:e3:61:6f:5f:6b:58:9e:ed:be:e4:c3:0e:42:f8:bc:8c:94: 71:2e:55:ab:aa:96:ba:87:81:ee:df:cc:fd:20:0b:df:84:e4: 62:8c:e1:ba:c8:e0:37:f4:dc:8e:20:a6:50:ce:36:5a:1a:89: 74:ea:80:97:0d:d2:b7:37:5e:5b:3d:b7:ba:91:8a:35:93:b4: 32:fe:38:b0:84:d6:8f:a9:a0:30:22:93:8b:79:61:47:8a:f8: e5:1c:2b:79:0f:36:ff:d5:29:e2:42:46:38:f3:87:27:66:76: 03:27:44:a3:9e:3c:8e:08:0c:74:b7:f9:8f:f5:f8:19:0b:3f: 56:11:f2:c2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y3/HPtkCiKEAo/EOa2A9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjU0OTMyNDRiNjI2OTA2NTVjNDA3ZGFhN2NmYTEyMGU5ODBjYjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxtC/FPgi4OEGBwLwn/PSMNS+IAZ 7gEVSqz7dxo1Krqxw71mpYOZExfPPuai8BzGBsrqg2rT/kD02v/63q7isdLoE012 SUgcjBkEi3oRcJyGAudWKVEWwU+duD5QJ+fHIqW5SZhzKllkFU5urARNL0AEo/GX 5JeG+tjYiaaS9nPoP1K104VuXnO7JtnbVXVyMO6jxaUTgBbbrSQ7s1le3WOx6nV8 FQakgofYj6eMmsGNi16WyMjqVIt8CigoP8NReWB7yxs2HoVFoi2z13tOmyjlYuuX a7feDRdfUcdrPCV+RQcCJdNK3SWm5i19rrltF4A/7LozI85dUbfD/R5hkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFtUkyRLYmkGVcQH2qfPoSDpgMuGMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvVzFTVEpFdGlhUVpWeEFmYXA4LWhJT21BeTRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYOiAwQA WNYzMA0GCSqGSIb3DQEBCwUAA4IBAQAD/sablCoPacEjdLCTxtPyqlDXIMA8IPU+ 6FUnu98/KM3fz81Nq1GRK6mAaZUkcymtusGRtZ7OdoXfiSVX0IU8ypBR02dYNZ+1 b87Pc83OU930Aw9/PV6rBnWB7b78zcDIyd094lqO0v6GBnq0aS+un9760hDsHYvh iXfLjEFm42FvX2tYnu2+5MMOQvi8jJRxLlWrqpa6h4Hu38z9IAvfhORijOG6yOA3 9NyOIKZQzjZaGol06oCXDdK3N15bPbe6kYo1k7Qy/jiwhNaPqaAwIpOLeWFHivjl HCt5Dzb/1SniQkY484cnZnYDJ0SjnjyOCAx0t/mP9fgZCz9WEfLC -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:10 2026 by rpki-client