This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/w5CeZk_SHBYAYNZwgoQ-a5on_l8.roa File: w5CeZk_SHBYAYNZwgoQ-a5on_l8.roa (raw, json) Hash identifier: l6/Ibkf470cOejoxuPtJgO1mH1UPzXrBbFzYG6y76ms= Subject key identifier: C3:90:9E:66:4F:D2:1C:16:00:60:D6:70:82:84:3E:6B:9A:27:FE:5F Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB5B736AC7D883792333A4219A3FE0 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/w5CeZk_SHBYAYNZwgoQ-a5on_l8.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35048 IP address blocks: 31.40.203.0/24 maxlen: 24 212.115.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5b:73:6a:c7:d8:83:79:23:33:a4:21:9a:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3909e664fd21c160060d67082843e6b9a27fe5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:12:c8:5d:b8:d9:bc:da:87:30:ba:79:e7: cc:4c:13:c9:fd:6d:5c:be:dc:da:28:2c:d4:94:be: a5:67:d0:87:8e:1e:40:d5:ea:09:77:98:f9:ef:09: ec:bf:67:c6:dc:54:60:a7:55:b4:ab:f6:de:66:83: 2c:ed:68:4a:25:62:23:30:b1:84:35:3f:d8:ad:27: ee:72:07:99:c0:70:8a:3a:da:13:c8:59:84:9d:3b: fc:3e:45:c5:93:58:f3:5c:cb:fb:57:b7:51:98:71: de:3e:ca:ec:9c:37:35:72:84:ed:b5:7a:d0:6f:54: 8b:d4:cd:ae:8a:58:bc:ed:6b:e7:2e:cf:19:e1:fc: 4a:a6:e8:58:77:9e:e3:a2:79:f4:22:96:7b:e6:c7: 9f:6d:e5:00:76:3f:c0:de:b3:f5:f9:ac:3d:dd:c8: b2:a8:f1:e9:87:8b:37:4f:c3:f2:08:24:0f:15:f4: 34:4c:f6:74:bd:99:1c:0e:df:c9:49:ff:4c:7c:ba: 97:b4:2b:81:11:c2:b2:f9:69:72:ab:6b:6e:8a:3e: 0b:a5:d6:d6:32:d3:e3:b2:78:ab:1a:33:13:9c:f2: 30:5b:30:39:1e:08:ef:be:b2:b4:7a:86:9c:9c:ac: d7:c3:3c:2f:71:d3:0f:2d:ef:55:e4:3f:ff:34:6f: 6f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:90:9E:66:4F:D2:1C:16:00:60:D6:70:82:84:3E:6B:9A:27:FE:5F X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/w5CeZk_SHBYAYNZwgoQ-a5on_l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.203.0/24 212.115.49.0/24 Signature Algorithm: sha256WithRSAEncryption 09:89:ad:2b:85:cd:bb:bb:5e:e0:6a:42:1f:0d:cd:f8:0c:6e: 4b:31:7f:78:e3:de:51:c5:9f:16:cc:b7:c2:29:c5:6c:c4:a0: 4b:78:2c:4d:1c:22:d5:67:66:29:16:79:02:a8:92:ce:8b:c4: 2b:0b:99:2f:14:b8:f4:65:b1:60:3d:bf:23:ec:9e:c0:c4:12: 32:11:de:54:f9:68:05:e1:ea:09:cf:f9:0c:3f:d1:d1:8a:85: 1c:ee:b1:63:46:58:74:11:70:dd:8b:29:c6:72:a0:4c:da:99: 6d:2b:40:35:e3:9c:17:07:ba:75:11:e1:64:0b:59:0c:cd:21: 6c:d4:73:72:63:66:64:99:bf:e9:b8:39:99:e5:b1:23:d7:73: 6e:95:16:45:1c:9c:ef:c1:03:34:f8:c2:a2:87:5c:75:d0:56: 57:de:17:05:2f:ba:46:99:c1:f7:2a:39:58:94:65:0c:6e:3a: dc:d7:65:8a:72:b6:2b:a6:18:c0:d2:87:93:62:e3:22:0b:39: 80:93:06:2f:a8:4b:b2:59:a7:44:54:ef:05:ab:df:e2:15:2c: a1:13:1d:80:6a:7e:ff:30:50:5b:25:32:76:15:6b:f8:e0:5a: cb:f2:14:06:0a:64:91:18:53:17:1a:6b:7c:6e:f0:3c:ce:02: 88:7f:7f:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y1tzasfYg3kjM6Qhmj/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzkwOWU2NjRmZDIxYzE2MDA2MGQ2NzA4Mjg0M2U2YjlhMjdmZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ysSyF242bzahzC6eefMTBPJ/W1c vtzaKCzUlL6lZ9CHjh5A1eoJd5j57wnsv2fG3FRgp1W0q/beZoMs7WhKJWIjMLGE NT/YrSfucgeZwHCKOtoTyFmEnTv8PkXFk1jzXMv7V7dRmHHePsrsnDc1coTttXrQ b1SL1M2uili87WvnLs8Z4fxKpuhYd57jonn0IpZ75sefbeUAdj/A3rP1+aw93ciy qPHph4s3T8PyCCQPFfQ0TPZ0vZkcDt/JSf9MfLqXtCuBEcKy+Wlyq2tuij4LpdbW MtPjsnirGjMTnPIwWzA5HgjvvrK0eoacnKzXwzwvcdMPLe9V5D//NG9vmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMOQnmZP0hwWAGDWcIKEPmuaJ/5fMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvdzVDZVprX1NIQllBWU5ad2dvUS1hNW9uX2w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyjLAwQA 1HMxMA0GCSqGSIb3DQEBCwUAA4IBAQAJia0rhc27u17gakIfDc34DG5LMX94495R xZ8WzLfCKcVsxKBLeCxNHCLVZ2YpFnkCqJLOi8QrC5kvFLj0ZbFgPb8j7J7AxBIy Ed5U+WgF4eoJz/kMP9HRioUc7rFjRlh0EXDdiynGcqBM2pltK0A145wXB7p1EeFk C1kMzSFs1HNyY2Zkmb/puDmZ5bEj13NulRZFHJzvwQM0+MKih1x10FZX3hcFL7pG mcH3KjlYlGUMbjrc12WKcrYrphjA0oeTYuMiCzmAkwYvqEuyWadEVO8Fq9/iFSyh Ex2Aan7/MFBbJTJ2FWv44FrL8hQGCmSRGFMXGmt8bvA8zgKIf39O -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:34 2026 by rpki-client