This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/W8zaDpL7y2hHlsHPm8j6VsbmlbI.roa File: W8zaDpL7y2hHlsHPm8j6VsbmlbI.roa (raw, json) Hash identifier: QkA/6itD4OWCILhEtalZJrgtDe5cM/xdXi2+B6boyL0= Subject key identifier: 5B:CC:DA:0E:92:FB:CB:68:47:96:C1:CF:9B:C8:FA:56:C6:E6:95:B2 Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae Certificate serial: 019B78A24794EB4B1379B03D1BAA598F9A2C Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/W8zaDpL7y2hHlsHPm8j6VsbmlbI.roa Signing time: Thu 01 Jan 2026 08:17:39 +0000 ROA not before: Thu 01 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43045 IP address blocks: 5.182.52.0/22 maxlen: 24 46.17.48.0/21 maxlen: 24 89.221.48.0/20 maxlen: 24 2a02:22c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:47:94:eb:4b:13:79:b0:3d:1b:aa:59:8f:9a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bccda0e92fbcb684796c1cf9bc8fa56c6e695b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:5c:3a:25:61:07:80:b4:68:2e:b0:5a:3f: 2a:85:17:b5:4d:a8:e1:ac:2a:3b:98:5c:59:4a:37: 6c:e3:07:91:d5:03:c5:65:da:f3:dd:54:cf:c5:fc: 24:d6:c7:35:6c:b7:ca:95:75:a2:ee:9f:cd:68:da: c3:7b:3d:d0:88:a0:9d:d5:5f:a7:1f:c3:b6:f8:93: eb:9d:66:51:49:70:0d:0c:fa:ee:ea:ad:43:1d:ed: 10:eb:76:92:52:3b:74:b5:fb:27:b1:c8:5c:3e:69: 68:80:84:04:c4:25:3d:15:7c:ee:b2:92:6c:74:ff: b9:e4:24:4c:ca:fe:7b:88:8a:1f:41:14:ea:d4:8f: 15:ee:f5:b6:72:52:3e:4d:34:d4:ae:52:42:b6:b5: 17:f0:d2:00:73:95:fc:1f:f9:c9:48:7e:7e:18:f8: 4e:f5:0e:af:a5:c3:2b:0d:9d:63:fb:81:3d:cd:bc: 8f:5b:1a:fb:c3:a6:36:2f:b6:b7:8b:b6:79:04:c0: 06:c9:e5:1f:e2:72:92:be:52:0f:f5:fe:eb:86:83: 8c:25:4f:3b:d7:e9:39:4b:b1:f5:e9:b9:07:db:ad: e2:91:8a:48:8a:ec:9d:d0:31:6d:70:c8:81:90:14: 6a:56:43:2c:4a:20:54:b2:5b:86:72:90:e8:6e:83: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CC:DA:0E:92:FB:CB:68:47:96:C1:CF:9B:C8:FA:56:C6:E6:95:B2 X509v3 Authority Key Identifier: keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/W8zaDpL7y2hHlsHPm8j6VsbmlbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.52.0/22 46.17.48.0/21 89.221.48.0/20 IPv6: 2a02:22c0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:e9:dc:90:35:e5:58:26:f1:9b:cf:70:df:30:b1:a4:00:31: 1d:24:e1:dc:3a:0d:5f:2d:fd:90:5a:02:2d:f1:79:25:ba:69: 45:ce:bd:ab:0f:63:12:f9:ee:94:83:80:e8:3b:b9:1a:36:81: 17:78:03:e7:d7:4b:19:42:ff:1e:ba:a7:98:2a:ed:8b:bf:b6: 24:4e:99:7a:7a:7e:f2:f6:9b:5a:43:cc:36:66:b0:ac:3b:3a: 89:42:13:48:1f:39:77:7e:81:4b:ae:5e:14:7d:4e:bc:71:56: 94:9a:80:f5:22:bf:da:43:a5:e3:24:70:17:30:3f:66:87:03: b6:2d:0d:ad:c6:1b:aa:01:30:95:5e:1a:e4:cd:27:e6:52:53: 3d:b1:a9:a2:fe:c5:71:33:2c:66:59:b8:8f:e9:72:1a:3b:13: ad:3a:92:73:f3:22:08:98:ff:b4:42:66:8a:03:78:c9:59:2a: 86:6c:f2:04:83:ae:bf:92:64:a9:01:61:44:67:2f:ed:1d:da: 15:5e:e3:a8:31:32:1a:58:1d:81:6f:21:fe:f5:77:3a:3d:95: 32:d0:03:2f:18:5a:62:0c:90:c2:45:a3:66:c3:38:86:27:e8: 8b:6a:1a:16:ca:94:fe:bc:46:30:36:57:7a:81:ea:18:79:75: a7:4a:47:24 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4okeU60sTebA9G6pZj5osMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTMzM2QwZTgxMDc4ODZkMDMwNWM3YmQ4MWJkZDM1NDg5 NTI3YWUwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmNjZGEwZTkyZmJjYjY4NDc5NmMxY2Y5YmM4ZmE1NmM2ZTY5NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTNcOiVhB4C0aC6wWj8qhRe1Tajh rCo7mFxZSjds4weR1QPFZdrz3VTPxfwk1sc1bLfKlXWi7p/NaNrDez3QiKCd1V+n H8O2+JPrnWZRSXANDPru6q1DHe0Q63aSUjt0tfsnschcPmlogIQExCU9FXzuspJs dP+55CRMyv57iIofQRTq1I8V7vW2clI+TTTUrlJCtrUX8NIAc5X8H/nJSH5+GPhO 9Q6vpcMrDZ1j+4E9zbyPWxr7w6Y2L7a3i7Z5BMAGyeUf4nKSvlIP9f7rhoOMJU87 1+k5S7H16bkH263ikYpIiuyd0DFtcMiBkBRqVkMsSiBUsluGcpDoboMiGQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFvM2g6S+8toR5bBz5vI+lbG5pWyMB8GA1UdIwQY MBaAFMYTM9DoEHiG0DBce9gb3TVIlSeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEt OGVjNWYwZWVhMDQ1LzEvVzh6YURwTDd5MmhIbHNIUG04ajZWc2JtbGJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEtOGVjNWYwZWVhMDQ1 LzEveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCBbY0AwQD LhEwAwQEWd0wMA0EAgACMAcDBQAqAiLAMA0GCSqGSIb3DQEBCwUAA4IBAQA76dyQ NeVYJvGbz3DfMLGkADEdJOHcOg1fLf2QWgIt8XklumlFzr2rD2MS+e6Ug4DoO7ka NoEXeAPn10sZQv8euqeYKu2Lv7YkTpl6en7y9ptaQ8w2ZrCsOzqJQhNIHzl3foFL rl4UfU68cVaUmoD1Ir/aQ6XjJHAXMD9mhwO2LQ2txhuqATCVXhrkzSfmUlM9sami /sVxMyxmWbiP6XIaOxOtOpJz8yIImP+0QmaKA3jJWSqGbPIEg66/kmSpAWFEZy/t HdoVXuOoMTIaWB2BbyH+9Xc6PZUy0AMvGFpiDJDCRaNmwziGJ+iLahoWypT+vEYw Nld6geoYeXWnSkck -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:32 2026 by rpki-client