This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/W_DUPmMWXfw6_1KwWt3waPIqT-s.roa File: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (raw, json) Hash identifier: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8= Subject key identifier: 5B:F0:D4:3E:63:16:5D:FC:3A:FF:52:B0:5A:DD:F0:68:F2:2A:4F:EB Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364ED865FAA80956C03BE918C45F13 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/W_DUPmMWXfw6_1KwWt3waPIqT-s.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 2.57.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4e:d8:65:fa:a8:09:56:c0:3b:e9:18:c4:5f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bf0d43e63165dfc3aff52b05addf068f22a4feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:11:a6:0d:86:a8:0b:47:c1:3e:83:66:26:86: 39:db:1b:f7:52:87:8d:dd:12:04:fb:93:93:14:3b: 5c:af:06:32:e1:52:2a:8b:55:40:d7:ac:b1:03:0f: c1:43:f8:b4:3e:ea:de:90:33:2d:23:69:49:e2:87: 98:d1:2b:ae:08:af:bf:2f:3b:fe:77:73:6c:ad:c7: 09:7d:d8:f4:59:92:ae:2e:45:87:6c:cb:dc:44:82: c6:f1:58:00:03:3b:50:cd:89:01:68:30:54:c3:0c: c7:9d:b8:14:44:aa:20:64:ff:45:a3:a0:bc:27:08: f8:10:1e:62:46:13:e7:d4:5c:6e:1e:5c:56:c2:64: df:08:09:5e:08:68:0c:21:73:57:c3:b3:4e:a3:84: b8:93:43:b3:f7:af:dd:02:39:1e:49:c0:93:ad:2a: 05:72:9f:02:4d:be:46:c9:c4:cb:e6:2d:02:9d:9c: 65:3d:b6:40:f8:d9:6a:66:19:24:2e:ad:b9:39:89: 5b:d3:95:13:9d:61:34:eb:8a:5f:15:64:bb:1a:f0: d5:21:f4:36:cd:0d:a0:56:f5:b9:c8:bb:d9:6c:83: 7a:78:d8:c6:2f:05:33:7c:7d:09:1d:bc:66:b5:e9: 4a:40:dd:1c:1d:85:d1:e0:22:c5:ff:f1:8a:46:f0: 64:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F0:D4:3E:63:16:5D:FC:3A:FF:52:B0:5A:DD:F0:68:F2:2A:4F:EB X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/W_DUPmMWXfw6_1KwWt3waPIqT-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.171.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:df:ec:06:03:95:f0:9e:11:ac:29:f2:32:1a:84:ce:3a:70: 2d:e3:d9:47:47:a0:72:2e:e9:59:12:bf:b6:03:76:8c:66:12: af:19:e3:6e:c1:8c:84:1a:3a:25:e0:b7:f9:3e:73:e7:9c:2d: 00:ff:b4:1e:4e:32:e8:50:05:c3:d6:74:88:23:1b:9a:09:d3: ad:0c:62:9c:29:f0:5b:3c:06:83:01:85:1b:d9:e1:6f:cc:86: 76:3d:2e:15:04:89:46:41:9b:0b:73:da:f6:5f:c9:6a:b6:a5: 58:7c:25:5b:24:45:c3:c9:a2:6b:55:9d:36:ec:6b:fe:7e:d0: ff:29:44:62:ad:9e:79:3c:ae:2e:9e:40:16:27:80:e9:29:5a: 00:e1:45:19:87:7a:87:87:82:68:76:3e:8d:c7:e2:53:1a:04: 1b:fd:3c:7a:73:cf:89:d0:d9:61:49:16:4b:a1:d9:f0:10:d6: c5:12:b5:11:6c:6a:75:43:11:e2:1f:6a:ac:12:68:68:b2:d1: 9e:b5:3c:00:d4:21:4b:02:35:a2:a1:1a:cf:d4:78:49:89:a7: 3b:e3:88:46:90:6c:2c:de:2c:ad:26:c2:12:24:f6:bc:12:1a: bd:cc:18:70:34:8d:f2:8c:07:70:04:27:43:71:38:f9:ec:c2: c3:ea:fc:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nk7YZfqoCVbAO+kYxF8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmYwZDQzZTYzMTY1ZGZjM2FmZjUyYjA1YWRkZjA2OGYyMmE0ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xGmDYaoC0fBPoNmJoY52xv3UoeN 3RIE+5OTFDtcrwYy4VIqi1VA16yxAw/BQ/i0PurekDMtI2lJ4oeY0SuuCK+/Lzv+ d3NsrccJfdj0WZKuLkWHbMvcRILG8VgAAztQzYkBaDBUwwzHnbgURKogZP9Fo6C8 Jwj4EB5iRhPn1FxuHlxWwmTfCAleCGgMIXNXw7NOo4S4k0Oz96/dAjkeScCTrSoF cp8CTb5GycTL5i0CnZxlPbZA+NlqZhkkLq25OYlb05UTnWE064pfFWS7GvDVIfQ2 zQ2gVvW5yLvZbIN6eNjGLwUzfH0JHbxmtelKQN0cHYXR4CLF//GKRvBkNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvw1D5jFl38Ov9SsFrd8GjyKk/rMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvV19EVVBtTVdYZnc2XzFLd1d0M3dhUElxVC1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjmrMA0G CSqGSIb3DQEBCwUAA4IBAQBK3+wGA5XwnhGsKfIyGoTOOnAt49lHR6ByLulZEr+2 A3aMZhKvGeNuwYyEGjol4Lf5PnPnnC0A/7QeTjLoUAXD1nSIIxuaCdOtDGKcKfBb PAaDAYUb2eFvzIZ2PS4VBIlGQZsLc9r2X8lqtqVYfCVbJEXDyaJrVZ027Gv+ftD/ KURirZ55PK4unkAWJ4DpKVoA4UUZh3qHh4Jodj6Nx+JTGgQb/Tx6c8+J0NlhSRZL odnwENbFErURbGp1QxHiH2qsEmhostGetTwA1CFLAjWioRrP1HhJiac744hGkGws 3iytJsISJPa8Ehq9zBhwNI3yjAdwBCdDcTj57MLD6vxm -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:00 2026 by rpki-client