This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/W2Lq_gdd9rZwUf5XYnIW4963QtQ.roa File: W2Lq_gdd9rZwUf5XYnIW4963QtQ.roa (raw, json) Hash identifier: eb7p+UCGj/n0wv0h+VVQyhXFpDFytE+7LNbgVFjUVK0= Subject key identifier: 5B:62:EA:FE:07:5D:F6:B6:70:51:FE:57:62:72:16:E3:DE:B7:42:D4 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759595A6BB6AD7DEFD79521499BDF93 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/W2Lq_gdd9rZwUf5XYnIW4963QtQ.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57009 IP address blocks: 89.43.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:59:5a:6b:b6:ad:7d:ef:d7:95:21:49:9b:df:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b62eafe075df6b67051fe57627216e3deb742d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:0c:ef:cb:0f:31:3c:c3:30:b2:6d:82:ee: 8b:80:6c:32:31:ee:21:0c:ad:43:5b:17:d5:e1:f4: 61:25:30:fa:a5:e0:d1:3a:b1:fd:89:62:9f:e9:00: dd:77:56:96:f9:31:dd:09:28:d9:d2:6d:aa:a1:cb: f3:5e:1b:57:03:f2:56:06:72:f7:1b:cd:a1:9d:ee: d1:8d:93:9f:9c:e7:d6:20:1a:80:30:d3:34:c0:51: b3:9f:e6:a8:37:a8:cd:21:8b:6f:af:a9:c9:66:4b: 09:0e:0d:4d:49:14:f0:6e:30:a1:36:69:99:32:e9: ee:37:9b:04:d0:73:19:5a:09:73:5b:50:32:37:fb: 0d:07:05:e6:5b:0c:18:b8:aa:3c:a4:d7:0f:f5:24: 02:a2:99:ef:e8:7b:c6:7a:71:17:9c:da:80:18:4e: 85:29:ef:9f:c3:02:10:ab:78:dc:1d:ff:e5:db:d9: 8a:31:20:4b:a7:b6:5c:d4:9c:bd:a7:b9:85:db:b4: 9b:83:a0:71:b0:1c:3f:b0:00:4c:bc:db:52:28:66: ce:88:17:c9:fb:6d:eb:ba:e0:6d:81:c6:96:41:ae: 30:89:4f:19:49:19:89:aa:96:0b:ee:a0:f5:68:f7: d8:7a:7d:c4:77:9a:cc:59:3f:b2:8f:fb:7b:3b:09: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:EA:FE:07:5D:F6:B6:70:51:FE:57:62:72:16:E3:DE:B7:42:D4 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/W2Lq_gdd9rZwUf5XYnIW4963QtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.55.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:ba:d1:1d:61:67:79:66:fc:1c:e9:6c:f5:8d:76:80:be:26: f6:62:3b:20:6a:dc:50:b9:34:e1:28:0a:57:94:65:ee:17:fc: 2f:64:8d:cd:88:de:40:ee:74:51:76:19:6e:4b:33:a2:fd:b6: e3:43:c7:d7:4e:5a:04:99:a8:28:e1:08:eb:1e:a2:b4:58:94: 93:53:2b:27:64:ea:98:c0:18:b0:56:5c:18:37:03:f0:c4:df: a7:ad:38:d9:11:ad:02:3d:3f:f7:40:08:3b:68:62:b7:9e:5b: cd:57:c9:6a:62:d7:7f:c0:e5:c7:63:f6:46:31:2f:d0:7d:0f: a0:76:60:1f:80:2f:37:ad:7a:63:22:ac:1f:50:b3:cf:ab:ab: 97:1e:0e:6d:bc:cb:39:f2:6e:fb:31:8b:4d:ab:a2:b5:fd:15: 55:2e:4a:3f:6d:dc:26:ed:a8:57:e3:bc:fb:c3:81:3a:ef:e1: 14:fc:ea:50:90:81:1d:ba:d5:fd:5c:a0:96:15:71:c0:54:1f: 12:3a:49:c4:de:e3:02:47:a0:61:25:aa:d9:b3:5e:6c:c1:09: 95:81:57:7d:08:fc:28:f8:8e:52:8b:eb:e1:fd:45:50:0f:56: 37:1f:9e:e6:4c:a8:83:82:6e:42:8a:40:95:69:8e:4c:2d:07: 4a:b9:66:64 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVlaa7atfe/XlSFJm9+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjYyZWFmZTA3NWRmNmI2NzA1MWZlNTc2MjcyMTZlM2RlYjc0MmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTgM78sPMTzDMLJtgu6LgGwyMe4h DK1DWxfV4fRhJTD6peDROrH9iWKf6QDdd1aW+THdCSjZ0m2qocvzXhtXA/JWBnL3 G82hne7RjZOfnOfWIBqAMNM0wFGzn+aoN6jNIYtvr6nJZksJDg1NSRTwbjChNmmZ MunuN5sE0HMZWglzW1AyN/sNBwXmWwwYuKo8pNcP9SQCopnv6HvGenEXnNqAGE6F Ke+fwwIQq3jcHf/l29mKMSBLp7Zc1Jy9p7mF27Sbg6BxsBw/sABMvNtSKGbOiBfJ +23ruuBtgcaWQa4wiU8ZSRmJqpYL7qD1aPfYen3Ed5rMWT+yj/t7OwkWJQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFti6v4HXfa2cFH+V2JyFuPet0LUMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1cyTHFfZ2RkOXJad1VmNVhZbklXNDk2M1F0US5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZKzcw DQYJKoZIhvcNAQELBQADggEBAEu60R1hZ3lm/BzpbPWNdoC+JvZiOyBq3FC5NOEo CleUZe4X/C9kjc2I3kDudFF2GW5LM6L9tuNDx9dOWgSZqCjhCOseorRYlJNTKydk 6pjAGLBWXBg3A/DE36etONkRrQI9P/dACDtoYreeW81XyWpi13/A5cdj9kYxL9B9 D6B2YB+ALzetemMirB9Qs8+rq5ceDm28yznybvsxi02rorX9FVUuSj9t3CbtqFfj vPvDgTrv4RT86lCQgR261f1coJYVccBUHxI6ScTe4wJHoGElqtmzXmzBCZWBV30I /Cj4jlKL6+H9RVAPVjcfnuZMqIOCbkKKQJVpjkwtB0q5ZmQ= -----END CERTIFICATE-----Generated at Mon Jan 26 18:13:08 2026 by rpki-client