This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/WrX7SpElIvxm2JSwON41PMyuiBw.roa File: WrX7SpElIvxm2JSwON41PMyuiBw.roa (raw, json) Hash identifier: veKhilt8GIBABvA7UBWxe+++Nd8y9DAgj8iYUCvKPKw= Subject key identifier: 5A:B5:FB:4A:91:25:22:FC:66:D8:94:B0:38:DE:35:3C:CC:AE:88:1C Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c Certificate serial: 019B7AC7D6D34D478655EA0E5285DA8D33A7 Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/WrX7SpElIvxm2JSwON41PMyuiBw.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8542 IP address blocks: 62.97.192.0/18 maxlen: 18 82.134.0.0/17 maxlen: 17 85.200.0.0/16 maxlen: 16 213.153.0.0/19 maxlen: 19 2a00:14d8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d6:d3:4d:47:86:55:ea:0e:52:85:da:8d:33:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887e81ba84344598c61462833aadf3204eae087c Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab5fb4a912522fc66d894b038de353cccae881c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:dd:70:d6:cf:02:5b:87:76:ef:47:d6:10: af:5c:de:94:52:70:3a:b7:3c:73:40:48:dd:ce:7c: 65:e0:4e:82:95:0a:fc:8a:dc:a5:e5:1c:3a:26:f5: 6f:c4:58:0b:d9:7e:93:cc:f7:8e:7a:77:e2:8b:ef: 5f:79:f1:06:7b:81:96:04:2c:c0:98:0a:92:77:56: 3e:e6:85:74:50:80:f7:90:a4:70:59:de:60:99:a3: d7:62:8b:89:04:37:13:c1:e2:c7:7c:92:2c:8d:d2: 12:5e:35:ae:8b:17:b5:40:92:97:86:90:2f:b8:e3: 77:c9:dc:6b:33:7f:e9:34:04:2e:57:8e:aa:83:04: 68:06:87:ea:d4:a8:33:b1:61:01:2f:99:34:0d:42: b0:f6:2e:12:fc:4c:9a:aa:57:59:c1:71:db:3b:c1: 23:94:ef:9b:3c:80:cb:6c:15:ae:b3:09:17:08:10: 25:1a:94:e5:db:fc:9a:a9:a8:0c:f5:91:70:16:a8: d1:13:0b:93:c8:95:90:1c:6f:d1:67:d0:85:c9:5f: 30:c1:85:a1:67:fc:47:f9:ec:c8:71:cf:5a:28:c1: e3:93:47:f7:c6:ab:f9:73:1d:9f:89:05:35:64:6a: c8:a4:ec:be:61:09:c8:0d:c4:c8:4f:38:37:9c:87: d8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B5:FB:4A:91:25:22:FC:66:D8:94:B0:38:DE:35:3C:CC:AE:88:1C X509v3 Authority Key Identifier: keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/WrX7SpElIvxm2JSwON41PMyuiBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.97.192.0/18 82.134.0.0/17 85.200.0.0/16 213.153.0.0/19 IPv6: 2a00:14d8::/29 Signature Algorithm: sha256WithRSAEncryption 07:c7:31:7a:e3:2b:23:b1:ad:88:9a:48:34:07:b7:48:51:b9: 73:6b:44:b5:90:c6:86:be:1a:b8:48:36:2d:a5:4e:9c:f5:e8: 61:52:f6:4a:1e:7c:9a:6c:98:03:cf:5a:9d:65:64:8c:e3:ec: cd:79:13:62:f0:55:3e:7e:8e:b8:dd:97:5f:b3:30:00:19:2c: ff:61:c4:65:68:d9:c0:52:89:f4:d9:25:2a:e5:a1:92:c1:ee: fc:ca:ff:1c:29:1b:db:48:b4:8d:ec:57:48:a2:37:d1:b7:df: c0:7b:b7:0a:5e:b0:50:47:26:cf:95:df:6d:1d:6c:e2:86:af: f0:bc:b2:ea:65:bf:da:20:7f:9f:b8:de:fc:62:9a:e3:f0:48: ef:b5:e1:33:9c:71:98:f4:77:2d:1c:3c:1a:2a:94:3e:67:8b: 07:33:ed:77:16:f8:d8:f0:1c:9c:a2:c4:9d:1d:00:ad:7b:dd: 14:4e:d7:b8:4b:67:38:c6:aa:c3:67:8a:69:91:32:c6:06:82: 00:35:6e:5e:4f:39:b9:52:a7:d6:8e:6d:82:0a:17:67:35:f5: 84:59:8b:3d:94:fa:87:7d:d7:9f:ee:fe:a6:6e:a9:c5:1e:77: a8:85:1b:2a:65:6f:c0:3a:73:35:c6:b3:a9:68:80:71:fa:51: dd:55:76:ae -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt6x9bTTUeGVeoOUoXajTOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh ZTA4N2MwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWI1ZmI0YTkxMjUyMmZjNjZkODk0YjAzOGRlMzUzY2NjYWU4ODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvvdcNbPAluHdu9H1hCvXN6UUnA6 tzxzQEjdznxl4E6ClQr8ityl5Rw6JvVvxFgL2X6TzPeOenfii+9fefEGe4GWBCzA mAqSd1Y+5oV0UID3kKRwWd5gmaPXYouJBDcTweLHfJIsjdISXjWuixe1QJKXhpAv uON3ydxrM3/pNAQuV46qgwRoBofq1KgzsWEBL5k0DUKw9i4S/EyaqldZwXHbO8Ej lO+bPIDLbBWuswkXCBAlGpTl2/yaqagM9ZFwFqjREwuTyJWQHG/RZ9CFyV8wwYWh Z/xH+ezIcc9aKMHjk0f3xqv5cx2fiQU1ZGrIpOy+YQnIDcTITzg3nIfY5QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFFq1+0qRJSL8ZtiUsDjeNTzMrogcMB8GA1UdIwQY MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt ZTAxNjI0MDFmZjdhLzEvV3JYN1NwRWxJdnhtMkpTd09ONDFQTXl1aUJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQGPmHAAwQH UoYAAwMAVcgDBAXVmQAwDQQCAAIwBwMFAyoAFNgwDQYJKoZIhvcNAQELBQADggEB AAfHMXrjKyOxrYiaSDQHt0hRuXNrRLWQxoa+GrhINi2lTpz16GFS9koefJpsmAPP Wp1lZIzj7M15E2LwVT5+jrjdl1+zMAAZLP9hxGVo2cBSifTZJSrloZLB7vzK/xwp G9tItI3sV0iiN9G338B7twpesFBHJs+V320dbOKGr/C8suplv9ogf5+43vximuPw SO+14TOccZj0dy0cPBoqlD5niwcz7XcW+NjwHJyixJ0dAK173RRO17hLZzjGqsNn immRMsYGggA1bl5POblSp9aObYIKF2c19YRZiz2U+od915/u/qZuqcUed6iFGypl b8A6czXGs6logHH6Ud1Vdq4= -----END CERTIFICATE-----Generated at Sun Jan 18 19:21:41 2026 by rpki-client