This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/Wx516h-ycz_F6WDuwcZAFe5X748.roa File: Wx516h-ycz_F6WDuwcZAFe5X748.roa (raw, json) Hash identifier: OBge6N4+W5EoPiH34P9HhCCHgJeyBg+k4ngzYQtz6A0= Subject key identifier: 5B:1E:75:EA:1F:B2:73:3F:C5:E9:60:EE:C1:C6:40:15:EE:57:EF:8F Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24 Certificate serial: 019B7A5AD518B7DA5FB9E7D0DF66A6B4DE3C Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/Wx516h-ycz_F6WDuwcZAFe5X748.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 5.153.112.0/20 maxlen: 20 185.74.120.0/22 maxlen: 22 2a00:d3a0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d5:18:b7:da:5f:b9:e7:d0:df:66:a6:b4:de:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b1e75ea1fb2733fc5e960eec1c64015ee57ef8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:8e:e7:fa:6c:a3:4f:d6:95:f7:68:6d:b4: 8c:b0:38:72:57:6c:13:ef:e1:91:ef:20:dd:01:aa: 07:82:83:e0:b8:80:18:f5:d5:9e:6b:40:2a:25:e1: d5:2c:0b:10:12:f0:58:c4:7c:f3:ef:2a:6e:59:a5: 2e:f0:97:33:97:45:3b:f0:c3:15:d9:b5:ab:4c:62: c6:88:fe:b5:46:27:06:5a:f7:bb:3f:5c:9a:dc:ff: a2:3f:e2:60:04:1f:35:ef:a4:5c:49:b7:5d:16:4a: 74:92:2f:cd:8f:15:36:a1:27:26:fb:25:d7:81:ba: 19:58:9b:26:61:8f:d3:ee:b1:11:e3:7a:57:c8:5c: 7e:7c:1f:2e:5b:28:7a:b4:34:ca:95:c4:6a:1c:1e: e3:18:14:bd:bb:42:f1:8f:53:a9:0a:11:b8:0e:4d: 16:16:3f:9b:54:0b:87:83:f9:f8:73:04:5c:9a:6a: 4f:3e:30:f3:fc:ad:47:c5:c0:ed:e1:27:8e:1c:de: 02:c0:e5:41:e1:a8:b2:53:d5:b7:f3:dc:96:42:6b: 50:dd:70:95:9c:7f:25:24:34:e7:df:7b:9b:fe:3d: 3d:98:9b:90:c5:9a:c3:ef:18:cf:13:69:31:d6:66: 36:c8:f7:ce:38:a6:9d:57:58:b0:41:4b:99:21:3c: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1E:75:EA:1F:B2:73:3F:C5:E9:60:EE:C1:C6:40:15:EE:57:EF:8F X509v3 Authority Key Identifier: keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/Wx516h-ycz_F6WDuwcZAFe5X748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.112.0/20 185.74.120.0/22 IPv6: 2a00:d3a0::/29 Signature Algorithm: sha256WithRSAEncryption 2f:ae:f2:43:22:f2:cb:9b:c2:7b:34:d1:29:45:5e:5f:cd:a9: ca:20:bf:4e:78:57:55:fe:f0:35:1a:80:fa:a7:5d:57:70:fa: ed:25:18:93:fc:db:22:1e:52:66:34:be:33:b7:3e:28:2c:40: fe:be:06:8e:1c:13:ed:78:00:5c:18:25:53:ad:c0:f2:e8:ff: 9b:5f:26:e6:e7:a9:60:be:3c:e8:1d:f2:8d:a5:5f:11:8f:e6: 26:54:fd:c9:43:1c:d8:f3:ce:a0:26:b6:e7:85:cb:b5:c1:d2: 14:23:8b:fd:5a:d3:09:29:d9:c4:80:5d:31:13:49:c5:68:e0: e4:d1:5f:d7:06:bd:e3:79:14:da:f8:89:25:ee:3d:50:85:a7: 04:28:d8:f5:6e:bf:2d:d8:40:c7:90:50:18:bd:c2:53:8d:39: f0:44:dd:7f:27:e6:9e:3e:4f:ed:d4:f4:98:ea:17:ba:59:b7: f1:f8:25:8c:2f:67:72:b2:a6:bc:01:f5:aa:0a:3b:f0:8e:49: 25:59:bf:fd:ee:15:56:85:1c:b2:a4:9c:f6:59:36:f2:8c:c5: d5:58:be:36:ca:93:71:11:42:0e:4f:7e:15:a1:c6:51:c4:9d: 42:62:3d:90:2e:0b:62:4a:b5:98:1f:da:9f:a4:dc:60:e9:5b: dc:80:8d:63 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WtUYt9pfuefQ32amtN48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMmQ5ZmY4NmUzNjNkYjM0ZDA1NTZlYzE2NDUxZjJmN2Yz MDNkMjQwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjFlNzVlYTFmYjI3MzNmYzVlOTYwZWVjMWM2NDAxNWVlNTdlZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyaO5/pso0/WlfdobbSMsDhyV2wT 7+GR7yDdAaoHgoPguIAY9dWea0AqJeHVLAsQEvBYxHzz7ypuWaUu8Jczl0U78MMV 2bWrTGLGiP61RicGWve7P1ya3P+iP+JgBB8176RcSbddFkp0ki/NjxU2oScm+yXX gboZWJsmYY/T7rER43pXyFx+fB8uWyh6tDTKlcRqHB7jGBS9u0Lxj1OpChG4Dk0W Fj+bVAuHg/n4cwRcmmpPPjDz/K1HxcDt4SeOHN4CwOVB4aiyU9W389yWQmtQ3XCV nH8lJDTn33ub/j09mJuQxZrD7xjPE2kx1mY2yPfOOKadV1iwQUuZITylCwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFsedeofsnM/xelg7sHGQBXuV++PMB8GA1UdIwQY MBaAFMstn/huNj2zTQVW7BZFHy9/MD0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMWFmNWItMDg5ZS00Y2JlLWJiZTkt NDI1ZWU5NjhkZjBiLzEvV3g1MTZoLXljel9GNldEdXdjWkFGZTVYNzQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMWFmNWItMDg5ZS00Y2JlLWJiZTktNDI1ZWU5NjhkZjBi LzEveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEBZlwAwQC uUp4MA0EAgACMAcDBQMqANOgMA0GCSqGSIb3DQEBCwUAA4IBAQAvrvJDIvLLm8J7 NNEpRV5fzanKIL9OeFdV/vA1GoD6p11XcPrtJRiT/NsiHlJmNL4ztz4oLED+vgaO HBPteABcGCVTrcDy6P+bXybm56lgvjzoHfKNpV8Rj+YmVP3JQxzY886gJrbnhcu1 wdIUI4v9WtMJKdnEgF0xE0nFaODk0V/XBr3jeRTa+Ikl7j1QhacEKNj1br8t2EDH kFAYvcJTjTnwRN1/J+aePk/t1PSY6he6Wbfx+CWML2dysqa8AfWqCjvwjkklWb/9 7hVWhRyypJz2WTbyjMXVWL42ypNxEUIOT34VocZRxJ1CYj2QLgtiSrWYH9qfpNxg 6VvcgI1j -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:39 2026 by rpki-client