This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/W8rhJbGm4uBlDFmRmYTPxvGZjIY.roa File: W8rhJbGm4uBlDFmRmYTPxvGZjIY.roa (raw, json) Hash identifier: j8NolW6nxGCELrxi3LXv8g6WHbwNoVgMueKJmj8/BfU= Subject key identifier: 5B:CA:E1:25:B1:A6:E2:E0:65:0C:59:91:99:84:CF:C6:F1:99:8C:86 Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e Certificate serial: 019B7AC78DF0E337971BD85A3B6C267C20C0 Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/W8rhJbGm4uBlDFmRmYTPxvGZjIY.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206141 IP address blocks: 147.28.48.0/20 maxlen: 20 185.155.188.0/22 maxlen: 22 2a07:9540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8d:f0:e3:37:97:1b:d8:5a:3b:6c:26:7c:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bcae125b1a6e2e0650c59919984cfc6f1998c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:42:80:aa:cf:1c:85:82:9c:d4:3b:58:e6:67: b0:e2:7c:8e:5c:30:37:51:24:ab:1a:de:88:00:e4: 70:ac:e0:05:73:01:7e:7f:cc:e6:91:e5:46:b8:a4: 20:ba:83:e1:5f:a7:76:1f:9a:53:ce:73:88:1d:7f: 13:4c:3d:a9:2e:03:60:3d:2e:3a:d9:be:ff:7d:2c: 93:4d:11:c4:9b:a5:5e:a5:e5:3d:02:ab:63:d0:48: 66:bb:9d:cb:5c:f9:ee:b4:7d:66:9e:76:54:88:6a: 66:be:31:25:6d:44:8d:e8:91:9b:35:59:dc:bd:d3: 58:33:a6:85:03:6a:22:52:b3:c0:13:e6:67:88:c6: d0:0a:0b:2f:22:30:8f:2a:1b:bc:22:7d:52:2c:f6: c3:3d:c0:78:a7:81:70:06:8d:c1:15:bc:a0:17:ed: c8:2d:c5:4f:95:a6:98:a3:63:2b:3e:70:4b:f0:06: 4f:b4:f5:44:80:eb:fc:5d:58:6b:1a:62:fc:ac:10: 77:70:93:67:d8:39:c3:64:8f:f6:50:86:e9:9e:bd: 57:77:fe:9f:b8:23:f3:2e:3e:90:c1:b9:2b:f0:53: c4:62:a8:ce:ba:c5:64:f3:d3:f7:03:d4:0d:7e:6a: c8:b9:f6:43:ca:63:73:03:3d:20:c8:fb:71:58:1e: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CA:E1:25:B1:A6:E2:E0:65:0C:59:91:99:84:CF:C6:F1:99:8C:86 X509v3 Authority Key Identifier: keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/W8rhJbGm4uBlDFmRmYTPxvGZjIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.28.48.0/20 185.155.188.0/22 IPv6: 2a07:9540::/29 Signature Algorithm: sha256WithRSAEncryption 32:d0:b0:fb:69:4c:26:1f:04:3e:14:9a:24:23:dc:a5:5a:0e: f5:d8:11:ee:83:d1:d6:7f:e4:1b:c1:71:c3:2f:65:fd:a0:b2: 2e:83:72:82:f4:55:8a:86:43:ad:90:dd:4d:43:fc:d1:7e:b7: 51:ec:cf:95:57:a1:cc:3a:32:86:60:0d:07:02:7c:85:87:34: 00:fd:c4:c7:d4:f8:72:2c:1e:ce:c8:28:57:eb:73:e6:98:dc: 60:59:bc:e0:6d:98:0e:fa:89:d1:dc:b4:4b:35:fc:69:6c:33: 3c:b5:94:ab:9a:ef:66:3e:6c:c7:92:06:bc:f4:63:9c:d0:d3: 13:fe:e6:eb:0a:c0:4b:29:85:ee:4e:2d:30:e3:c5:ff:6a:8c: 3a:e0:30:e9:94:9c:bc:00:8c:76:0c:a1:4e:40:d1:b8:6a:f5: 6f:c9:39:a7:e0:e7:93:e0:9d:b7:a8:5e:cb:9c:96:a4:cd:dc: 1b:87:6b:6c:9d:d3:25:e8:16:bd:e5:c9:e3:f1:88:5c:8a:8e: 0b:30:5e:23:f6:d6:4c:f2:e9:f6:ba:be:96:55:06:6d:6e:0e: 28:a5:04:e9:ad:14:3b:1c:64:e5:05:27:68:f3:17:72:7c:c0: 6c:5c:03:22:72:f8:4f:8d:2a:a4:fa:c7:ad:09:f4:f2:e7:19: 0f:d6:48:ac -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x43w4zeXG9haO2wmfCDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZTE3ZTA3YjA0ZGM3NmM5ZDZjOTFmYWZjMmQ1YTg0MDJj NjRiOGUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmNhZTEyNWIxYTZlMmUwNjUwYzU5OTE5OTg0Y2ZjNmYxOTk4Yzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UKAqs8chYKc1DtY5mew4nyOXDA3 USSrGt6IAORwrOAFcwF+f8zmkeVGuKQguoPhX6d2H5pTznOIHX8TTD2pLgNgPS46 2b7/fSyTTRHEm6VepeU9Aqtj0Ehmu53LXPnutH1mnnZUiGpmvjElbUSN6JGbNVnc vdNYM6aFA2oiUrPAE+ZniMbQCgsvIjCPKhu8In1SLPbDPcB4p4FwBo3BFbygF+3I LcVPlaaYo2MrPnBL8AZPtPVEgOv8XVhrGmL8rBB3cJNn2DnDZI/2UIbpnr1Xd/6f uCPzLj6Qwbkr8FPEYqjOusVk89P3A9QNfmrIufZDymNzAz0gyPtxWB6NsQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFvK4SWxpuLgZQxZkZmEz8bxmYyGMB8GA1UdIwQY MBaAFOThfgewTcdsnWyR+vwtWoQCxkuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU9GLUI3Qk54MnlkYkpINl9DMWFoQUxHUzQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC80MmJlNWYtMjQzMi00ODk5LWE0ZmYt MTk4YWRkYTVhMjgxLzEvVzhyaEpiR200dUJsREZtUm1ZVFB4dkdaaklZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC80MmJlNWYtMjQzMi00ODk5LWE0ZmYtMTk4YWRkYTVhMjgx LzEvNU9GLUI3Qk54MnlkYkpINl9DMWFoQUxHUzQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEkxwwAwQC uZu8MA0EAgACMAcDBQMqB5VAMA0GCSqGSIb3DQEBCwUAA4IBAQAy0LD7aUwmHwQ+ FJokI9ylWg712BHug9HWf+QbwXHDL2X9oLIug3KC9FWKhkOtkN1NQ/zRfrdR7M+V V6HMOjKGYA0HAnyFhzQA/cTH1PhyLB7OyChX63PmmNxgWbzgbZgO+onR3LRLNfxp bDM8tZSrmu9mPmzHkga89GOc0NMT/ubrCsBLKYXuTi0w48X/aow64DDplJy8AIx2 DKFOQNG4avVvyTmn4OeT4J23qF7LnJakzdwbh2tsndMl6Ba95cnj8Yhcio4LMF4j 9tZM8un2ur6WVQZtbg4opQTprRQ7HGTlBSdo8xdyfMBsXAMicvhPjSqk+setCfTy 5xkP1kis -----END CERTIFICATE-----Generated at Tue Jan 27 11:30:26 2026 by rpki-client