This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/WEBxfBgljdO2-_OPHWGZu1V4u-E.roa File: WEBxfBgljdO2-_OPHWGZu1V4u-E.roa (raw, json) Hash identifier: nt1blU8jTILJsm/QWLFQx/HjDxyXCoII44gqy3P+yHo= Subject key identifier: 58:40:71:7C:18:25:8D:D3:B6:FB:F3:8F:1D:61:99:BB:55:78:BB:E1 Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Certificate serial: 019B7B3594077D8BE2168E8F40D903F2D4B8 Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/WEBxfBgljdO2-_OPHWGZu1V4u-E.roa Signing time: Thu 01 Jan 2026 20:17:47 +0000 ROA not before: Thu 01 Jan 2026 20:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205318 IP address blocks: 31.42.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:94:07:7d:8b:e2:16:8e:8f:40:d9:03:f2:d4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5840717c18258dd3b6fbf38f1d6199bb5578bbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:d3:b0:8d:b0:94:ba:e5:04:2f:45:7d:fa: f5:28:e8:ab:ab:5b:89:12:1a:a7:1e:ea:b5:d5:d8: 0d:fc:68:b2:7b:19:5c:58:c8:9a:5d:ce:1a:9b:d5: c7:88:56:59:9f:1e:5c:00:f4:24:61:ca:28:45:16: 79:fc:40:34:9c:93:77:ba:97:76:74:c3:82:50:cb: 7d:bc:9c:54:77:9f:df:be:12:00:ed:d1:ef:6b:92: dd:a9:0b:03:ae:ee:4d:b8:37:cb:74:8d:b7:67:8d: e0:fb:c2:3c:46:85:aa:16:ca:56:45:00:83:2e:2e: 49:9c:7c:ec:fb:e4:84:43:ff:26:fb:db:de:6c:75: ba:ad:97:cd:c8:6e:39:1e:db:4b:e2:51:b1:3d:df: 21:e2:d1:3d:b4:c3:18:7d:b9:aa:91:a1:82:a5:9f: 6e:2b:f6:cd:7e:48:1c:56:17:52:d9:5e:ec:ab:7e: 23:bb:89:33:e4:e0:01:04:83:5e:6d:5c:c4:a6:06: f4:2d:bc:f2:ec:9c:e8:de:36:58:46:2d:5d:bf:37: 58:f9:0f:05:a5:3f:e5:0a:89:e0:3e:a4:20:2f:c2: df:e5:a4:65:cc:83:42:a6:c1:4b:88:ba:99:ef:91: de:ae:e4:18:97:10:62:98:dc:26:63:3d:56:b1:dd: ce:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:40:71:7C:18:25:8D:D3:B6:FB:F3:8F:1D:61:99:BB:55:78:BB:E1 X509v3 Authority Key Identifier: keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/WEBxfBgljdO2-_OPHWGZu1V4u-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.57.0/24 Signature Algorithm: sha256WithRSAEncryption 53:77:d5:10:e0:10:e7:9d:fd:5f:e5:b3:ac:14:20:05:bd:50: 87:4a:d3:15:e1:be:a3:57:cb:53:4b:dd:88:c4:b6:ba:48:70: 16:30:c5:61:ee:64:1b:4f:2c:03:d8:ea:55:6e:2e:19:16:8d: 12:79:01:2d:2f:17:db:7e:01:a8:24:75:1f:a2:42:01:dc:e3: bc:e1:41:a9:51:84:d6:89:9a:2b:e5:b3:f4:e2:f3:0b:bf:56: 1a:95:90:b6:07:a8:0b:5a:f3:70:e7:6c:98:ba:ea:0e:d1:37: 72:ab:fd:07:16:59:36:ef:0b:ae:e6:d3:c6:99:e9:f7:b8:91: 99:b5:a8:45:ca:5e:fa:01:f2:97:1f:a0:10:4e:5f:1a:81:87: c7:ae:81:42:df:af:15:4d:09:50:a3:97:9e:2a:b2:1e:06:02: 5a:87:c1:62:42:b2:44:52:3d:e6:4e:5c:d4:12:a9:58:81:50: 43:6c:b1:e5:b8:20:03:69:ed:d6:58:91:d2:fc:e4:20:1e:c8: 0c:90:8b:8f:a2:e6:58:bd:9f:cd:ac:33:e9:5c:68:eb:56:53: e6:5a:79:ec:b0:29:2a:7b:3d:e9:e8:23:a1:fa:c7:73:c2:61: 86:d5:ab:46:7b:04:5b:35:5b:2c:c8:62:7a:9b:4e:84:e9:dd: bd:7b:23:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZQHfYviFo6PQNkD8tS4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3 YmM2MTYwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODQwNzE3YzE4MjU4ZGQzYjZmYmYzOGYxZDYxOTliYjU1NzhiYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopTTsI2wlLrlBC9Fffr1KOirq1uJ EhqnHuq11dgN/GiyexlcWMiaXc4am9XHiFZZnx5cAPQkYcooRRZ5/EA0nJN3upd2 dMOCUMt9vJxUd5/fvhIA7dHva5LdqQsDru5NuDfLdI23Z43g+8I8RoWqFspWRQCD Li5JnHzs++SEQ/8m+9vebHW6rZfNyG45HttL4lGxPd8h4tE9tMMYfbmqkaGCpZ9u K/bNfkgcVhdS2V7sq34ju4kz5OABBINebVzEpgb0Lbzy7Jzo3jZYRi1dvzdY+Q8F pT/lCongPqQgL8Lf5aRlzINCpsFLiLqZ75HeruQYlxBimNwmYz1Wsd3OuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhAcXwYJY3Ttvvzjx1hmbtVeLvhMB8GA1UdIwQY MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt YmM3YTIwOGE1ZTJlLzEvV0VCeGZCZ2xqZE8yLV9PUEhXR1p1MVY0dS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyo5MA0G CSqGSIb3DQEBCwUAA4IBAQBTd9UQ4BDnnf1f5bOsFCAFvVCHStMV4b6jV8tTS92I xLa6SHAWMMVh7mQbTywD2OpVbi4ZFo0SeQEtLxfbfgGoJHUfokIB3OO84UGpUYTW iZor5bP04vMLv1YalZC2B6gLWvNw52yYuuoO0Tdyq/0HFlk27wuu5tPGmen3uJGZ tahFyl76AfKXH6AQTl8agYfHroFC368VTQlQo5eeKrIeBgJah8FiQrJEUj3mTlzU EqlYgVBDbLHluCADae3WWJHS/OQgHsgMkIuPouZYvZ/NrDPpXGjrVlPmWnnssCkq ez3p6COh+sdzwmGG1atGewRbNVssyGJ6m06E6d29eyMp -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:54 2026 by rpki-client