This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/W4UHRrBQAt50eiIa0aXkDS2q-jI.roa File: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (raw, json) Hash identifier: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig= Subject key identifier: 5B:85:07:46:B0:50:02:DE:74:7A:22:1A:D1:A5:E4:0D:2D:AA:FA:32 Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019B7B36AD141B29D405DA2DB649340D6907 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/W4UHRrBQAt50eiIa0aXkDS2q-jI.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a0d:4480::/32 maxlen: 32 2a0d:4481::/32 maxlen: 32 2a0d:4482::/32 maxlen: 32 2a0d:4483::/32 maxlen: 32 2a0d:4484::/32 maxlen: 32 2a0d:4485::/32 maxlen: 32 2a0d:4486::/32 maxlen: 32 2a0d:4487::/32 maxlen: 32 2a0d:ab00::/32 maxlen: 32 2a0d:ab01::/32 maxlen: 32 2a0d:ab02::/32 maxlen: 32 2a0d:ab03::/32 maxlen: 32 2a0d:ab04::/32 maxlen: 32 2a0d:ab05::/32 maxlen: 32 2a0d:ab06::/32 maxlen: 32 2a0d:ab07::/32 maxlen: 32 2a0d:af00::/32 maxlen: 32 2a0d:af01::/32 maxlen: 32 2a0d:af02::/32 maxlen: 32 2a0d:af03::/32 maxlen: 32 2a0d:af04::/32 maxlen: 32 2a0d:af05::/32 maxlen: 32 2a0d:af06::/32 maxlen: 32 2a0d:af07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ad:14:1b:29:d4:05:da:2d:b6:49:34:0d:69:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b850746b05002de747a221ad1a5e40d2daafa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:2f:60:8c:32:12:fd:0c:18:7c:70:f6:80: c6:b9:5c:fe:1e:27:3d:4a:05:6b:c8:98:1d:cb:7f: 64:87:ee:ba:28:7a:b4:0e:50:d4:e3:af:04:44:3d: 0f:f8:8d:b0:8b:4d:a1:6a:fc:10:36:c0:0c:b9:fd: 27:88:ef:49:e8:3b:6b:79:2c:3c:26:27:8a:58:92: 14:1c:68:c1:93:44:0b:fe:5f:09:d1:f1:fc:c2:b8: cc:6c:d1:22:48:94:d5:3e:4c:f7:7f:82:2d:24:07: 8c:17:f5:f2:a9:f9:59:28:5d:4c:a9:c5:6f:e4:27: 63:53:71:39:02:44:de:d4:58:ea:49:c3:ff:85:0b: ce:58:60:e5:3d:d5:f5:e0:55:5b:95:de:1e:a8:2d: 39:a1:96:68:2b:a4:15:27:ba:c0:1a:77:8f:83:0a: 2f:48:bd:87:30:33:be:78:e2:03:c7:bf:32:e0:25: 9b:48:a6:22:55:93:37:23:65:63:b5:e6:ee:a8:59: 43:48:42:53:7c:6d:94:c8:2b:ea:fa:29:dc:10:2b: da:ca:7a:0f:33:51:d9:f8:25:b3:b0:81:8d:d2:a3: da:08:2e:5b:b6:4d:9a:19:81:a8:f1:4c:33:28:d9: 19:74:db:c4:04:0a:49:ee:20:a4:64:a6:36:f7:57: 35:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:85:07:46:B0:50:02:DE:74:7A:22:1A:D1:A5:E4:0D:2D:AA:FA:32 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/W4UHRrBQAt50eiIa0aXkDS2q-jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:4480::/29 2a0d:ab00::/29 2a0d:af00::/29 Signature Algorithm: sha256WithRSAEncryption 14:d9:02:c7:92:e2:39:a8:02:4f:48:ce:d8:2c:99:89:87:c8: 3f:2c:2e:3d:f1:6f:f3:93:a7:cf:53:7c:a4:53:93:bf:ff:a3: e4:6e:fd:1c:15:bf:e7:82:bd:52:b3:2a:80:73:87:27:04:7f: a7:af:93:41:6f:85:c2:c0:4a:d1:32:de:ef:0c:83:23:98:5c: 01:08:d0:56:e4:2f:8e:2c:a5:f0:8a:57:e1:e3:65:53:68:5f: 34:f8:f6:e8:43:63:1c:10:6a:33:0b:fe:15:c6:df:34:e4:90: c0:e4:a5:e3:a8:26:aa:e4:0e:bc:29:d5:c5:74:3c:8a:36:6c: 40:05:46:79:13:f2:42:3f:82:9f:0f:61:34:b1:ec:7b:e0:ba: 4c:91:c1:10:1e:e9:3b:2f:ed:6f:65:4c:9d:5e:46:c4:52:84: ab:5e:d7:fb:6c:5d:d1:c3:ad:c3:ea:4a:85:59:8f:d4:93:80: 0e:b9:20:63:7d:5c:13:02:ae:6d:fc:17:0b:71:a6:22:74:a9: 76:79:4e:9f:27:cf:93:f8:dd:f5:ba:c5:68:af:26:6e:bf:2d: 2f:1f:4a:2f:90:29:91:b7:ba:1d:53:69:24:f1:8c:c2:97:af: 33:77:4c:e2:29:67:36:17:c2:a6:0e:13:80:78:b4:25:81:8c: 19:6e:bc:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Nq0UGynUBdottkk0DWkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjg1MDc0NmIwNTAwMmRlNzQ3YTIyMWFkMWE1ZTQwZDJkYWFmYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqovYIwyEv0MGHxw9oDGuVz+Hic9 SgVryJgdy39kh+66KHq0DlDU468ERD0P+I2wi02havwQNsAMuf0niO9J6DtreSw8 JieKWJIUHGjBk0QL/l8J0fH8wrjMbNEiSJTVPkz3f4ItJAeMF/XyqflZKF1MqcVv 5CdjU3E5AkTe1FjqScP/hQvOWGDlPdX14FVbld4eqC05oZZoK6QVJ7rAGnePgwov SL2HMDO+eOIDx78y4CWbSKYiVZM3I2VjtebuqFlDSEJTfG2UyCvq+incECvaynoP M1HZ+CWzsIGN0qPaCC5btk2aGYGo8UwzKNkZdNvEBApJ7iCkZKY291c1swIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFuFB0awUALedHoiGtGl5A0tqvoyMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvVzRVSFJyQlFBdDUwZWlJYTBhWGtEUzJxLWpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg1EgAMF AyoNqwADBQMqDa8AMA0GCSqGSIb3DQEBCwUAA4IBAQAU2QLHkuI5qAJPSM7YLJmJ h8g/LC498W/zk6fPU3ykU5O//6Pkbv0cFb/ngr1SsyqAc4cnBH+nr5NBb4XCwErR Mt7vDIMjmFwBCNBW5C+OLKXwilfh42VTaF80+PboQ2McEGozC/4Vxt805JDA5KXj qCaq5A68KdXFdDyKNmxABUZ5E/JCP4KfD2E0sex74LpMkcEQHuk7L+1vZUydXkbE UoSrXtf7bF3Rw63D6kqFWY/Uk4AOuSBjfVwTAq5t/BcLcaYidKl2eU6fJ8+T+N31 usVoryZuvy0vH0ovkCmRt7odU2kk8YzCl68zd0ziKWc2F8KmDhOAeLQlgYwZbryy -----END CERTIFICATE-----Generated at Fri Jan 2 19:22:53 2026 by rpki-client