This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/WjEJKBNSHVEcN3ymO9d7rBHNhsg.roa File: WjEJKBNSHVEcN3ymO9d7rBHNhsg.roa (raw, json) Hash identifier: /ukNM+uY+q4nZGfneifUiM0pEWc8ClpbPhjLj7YvUSQ= Subject key identifier: 5A:31:09:28:13:52:1D:51:1C:37:7C:A6:3B:D7:7B:AC:11:CD:86:C8 Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec Certificate serial: 019B7DCB1E371339E0AAB110829637454A7C Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/WjEJKBNSHVEcN3ymO9d7rBHNhsg.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41327 IP address blocks: 5.183.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1e:37:13:39:e0:aa:b1:10:82:96:37:45:4a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a31092813521d511c377ca63bd77bac11cd86c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:1b:6e:31:f4:26:d2:9d:13:51:64:c9:bb: c0:6e:4e:0c:80:e6:50:91:0d:ae:0b:b9:20:af:9d: 35:7a:b3:9f:15:64:9c:4e:51:4c:45:9a:16:c5:1c: b8:b3:3e:df:15:8d:86:bd:3f:32:2a:e6:b0:ff:89: 17:74:f6:ca:e0:2e:65:32:71:f3:e5:18:79:a7:f3: 79:69:49:56:49:05:83:73:56:b7:ab:8d:a9:56:ac: 0d:f9:0c:14:1c:f1:ec:56:76:30:ea:ce:15:a3:f5: 8c:ea:ed:ee:b7:aa:55:b8:07:41:b5:f3:40:ab:9b: 31:4f:2d:ff:99:ba:e4:5f:07:b8:6d:54:93:4c:7c: df:a3:f3:c6:4c:4d:c9:05:f2:d1:4d:5b:f1:8d:43: 33:d2:b1:0f:63:b0:15:a1:d1:c1:52:95:8e:24:1b: 75:70:4c:75:9b:e7:54:32:00:b6:e3:53:8f:a2:0d: 3b:58:84:39:e8:43:86:aa:14:16:7e:6a:8f:f6:71: 0a:e3:1a:7f:ff:78:12:09:ac:43:86:6d:cd:de:44: e5:2d:d1:67:ef:da:2a:45:47:9c:0a:6f:45:35:eb: 25:4f:9a:c3:52:6f:d8:89:8b:65:61:41:db:88:c8: 0a:84:1a:12:e8:bf:50:22:81:99:86:bf:df:bf:f5: 4a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:09:28:13:52:1D:51:1C:37:7C:A6:3B:D7:7B:AC:11:CD:86:C8 X509v3 Authority Key Identifier: keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/WjEJKBNSHVEcN3ymO9d7rBHNhsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.110.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:40:f6:b5:9d:c9:2c:cd:16:f1:6f:61:ea:a3:09:e0:61:43: d8:8b:a9:1b:fc:50:d5:ec:c8:eb:05:66:43:c3:93:a0:96:32: 1e:2e:7c:02:55:a0:71:8c:13:93:91:e1:57:c7:bd:69:fc:6d: 33:04:70:e5:71:02:39:be:24:38:39:58:8e:b9:10:08:58:74: 9c:7d:9d:08:6b:64:7b:39:c4:79:27:fc:bf:86:c9:21:ef:cc: 95:0d:3d:ef:8f:da:23:93:3e:c7:9f:ad:03:d4:48:ae:3c:d4: 22:13:f5:c7:1e:38:d1:b2:2d:01:84:b5:ee:7e:aa:e5:5e:91: e9:1d:c1:4d:2c:21:8e:cb:96:4a:20:b5:93:64:ab:d1:6c:e1: 92:74:3e:45:ac:be:d3:18:1a:49:03:28:6d:62:7b:12:c6:14: a3:2b:2d:cb:99:e7:e5:74:c3:a4:46:e1:c9:94:92:da:45:1a: 4c:97:ad:df:d5:90:1e:d1:7b:70:48:02:7b:65:9e:d0:12:de: d8:de:3b:51:6f:38:8f:59:26:04:60:20:4e:cb:41:fb:9b:24: b3:77:94:f7:b2:a9:a3:a2:44:56:42:7f:57:00:97:e8:33:bd: 69:dc:36:2e:32:d4:e6:9b:03:11:23:c9:8a:42:0c:fb:07:f3: 34:89:ef:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yx43EzngqrEQgpY3RUp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzODRmNmZhNmRlY2NlZDU1NzhhODVhNTFlMGJkNjU3MDFl YTM0ZWMwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTMxMDkyODEzNTIxZDUxMWMzNzdjYTYzYmQ3N2JhYzExY2Q4NmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlYbbjH0JtKdE1FkybvAbk4MgOZQ kQ2uC7kgr501erOfFWScTlFMRZoWxRy4sz7fFY2GvT8yKuaw/4kXdPbK4C5lMnHz 5Rh5p/N5aUlWSQWDc1a3q42pVqwN+QwUHPHsVnYw6s4Vo/WM6u3ut6pVuAdBtfNA q5sxTy3/mbrkXwe4bVSTTHzfo/PGTE3JBfLRTVvxjUMz0rEPY7AVodHBUpWOJBt1 cEx1m+dUMgC241OPog07WIQ56EOGqhQWfmqP9nEK4xp//3gSCaxDhm3N3kTlLdFn 79oqRUecCm9FNeslT5rDUm/YiYtlYUHbiMgKhBoS6L9QIoGZhr/fv/VKHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoxCSgTUh1RHDd8pjvXe6wRzYbIMB8GA1UdIwQY MBaAFEOE9vpt7M7VV4qFpR4L1lcB6jTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt MWIxM2JkNDU2NmE1LzEvV2pFSktCTlNIVkVjTjN5bU85ZDdyQkhOaHNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1 LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbduMA0G CSqGSIb3DQEBCwUAA4IBAQCaQPa1nckszRbxb2HqowngYUPYi6kb/FDV7MjrBWZD w5OgljIeLnwCVaBxjBOTkeFXx71p/G0zBHDlcQI5viQ4OViOuRAIWHScfZ0Ia2R7 OcR5J/y/hskh78yVDT3vj9ojkz7Hn60D1EiuPNQiE/XHHjjRsi0BhLXufqrlXpHp HcFNLCGOy5ZKILWTZKvRbOGSdD5FrL7TGBpJAyhtYnsSxhSjKy3LmefldMOkRuHJ lJLaRRpMl63f1ZAe0XtwSAJ7ZZ7QEt7Y3jtRbziPWSYEYCBOy0H7mySzd5T3sqmj okRWQn9XAJfoM71p3DYuMtTmmwMRI8mKQgz7B/M0ie/S -----END CERTIFICATE-----Generated at Mon Jan 19 18:24:19 2026 by rpki-client