This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/WThqBVbVDEY5Hhy8yzc2FIOqKaQ.roa File: WThqBVbVDEY5Hhy8yzc2FIOqKaQ.roa (raw, json) Hash identifier: IRJB4vL3WJmKrmN2uWCtCKuTvMKm8OG48njPdr9TRHU= Subject key identifier: 59:38:6A:05:56:D5:0C:46:39:1E:1C:BC:CB:37:36:14:83:AA:29:A4 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE049F98BF5B3BBDEED400DD58F33 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/WThqBVbVDEY5Hhy8yzc2FIOqKaQ.roa Signing time: Thu 01 Jan 2026 14:17:40 +0000 ROA not before: Thu 01 Jan 2026 14:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61022 IP address blocks: 80.121.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e0:49:f9:8b:f5:b3:bb:de:ed:40:0d:d5:8f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59386a0556d50c46391e1cbccb37361483aa29a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:9d:66:eb:89:2a:f9:3e:c0:57:30:b7:67: c0:77:a1:29:48:2c:3e:c7:61:76:02:f0:83:89:bb: 6a:d1:2a:6d:bf:81:b7:8d:50:a8:a6:e3:e7:bc:33: 43:33:9d:34:50:63:0b:c7:57:93:49:3e:9e:29:fe: 1d:79:ff:a8:9e:7b:03:5c:82:da:bb:30:9d:69:c1: 23:96:68:10:b3:3f:90:b9:b4:6e:d7:1d:a6:cf:9c: a4:75:4c:39:45:d5:cb:89:80:46:8e:cc:f0:98:e6: 82:e6:2f:10:50:0c:89:a4:89:58:eb:81:10:7f:ac: bb:1b:fe:f6:0a:c5:0c:94:ea:c1:44:9c:3f:35:65: 1d:07:51:1b:d1:cf:2e:ae:0c:b9:6d:76:67:06:42: a0:24:2f:96:2a:54:22:60:24:ce:d9:ea:3a:df:8d: b5:23:61:17:af:df:60:05:4f:57:b5:dc:68:a5:8e: e0:9d:f8:4f:ed:a5:a1:41:58:a7:22:4c:4b:6d:06: 16:02:0c:a6:4e:e1:c0:47:2c:80:53:7e:dd:23:64: 99:53:d8:9c:56:3b:ad:54:2c:ba:ac:f4:0a:ab:7f: e1:b9:e8:ac:c2:54:55:1a:59:c2:b9:45:57:38:f2: 50:90:37:bf:17:a5:5d:6f:4f:99:be:e5:e9:ab:02: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:38:6A:05:56:D5:0C:46:39:1E:1C:BC:CB:37:36:14:83:AA:29:A4 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/WThqBVbVDEY5Hhy8yzc2FIOqKaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.121.202.0/24 Signature Algorithm: sha256WithRSAEncryption 55:a8:bc:73:23:8d:a9:f4:ea:36:d2:f6:72:bc:11:7f:c7:ca: d5:e2:7d:63:e3:e6:c8:e6:fd:c4:64:a0:ae:66:9b:8a:f9:1d: 9d:79:e2:1f:b1:1c:cd:be:c4:75:89:53:6e:7a:5e:5c:01:4c: 24:47:85:35:d1:ee:0a:9e:18:03:ad:c6:01:da:8a:26:39:99: 06:1d:80:89:b5:cd:bb:c6:61:3e:e1:b4:28:36:a9:a1:b5:15: 8b:0e:28:c9:8a:bd:33:c0:8f:50:4c:dc:cb:71:bf:e8:e9:23: 6c:6c:91:a2:46:e3:f4:1a:a9:5b:1c:23:c3:80:3e:eb:d9:8d: 04:ae:8d:9e:34:ae:0d:aa:8f:f0:28:e9:db:43:ef:2d:09:45: 48:1a:d1:3a:85:c6:e5:a5:7b:0c:3f:d4:dd:46:b5:7a:c5:fa: 6e:bb:28:17:6f:75:9a:1f:bb:63:5f:16:01:68:2b:52:18:eb: 7a:fc:df:34:d8:13:87:b0:3b:e3:1b:bd:60:01:66:39:6d:60: 29:e9:ed:af:5f:2d:7d:28:51:d3:d9:46:ca:dc:1b:17:44:59: 30:a9:c8:95:e9:e7:37:50:6c:b4:91:c6:32:b7:75:c1:45:b9: 84:b7:45:9b:93:de:e7:a3:ee:87:4c:8e:59:3c:64:db:66:b8: 56:f7:38:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+BJ+Yv1s7ve7UAN1Y8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTM4NmEwNTU2ZDUwYzQ2MzkxZTFjYmNjYjM3MzYxNDgzYWEyOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqKdZuuJKvk+wFcwt2fAd6EpSCw+ x2F2AvCDibtq0Sptv4G3jVCopuPnvDNDM500UGMLx1eTST6eKf4def+onnsDXILa uzCdacEjlmgQsz+QubRu1x2mz5ykdUw5RdXLiYBGjszwmOaC5i8QUAyJpIlY64EQ f6y7G/72CsUMlOrBRJw/NWUdB1Eb0c8urgy5bXZnBkKgJC+WKlQiYCTO2eo63421 I2EXr99gBU9XtdxopY7gnfhP7aWhQVinIkxLbQYWAgymTuHARyyAU37dI2SZU9ic VjutVCy6rPQKq3/hueiswlRVGlnCuUVXOPJQkDe/F6Vdb0+ZvuXpqwKuvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFk4agVW1QxGOR4cvMs3NhSDqimkMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvV1RocUJWYlZERVk1SGh5OHl6YzJGSU9xS2FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHnKMA0G CSqGSIb3DQEBCwUAA4IBAQBVqLxzI42p9Oo20vZyvBF/x8rV4n1j4+bI5v3EZKCu ZpuK+R2deeIfsRzNvsR1iVNuel5cAUwkR4U10e4KnhgDrcYB2oomOZkGHYCJtc27 xmE+4bQoNqmhtRWLDijJir0zwI9QTNzLcb/o6SNsbJGiRuP0GqlbHCPDgD7r2Y0E ro2eNK4Nqo/wKOnbQ+8tCUVIGtE6hcblpXsMP9TdRrV6xfpuuygXb3WaH7tjXxYB aCtSGOt6/N802BOHsDvjG71gAWY5bWAp6e2vXy19KFHT2UbK3BsXRFkwqciV6ec3 UGy0kcYyt3XBRbmEt0Wbk97no+6HTI5ZPGTbZrhW9zj9 -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:18 2026 by rpki-client