This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/WX5NZIBmGtKcjA5McCteMKIld9c.roa File: WX5NZIBmGtKcjA5McCteMKIld9c.roa (raw, json) Hash identifier: SYzWuwVpn6nnk1jVhMPZvJjHU4K1wll8Vo9NXaAxDdM= Subject key identifier: 59:7E:4D:64:80:66:1A:D2:9C:8C:0E:4C:70:2B:5E:30:A2:25:77:D7 Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B79111A20A856537E68D4D3B70D65F1AA Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/WX5NZIBmGtKcjA5McCteMKIld9c.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50077 IP address blocks: 43.239.88.0/22 maxlen: 24 91.210.64.0/22 maxlen: 24 103.206.232.0/22 maxlen: 24 107.181.156.0/22 maxlen: 24 155.254.40.0/22 maxlen: 24 155.254.44.0/22 maxlen: 24 155.254.50.0/23 maxlen: 24 155.254.52.0/22 maxlen: 24 155.254.56.0/22 maxlen: 24 185.135.212.0/22 maxlen: 24 198.105.96.0/22 maxlen: 24 198.105.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1a:20:a8:56:53:7e:68:d4:d3:b7:0d:65:f1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=597e4d6480661ad29c8c0e4c702b5e30a22577d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:9f:1b:6a:b1:82:88:43:12:24:d6:f3:7c: 2b:15:6a:ce:fb:2f:0a:65:e3:ab:97:e1:29:d7:df: 35:0c:6a:80:b4:5a:f0:38:f7:8b:d1:76:d7:db:e9: e4:6b:da:af:01:7f:9e:d1:82:00:20:57:4d:e0:5e: 02:2a:66:85:e0:e5:64:b0:ce:32:75:63:ba:1d:6f: 8f:b1:1f:f8:ff:d6:7d:76:7e:1a:bd:c6:92:5a:f1: 47:e9:44:ec:e0:fe:62:a3:a6:75:9b:d2:c5:36:8f: bf:4b:bf:8f:e2:98:7e:11:64:80:25:81:01:6b:6e: 16:7b:d4:0f:1d:9b:33:81:37:49:47:47:9c:06:48: 96:35:b6:0c:ed:71:e5:a9:75:41:ef:8a:be:44:29: c6:86:b1:27:4c:8c:23:aa:2b:52:01:88:2e:01:fb: 9e:0c:35:66:34:c2:f9:3f:b1:f7:da:aa:f9:d1:90: ae:9c:8f:f3:b9:07:96:7c:92:24:75:2a:3a:fe:e5: bf:12:8e:67:59:05:b3:c5:87:5f:85:d0:2e:c0:ad: 59:fe:84:ab:35:18:f0:d2:bf:af:7c:70:ee:ac:43: de:cd:91:b3:36:74:12:b7:b5:d8:75:18:b8:49:89: 75:a5:27:d8:42:a9:8e:11:aa:c3:e2:24:f7:7e:93: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7E:4D:64:80:66:1A:D2:9C:8C:0E:4C:70:2B:5E:30:A2:25:77:D7 X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/WX5NZIBmGtKcjA5McCteMKIld9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.239.88.0/22 91.210.64.0/22 103.206.232.0/22 107.181.156.0/22 155.254.40.0/21 155.254.50.0-155.254.59.255 185.135.212.0/22 198.105.96.0/22 198.105.104.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:48:f0:97:31:f6:1c:d6:a8:6f:6b:47:d7:c0:31:4d:10:b2: c2:1e:68:c6:75:3b:0a:5f:ad:2f:52:c6:51:93:49:b9:cf:6c: de:0f:ed:b2:e6:dd:2c:d6:25:8f:2e:37:b1:ba:c8:79:ee:f4: 15:80:06:ed:56:f5:68:ee:73:27:9e:74:ec:92:27:05:04:6e: e1:cc:71:0a:9e:c3:53:03:f4:9b:67:fc:b3:10:e5:77:c9:b0: 1e:f5:e8:f5:c4:00:b1:9a:5f:1a:0d:42:d5:48:dd:47:09:11: dd:fe:4a:28:75:94:2c:d3:87:96:ef:cc:83:9c:73:f5:a7:66: de:51:43:a7:f8:13:40:ed:88:43:3b:34:c8:36:50:39:2e:93: af:b0:8f:6f:00:bb:9d:dd:b5:e4:aa:08:a0:bd:4c:b1:66:8c: b2:9b:c9:75:85:43:b8:f9:e7:20:d6:ca:36:40:f4:69:a5:6f: 72:47:13:90:4c:25:f3:72:a1:53:fc:14:fd:f4:ed:c2:33:b2: e2:e8:9d:56:a7:0c:91:6a:76:c1:ae:bd:54:8a:db:66:46:f6: 1e:07:9a:3b:32:4a:66:bd:da:34:00:e6:87:7e:be:60:8d:92: 92:cc:28:8b:93:01:f0:23:4e:88:33:9a:e0:d1:b7:27:a9:32: d9:2b:d7:c6 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt5ERogqFZTfmjU07cNZfGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTdlNGQ2NDgwNjYxYWQyOWM4YzBlNGM3MDJiNWUzMGEyMjU3N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmafG2qxgohDEiTW83wrFWrO+y8K ZeOrl+Ep1981DGqAtFrwOPeL0XbX2+nka9qvAX+e0YIAIFdN4F4CKmaF4OVksM4y dWO6HW+PsR/4/9Z9dn4avcaSWvFH6UTs4P5io6Z1m9LFNo+/S7+P4ph+EWSAJYEB a24We9QPHZszgTdJR0ecBkiWNbYM7XHlqXVB74q+RCnGhrEnTIwjqitSAYguAfue DDVmNML5P7H32qr50ZCunI/zuQeWfJIkdSo6/uW/Eo5nWQWzxYdfhdAuwK1Z/oSr NRjw0r+vfHDurEPezZGzNnQSt7XYdRi4SYl1pSfYQqmOEarD4iT3fpPJyQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFFl+TWSAZhrSnIwOTHArXjCiJXfXMB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvV1g1TlpJQm1HdEtjakE1TWNDdGVNS0lsZDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCK+9YAwQC W9JAAwQCZ87oAwQCa7WcAwQDm/4oMAwDBAGb/jIDBAKb/jgDBAK5h9QDBALGaWAD BALGaWgwDQYJKoZIhvcNAQELBQADggEBAItI8Jcx9hzWqG9rR9fAMU0QssIeaMZ1 OwpfrS9SxlGTSbnPbN4P7bLm3SzWJY8uN7G6yHnu9BWABu1W9WjucyeedOySJwUE buHMcQqew1MD9Jtn/LMQ5XfJsB716PXEALGaXxoNQtVI3UcJEd3+Sih1lCzTh5bv zIOcc/WnZt5RQ6f4E0DtiEM7NMg2UDkuk6+wj28Au53dteSqCKC9TLFmjLKbyXWF Q7j55yDWyjZA9Gmlb3JHE5BMJfNyoVP8FP307cIzsuLonVanDJFqdsGuvVSK22ZG 9h4HmjsySma92jQA5od+vmCNkpLMKIuTAfAjTogzmuDRtyepMtkr18Y= -----END CERTIFICATE-----Generated at Wed Jan 21 15:05:03 2026 by rpki-client