This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/1WFTVE_laDxR2551YD9-IDIhOK4.roa File: 1WFTVE_laDxR2551YD9-IDIhOK4.roa (raw, json) Hash identifier: 1U7XfEnUkzCJgaorLVPneDn26hSAWBbm2FCXShHT0iY= Subject key identifier: D5:61:53:54:4F:E5:68:3C:51:DB:9E:75:60:3F:7E:20:32:21:38:AE Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4 Certificate serial: 019B7EA70192F93ED922236E92C20573EB9D Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/1WFTVE_laDxR2551YD9-IDIhOK4.roa Signing time: Fri 02 Jan 2026 12:20:32 +0000 ROA not before: Fri 02 Jan 2026 12:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214197 IP address blocks: 5.28.40.0/21 maxlen: 24 5.28.47.0/24 maxlen: 24 2a05:e980::/29 maxlen: 32 2a05:e980::/32 maxlen: 32 2a05:e987::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:01:92:f9:3e:d9:22:23:6e:92:c2:05:73:eb:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d56153544fe5683c51db9e75603f7e20322138ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:7b:f1:fb:13:11:fa:89:da:31:4e:56:41: 65:c5:83:bc:1e:74:cb:7d:9f:5a:eb:de:6c:6c:66: 47:c8:b5:ab:e4:55:ec:11:22:1f:43:97:b6:50:50: 0d:e7:59:26:cb:75:1d:52:62:f8:f6:ef:9c:7a:96: e8:d3:a4:44:ca:52:fe:bf:95:24:1e:1a:19:de:fe: d9:c8:2d:e7:9e:04:1b:a8:81:b5:17:73:04:b1:f8: 70:2e:40:7b:25:c7:e8:94:c2:f5:f2:74:e0:77:da: 6b:78:52:db:3b:a5:4c:1b:b8:d6:3e:64:36:6c:ee: 03:be:06:9b:66:a7:d7:b5:06:96:32:a1:96:a2:8b: c4:04:54:a5:0b:ac:a8:81:e5:b1:67:3e:93:e6:25: 09:96:a1:c8:af:40:07:83:3b:22:67:78:ef:bb:5a: 70:42:3e:ed:7d:79:52:36:a5:b4:50:03:8e:45:74: 0c:67:a3:26:66:c9:1f:09:d2:bd:64:64:6c:f9:66: 62:66:57:dd:a9:b3:4b:41:47:30:aa:05:be:2c:a3: 02:94:91:83:c4:03:e2:2c:ac:04:4d:ad:42:ac:49: 2e:7c:39:39:60:9e:5e:1e:b4:31:56:b4:3d:26:e8: 07:73:cc:ef:fc:ba:19:bd:ed:4f:0d:0d:a4:b0:08: cc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:61:53:54:4F:E5:68:3C:51:DB:9E:75:60:3F:7E:20:32:21:38:AE X509v3 Authority Key Identifier: keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/1WFTVE_laDxR2551YD9-IDIhOK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.28.40.0/21 IPv6: 2a05:e980::/29 Signature Algorithm: sha256WithRSAEncryption 3e:51:57:77:89:35:e8:1e:61:b5:c7:c1:68:78:0a:a3:17:db: a1:4d:ba:05:76:d4:9f:a8:80:2c:1b:76:de:d4:ee:4b:59:a2: a0:43:61:2b:70:95:ce:97:61:4e:b9:fd:b6:16:29:79:9f:82: 99:3d:0d:c2:a7:93:05:28:f8:0f:c5:81:72:3f:87:60:c5:c5: 0e:47:c4:16:4b:1a:e5:15:0d:c2:44:3f:81:dd:62:4e:b4:44: 37:d9:8a:fa:6a:68:28:05:e4:12:0e:a5:b1:d7:37:bd:bb:7b: 97:ca:60:70:6c:3f:7c:cb:15:4d:2f:54:10:4f:ba:aa:b2:fa: 28:99:0b:91:69:b4:5e:2b:d5:cd:fa:e9:df:f0:6e:0d:1f:b3: 06:fe:70:ff:a8:8a:be:dc:d9:85:bb:e4:c1:85:33:6e:9c:06: 47:d4:0d:8d:47:16:21:79:69:ca:f8:91:12:b4:51:b3:48:23: 96:1f:92:8b:1b:ab:12:d1:9a:b1:30:12:e1:20:e6:50:9c:9e: ea:7a:f0:eb:0b:82:10:72:0b:42:34:0c:a2:a3:ad:bd:1f:f4: 4d:db:50:7e:15:20:16:7c:bf:a7:b3:4f:b8:65:6c:7d:f0:71: 83:72:04:ba:70:3e:d1:8f:70:60:eb:bc:81:01:23:ab:2c:53: a3:99:d8:fe -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pwGS+T7ZIiNuksIFc+udMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOGU2ODcwMmVmNWQ0OGM0ZjJiMDcyZDljYjQ3M2U2MmI4 N2IzZTQwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTYxNTM1NDRmZTU2ODNjNTFkYjllNzU2MDNmN2UyMDMyMjEzOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhJ78fsTEfqJ2jFOVkFlxYO8HnTL fZ9a695sbGZHyLWr5FXsESIfQ5e2UFAN51kmy3UdUmL49u+cepbo06REylL+v5Uk HhoZ3v7ZyC3nngQbqIG1F3MEsfhwLkB7JcfolML18nTgd9preFLbO6VMG7jWPmQ2 bO4DvgabZqfXtQaWMqGWoovEBFSlC6yogeWxZz6T5iUJlqHIr0AHgzsiZ3jvu1pw Qj7tfXlSNqW0UAOORXQMZ6MmZskfCdK9ZGRs+WZiZlfdqbNLQUcwqgW+LKMClJGD xAPiLKwETa1CrEkufDk5YJ5eHrQxVrQ9JugHc8zv/LoZve1PDQ2ksAjMGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNVhU1RP5Wg8UduedWA/fiAyITiuMB8GA1UdIwQY MBaAFEqOaHAu9dSMTysHLZy0c+Yrh7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWIt MWM0YmI1OGFiNzIwLzEvMVdGVFZFX2xhRHhSMjU1MVlEOS1JREloT0s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWItMWM0YmI1OGFiNzIw LzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBRwoMA0E AgACMAcDBQMqBemAMA0GCSqGSIb3DQEBCwUAA4IBAQA+UVd3iTXoHmG1x8FoeAqj F9uhTboFdtSfqIAsG3be1O5LWaKgQ2ErcJXOl2FOuf22Fil5n4KZPQ3Cp5MFKPgP xYFyP4dgxcUOR8QWSxrlFQ3CRD+B3WJOtEQ32Yr6amgoBeQSDqWx1ze9u3uXymBw bD98yxVNL1QQT7qqsvoomQuRabReK9XN+unf8G4NH7MG/nD/qIq+3NmFu+TBhTNu nAZH1A2NRxYheWnK+JEStFGzSCOWH5KLG6sS0ZqxMBLhIOZQnJ7qevDrC4IQcgtC NAyio629H/RN21B+FSAWfL+ns0+4ZWx98HGDcgS6cD7Rj3Bg67yBASOrLFOjmdj+ -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:25 2026 by rpki-client