This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/W0kDwuE8Wzw-iZxK0RP3iilB4OI.roa File: W0kDwuE8Wzw-iZxK0RP3iilB4OI.roa (raw, json) Hash identifier: LAGYp6tmx7aAjzZBlxGzQ8k1I+/BB+mHmklMRyiCKgA= Subject key identifier: 5B:49:03:C2:E1:3C:5B:3C:3E:89:9C:4A:D1:13:F7:8A:29:41:E0:E2 Certificate issuer: /CN=7190f5d5f92a486362177a42b3d5efda20e220e1 Certificate serial: 019B77593E4BA54F7C1909706C50F5E1E822 Authority key identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/W0kDwuE8Wzw-iZxK0RP3iilB4OI.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211742 IP address blocks: 195.245.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3e:4b:a5:4f:7c:19:09:70:6c:50:f5:e1:e8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7190f5d5f92a486362177a42b3d5efda20e220e1 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b4903c2e13c5b3c3e899c4ad113f78a2941e0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:ac:4a:a3:9c:94:aa:75:0f:1c:e4:1e:04: c2:58:84:cb:b0:42:8e:4e:65:c9:04:d8:d5:76:08: 35:80:98:6d:b0:be:43:37:e5:ed:b9:aa:98:c7:24: d7:a6:1e:0f:a4:21:40:f2:ca:62:ec:4f:3a:82:8e: a4:e6:8b:ed:7d:b8:18:62:b9:45:4d:0f:79:7e:35: 84:d4:57:2b:07:1f:f0:a6:78:f4:8c:a6:75:29:5a: 77:35:3b:78:1b:a3:95:be:06:4d:03:e8:75:c7:78: 36:be:76:bf:68:91:4c:9d:b4:ff:58:e8:1f:20:18: 08:ef:52:2b:fd:29:e2:11:e7:a2:03:96:a6:f6:38: eb:cc:f7:e2:7b:c3:26:3e:40:fa:0e:e3:9c:91:81: 9a:73:9e:f7:a5:68:33:25:62:2c:7d:c7:a1:47:1a: cc:96:78:1d:f6:8c:3c:57:51:a9:b7:0f:fa:50:8c: f9:c3:ac:e4:3f:c9:9c:31:40:aa:a3:3b:8b:be:ac: 31:dd:b9:d4:23:a0:0f:6d:ba:ef:96:49:02:3c:dc: 3d:36:31:3a:84:24:4b:a8:a8:8c:3b:30:2d:1a:f4: 7c:98:51:09:d7:9e:b8:21:2f:b7:c9:20:24:d0:c4: 30:9c:6b:63:8e:fa:54:55:10:54:c2:c9:57:35:52: 12:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:49:03:C2:E1:3C:5B:3C:3E:89:9C:4A:D1:13:F7:8A:29:41:E0:E2 X509v3 Authority Key Identifier: keyid:71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/W0kDwuE8Wzw-iZxK0RP3iilB4OI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.203.0/24 Signature Algorithm: sha256WithRSAEncryption a9:99:dc:14:1a:34:cc:f5:49:a3:f0:62:40:13:1c:b9:b3:ee: 0d:5b:63:03:4e:2e:4a:1e:b6:33:fd:35:20:ee:10:02:c5:29: 30:8e:60:59:8f:03:69:aa:ba:27:22:3a:ae:03:a8:dc:11:26: 68:e9:0b:32:40:36:18:07:18:85:f3:ce:1f:e2:63:73:9f:19: 1c:17:2d:53:9d:a4:a7:d1:13:3d:03:d1:07:57:31:e9:42:56: df:ca:9e:82:8a:2b:ce:5b:99:f2:73:65:eb:c7:93:8d:02:c3: d5:19:3d:2b:e8:1e:22:da:bc:d7:94:0c:87:9d:15:e4:99:4d: 82:5c:2e:74:65:05:dd:7b:a9:ca:80:64:ff:d6:9f:3b:53:85: 02:97:bb:52:2f:11:30:5a:2b:bb:07:d7:6f:26:bd:78:ed:84: e5:73:50:7d:fc:90:09:28:a3:2b:0f:43:64:aa:cd:ca:67:0a: 5b:63:bb:69:19:d2:ad:53:65:dc:ae:d9:c3:f0:9d:3e:e5:8c: c1:1b:ac:a3:fd:dd:30:94:b1:e8:c2:a0:38:ef:a9:2b:ff:2e: dc:db:95:69:99:16:56:45:aa:93:a9:6b:38:ba:74:7e:97:f4: cc:ea:4e:9d:82:4d:fe:c9:99:a4:3e:e8:55:5f:19:29:e3:e3: 0b:f2:0e:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WT5LpU98GQlwbFD14egiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTBmNWQ1ZjkyYTQ4NjM2MjE3N2E0MmIzZDVlZmRhMjBl MjIwZTEwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjQ5MDNjMmUxM2M1YjNjM2U4OTljNGFkMTEzZjc4YTI5NDFlMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7CsSqOclKp1DxzkHgTCWITLsEKO TmXJBNjVdgg1gJhtsL5DN+XtuaqYxyTXph4PpCFA8spi7E86go6k5ovtfbgYYrlF TQ95fjWE1FcrBx/wpnj0jKZ1KVp3NTt4G6OVvgZNA+h1x3g2vna/aJFMnbT/WOgf IBgI71Ir/SniEeeiA5am9jjrzPfie8MmPkD6DuOckYGac573pWgzJWIsfcehRxrM lngd9ow8V1Gptw/6UIz5w6zkP8mcMUCqozuLvqwx3bnUI6APbbrvlkkCPNw9NjE6 hCRLqKiMOzAtGvR8mFEJ1564IS+3ySAk0MQwnGtjjvpUVRBUwslXNVISLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtJA8LhPFs8PomcStET94opQeDiMB8GA1UdIwQY MBaAFHGQ9dX5KkhjYhd6QrPV79og4iDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pEMTFma3FTR05pRjNwQ3M5WHYyaURpSU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82OGEwMTQtN2RiYS00NDMwLThkZGUt MDFjODI3ZDZlMGZlLzEvVzBrRHd1RThXenctaVp4SzBSUDNpaWxCNE9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82OGEwMTQtN2RiYS00NDMwLThkZGUtMDFjODI3ZDZlMGZl LzEvY1pEMTFma3FTR05pRjNwQ3M5WHYyaURpSU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/XLMA0G CSqGSIb3DQEBCwUAA4IBAQCpmdwUGjTM9Umj8GJAExy5s+4NW2MDTi5KHrYz/TUg 7hACxSkwjmBZjwNpqronIjquA6jcESZo6QsyQDYYBxiF884f4mNznxkcFy1TnaSn 0RM9A9EHVzHpQlbfyp6CiivOW5nyc2Xrx5ONAsPVGT0r6B4i2rzXlAyHnRXkmU2C XC50ZQXde6nKgGT/1p87U4UCl7tSLxEwWiu7B9dvJr147YTlc1B9/JAJKKMrD0Nk qs3KZwpbY7tpGdKtU2XcrtnD8J0+5YzBG6yj/d0wlLHowqA476kr/y7c25VpmRZW RaqTqWs4unR+l/TM6k6dgk3+yZmkPuhVXxkp4+ML8g67 -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:38 2026 by rpki-client