This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W6PsQHceN6nHo6Lorz5dZmvV3Oc.roa File: W6PsQHceN6nHo6Lorz5dZmvV3Oc.roa (raw, json) Hash identifier: hJ3ODp6Ajg70QXOAM96dMTUxhXup7v/7PMEoFSYEOvA= Subject key identifier: 5B:A3:EC:40:77:1E:37:A9:C7:A3:A2:E8:AF:3E:5D:66:6B:D5:DC:E7 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D2B3494AB2FFE4F6468CB5A3150F0 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W6PsQHceN6nHo6Lorz5dZmvV3Oc.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9335 IP address blocks: 45.154.24.0/22 maxlen: 24 141.98.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2b:34:94:ab:2f:fe:4f:64:68:cb:5a:31:50:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ba3ec40771e37a9c7a3a2e8af3e5d666bd5dce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:8d:cf:ab:2b:71:ff:d4:f4:97:56:58:88: da:f5:26:fe:da:63:77:2c:25:2b:c7:95:40:1b:49: 94:ba:f6:4f:0b:41:9b:c7:cf:10:ad:9e:da:3a:c7: 25:d9:65:95:8d:49:f3:93:04:ff:4f:78:96:ab:2d: 4f:10:a9:c4:bc:57:45:b3:89:33:0d:4b:92:77:2f: 91:3f:8b:6a:6c:e9:10:9d:49:f6:e2:ab:e9:6e:06: b9:4f:ed:00:3e:85:ca:2f:65:c6:71:a8:a2:7e:eb: 3b:af:1d:44:8e:15:9d:a1:55:7e:36:f9:39:d3:df: c8:18:11:1d:3b:8e:d4:1b:64:48:52:c9:b2:9d:1b: 54:40:1d:66:90:d6:98:de:38:71:6e:08:ce:55:47: c7:64:05:76:77:7d:0d:fd:0e:3d:ed:39:14:fd:56: 7c:95:2e:13:f8:07:6d:4f:5a:26:86:f5:41:a5:0a: e5:39:c0:fb:8d:c6:8b:0f:3d:13:e5:81:4b:27:12: e3:7a:98:b7:05:d2:4c:84:5c:d8:8f:01:7c:8c:92: d6:e0:e2:22:d7:a6:7e:ed:9a:01:76:91:4b:8c:b4: 2e:15:62:42:b9:ca:36:2c:11:a0:2c:4b:d1:f6:74: e2:61:21:f7:14:ce:41:26:27:6a:7c:3a:ca:d1:82: 0e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A3:EC:40:77:1E:37:A9:C7:A3:A2:E8:AF:3E:5D:66:6B:D5:DC:E7 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W6PsQHceN6nHo6Lorz5dZmvV3Oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.24.0/22 141.98.16.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:e8:0c:3b:ac:09:f1:e2:e5:06:da:a7:8f:91:91:a3:b9:49: 03:3a:6e:ba:dd:50:d6:2e:e0:21:5a:b9:bd:9d:05:ca:e1:63: 89:8d:6b:0f:5d:a4:2c:ea:ec:0e:61:d8:b9:99:66:2b:d8:ab: 9f:fc:10:53:cb:d1:3f:49:d9:74:9f:0c:3c:49:0e:22:7a:a9: 18:11:42:b0:84:c8:f2:1c:7b:8b:4b:84:94:7a:aa:fe:47:ca: f7:6a:92:31:62:15:64:87:8c:ec:bf:07:a7:ee:da:7d:44:00: 9a:75:14:bc:26:aa:2a:22:44:a3:3b:b7:3d:e1:0e:ed:ba:0d: 67:fe:2c:d1:99:84:d3:e5:58:39:ec:05:a0:76:d1:69:d3:88: d6:74:ba:60:63:d7:9d:07:e7:27:19:eb:ba:14:db:b9:9b:37: 57:57:1e:c6:58:1a:53:0d:0d:a2:8f:48:b0:c6:3f:0a:c7:51: d0:da:dd:5f:00:aa:f3:54:54:79:ba:ac:d5:05:63:b0:bb:9d: 9c:3a:e4:f7:e2:15:10:3b:52:ba:61:e0:08:88:75:ab:1c:70: 43:7f:eb:a1:d9:1a:dc:51:cb:9d:a7:71:9b:2b:88:77:96:ac: 38:fb:1a:b8:47:f8:19:28:10:87:7d:a7:f2:2b:fc:b0:2a:c9: 5e:4a:98:95 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XSs0lKsv/k9kaMtaMVDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmEzZWM0MDc3MWUzN2E5YzdhM2EyZThhZjNlNWQ2NjZiZDVkY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrGNz6srcf/U9JdWWIja9Sb+2mN3 LCUrx5VAG0mUuvZPC0Gbx88QrZ7aOscl2WWVjUnzkwT/T3iWqy1PEKnEvFdFs4kz DUuSdy+RP4tqbOkQnUn24qvpbga5T+0APoXKL2XGcaiifus7rx1EjhWdoVV+Nvk5 09/IGBEdO47UG2RIUsmynRtUQB1mkNaY3jhxbgjOVUfHZAV2d30N/Q497TkU/VZ8 lS4T+AdtT1omhvVBpQrlOcD7jcaLDz0T5YFLJxLjepi3BdJMhFzYjwF8jJLW4OIi 16Z+7ZoBdpFLjLQuFWJCuco2LBGgLEvR9nTiYSH3FM5BJidqfDrK0YIO7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFuj7EB3Hjepx6Oi6K8+XWZr1dznMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvVzZQc1FIY2VONm5IbzZMb3J6NWRabXZWM09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZoYAwQC jWIQMA0GCSqGSIb3DQEBCwUAA4IBAQAN6Aw7rAnx4uUG2qePkZGjuUkDOm663VDW LuAhWrm9nQXK4WOJjWsPXaQs6uwOYdi5mWYr2Kuf/BBTy9E/Sdl0nww8SQ4ieqkY EUKwhMjyHHuLS4SUeqr+R8r3apIxYhVkh4zsvwen7tp9RACadRS8JqoqIkSjO7c9 4Q7tug1n/izRmYTT5Vg57AWgdtFp04jWdLpgY9edB+cnGeu6FNu5mzdXVx7GWBpT DQ2ij0iwxj8Kx1HQ2t1fAKrzVFR5uqzVBWOwu52cOuT34hUQO1K6YeAIiHWrHHBD f+uh2RrcUcudp3GbK4h3lqw4+xq4R/gZKBCHfafyK/ywKsleSpiV -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:13 2026 by rpki-client