This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/WrADKUB6oNgRudH0eNNDASCTWGs.roa File: WrADKUB6oNgRudH0eNNDASCTWGs.roa (raw, json) Hash identifier: 6wA2NVUu2434Y8q07bK3lOi84PICECNqgtQRT6NlYII= Subject key identifier: 5A:B0:03:29:40:7A:A0:D8:11:B9:D1:F4:78:D3:43:01:20:93:58:6B Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64 Certificate serial: 019B79EC9E83E76AF6A3C00F1205B128F766 Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/WrADKUB6oNgRudH0eNNDASCTWGs.roa Signing time: Thu 01 Jan 2026 14:18:28 +0000 ROA not before: Thu 01 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47605 IP address blocks: 5.133.104.0/22 maxlen: 22 62.220.228.0/22 maxlen: 22 80.208.240.0/21 maxlen: 21 85.194.194.0/23 maxlen: 23 85.194.220.0/22 maxlen: 22 85.194.234.0/23 maxlen: 23 87.236.152.0/21 maxlen: 21 185.38.0.0/22 maxlen: 22 2a00:1d50::/32 maxlen: 32 2a00:1d50:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9e:83:e7:6a:f6:a3:c0:0f:12:05:b1:28:f7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64 Validity Not Before: Jan 1 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab00329407aa0d811b9d1f478d343012093586b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:59:be:41:c0:29:c8:28:41:b2:e9:62:2c: 37:52:09:8b:01:77:dc:d7:56:38:37:bc:1f:d6:0f: 19:da:c4:0c:cb:78:26:8f:4e:b8:43:04:1c:7d:19: 10:69:48:8a:07:d2:0d:35:c4:63:11:cb:1c:6c:b1: 61:20:21:31:93:cf:b1:42:6a:13:80:d3:d0:66:fc: 3d:42:7a:60:48:14:92:8f:ef:75:48:da:3a:e6:e5: 70:d4:2c:a6:e7:8f:1f:6b:c5:7d:47:98:2f:e7:93: c7:36:46:09:8f:29:4f:ab:de:9a:4c:5e:4d:52:e6: 8d:81:52:7d:31:cb:18:64:a6:7e:6a:2a:ab:9b:8b: a3:22:2a:82:00:d4:72:de:ba:1e:cc:a9:ec:78:44: 39:64:e7:88:63:37:4b:90:c6:2a:96:f1:d9:1d:3c: fb:fb:59:6d:03:ea:0a:30:8e:00:5e:7d:48:89:ce: 56:06:26:14:48:fd:9b:9e:ef:b6:c1:4b:aa:58:59: 50:99:d0:b0:10:6e:10:d9:a1:ef:e7:8c:a0:47:f1: 88:54:8b:9c:c2:5e:89:c3:04:02:59:82:65:f7:c9: 9a:45:55:9f:c8:e3:4e:5d:d1:d3:6b:20:51:c8:6c: 0a:7b:bb:84:a9:eb:e2:e5:1e:54:2d:e5:41:71:ec: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B0:03:29:40:7A:A0:D8:11:B9:D1:F4:78:D3:43:01:20:93:58:6B X509v3 Authority Key Identifier: keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/WrADKUB6oNgRudH0eNNDASCTWGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.104.0/22 62.220.228.0/22 80.208.240.0/21 85.194.194.0/23 85.194.220.0/22 85.194.234.0/23 87.236.152.0/21 185.38.0.0/22 IPv6: 2a00:1d50::/32 Signature Algorithm: sha256WithRSAEncryption 0a:6e:b9:b0:aa:30:af:f6:a7:29:08:c7:1b:25:b7:6e:2c:6e: db:dc:0d:4d:9b:41:df:67:22:93:c4:43:1d:cd:36:d8:78:ed: aa:1b:30:c9:02:05:35:c5:ff:ca:5f:9e:45:73:67:ee:8d:43: 4f:01:3e:c0:59:61:c1:ff:10:42:f7:98:14:96:e6:10:c1:d2: cc:8c:58:70:91:c4:2b:8f:98:67:b7:7b:58:31:03:f9:c4:86: b5:05:04:a3:ee:a7:f9:c0:e3:f9:49:52:0a:3e:94:ec:f4:46: 18:15:59:d0:4e:49:98:da:fe:1c:4d:2d:55:7c:8e:5b:db:10: 04:9d:d4:34:ed:87:6f:e4:7a:f9:c9:d4:a9:7e:94:d1:92:d9: f2:9f:6b:55:16:26:6c:15:80:db:05:72:44:f3:2a:51:bc:35: 3f:bc:d5:47:bb:31:86:64:b3:58:ca:0a:be:0d:66:80:15:3d: 3f:e0:49:c9:e8:fd:ca:4c:f0:3a:ec:07:90:b1:ec:79:c4:71: ef:a5:ca:9b:cd:b4:fc:4a:07:0c:a3:d8:f2:1b:6a:57:93:11: 1c:7e:99:df:0e:44:0c:53:40:6a:35:cf:b5:06:2c:de:3a:02: 78:20:99:15:8f:74:69:25:08:90:96:d7:2c:a2:ef:3b:d2:2a: b8:fd:af:47 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt57J6D52r2o8APEgWxKPdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmIwOTlhYTQzMDgxYWM4Mzk1ZWUwYjkwY2NmMWE4ODQ0 ZjhkNjQwHhcNMjYwMTAxMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWIwMDMyOTQwN2FhMGQ4MTFiOWQxZjQ3OGQzNDMwMTIwOTM1ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4hZvkHAKcgoQbLpYiw3UgmLAXfc 11Y4N7wf1g8Z2sQMy3gmj064QwQcfRkQaUiKB9INNcRjEcscbLFhICExk8+xQmoT gNPQZvw9QnpgSBSSj+91SNo65uVw1Cym548fa8V9R5gv55PHNkYJjylPq96aTF5N UuaNgVJ9McsYZKZ+aiqrm4ujIiqCANRy3roezKnseEQ5ZOeIYzdLkMYqlvHZHTz7 +1ltA+oKMI4AXn1Iic5WBiYUSP2bnu+2wUuqWFlQmdCwEG4Q2aHv54ygR/GIVIuc wl6JwwQCWYJl98maRVWfyONOXdHTayBRyGwKe7uEqevi5R5ULeVBcexowwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFFqwAylAeqDYEbnR9HjTQwEgk1hrMB8GA1UdIwQY MBaAFHj7CZqkMIGsg5XuC5DM8aiET41kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMt MmQ4YThkOTY2OWY4LzEvV3JBREtVQjZvTmdSdWRIMGVOTkRBU0NUV0dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMtMmQ4YThkOTY2OWY4 LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCBYVoAwQC PtzkAwQDUNDwAwQBVcLCAwQCVcLcAwQBVcLqAwQDV+yYAwQCuSYAMA0EAgACMAcD BQAqAB1QMA0GCSqGSIb3DQEBCwUAA4IBAQAKbrmwqjCv9qcpCMcbJbduLG7b3A1N m0HfZyKTxEMdzTbYeO2qGzDJAgU1xf/KX55Fc2fujUNPAT7AWWHB/xBC95gUluYQ wdLMjFhwkcQrj5hnt3tYMQP5xIa1BQSj7qf5wOP5SVIKPpTs9EYYFVnQTkmY2v4c TS1VfI5b2xAEndQ07Ydv5Hr5ydSpfpTRktnyn2tVFiZsFYDbBXJE8ypRvDU/vNVH uzGGZLNYygq+DWaAFT0/4EnJ6P3KTPA67AeQsex5xHHvpcqbzbT8SgcMo9jyG2pX kxEcfpnfDkQMU0BqNc+1BizeOgJ4IJkVj3RpJQiQltcsou870iq4/a9H -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:53 2026 by rpki-client