This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/wBNaW5KI2bk7rKftygUeDW0sZPw.roa File: wBNaW5KI2bk7rKftygUeDW0sZPw.roa (raw, json) Hash identifier: 92vTX700phahUrU+qTurYQRSfJQb0PnxRKVm95D4uhQ= Subject key identifier: C0:13:5A:5B:92:88:D9:B9:3B:AC:A7:ED:CA:05:1E:0D:6D:2C:64:FC Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2 Certificate serial: 019B7DCA3A432CB4B540173C732E12C22A0C Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/wBNaW5KI2bk7rKftygUeDW0sZPw.roa Signing time: Fri 02 Jan 2026 08:19:23 +0000 ROA not before: Fri 02 Jan 2026 08:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57087 IP address blocks: 5.182.130.0/23 maxlen: 23 5.182.130.0/24 maxlen: 24 5.182.131.0/24 maxlen: 24 193.163.42.0/23 maxlen: 24 193.163.42.0/24 maxlen: 24 193.163.43.0/24 maxlen: 24 193.163.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3a:43:2c:b4:b5:40:17:3c:73:2e:12:c2:2a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2 Validity Not Before: Jan 2 08:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0135a5b9288d9b93baca7edca051e0d6d2c64fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:e5:4e:56:18:22:15:55:f5:e9:2b:0b:65: 9d:f9:15:ee:06:4d:0e:22:37:bb:82:6f:18:db:eb: 01:2d:ec:df:f0:b5:dd:1a:21:68:d7:2a:15:d8:7a: 79:86:af:05:1b:ba:52:6b:c9:a6:d7:27:d7:bd:4f: fa:05:9b:d3:f3:8a:ca:09:90:cd:11:1b:bc:93:96: f9:74:b4:61:d9:a6:36:bc:9a:64:ed:45:f6:16:65: 2e:87:cf:c3:29:f3:bf:22:b8:6b:a9:98:f8:aa:5c: 5a:6e:ca:a8:f2:8c:19:00:2a:75:67:67:b9:b6:a8: 43:f0:28:32:12:88:b1:01:bd:f0:12:f9:61:e4:7f: 76:aa:75:a4:66:12:28:9f:4a:bd:56:1c:f8:10:56: ca:23:63:44:01:df:58:6c:57:1d:95:88:db:90:14: f1:8d:99:12:83:bd:3b:05:13:34:18:a9:a4:cf:49: 1f:4b:8a:b5:71:92:9a:4f:26:52:02:15:1d:c5:5f: 7e:10:12:07:fd:37:38:d2:b1:3b:ad:e8:f4:12:67: d4:59:ec:05:dd:e2:fe:c6:94:5a:4a:ad:f1:b6:68: 41:af:ca:d1:d0:b2:49:fe:2a:a8:70:d4:73:a7:d4: 27:52:60:55:b4:57:91:82:6a:8f:ee:32:ca:fa:cc: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:13:5A:5B:92:88:D9:B9:3B:AC:A7:ED:CA:05:1E:0D:6D:2C:64:FC X509v3 Authority Key Identifier: keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/wBNaW5KI2bk7rKftygUeDW0sZPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.130.0/23 193.163.42.0-193.163.44.255 Signature Algorithm: sha256WithRSAEncryption 6e:ea:a7:2e:36:a9:3c:30:dd:0f:25:4d:63:3f:ed:6b:46:d4: 4d:a9:c0:6a:14:e5:3d:e3:72:b2:95:8c:40:98:8d:fb:a0:e9: 4e:65:22:3d:6c:78:0b:e8:08:31:33:71:8e:2f:a8:13:25:90: 43:29:bf:42:1d:5c:ee:9c:7a:ae:db:a8:b0:9e:4b:e0:1a:de: b7:b0:2f:fb:8f:fe:e9:46:6e:6b:7a:49:ec:02:b8:c1:b0:1d: 4b:c6:97:ad:fd:2d:4c:f2:c2:d9:df:87:43:19:70:2a:14:95: fd:a1:38:72:16:91:bd:7d:ff:29:fe:f7:e0:fd:80:00:7e:7b: 3e:2f:5e:2b:dc:85:cf:61:af:76:e4:7c:85:cc:83:22:73:27: 7a:92:da:da:da:01:d4:28:b9:8b:4c:1b:6a:e2:fc:df:67:c0: 3b:81:ea:4d:7d:e6:53:f1:97:04:00:5b:ce:be:cb:29:cb:aa: f1:c6:5b:7c:14:90:64:89:22:83:80:22:53:3a:d4:96:d6:d1: 59:98:d3:f2:04:d7:34:d3:7d:00:9b:15:f0:7c:59:41:81:9d: d1:52:80:6d:51:bc:b5:af:e7:a0:9d:db:94:1a:b4:da:49:3a: 3e:27:aa:d7:61:cc:78:d3:35:5b:3c:d4:12:51:39:d0:9f:79: 64:c5:54:27 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yjpDLLS1QBc8cy4SwioMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh ZjUxZDIwHhcNMjYwMTAyMDgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDEzNWE1YjkyODhkOWI5M2JhY2E3ZWRjYTA1MWUwZDZkMmM2NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rPlTlYYIhVV9ekrC2Wd+RXuBk0O Ije7gm8Y2+sBLezf8LXdGiFo1yoV2Hp5hq8FG7pSa8mm1yfXvU/6BZvT84rKCZDN ERu8k5b5dLRh2aY2vJpk7UX2FmUuh8/DKfO/IrhrqZj4qlxabsqo8owZACp1Z2e5 tqhD8CgyEoixAb3wEvlh5H92qnWkZhIon0q9Vhz4EFbKI2NEAd9YbFcdlYjbkBTx jZkSg707BRM0GKmkz0kfS4q1cZKaTyZSAhUdxV9+EBIH/Tc40rE7rej0EmfUWewF 3eL+xpRaSq3xtmhBr8rR0LJJ/iqocNRzp9QnUmBVtFeRgmqP7jLK+sx35QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMATWluSiNm5O6yn7coFHg1tLGT8MB8GA1UdIwQY MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt YTk4OTM1NDVjM2M1LzEvd0JOYVc1S0kyYms3cktmdHlnVWVEVzBzWlB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1 LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBBbaCMAwD BAHBoyoDBADBoywwDQYJKoZIhvcNAQELBQADggEBAG7qpy42qTww3Q8lTWM/7WtG 1E2pwGoU5T3jcrKVjECYjfug6U5lIj1seAvoCDEzcY4vqBMlkEMpv0IdXO6ceq7b qLCeS+Aa3rewL/uP/ulGbmt6SewCuMGwHUvGl639LUzywtnfh0MZcCoUlf2hOHIW kb19/yn+9+D9gAB+ez4vXivchc9hr3bkfIXMgyJzJ3qS2traAdQouYtMG2ri/N9n wDuB6k195lPxlwQAW86+yynLqvHGW3wUkGSJIoOAIlM61JbW0VmY0/IE1zTTfQCb FfB8WUGBndFSgG1RvLWv56Cd25QatNpJOj4nqtdhzHjTNVs81BJROdCfeWTFVCc= -----END CERTIFICATE-----Generated at Tue Jan 27 08:34:49 2026 by rpki-client