This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/woLmD7M3XCh8hzd96HJkdchNmr0.roa File: woLmD7M3XCh8hzd96HJkdchNmr0.roa (raw, json) Hash identifier: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA= Subject key identifier: C2:82:E6:0F:B3:37:5C:28:7C:87:37:7D:E8:72:64:75:C8:4D:9A:BD Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019B7910F54C4A70E6994F7DA2AE71EE7D86 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/woLmD7M3XCh8hzd96HJkdchNmr0.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273241 IP address blocks: 158.172.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f5:4c:4a:70:e6:99:4f:7d:a2:ae:71:ee:7d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c282e60fb3375c287c87377de8726475c84d9abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:4f:d4:f7:bf:d3:be:2b:55:5e:67:66:d9: b2:e4:4a:06:ae:74:75:f3:ac:b7:8a:f6:ff:ff:e1: c9:71:7d:10:a6:b6:09:53:93:26:e9:28:7b:ad:63: eb:bd:f6:9a:ef:c0:1c:a4:fa:6b:13:64:cc:ef:4f: 25:10:c7:73:ba:56:9a:50:a1:8d:35:0d:01:6a:d9: 37:2d:75:13:ea:b7:9c:69:13:a7:e7:b6:c4:0f:93: 0e:42:1f:c2:0d:9b:b9:50:ab:50:6d:d5:68:a1:b9: 40:50:85:70:eb:bc:11:db:8c:ed:a0:84:60:ad:ec: 5f:24:13:d0:00:de:8d:07:0d:7a:cb:bd:0b:f1:9c: 74:16:12:c7:90:2c:a3:cc:81:72:36:02:75:d6:c5: 8b:3d:f9:44:f0:ad:ed:a3:14:d8:60:76:e4:81:94: 72:2d:eb:12:3b:9e:46:4c:13:e3:a6:b1:dc:a8:01: 9b:29:69:b9:50:28:43:ee:32:54:7a:04:b7:81:5f: 9b:a1:e5:7b:25:9d:00:a4:12:cd:f0:4b:c3:b5:09: 95:67:c3:f8:46:81:ae:10:c1:ca:fe:aa:85:49:6c: 82:c4:ec:7d:5d:43:0d:27:90:82:09:8a:c1:81:b1: 8a:a9:1d:32:29:11:38:17:6b:6f:09:ea:28:e0:65: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:82:E6:0F:B3:37:5C:28:7C:87:37:7D:E8:72:64:75:C8:4D:9A:BD X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/woLmD7M3XCh8hzd96HJkdchNmr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.172.223.0/24 Signature Algorithm: sha256WithRSAEncryption 05:ce:39:56:b3:01:14:cc:d2:51:34:d5:46:c4:9e:09:7e:58: 5f:a6:82:3f:43:40:90:46:c6:ef:d2:63:12:1b:b2:de:18:06: 61:31:ff:47:60:88:70:df:75:74:f4:36:89:1f:5b:fc:b6:58: 93:3d:f4:ca:3d:b8:6a:e7:52:69:f2:78:95:45:9f:4f:5f:3b: dd:a3:64:73:88:9d:c8:4b:af:67:2c:be:d4:99:ad:22:09:5f: 65:d6:97:4c:76:96:29:62:4d:a9:85:b4:52:bc:52:7b:7d:59: 56:54:f5:0d:f1:d0:4d:3e:c0:ad:b9:5d:bb:6a:e6:3f:6b:03: 95:d9:c4:4a:05:67:b8:c6:c5:44:a0:c7:43:6a:6d:76:18:3e: 4c:06:bc:a1:22:8d:62:f5:c1:66:3d:4a:5e:45:ba:35:44:dd: 0a:e9:a2:33:ca:d0:05:97:77:08:af:ae:a5:19:58:ea:1e:8f: 62:a0:8c:f1:89:39:7d:e1:a5:27:54:94:c1:91:db:24:a8:7f: 78:75:5b:f2:7e:f6:da:11:4f:23:08:c4:93:10:50:f7:56:00: 2f:7a:71:ea:af:d8:28:57:64:43:2c:81:12:71:eb:be:ee:2b: c4:75:a9:5a:88:3c:32:6c:5f:cc:64:82:c6:fa:28:19:62:a3: 85:a8:85:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPVMSnDmmU99oq5x7n2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjgyZTYwZmIzMzc1YzI4N2M4NzM3N2RlODcyNjQ3NWM4NGQ5YWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzlP1Pe/074rVV5nZtmy5EoGrnR1 86y3ivb//+HJcX0QprYJU5Mm6Sh7rWPrvfaa78AcpPprE2TM708lEMdzulaaUKGN NQ0Batk3LXUT6recaROn57bED5MOQh/CDZu5UKtQbdVooblAUIVw67wR24ztoIRg rexfJBPQAN6NBw16y70L8Zx0FhLHkCyjzIFyNgJ11sWLPflE8K3toxTYYHbkgZRy LesSO55GTBPjprHcqAGbKWm5UChD7jJUegS3gV+boeV7JZ0ApBLN8EvDtQmVZ8P4 RoGuEMHK/qqFSWyCxOx9XUMNJ5CCCYrBgbGKqR0yKRE4F2tvCeoo4GVW0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMKC5g+zN1wofIc3fehyZHXITZq9MB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvd29MbUQ3TTNYQ2g4aHpkOTZISmtkY2hObXIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnqzfMA0G CSqGSIb3DQEBCwUAA4IBAQAFzjlWswEUzNJRNNVGxJ4JflhfpoI/Q0CQRsbv0mMS G7LeGAZhMf9HYIhw33V09DaJH1v8tliTPfTKPbhq51Jp8niVRZ9PXzvdo2RziJ3I S69nLL7Uma0iCV9l1pdMdpYpYk2phbRSvFJ7fVlWVPUN8dBNPsCtuV27auY/awOV 2cRKBWe4xsVEoMdDam12GD5MBryhIo1i9cFmPUpeRbo1RN0K6aIzytAFl3cIr66l GVjqHo9ioIzxiTl94aUnVJTBkdskqH94dVvyfvbaEU8jCMSTEFD3VgAvenHqr9go V2RDLIESceu+7ivEdalaiDwybF/MZILG+igZYqOFqIUN -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:18 2026 by rpki-client