This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa File: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (raw, json) Hash identifier: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k= Subject key identifier: 5A:F7:BA:1A:9A:3B:8C:A5:28:5A:49:0A:F8:80:F6:8E:6C:95:ED:CE Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Certificate serial: 019B78A2EA287E271E4D9DFA78D0165762AF Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9000 IP address blocks: 212.50.32.0/24 maxlen: 24 212.50.33.0/24 maxlen: 24 212.50.36.0/24 maxlen: 24 212.50.37.0/24 maxlen: 24 212.50.38.0/24 maxlen: 24 212.50.39.0/24 maxlen: 24 212.50.40.0/24 maxlen: 24 212.50.41.0/24 maxlen: 24 212.50.44.0/24 maxlen: 24 212.50.54.0/24 maxlen: 24 212.50.55.0/24 maxlen: 24 212.50.61.0/24 maxlen: 24 2001:1b68::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ea:28:7e:27:1e:4d:9d:fa:78:d0:16:57:62:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5af7ba1a9a3b8ca5285a490af880f68e6c95edce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c8:dc:7d:e9:d2:23:15:14:51:2e:b6:09:b0: 3f:86:99:89:ea:7d:4c:e9:05:5f:f8:95:d8:32:dc: e5:5d:bf:41:44:aa:ac:e7:da:39:5b:0c:67:77:54: 11:05:88:8a:22:03:7f:3e:9a:67:55:bc:d0:ea:c7: c2:6c:4c:b1:55:72:e3:03:d9:13:08:a8:30:e6:66: 99:58:ab:0d:a3:76:a6:87:bc:14:6a:64:6e:c5:95: 59:4e:4d:61:99:e5:6b:df:a1:10:c5:11:f1:d4:4d: 9e:ae:4c:3f:83:14:73:00:de:8a:b5:19:18:5e:99: 91:3b:7b:e0:d0:76:71:9a:8c:c2:aa:36:97:8d:98: d8:af:00:d8:89:17:d2:d9:61:45:49:09:e3:9f:43: e9:83:d3:a1:41:b8:09:31:c9:e3:40:9d:b9:1f:45: 22:5e:81:45:9c:2a:e9:a4:1a:e0:9b:16:6f:93:2f: 2d:54:37:05:c9:99:bb:5c:69:c7:0c:0d:ef:0e:f7: 99:13:f8:85:a5:8d:10:aa:02:dc:4c:8a:7b:5e:fa: ea:43:d4:7c:23:0a:2f:f3:fe:bd:cf:7b:3a:04:4f: 4d:d5:4b:12:85:01:33:03:1a:35:9c:49:52:26:ea: f3:75:81:3f:3d:bd:ae:6b:db:99:29:1b:ea:29:ea: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F7:BA:1A:9A:3B:8C:A5:28:5A:49:0A:F8:80:F6:8E:6C:95:ED:CE X509v3 Authority Key Identifier: keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.50.32.0/23 212.50.36.0-212.50.41.255 212.50.44.0/24 212.50.54.0/23 212.50.61.0/24 IPv6: 2001:1b68::/29 Signature Algorithm: sha256WithRSAEncryption 5b:00:0d:63:6d:d5:6f:29:d5:b4:95:39:aa:b7:8d:bc:27:78: 84:08:43:1d:e8:ba:7e:39:c7:40:94:2d:77:c8:c9:01:2e:ba: 6a:7e:ae:9c:42:fe:17:33:07:0f:e1:b0:0e:b2:e4:8f:6d:67: 90:ee:1d:18:5b:6c:3f:85:43:f9:ca:77:22:d0:13:c2:7a:94: 3e:ba:fa:c2:5f:98:4b:3f:45:e8:51:8a:1f:10:98:10:99:8b: 2c:00:70:63:7e:42:da:e0:80:c5:2a:fe:41:be:66:71:8f:c5: a9:fa:ee:24:1d:00:76:f5:8d:ea:df:91:c9:ff:62:a1:5d:dc: b0:f1:9e:8f:bd:30:a3:47:90:e4:fd:fa:0f:0b:26:14:e8:a7: 28:78:31:d3:4d:e8:3e:dd:a0:55:f7:40:8e:b4:5b:ee:33:67: 4a:d1:b6:b0:12:83:4a:47:72:9b:76:ab:25:e8:bb:55:c7:e8: d3:f4:7b:66:9e:c8:95:06:24:4e:6e:92:58:7c:ac:d5:29:91: bd:d2:b0:34:30:c4:7b:d3:14:b5:79:fb:0b:de:8b:11:c3:47: 1b:81:49:8d:e5:0e:e4:10:a6:2a:dc:fa:6a:4c:16:89:6d:49: 7e:d2:23:05:d9:55:bd:19:03:2b:de:d6:7f:61:3e:5a:d2:15: 20:f3:9b:1c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt4ouooficeTZ36eNAWV2KvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz ZWRlZmUwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWY3YmExYTlhM2I4Y2E1Mjg1YTQ5MGFmODgwZjY4ZTZjOTVlZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8jcfenSIxUUUS62CbA/hpmJ6n1M 6QVf+JXYMtzlXb9BRKqs59o5Wwxnd1QRBYiKIgN/PppnVbzQ6sfCbEyxVXLjA9kT CKgw5maZWKsNo3amh7wUamRuxZVZTk1hmeVr36EQxRHx1E2erkw/gxRzAN6KtRkY XpmRO3vg0HZxmozCqjaXjZjYrwDYiRfS2WFFSQnjn0Ppg9OhQbgJMcnjQJ25H0Ui XoFFnCrppBrgmxZvky8tVDcFyZm7XGnHDA3vDveZE/iFpY0QqgLcTIp7XvrqQ9R8 Iwov8/69z3s6BE9N1UsShQEzAxo1nElSJurzdYE/Pb2ua9uZKRvqKer0jQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFFr3uhqaO4ylKFpJCviA9o5sle3OMB8GA1UdIwQY MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt ZGQ0YTIxN2Q2MDZiLzEvV3ZlNkdwbzdqS1VvV2trSy1JRDJqbXlWN2M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQB1DIgMAwD BALUMiQDBAHUMigDBADUMiwDBAHUMjYDBADUMj0wDQQCAAIwBwMFAyABG2gwDQYJ KoZIhvcNAQELBQADggEBAFsADWNt1W8p1bSVOaq3jbwneIQIQx3oun45x0CULXfI yQEuump+rpxC/hczBw/hsA6y5I9tZ5DuHRhbbD+FQ/nKdyLQE8J6lD66+sJfmEs/ RehRih8QmBCZiywAcGN+QtrggMUq/kG+ZnGPxan67iQdAHb1jerfkcn/YqFd3LDx no+9MKNHkOT9+g8LJhTopyh4MdNN6D7doFX3QI60W+4zZ0rRtrASg0pHcpt2qyXo u1XH6NP0e2aeyJUGJE5uklh8rNUpkb3SsDQwxHvTFLV5+wveixHDRxuBSY3lDuQQ pirc+mpMFoltSX7SIwXZVb0ZAyve1n9hPlrSFSDzmxw= -----END CERTIFICATE-----Generated at Tue Jan 27 07:44:34 2026 by rpki-client