This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/w5sp2V2w-8UOPmpm4d5P6MbqdwU.roa File: w5sp2V2w-8UOPmpm4d5P6MbqdwU.roa (raw, json) Hash identifier: iJkvnsqXZqMpDsL1Pz/WoiQeQSxVTl1j2XPcxga/Qhw= Subject key identifier: C3:9B:29:D9:5D:B0:FB:C5:0E:3E:6A:66:E1:DE:4F:E8:C6:EA:77:05 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808598454EB39E367792019F47AE2F Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/w5sp2V2w-8UOPmpm4d5P6MbqdwU.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204968 IP address blocks: 2a00:e460::/29 maxlen: 29 2a03:f7c0::/29 maxlen: 29 2a0c:5c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:85:98:45:4e:b3:9e:36:77:92:01:9f:47:ae:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c39b29d95db0fbc50e3e6a66e1de4fe8c6ea7705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:5e:5d:b8:1f:24:33:41:e9:fc:8f:47:24: 98:e6:d4:9f:14:dc:ea:58:c3:97:6d:fe:04:f6:38: 20:af:bb:34:a1:45:6f:e3:a5:af:0a:d0:34:a0:0a: e6:5a:16:a7:28:73:e9:b7:6d:eb:c8:c0:e2:10:18: dc:61:46:39:1d:7d:dc:73:d4:cd:fa:63:57:b2:da: cd:66:7e:88:79:17:40:08:44:c4:0b:1a:43:9b:57: 6d:a4:d2:e4:45:86:0f:d8:af:d2:11:8c:2e:72:18: 69:f0:70:35:af:0a:10:b1:96:b9:59:8a:34:46:05: a4:e8:4a:1b:d6:1a:f9:24:72:88:6a:aa:6f:c4:7b: e8:3c:cd:02:a5:1f:d9:e7:90:1f:e6:9d:aa:ac:dd: 60:b2:e9:41:ec:10:97:63:51:09:ff:05:3f:24:73: 3e:3b:68:1f:35:80:33:94:46:81:0f:31:16:a7:8c: cd:90:36:54:b2:54:9c:69:4a:07:ff:01:5e:71:1c: 63:0b:c4:99:69:11:7d:63:70:e9:5d:2a:d3:4c:93: 8f:ac:54:a5:7f:e5:30:0a:22:8a:30:9e:d3:3e:3b: fa:d3:e3:2f:0a:2e:d6:b9:a9:d8:10:7f:4b:7b:ad: 4f:39:bb:da:4a:9a:0a:24:d1:c5:8a:d0:bd:ee:db: 1e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9B:29:D9:5D:B0:FB:C5:0E:3E:6A:66:E1:DE:4F:E8:C6:EA:77:05 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/w5sp2V2w-8UOPmpm4d5P6MbqdwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:e460::/29 2a03:f7c0::/29 2a0c:5c0::/29 Signature Algorithm: sha256WithRSAEncryption 04:e0:9b:7c:3f:2e:87:1d:1b:7d:3c:2b:5f:7b:59:21:2c:be: 5a:51:ba:f5:99:d3:f6:38:fb:de:53:56:b0:1b:44:ec:b7:f9: dc:d5:ff:5d:e2:ca:0a:6e:a4:09:72:df:ce:2a:fe:0c:40:9c: ec:4c:99:21:4f:49:69:6e:60:4c:3a:ae:16:43:27:5b:ad:03: 1f:e1:fc:76:e4:14:bf:ac:f8:9d:e1:37:57:36:15:b8:0e:d4: 9f:7f:66:57:0d:05:49:5e:2d:7e:a5:fd:42:ff:43:14:69:33: dc:28:98:64:a0:8e:f8:5c:36:a7:38:59:f2:47:88:77:01:63: d9:e8:3e:2c:4d:9a:61:7b:a5:13:ed:c9:9b:8d:32:a4:ab:72: 92:c9:07:bb:20:68:da:22:de:21:2d:68:22:8b:01:87:ee:4c: f8:b0:3d:6e:df:2c:3f:fd:9f:19:38:3c:e8:a1:19:56:2d:55: fe:02:94:2d:98:cc:9f:c8:70:39:a7:cf:6c:63:07:63:26:db: a4:28:fe:70:f0:67:39:b2:be:3a:f5:4e:06:05:7e:e2:0e:c9: 39:1c:4f:87:b6:c3:94:2a:ca:d6:9f:9c:a2:53:38:24:ba:20: d0:29:86:38:50:63:e0:43:fc:94:96:8c:44:0b:f9:8b:36:61: c9:77:97:38 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gIWYRU6znjZ3kgGfR64vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzliMjlkOTVkYjBmYmM1MGUzZTZhNjZlMWRlNGZlOGM2ZWE3NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBFeXbgfJDNB6fyPRySY5tSfFNzq WMOXbf4E9jggr7s0oUVv46WvCtA0oArmWhanKHPpt23ryMDiEBjcYUY5HX3cc9TN +mNXstrNZn6IeRdACETECxpDm1dtpNLkRYYP2K/SEYwuchhp8HA1rwoQsZa5WYo0 RgWk6Eob1hr5JHKIaqpvxHvoPM0CpR/Z55Af5p2qrN1gsulB7BCXY1EJ/wU/JHM+ O2gfNYAzlEaBDzEWp4zNkDZUslScaUoH/wFecRxjC8SZaRF9Y3DpXSrTTJOPrFSl f+UwCiKKMJ7TPjv60+MvCi7WuanYEH9Le61PObvaSpoKJNHFitC97tseVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMObKdldsPvFDj5qZuHeT+jG6ncFMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvdzVzcDJWMnctOFVPUG1wbTRkNVA2TWJxZHdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgDkYAMF AyoD98ADBQMqDAXAMA0GCSqGSIb3DQEBCwUAA4IBAQAE4Jt8Py6HHRt9PCtfe1kh LL5aUbr1mdP2OPveU1awG0Tst/nc1f9d4soKbqQJct/OKv4MQJzsTJkhT0lpbmBM Oq4WQydbrQMf4fx25BS/rPid4TdXNhW4DtSff2ZXDQVJXi1+pf1C/0MUaTPcKJhk oI74XDanOFnyR4h3AWPZ6D4sTZphe6UT7cmbjTKkq3KSyQe7IGjaIt4hLWgiiwGH 7kz4sD1u3yw//Z8ZODzooRlWLVX+ApQtmMyfyHA5p89sYwdjJtukKP5w8Gc5sr46 9U4GBX7iDsk5HE+HtsOUKsrWn5yiUzgkuiDQKYY4UGPgQ/yUloxEC/mLNmHJd5c4 -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:49 2026 by rpki-client