This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/wWEaUT8GUtqpx9XZtRAWofH6W4k.roa File: wWEaUT8GUtqpx9XZtRAWofH6W4k.roa (raw, json) Hash identifier: VNBvCU4Sf2z12hvHly8WTlHbxCnV09UqgaRSgs6QCJ4= Subject key identifier: C1:61:1A:51:3F:06:52:DA:A9:C7:D5:D9:B5:10:16:A1:F1:FA:5B:89 Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019B7BA35819655FBEB12DC0BFC7000AD93F Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/wWEaUT8GUtqpx9XZtRAWofH6W4k.roa Signing time: Thu 01 Jan 2026 22:17:41 +0000 ROA not before: Thu 01 Jan 2026 22:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 5.63.24.0/24 maxlen: 24 5.63.25.0/24 maxlen: 24 5.63.26.0/24 maxlen: 24 5.63.27.0/24 maxlen: 24 5.63.28.0/24 maxlen: 24 91.190.168.0/24 maxlen: 24 91.190.169.0/24 maxlen: 24 91.190.171.0/24 maxlen: 24 91.190.172.0/24 maxlen: 24 91.190.173.0/24 maxlen: 24 91.190.174.0/24 maxlen: 24 91.190.175.0/24 maxlen: 24 185.85.78.0/24 maxlen: 24 185.85.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:58:19:65:5f:be:b1:2d:c0:bf:c7:00:0a:d9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1611a513f0652daa9c7d5d9b51016a1f1fa5b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:0f:50:60:73:17:3e:35:fe:43:ad:8a:09: c4:2e:c1:4b:b5:82:92:4a:cb:c7:c0:6b:a9:1a:00: 68:b8:19:81:0b:37:76:20:91:8b:44:53:28:e0:68: 61:3a:c7:df:a9:87:6d:15:59:66:2e:83:25:8c:07: a4:8e:a3:95:ef:d6:2a:49:ab:67:14:f1:65:25:34: 83:6d:19:51:cc:71:c9:02:e0:7b:c3:fd:3c:ff:71: f0:fc:d9:0f:e9:8a:4e:91:7d:8a:c2:34:e5:31:a7: 8a:59:0f:4e:c1:be:4f:6b:4d:6d:59:97:e3:07:25: e2:3b:e0:cc:cc:fd:46:74:2a:21:a2:13:2b:9a:74: 86:d6:80:14:44:ac:5b:ce:3b:a7:de:48:7f:11:24: e8:6b:c3:3c:a4:e4:bd:91:ac:f3:13:b1:17:4d:43: b7:29:d4:bc:3b:56:08:d9:1d:47:8f:96:7a:fe:8b: de:90:e3:11:d7:67:a1:25:a2:82:ac:d6:07:26:3b: 16:36:d8:6b:86:d2:11:28:4d:34:cb:07:55:7b:ba: 89:d4:30:0a:01:d1:bf:7d:50:90:61:ca:dd:22:f9: 39:f4:f6:ae:d6:ab:de:12:c5:17:3b:ec:40:ec:2e: b9:ad:99:ef:f6:24:36:98:28:a0:f3:c2:f8:06:5d: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:61:1A:51:3F:06:52:DA:A9:C7:D5:D9:B5:10:16:A1:F1:FA:5B:89 X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/wWEaUT8GUtqpx9XZtRAWofH6W4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.24.0-5.63.28.255 91.190.168.0/23 91.190.171.0-91.190.175.255 185.85.78.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:c8:c6:d0:44:6d:13:2d:66:54:03:cc:3e:ea:76:26:05:56: 31:6a:37:cf:3f:fa:88:a9:51:3c:fe:87:dd:16:08:fa:a3:0a: 50:45:da:a7:21:3b:a6:8b:8e:85:84:00:35:06:62:f1:a5:3a: e4:48:be:0e:f1:9d:ce:ec:be:33:25:95:53:de:e3:94:76:9a: 88:54:11:3c:28:fd:ca:fc:56:36:06:40:43:af:30:a0:42:df: 16:36:ff:da:ac:6e:72:d7:90:8e:d7:1b:60:9a:4e:c7:a0:eb: 0c:03:dc:0d:a5:6d:4b:58:d1:1e:c6:02:51:53:c0:3b:e5:c9: 99:8e:7c:79:8b:61:e8:3d:4a:9c:98:fe:90:60:da:90:d8:c3: 08:9d:36:2f:b5:ca:58:81:fc:b7:cf:49:44:5f:e8:f2:ed:42: 4d:b9:26:eb:5c:8a:65:c0:58:85:3f:37:08:c1:ee:09:db:b9: 07:43:01:fe:da:34:ad:90:a6:9a:a8:48:5e:ae:b0:3e:3e:69: 32:85:fd:0f:22:7c:b0:43:86:b7:04:31:f2:17:0a:a1:dc:77: b1:21:18:09:f8:e5:62:d5:77:91:8d:26:4c:0e:2e:29:b5:ef: 89:25:91:4d:b5:f8:41:f0:8b:8c:78:79:8d:48:8e:57:30:02: 53:ec:70:ef -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7o1gZZV++sS3Av8cACtk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTYxMWE1MTNmMDY1MmRhYTljN2Q1ZDliNTEwMTZhMWYxZmE1Yjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa4PUGBzFz41/kOtignELsFLtYKS SsvHwGupGgBouBmBCzd2IJGLRFMo4GhhOsffqYdtFVlmLoMljAekjqOV79YqSatn FPFlJTSDbRlRzHHJAuB7w/08/3Hw/NkP6YpOkX2KwjTlMaeKWQ9Owb5Pa01tWZfj ByXiO+DMzP1GdCohohMrmnSG1oAURKxbzjun3kh/ESToa8M8pOS9kazzE7EXTUO3 KdS8O1YI2R1Hj5Z6/ovekOMR12ehJaKCrNYHJjsWNthrhtIRKE00ywdVe7qJ1DAK AdG/fVCQYcrdIvk59Pau1qveEsUXO+xA7C65rZnv9iQ2mCig88L4Bl1EMQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMFhGlE/BlLaqcfV2bUQFqHx+luJMB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvd1dFYVVUOEdVdHFweDlYWnRSQVdvZkg2VzRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAMFPxgD BAAFPxwDBAFbvqgwDAMEAFu+qwMEBFu+oAMEAblVTjANBgkqhkiG9w0BAQsFAAOC AQEAjsjG0ERtEy1mVAPMPup2JgVWMWo3zz/6iKlRPP6H3RYI+qMKUEXapyE7pouO hYQANQZi8aU65Ei+DvGdzuy+MyWVU97jlHaaiFQRPCj9yvxWNgZAQ68woELfFjb/ 2qxucteQjtcbYJpOx6DrDAPcDaVtS1jRHsYCUVPAO+XJmY58eYth6D1KnJj+kGDa kNjDCJ02L7XKWIH8t89JRF/o8u1CTbkm61yKZcBYhT83CMHuCdu5B0MB/to0rZCm mqhIXq6wPj5pMoX9DyJ8sEOGtwQx8hcKodx3sSEYCfjlYtV3kY0mTA4uKbXviSWR TbX4QfCLjHh5jUiOVzACU+xw7w== -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:22 2026 by rpki-client