This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/W9SQbbft_Ki8s56MIbDhOe_7c3g.roa File: W9SQbbft_Ki8s56MIbDhOe_7c3g.roa (raw, json) Hash identifier: eeYBhi006bZdizyLLMhXoXvVRBAU1f0G/iCMoGWg62g= Subject key identifier: 5B:D4:90:6D:B7:ED:FC:A8:BC:B3:9E:8C:21:B0:E1:39:EF:FB:73:78 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019B7F823B19B38E28A78644FF1856C0F990 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/W9SQbbft_Ki8s56MIbDhOe_7c3g.roa Signing time: Fri 02 Jan 2026 16:19:59 +0000 ROA not before: Fri 02 Jan 2026 16:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8953 IP address blocks: 37.156.224.0/24 maxlen: 24 37.251.208.0/20 maxlen: 24 62.217.192.0/18 maxlen: 24 86.106.83.0/24 maxlen: 24 89.37.97.0/24 maxlen: 24 89.39.71.0/24 maxlen: 24 89.39.81.0/24 maxlen: 24 89.42.27.0/24 maxlen: 24 92.82.176.0/20 maxlen: 20 92.84.64.0/18 maxlen: 24 92.114.38.0/24 maxlen: 24 92.114.82.0/24 maxlen: 24 93.113.56.0/24 maxlen: 24 93.115.244.0/23 maxlen: 24 93.122.128.0/17 maxlen: 24 109.166.128.0/17 maxlen: 24 109.166.212.0/24 maxlen: 24 128.127.112.0/20 maxlen: 24 185.53.196.0/22 maxlen: 24 185.133.64.0/24 maxlen: 24 2a02:a58::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:3b:19:b3:8e:28:a7:86:44:ff:18:56:c0:f9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jan 2 16:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bd4906db7edfca8bcb39e8c21b0e139effb7378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:e0:9a:55:75:20:95:b2:e1:39:47:15:49: 56:01:8a:92:66:51:a3:ef:b3:9b:05:0b:1c:7a:53: 94:c5:df:36:e1:a8:03:7e:2d:94:7b:ae:dd:62:31: 9f:ea:6f:74:1d:c3:e7:8f:4b:b4:a9:92:66:3c:59: 1f:89:35:0e:45:14:02:71:81:af:88:03:ec:c5:18: 02:ce:57:1c:a9:9f:3e:7c:9f:44:cd:d7:3e:2c:99: 0d:e9:0f:c1:0e:dc:69:95:57:62:88:79:e6:4f:58: c8:c4:5d:98:5c:c0:d3:6a:dd:00:c9:ca:c4:1a:7d: 8e:44:0c:e6:73:81:5f:f9:48:ba:47:30:8d:87:c0: e7:36:4f:89:fd:56:73:76:97:74:34:e8:d9:c7:60: c7:2b:e5:b2:a2:76:f9:08:5c:06:6b:eb:f2:48:e6: 49:38:77:c5:7e:43:6f:c7:18:17:af:da:6f:ab:e0: 1f:20:6e:e3:a0:f8:a3:08:81:a6:dd:69:be:72:77: ea:95:d3:6a:79:14:bc:d8:80:33:6a:17:a6:75:ba: 98:84:c6:f6:04:2a:5a:2c:65:b2:6b:4d:64:1c:74: 99:fb:47:aa:4e:c4:aa:f8:32:21:39:3e:b9:b9:d5: 70:c3:89:a6:f2:5b:eb:0b:1d:71:05:a8:cc:f0:6a: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D4:90:6D:B7:ED:FC:A8:BC:B3:9E:8C:21:B0:E1:39:EF:FB:73:78 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/W9SQbbft_Ki8s56MIbDhOe_7c3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.224.0/24 37.251.208.0/20 62.217.192.0/18 86.106.83.0/24 89.37.97.0/24 89.39.71.0/24 89.39.81.0/24 89.42.27.0/24 92.82.176.0/20 92.84.64.0/18 92.114.38.0/24 92.114.82.0/24 93.113.56.0/24 93.115.244.0/23 93.122.128.0/17 109.166.128.0/17 128.127.112.0/20 185.53.196.0/22 185.133.64.0/24 IPv6: 2a02:a58::/32 Signature Algorithm: sha256WithRSAEncryption 5e:c6:7f:04:66:91:ac:07:52:61:03:a0:d5:25:25:50:d6:40: 68:67:b5:bd:3b:91:8f:47:9d:9a:6c:37:69:dc:22:74:ce:42: 15:ca:80:23:f4:95:96:94:c5:a3:fc:f6:d9:89:0c:a4:15:50: a7:0f:30:cb:92:0e:a1:74:91:ad:b4:c2:a6:3c:48:1c:f2:a2: 9b:11:cb:ae:07:93:ed:7b:c6:5e:da:9a:ab:7c:f3:61:3a:d0: d4:d0:3b:f8:0a:1f:f7:62:8e:1f:6f:26:4c:9e:be:8b:10:05: be:b1:f0:e2:37:a4:7f:93:4d:43:af:30:1a:21:65:eb:c6:9a: 4a:12:fc:75:de:e8:c0:8b:ba:e0:7b:99:a1:fe:2b:4e:09:a1: f0:a8:1c:87:de:d9:cd:f2:a3:c3:50:bd:f4:47:ee:56:9e:94: 7a:35:83:c2:d8:16:fe:8f:64:ff:80:12:ca:1a:17:7c:87:2e: 1d:52:c7:96:75:bb:ae:b2:c9:45:56:45:18:ae:cf:1d:f8:f7: d4:58:9f:1e:34:f9:16:50:e1:78:94:d4:6a:ef:ef:84:99:19: 77:9a:27:1d:10:66:9b:c1:59:43:c2:36:9c:86:f1:d2:0f:95: 9e:bc:71:ac:7c:21:fa:31:53:7b:ff:b1:ed:26:59:84:11:01: c6:51:2e:2d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt/gjsZs44op4ZE/xhWwPmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMTAyMTYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQ0OTA2ZGI3ZWRmY2E4YmNiMzllOGMyMWIwZTEzOWVmZmI3Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2TgmlV1IJWy4TlHFUlWAYqSZlGj 77ObBQscelOUxd824agDfi2Ue67dYjGf6m90HcPnj0u0qZJmPFkfiTUORRQCcYGv iAPsxRgCzlccqZ8+fJ9Ezdc+LJkN6Q/BDtxplVdiiHnmT1jIxF2YXMDTat0AycrE Gn2ORAzmc4Ff+Ui6RzCNh8DnNk+J/VZzdpd0NOjZx2DHK+Wyonb5CFwGa+vySOZJ OHfFfkNvxxgXr9pvq+AfIG7joPijCIGm3Wm+cnfqldNqeRS82IAzahemdbqYhMb2 BCpaLGWya01kHHSZ+0eqTsSq+DIhOT65udVww4mm8lvrCx1xBajM8GosZwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFFvUkG237fyovLOejCGw4Tnv+3N4MB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVzlTUWJiZnRfS2k4czU2TUliRGhPZV83YzNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB4BAIAATByAwQAJZzg AwQEJfvQAwQGPtnAAwQAVmpTAwQAWSVhAwQAWSdHAwQAWSdRAwQAWSobAwQEXFKw AwQGXFRAAwQAXHImAwQAXHJSAwQAXXE4AwQBXXP0AwQHXXqAAwQHbaaAAwQEgH9w AwQCuTXEAwQAuYVAMA0EAgACMAcDBQAqAgpYMA0GCSqGSIb3DQEBCwUAA4IBAQBe xn8EZpGsB1JhA6DVJSVQ1kBoZ7W9O5GPR52abDdp3CJ0zkIVyoAj9JWWlMWj/PbZ iQykFVCnDzDLkg6hdJGttMKmPEgc8qKbEcuuB5Pte8Ze2pqrfPNhOtDU0Dv4Ch/3 Yo4fbyZMnr6LEAW+sfDiN6R/k01DrzAaIWXrxppKEvx13ujAi7rge5mh/itOCaHw qByH3tnN8qPDUL30R+5WnpR6NYPC2Bb+j2T/gBLKGhd8hy4dUseWdbuusslFVkUY rs8d+PfUWJ8eNPkWUOF4lNRq7++EmRl3micdEGabwVlDwjachvHSD5WevHGsfCH6 MVN7/7HtJlmEEQHGUS4t -----END CERTIFICATE-----Generated at Mon Jan 26 16:56:15 2026 by rpki-client