This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/W5VTroF4zcGApX3Giz89KR2_wWg.roa File: W5VTroF4zcGApX3Giz89KR2_wWg.roa (raw, json) Hash identifier: GNfQgd1tr7xOtZa17O8ZeusFNmCf6n9fTIUFI6Sv0mk= Subject key identifier: 5B:95:53:AE:81:78:CD:C1:80:A5:7D:C6:8B:3F:3D:29:1D:BF:C1:68 Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1 Certificate serial: 019B7E3916639939EDACDD1DE5A62CF102BC Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/W5VTroF4zcGApX3Giz89KR2_wWg.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206570 IP address blocks: 66.22.239.0/24 maxlen: 24 66.22.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:16:63:99:39:ed:ac:dd:1d:e5:a6:2c:f1:02:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1 Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b9553ae8178cdc180a57dc68b3f3d291dbfc168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:5d:98:0a:8d:78:e8:ec:25:68:99:fe:bd: b3:27:d5:3b:bf:6f:7c:19:22:69:4f:9e:06:47:0c: 5f:51:e7:ac:0e:2f:73:43:60:95:8d:8c:4b:7e:2d: ea:fe:2d:f8:30:16:6d:84:b1:31:86:22:87:e0:c6: 32:ec:31:dd:68:f6:3c:f8:17:6b:1d:d2:20:4c:75: c3:3a:f3:2b:90:ff:9b:9b:0a:45:fa:ec:45:89:27: dd:d5:35:5d:8b:af:1b:32:c9:9c:29:e5:a1:37:e4: cb:1b:2a:09:29:07:1d:6d:6c:6b:42:79:fb:eb:42: 8a:5f:f0:c3:3c:5d:54:0f:9e:54:de:d9:d3:c1:4f: 4e:cd:ad:46:f8:c8:06:18:2f:8a:f1:e0:c7:d4:d8: 0e:c4:99:4f:f2:26:36:18:11:15:77:19:d8:3e:43: 1c:6f:2c:fd:d2:cd:a6:85:92:df:dd:3d:06:c5:f9: 49:a4:96:1e:3a:6b:17:42:62:e2:fa:96:37:80:b9: 8d:b5:d7:7b:86:71:c4:9b:27:38:b3:b7:56:7a:86: a3:ea:97:7e:8b:c1:91:16:ad:e7:e1:e2:00:e1:c5: 4e:e6:0b:97:90:d9:fc:d8:27:36:16:48:fa:5f:ce: 6c:84:b7:77:60:c1:de:47:25:5d:83:3a:de:e0:49: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:95:53:AE:81:78:CD:C1:80:A5:7D:C6:8B:3F:3D:29:1D:BF:C1:68 X509v3 Authority Key Identifier: keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/W5VTroF4zcGApX3Giz89KR2_wWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.22.239.0-66.22.240.255 Signature Algorithm: sha256WithRSAEncryption 77:ad:83:a1:b8:a2:c4:90:ac:76:75:b1:15:a0:40:9f:4e:cf: 8b:aa:14:e5:ae:5f:f8:ed:ce:e7:d1:7f:11:4b:09:e8:69:48: 73:91:24:31:1e:2f:dc:62:a5:51:aa:16:84:d0:2a:7e:bd:61: 00:3d:86:f7:1f:ae:96:87:dd:f5:6a:86:23:f4:8d:84:40:a8: c1:1a:bd:95:c7:11:ef:aa:f2:f1:de:49:d9:cc:3d:bf:88:9b: 93:57:65:0b:0a:4a:54:41:76:66:3f:3d:c8:e0:63:24:f8:5f: 9d:3d:a4:ec:53:a3:c9:dc:5d:c1:35:91:f2:f7:9c:4d:a2:fd: ab:87:54:8b:76:58:6e:bc:f1:ef:f2:e0:8a:0a:bd:ac:d1:df: 62:38:ae:cd:51:af:06:a7:92:86:45:48:6b:eb:ef:9c:21:8a: ac:e1:38:bf:4b:ee:f2:84:8a:40:2b:7e:8a:9a:9f:38:b5:a5: dc:f2:53:67:78:ce:51:54:a4:e4:ce:e5:5b:6e:8d:08:21:27: e3:e2:54:22:c6:98:89:1a:f2:1a:e9:a7:3d:30:d7:7d:34:9a: 72:0b:26:6e:97:0e:42:bf:c4:d4:0b:f6:af:d5:78:08:7a:10: a3:ae:87:e5:41:9a:15:28:a0:0c:c9:05:41:e2:0d:48:9a:f0: 2f:8a:77:3c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+ORZjmTntrN0d5aYs8QK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYzEwM2Q2NWE1NGQ2YWYxZWZiYTZhYzNlNjM3MjIwMjhh ZjJiYjEwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjk1NTNhZTgxNzhjZGMxODBhNTdkYzY4YjNmM2QyOTFkYmZjMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8ddmAqNeOjsJWiZ/r2zJ9U7v298 GSJpT54GRwxfUeesDi9zQ2CVjYxLfi3q/i34MBZthLExhiKH4MYy7DHdaPY8+Bdr HdIgTHXDOvMrkP+bmwpF+uxFiSfd1TVdi68bMsmcKeWhN+TLGyoJKQcdbWxrQnn7 60KKX/DDPF1UD55U3tnTwU9Oza1G+MgGGC+K8eDH1NgOxJlP8iY2GBEVdxnYPkMc byz90s2mhZLf3T0GxflJpJYeOmsXQmLi+pY3gLmNtdd7hnHEmyc4s7dWeoaj6pd+ i8GRFq3n4eIA4cVO5guXkNn82Cc2Fkj6X85shLd3YMHeRyVdgzre4EkK7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFuVU66BeM3BgKV9xos/PSkdv8FoMB8GA1UdIwQY MBaAFIPBA9ZaVNavHvumrD5jciAoryuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQt YjUwY2Y1ZjJhYTIyLzEvVzVWVHJvRjR6Y0dBcFgzR2l6ODlLUjJfd1dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQtYjUwY2Y1ZjJhYTIy LzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABCFu8D BABCFvAwDQYJKoZIhvcNAQELBQADggEBAHetg6G4osSQrHZ1sRWgQJ9Oz4uqFOWu X/jtzufRfxFLCehpSHORJDEeL9xipVGqFoTQKn69YQA9hvcfrpaH3fVqhiP0jYRA qMEavZXHEe+q8vHeSdnMPb+Im5NXZQsKSlRBdmY/PcjgYyT4X509pOxTo8ncXcE1 kfL3nE2i/auHVIt2WG688e/y4IoKvazR32I4rs1RrwankoZFSGvr75whiqzhOL9L 7vKEikArfoqanzi1pdzyU2d4zlFUpOTO5VtujQghJ+PiVCLGmIka8hrppz0w1300 mnILJm6XDkK/xNQL9q/VeAh6EKOuh+VBmhUooAzJBUHiDUia8C+Kdzw= -----END CERTIFICATE-----Generated at Sat Jan 3 06:20:52 2026 by rpki-client