This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/W5_tGp5OkvC1zzzyLDAcLsIiiEw.roa File: W5_tGp5OkvC1zzzyLDAcLsIiiEw.roa (raw, json) Hash identifier: Ce5u3NFumbrG6KxipXK7ZFrTV36Y5P03dD20D+8E1Ho= Subject key identifier: 5B:9F:ED:1A:9E:4E:92:F0:B5:CF:3C:F2:2C:30:1C:2E:C2:22:88:4C Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13 Certificate serial: 019B797DF16067DE07AF6FC1E1A696D2E955 Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/W5_tGp5OkvC1zzzyLDAcLsIiiEw.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 91.199.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f1:60:67:de:07:af:6f:c1:e1:a6:96:d2:e9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b9fed1a9e4e92f0b5cf3cf22c301c2ec222884c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:2f:7a:83:e7:e7:16:61:36:27:e0:36:db: 61:88:58:5b:f2:16:b3:04:31:9a:ea:5f:98:a2:ac: 43:99:75:8f:74:27:ec:38:2a:11:52:56:b9:e6:6a: 0a:84:12:ec:df:e1:bf:29:1d:0f:ec:e6:a9:c2:b3: d0:fe:44:6f:82:01:16:bb:59:d2:63:eb:56:7e:db: 3f:84:4c:7e:2a:d0:63:14:5b:23:2a:c3:42:24:cd: ae:8d:0a:03:d5:0d:7a:1c:5a:b6:68:1d:d4:35:64: c3:80:c6:82:c0:a6:e9:dd:34:5b:1c:ac:1c:5e:ab: 44:2a:af:e5:4f:61:ef:c5:dc:0f:f6:6a:c7:bd:05: f0:2d:49:7b:62:6c:61:73:ef:a3:9c:33:c9:73:a3: 6e:54:ff:7e:ac:5a:fd:cc:4e:f1:8d:72:08:26:6e: f6:5d:17:a1:99:7e:d7:aa:a8:56:3a:db:18:1f:d3: 7e:35:9b:d0:e7:2b:72:1c:e6:f8:11:30:f6:d9:9b: 66:26:f4:1a:6d:20:4e:4d:63:09:e4:eb:eb:ef:fc: 49:97:e3:a2:fc:f0:94:f4:b9:3d:20:d4:b8:34:04: 91:e4:67:e1:25:0f:c4:5e:82:05:49:b3:fd:fb:01: 44:e2:19:dc:2f:f6:e3:e8:a5:f3:95:3b:7f:ba:91: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9F:ED:1A:9E:4E:92:F0:B5:CF:3C:F2:2C:30:1C:2E:C2:22:88:4C X509v3 Authority Key Identifier: keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/W5_tGp5OkvC1zzzyLDAcLsIiiEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.32.0/24 Signature Algorithm: sha256WithRSAEncryption b0:f9:41:08:65:81:85:6d:7c:dd:df:57:2a:d3:32:98:ca:4d: 78:98:e6:24:68:5d:a1:72:ed:72:99:26:d0:18:1f:b3:cb:ed: de:84:ae:c6:da:15:b9:a5:53:05:b5:45:19:3f:2e:30:c8:ca: f4:da:58:e2:89:ff:1f:df:5c:cb:af:a2:35:a1:67:57:ec:74: cc:24:50:b0:4d:88:75:5c:69:e9:14:6e:e7:88:a9:e3:59:18: c1:43:b4:05:27:05:d6:a5:8f:a1:e9:a9:ff:74:a3:10:ed:47: e2:f3:b6:60:b5:ca:28:3c:b6:3c:88:00:53:43:8b:ff:d1:8c: bb:e0:a8:38:dc:e1:0e:76:ea:c4:14:f5:e8:e9:04:84:8d:31: cc:6b:22:58:d8:65:89:a3:11:6b:79:a8:59:42:9c:9a:57:ea: e5:e2:20:6a:74:4a:b4:58:03:5a:1a:a1:6c:34:f9:f8:81:eb: b2:35:b9:3f:18:6d:a4:98:ee:41:e7:d7:d7:13:df:dd:3e:22: ed:85:74:9e:50:5f:92:ca:0b:cf:c6:86:8b:f8:91:d2:74:34: 4e:56:55:22:39:76:7d:ca:1e:5e:c3:96:69:78:36:9f:60:49: 15:a2:c5:07:56:e0:03:cb:c6:23:39:a2:5e:a0:a3:80:61:d4: 26:7d:d2:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffFgZ94Hr2/B4aaW0ulVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0 ZmVjMTMwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjlmZWQxYTllNGU5MmYwYjVjZjNjZjIyYzMwMWMyZWMyMjI4ODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX8veoPn5xZhNifgNtthiFhb8haz BDGa6l+YoqxDmXWPdCfsOCoRUla55moKhBLs3+G/KR0P7OapwrPQ/kRvggEWu1nS Y+tWfts/hEx+KtBjFFsjKsNCJM2ujQoD1Q16HFq2aB3UNWTDgMaCwKbp3TRbHKwc XqtEKq/lT2HvxdwP9mrHvQXwLUl7Ymxhc++jnDPJc6NuVP9+rFr9zE7xjXIIJm72 XRehmX7XqqhWOtsYH9N+NZvQ5ytyHOb4ETD22ZtmJvQabSBOTWMJ5Ovr7/xJl+Oi /PCU9Lk9INS4NASR5GfhJQ/EXoIFSbP9+wFE4hncL/bj6KXzlTt/upE53wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFuf7RqeTpLwtc888iwwHC7CIohMMB8GA1UdIwQY MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct MDg1ZmEwYTU2MDUyLzEvVzVfdEdwNU9rdkMxenp6eUxEQWNMc0lpaUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cgMA0G CSqGSIb3DQEBCwUAA4IBAQCw+UEIZYGFbXzd31cq0zKYyk14mOYkaF2hcu1ymSbQ GB+zy+3ehK7G2hW5pVMFtUUZPy4wyMr02ljiif8f31zLr6I1oWdX7HTMJFCwTYh1 XGnpFG7niKnjWRjBQ7QFJwXWpY+h6an/dKMQ7Ufi87ZgtcooPLY8iABTQ4v/0Yy7 4Kg43OEOdurEFPXo6QSEjTHMayJY2GWJoxFreahZQpyaV+rl4iBqdEq0WANaGqFs NPn4geuyNbk/GG2kmO5B59fXE9/dPiLthXSeUF+SygvPxoaL+JHSdDROVlUiOXZ9 yh5ew5ZpeDafYEkVosUHVuADy8YjOaJeoKOAYdQmfdLy -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:15 2026 by rpki-client