This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/wEZCw-VLeU1jpA57GhD5o-3uPdI.roa File: wEZCw-VLeU1jpA57GhD5o-3uPdI.roa (raw, json) Hash identifier: 1vJM+R9B72RBGk03v5ie3GqXY2ZDTLcLKiRAG44iQm8= Subject key identifier: C0:46:42:C3:E5:4B:79:4D:63:A4:0E:7B:1A:10:F9:A3:ED:EE:3D:D2 Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41 Certificate serial: 019B76EB4FEF7990337E29D036FD63CE88D2 Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/wEZCw-VLeU1jpA57GhD5o-3uPdI.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202803 IP address blocks: 80.64.212.0/22 maxlen: 24 80.64.212.0/23 maxlen: 23 80.64.214.0/23 maxlen: 23 193.138.4.0/23 maxlen: 24 193.138.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4f:ef:79:90:33:7e:29:d0:36:fd:63:ce:88:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c04642c3e54b794d63a40e7b1a10f9a3edee3dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:75:4e:2c:6a:14:3d:4b:77:39:e7:21:10: 7c:48:5b:22:15:cd:7b:70:65:d2:2c:5e:28:23:67: b7:91:04:c5:dc:ff:24:f8:d0:e0:9f:fd:e6:6f:84: db:f4:e6:e1:80:6a:4a:47:7d:61:ab:85:7e:1e:4c: 6d:e8:8c:35:27:a6:aa:c8:ad:ac:4d:a5:89:f5:d4: 46:c0:2f:f9:05:23:4d:c5:95:2a:e2:a1:2f:e8:2f: 0d:31:d3:5d:96:43:02:46:66:1c:27:14:01:8b:34: 86:0e:f9:ba:48:7e:b8:50:11:ff:8e:bd:9f:70:2d: ee:71:b8:b1:5d:c6:af:7d:2c:fd:b3:e5:38:e8:a0: 6d:e1:68:f6:3a:96:b6:86:4b:02:fd:f0:29:7e:29: 52:8e:6e:a2:45:15:73:f4:a0:75:78:0b:38:78:cf: 86:4b:c8:ea:b8:86:b4:d6:e9:e9:ea:f2:7c:38:3c: 1e:10:82:32:3c:bc:83:5e:fc:9f:ca:d0:76:c3:99: b0:14:4c:e9:fb:78:1a:2f:8a:f6:62:b7:a6:2c:77: e2:23:f9:c2:a5:0a:c9:53:01:ac:80:89:15:70:6e: ed:5e:59:30:d3:4a:60:38:c6:84:14:4f:74:d2:b8: 65:6b:b0:95:b4:aa:ec:01:56:86:9c:1a:c3:1f:29: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:46:42:C3:E5:4B:79:4D:63:A4:0E:7B:1A:10:F9:A3:ED:EE:3D:D2 X509v3 Authority Key Identifier: keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/wEZCw-VLeU1jpA57GhD5o-3uPdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.212.0/22 193.138.4.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:e2:32:60:5f:52:fd:bd:0d:ca:13:27:ad:e5:39:06:b9:be: a8:95:af:da:55:08:16:dd:57:4c:f3:29:42:1a:4e:e4:74:e5: 9e:05:66:fb:db:7a:57:c6:d1:0b:be:93:5c:54:6f:97:0a:a2: 53:fb:00:84:b6:76:90:39:e7:d5:62:7b:41:06:79:39:92:79: fc:e3:97:4b:c0:21:59:e1:86:61:a6:87:0b:8f:ec:0d:68:e3: 58:72:b1:fe:58:b1:62:df:22:91:bb:90:73:99:98:56:8b:48: 19:d8:71:fb:ea:c9:ec:b6:81:d5:08:7d:3d:52:00:de:e3:f7: 5a:fb:72:8a:ca:56:fb:54:e0:36:bc:f4:59:98:a2:94:0c:b9: 04:89:2d:3c:35:82:fe:12:41:c4:c2:86:1a:b4:69:01:39:fd: d3:5e:4a:10:45:7f:11:19:c4:72:ba:4d:b4:f8:a0:69:52:fb: 3c:17:c1:9e:4c:d1:66:1f:d9:da:fd:8e:f1:43:5d:fe:6c:49: e7:e9:be:c6:08:bb:1c:35:d4:ee:1a:cf:ba:ff:27:9b:25:eb: 7a:2c:9d:6e:5a:24:e1:c2:8b:ba:95:d9:41:91:18:83:a7:d5: f6:78:ad:88:2c:15:2c:84:9d:63:b5:d0:eb:fe:37:11:b8:b4: 20:e6:69:d8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt260/veZAzfinQNv1jzojSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjFhNmMwNjE0NTVjMDhlOTE0N2IyODFmYzc0MjRjYmM1 NDVmNDEwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDQ2NDJjM2U1NGI3OTRkNjNhNDBlN2IxYTEwZjlhM2VkZWUzZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X11TixqFD1LdznnIRB8SFsiFc17 cGXSLF4oI2e3kQTF3P8k+NDgn/3mb4Tb9ObhgGpKR31hq4V+Hkxt6Iw1J6aqyK2s TaWJ9dRGwC/5BSNNxZUq4qEv6C8NMdNdlkMCRmYcJxQBizSGDvm6SH64UBH/jr2f cC3ucbixXcavfSz9s+U46KBt4Wj2Opa2hksC/fApfilSjm6iRRVz9KB1eAs4eM+G S8jquIa01unp6vJ8ODweEIIyPLyDXvyfytB2w5mwFEzp+3gaL4r2YremLHfiI/nC pQrJUwGsgIkVcG7tXlkw00pgOMaEFE900rhla7CVtKrsAVaGnBrDHykGnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMBGQsPlS3lNY6QOexoQ+aPt7j3SMB8GA1UdIwQY MBaAFOmxpsBhRVwI6RR7KB/HQky8VF9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hZmRmOTUtMjgzNC00ZGNjLWI0MWQt M2Y5ZjI2NGNlYjIwLzEvd0VaQ3ctVkxlVTFqcEE1N0doRDVvLTN1UGRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hZmRmOTUtMjgzNC00ZGNjLWI0MWQtM2Y5ZjI2NGNlYjIw LzEvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUEDUAwQB wYoEMA0GCSqGSIb3DQEBCwUAA4IBAQBf4jJgX1L9vQ3KEyet5TkGub6ola/aVQgW 3VdM8ylCGk7kdOWeBWb723pXxtELvpNcVG+XCqJT+wCEtnaQOefVYntBBnk5knn8 45dLwCFZ4YZhpocLj+wNaONYcrH+WLFi3yKRu5BzmZhWi0gZ2HH76snstoHVCH09 UgDe4/da+3KKylb7VOA2vPRZmKKUDLkEiS08NYL+EkHEwoYatGkBOf3TXkoQRX8R GcRyuk20+KBpUvs8F8GeTNFmH9na/Y7xQ13+bEnn6b7GCLscNdTuGs+6/yebJet6 LJ1uWiThwou6ldlBkRiDp9X2eK2ILBUshJ1jtdDr/jcRuLQg5mnY -----END CERTIFICATE-----Generated at Mon Jan 12 03:10:30 2026 by rpki-client