This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Wu5XKk4A36HO6OHJ1FPfD_SFW8Q.roa File: Wu5XKk4A36HO6OHJ1FPfD_SFW8Q.roa (raw, json) Hash identifier: BzMn4OoTVBTxxNmlLvxwZaB3pPDI9UpM0YGpy6OvehA= Subject key identifier: 5A:EE:57:2A:4E:00:DF:A1:CE:E8:E1:C9:D4:53:DF:0F:F4:85:5B:C4 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC7972EEBE2E8382DA066A1CF9241DD Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Wu5XKk4A36HO6OHJ1FPfD_SFW8Q.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201150 IP address blocks: 5.202.0.0/19 maxlen: 19 5.202.16.0/20 maxlen: 20 5.202.18.0/23 maxlen: 23 5.202.20.0/23 maxlen: 23 5.202.28.0/24 maxlen: 24 5.202.29.0/24 maxlen: 24 5.202.58.0/23 maxlen: 23 5.202.60.0/22 maxlen: 22 5.202.64.0/23 maxlen: 23 5.202.96.0/22 maxlen: 22 5.202.132.0/22 maxlen: 22 185.103.128.0/22 maxlen: 22 185.169.20.0/22 maxlen: 22 185.169.36.0/22 maxlen: 22 185.180.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:97:2e:eb:e2:e8:38:2d:a0:66:a1:cf:92:41:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aee572a4e00dfa1cee8e1c9d453df0ff4855bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:7d:24:70:a4:a5:e4:01:99:c5:af:c7:52: df:2c:64:fb:52:af:ba:72:61:2c:eb:65:ce:a7:64: d9:15:73:87:08:aa:bc:b6:a4:95:ec:5f:5d:99:de: 66:ea:bb:bb:19:11:f1:8c:dc:45:d0:06:68:05:86: a1:8e:b7:5f:ab:aa:61:66:cc:dc:1b:5c:2e:be:7e: e3:eb:15:78:bb:20:5d:a5:96:27:8d:fc:67:07:66: f3:e2:a8:3d:b0:8d:73:b9:18:f9:87:6f:17:49:b8: 81:cb:bb:99:26:e6:e3:56:ad:2e:2a:47:cf:01:a0: cb:3f:21:b0:69:84:f2:a9:7c:42:1e:06:a0:84:1c: 05:87:63:a5:cf:b7:b5:8a:5d:b2:22:a4:c5:a0:b7: 86:b9:2d:66:07:84:97:ae:bb:e0:96:e8:2b:11:1b: cd:de:47:5f:f9:e3:91:9f:f3:41:4e:24:55:72:d2: 29:37:58:c6:7d:83:1e:a2:53:7f:33:93:41:bd:ef: 25:3b:12:de:6f:c6:a0:8c:80:23:ed:23:aa:7e:be: ad:78:c0:ed:33:a2:27:6a:28:ea:ef:41:ce:c7:7b: fd:30:92:73:a6:d9:7d:54:c6:09:6c:bd:4d:31:79: 85:01:67:a1:c9:74:e5:da:38:5e:8a:ab:58:bd:ed: 2a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EE:57:2A:4E:00:DF:A1:CE:E8:E1:C9:D4:53:DF:0F:F4:85:5B:C4 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Wu5XKk4A36HO6OHJ1FPfD_SFW8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.202.0.0/19 5.202.58.0-5.202.65.255 5.202.96.0/22 5.202.132.0/22 185.103.128.0/22 185.169.20.0/22 185.169.36.0/22 185.180.52.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:5a:4c:ab:01:23:f6:52:f7:d5:06:33:41:cb:05:8d:a9:b6: 9c:78:8b:86:dd:a7:51:4f:d0:af:81:71:12:ca:45:51:2f:0e: ac:f8:d9:41:ac:c7:d5:58:42:43:5a:12:90:0e:9e:75:a5:29: de:40:e7:03:33:9f:60:ec:42:a7:81:f8:07:03:34:8c:d5:17: 91:30:70:83:e7:39:05:9f:13:eb:34:4c:0d:b6:0b:e5:e7:48: ac:39:30:00:f6:c7:6f:b5:3e:7a:60:be:13:68:b3:26:c7:81: 44:ad:d0:e0:ab:9d:5a:26:b8:d0:6b:9b:5f:d5:61:17:e4:a6: f6:8b:e2:98:af:4f:a9:71:bf:00:47:92:8f:e3:f4:ba:23:52: b6:7a:73:39:bb:d4:d0:99:6b:56:5a:3d:c9:0b:28:b8:82:93: b2:c8:94:51:ce:76:59:27:3b:5f:04:44:15:bb:54:89:cb:b4: 58:8d:61:67:62:7d:79:a8:4e:40:a5:fc:aa:e3:fd:57:1c:51: f1:3c:05:06:f9:a0:64:7b:32:84:fd:95:dc:08:71:c7:ed:8e: a2:a7:c5:fc:d8:0a:21:d5:ca:e7:41:a2:8e:00:9c:f5:08:80: e2:c5:98:47:73:47:56:ca:2c:29:76:c4:b5:9c:5d:40:63:d6: 1d:03:f9:5d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt6x5cu6+LoOC2gZqHPkkHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWVlNTcyYTRlMDBkZmExY2VlOGUxYzlkNDUzZGYwZmY0ODU1YmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNN9JHCkpeQBmcWvx1LfLGT7Uq+6 cmEs62XOp2TZFXOHCKq8tqSV7F9dmd5m6ru7GRHxjNxF0AZoBYahjrdfq6phZszc G1wuvn7j6xV4uyBdpZYnjfxnB2bz4qg9sI1zuRj5h28XSbiBy7uZJubjVq0uKkfP AaDLPyGwaYTyqXxCHgaghBwFh2Olz7e1il2yIqTFoLeGuS1mB4SXrrvglugrERvN 3kdf+eORn/NBTiRVctIpN1jGfYMeolN/M5NBve8lOxLeb8agjIAj7SOqfr6teMDt M6Inaijq70HOx3v9MJJzptl9VMYJbL1NMXmFAWehyXTl2jheiqtYve0qLwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFFruVypOAN+hzujhydRT3w/0hVvEMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvV3U1WEtrNEEzNkhPNk9ISjFGUGZEX1NGVzhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQFBcoAMAwD BAEFyjoDBAEFykADBAIFymADBAIFyoQDBAK5Z4ADBAK5qRQDBAK5qSQDBAK5tDQw DQYJKoZIhvcNAQELBQADggEBAE5aTKsBI/ZS99UGM0HLBY2ptpx4i4bdp1FP0K+B cRLKRVEvDqz42UGsx9VYQkNaEpAOnnWlKd5A5wMzn2DsQqeB+AcDNIzVF5EwcIPn OQWfE+s0TA22C+XnSKw5MAD2x2+1PnpgvhNosybHgUSt0OCrnVomuNBrm1/VYRfk pvaL4pivT6lxvwBHko/j9LojUrZ6czm71NCZa1ZaPckLKLiCk7LIlFHOdlknO18E RBW7VInLtFiNYWdifXmoTkCl/Krj/VccUfE8BQb5oGR7MoT9ldwIccftjqKnxfzY CiHVyudBoo4AnPUIgOLFmEdzR1bKLCl2xLWcXUBj1h0D+V0= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:53 2026 by rpki-client