This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/nWWjV-FqWRviIQq1sbPjpszS4J8.roa File: nWWjV-FqWRviIQq1sbPjpszS4J8.roa (raw, json) Hash identifier: s/947r8f3drp/IQDPbvU6DHKccsz6mcfNtNyGVLNQ+I= Subject key identifier: 9D:65:A3:57:E1:6A:59:1B:E2:21:0A:B5:B1:B3:E3:A6:CC:D2:E0:9F Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC78D5060ADEF2114194EDF4088CF6E Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/nWWjV-FqWRviIQq1sbPjpszS4J8.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44090 IP address blocks: 5.202.72.0/22 maxlen: 22 5.202.102.0/24 maxlen: 24 185.169.20.0/23 maxlen: 23 185.169.22.0/23 maxlen: 23 185.169.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8d:50:60:ad:ef:21:14:19:4e:df:40:88:cf:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d65a357e16a591be2210ab5b1b3e3a6ccd2e09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:bd:bf:89:50:bc:cc:df:f5:94:13:3b:6a: 9f:6a:de:48:20:58:16:07:2e:28:50:dd:61:4e:c4: d0:9c:26:3b:c8:30:5a:e6:93:a0:08:bb:e9:1b:18: 9d:21:ac:a1:b4:ec:ba:a5:1e:62:e1:c5:cc:71:24: 51:da:f8:60:b5:a1:7d:9a:20:a7:e8:5b:2c:03:67: ca:d2:5c:a6:7f:c7:eb:64:0b:fe:c7:a1:82:2f:2b: cf:4a:e4:ff:3c:64:72:97:70:8d:88:4c:23:fd:24: 34:56:1c:b3:72:51:66:4a:ba:c2:50:55:c7:35:84: 95:52:9d:90:26:8e:05:c4:32:fd:45:35:ea:d6:f4: 52:24:d8:79:f8:72:0a:35:67:cc:9b:38:0e:79:de: bc:67:73:a3:d5:9e:ce:3b:17:9c:ea:37:db:84:c1: 7c:f8:a0:98:52:df:27:5d:48:ee:a8:24:c5:70:b6: 2f:ea:c7:45:41:7f:2c:0f:f2:8e:4a:47:a1:a4:52: 8a:25:2e:17:65:44:d8:ee:a9:3a:b3:6c:e2:55:34: 19:39:be:3a:3b:57:7d:16:c0:e6:83:d3:5b:f8:11: 0a:48:03:d1:bd:87:e1:42:3f:b1:c9:88:73:c3:b7: fa:d5:78:e9:06:9b:b3:a6:69:6f:9a:1d:b2:1d:25: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:65:A3:57:E1:6A:59:1B:E2:21:0A:B5:B1:B3:E3:A6:CC:D2:E0:9F X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/nWWjV-FqWRviIQq1sbPjpszS4J8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.202.72.0/22 5.202.102.0/24 185.169.20.0/22 185.169.39.0/24 Signature Algorithm: sha256WithRSAEncryption c4:b4:8d:7d:cb:8c:1d:ff:75:f2:ed:2f:d6:f6:0a:f4:6d:7c: b9:61:89:0b:03:18:70:30:9b:e8:36:ff:40:41:ce:3b:37:f0: de:f5:2f:b8:48:e0:b5:90:92:07:60:24:94:53:f1:eb:5e:31: 36:b6:4d:4e:d3:ce:7b:01:09:08:e9:fc:9c:5c:ad:d2:4a:e7: 68:59:a3:b7:bb:42:7e:44:28:63:3a:1e:1a:20:5d:4d:54:ac: 4d:af:ea:64:20:46:7b:00:69:be:f5:4d:37:48:69:73:13:f5: 4d:9b:ad:0f:52:c3:00:ae:c6:a6:5e:8b:59:15:55:14:0f:04: de:ad:1c:14:f9:4b:7a:a8:f8:94:2f:f5:80:b7:d4:3f:94:06: 84:a9:98:4a:ce:21:8f:22:d4:90:89:5d:93:fd:ea:59:7d:54: 9d:ab:32:79:b7:be:d8:68:8a:83:f8:80:3f:ab:2a:a9:80:7d: 77:48:55:79:4e:74:71:82:c2:cb:1f:c6:b4:a8:fe:f6:6d:ea: 2a:36:bd:85:47:fe:2c:ba:5d:0f:c9:ea:a1:f2:92:18:29:89: 50:be:8a:ec:9f:ac:41:50:ac:1e:05:25:77:7b:bf:c2:d9:f4: ec:31:ab:a1:24:19:ef:e6:56:f4:fe:74:79:b5:76:66:7b:e6: f2:f5:ef:0b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6x41QYK3vIRQZTt9AiM9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDY1YTM1N2UxNmE1OTFiZTIyMTBhYjViMWIzZTNhNmNjZDJlMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7K9v4lQvMzf9ZQTO2qfat5IIFgW By4oUN1hTsTQnCY7yDBa5pOgCLvpGxidIayhtOy6pR5i4cXMcSRR2vhgtaF9miCn 6FssA2fK0lymf8frZAv+x6GCLyvPSuT/PGRyl3CNiEwj/SQ0VhyzclFmSrrCUFXH NYSVUp2QJo4FxDL9RTXq1vRSJNh5+HIKNWfMmzgOed68Z3Oj1Z7OOxec6jfbhMF8 +KCYUt8nXUjuqCTFcLYv6sdFQX8sD/KOSkehpFKKJS4XZUTY7qk6s2ziVTQZOb46 O1d9FsDmg9Nb+BEKSAPRvYfhQj+xyYhzw7f61XjpBpuzpmlvmh2yHSXI5wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ1lo1fhalkb4iEKtbGz46bM0uCfMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbldXalYtRnFXUnZpSVFxMXNiUGpwc3pTNEo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBcpIAwQA BcpmAwQCuakUAwQAuaknMA0GCSqGSIb3DQEBCwUAA4IBAQDEtI19y4wd/3Xy7S/W 9gr0bXy5YYkLAxhwMJvoNv9AQc47N/De9S+4SOC1kJIHYCSUU/HrXjE2tk1O0857 AQkI6fycXK3SSudoWaO3u0J+RChjOh4aIF1NVKxNr+pkIEZ7AGm+9U03SGlzE/VN m60PUsMArsamXotZFVUUDwTerRwU+Ut6qPiUL/WAt9Q/lAaEqZhKziGPItSQiV2T /epZfVSdqzJ5t77YaIqD+IA/qyqpgH13SFV5TnRxgsLLH8a0qP72beoqNr2FR/4s ul0Pyeqh8pIYKYlQvorsn6xBUKweBSV3e7/C2fTsMauhJBnv5lb0/nR5tXZme+by 9e8L -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:56 2026 by rpki-client