This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/WlS5ojL7gDl1onOWJD5o8wyANuo.roa File: WlS5ojL7gDl1onOWJD5o8wyANuo.roa (raw, json) Hash identifier: NX+jbIhhBEnEZTj9qhHO6FgUtaMrjfCgiQz82eLbv/s= Subject key identifier: 5A:54:B9:A2:32:FB:80:39:75:A2:73:96:24:3E:68:F3:0C:80:36:EA Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c Certificate serial: 019B7CEE5CE44B387A57724424654E118921 Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/WlS5ojL7gDl1onOWJD5o8wyANuo.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204965 IP address blocks: 185.231.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 22:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5c:e4:4b:38:7a:57:72:44:24:65:4e:11:89:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a54b9a232fb803975a27396243e68f30c8036ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:0f:fe:5f:77:fe:6c:25:94:0e:0e:56:19: 74:0a:9f:65:e3:34:6b:3f:de:17:06:dc:0c:86:b5: 0f:bb:ce:ca:d3:5f:f7:22:25:cb:bb:1d:55:1d:49: ff:b9:6f:8e:7b:10:04:1d:6e:7c:4f:30:d4:ff:e8: c0:7e:e7:6f:73:9a:87:1c:6c:34:55:02:8f:a9:c8: 2d:c5:de:34:98:c2:76:be:5e:81:05:ee:08:51:3d: 0f:f8:6f:d3:43:24:6c:4f:47:fb:ad:1a:23:95:7e: 76:23:7c:08:ca:3e:2b:5a:0c:24:fb:3f:ea:a2:0e: ed:44:8e:75:41:63:d8:d9:10:2f:4d:c3:36:d8:7c: 1c:75:94:d2:d5:da:71:12:64:0c:dd:64:9f:66:07: 2f:5f:c8:21:dd:7f:80:c3:6a:84:a2:04:94:f1:10: b5:52:d3:18:59:1f:c3:90:18:98:ef:ac:a9:b8:08: 3e:b7:40:9e:39:6e:0a:09:23:f2:f7:ca:2b:e6:77: 60:d2:80:9e:c1:c6:be:8c:39:23:00:0e:75:11:66: 4a:1e:d5:6f:1a:b6:69:b9:5d:24:44:f8:23:86:5d: ca:67:59:b6:3e:1c:18:00:b3:04:b3:3e:c2:5e:44: 8c:e7:27:7b:64:8b:47:c4:07:97:3c:bf:fc:67:0a: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:54:B9:A2:32:FB:80:39:75:A2:73:96:24:3E:68:F3:0C:80:36:EA X509v3 Authority Key Identifier: keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/WlS5ojL7gDl1onOWJD5o8wyANuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.214.0/24 Signature Algorithm: sha256WithRSAEncryption 49:41:05:c9:98:56:28:3d:d5:a7:c2:a5:34:ea:9b:f8:9b:63: ca:e7:51:d1:60:89:37:48:4b:fb:f7:4d:a6:fe:60:75:2d:9d: 8b:cd:ad:af:8c:8c:c8:07:0d:85:85:4c:cd:c7:6f:55:36:52: 59:b4:f1:96:67:18:48:e1:7a:0f:3e:61:6b:e0:50:5a:b0:f4: 99:d9:07:f4:48:c7:80:e9:5e:02:5e:a1:c0:c3:69:16:60:3b: 02:63:be:96:23:8a:11:0d:f2:24:a9:23:bf:8a:4f:27:97:42: 06:6d:6d:05:ad:06:e4:aa:54:a6:60:36:b1:94:62:2f:71:cb: 40:60:a3:84:e7:5d:9b:c6:7d:cb:f3:19:fe:90:30:df:ea:c2: b8:c9:c7:14:f5:63:5a:5a:9b:f1:82:45:45:6e:a7:b0:29:47: 96:69:8e:75:8e:ec:cc:fc:07:9f:be:f3:8c:31:0e:db:cb:2d: 84:e2:ec:a7:55:f0:f8:b9:59:79:1c:4a:e1:21:c3:5a:d4:02: 02:1f:85:29:1c:37:b9:4e:a8:bf:9a:f2:c9:6a:e4:b7:b1:61: 5b:31:51:7a:b7:70:15:21:d1:77:55:67:fb:9c:37:0d:0f:99: 55:e1:1c:83:1c:a6:fc:f6:08:4b:c2:76:18:61:70:c9:41:9d: 9f:cc:91:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lzkSzh6V3JEJGVOEYkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzUzNDk5ZmYyMGYwMzVjYjhiMWMwYWE5Yjc3YzNkN2Qy ODk3NmMwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTU0YjlhMjMyZmI4MDM5NzVhMjczOTYyNDNlNjhmMzBjODAzNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JgP/l93/mwllA4OVhl0Cp9l4zRr P94XBtwMhrUPu87K01/3IiXLux1VHUn/uW+OexAEHW58TzDU/+jAfudvc5qHHGw0 VQKPqcgtxd40mMJ2vl6BBe4IUT0P+G/TQyRsT0f7rRojlX52I3wIyj4rWgwk+z/q og7tRI51QWPY2RAvTcM22HwcdZTS1dpxEmQM3WSfZgcvX8gh3X+Aw2qEogSU8RC1 UtMYWR/DkBiY76ypuAg+t0CeOW4KCSPy98or5ndg0oCewca+jDkjAA51EWZKHtVv GrZpuV0kRPgjhl3KZ1m2PhwYALMEsz7CXkSM5yd7ZItHxAeXPL/8Zwr2TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFpUuaIy+4A5daJzliQ+aPMMgDbqMB8GA1UdIwQY MBaAFKrFNJn/IPA1y4scCqm3fD19KJdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMt ZmFiOWJmN2EyNmQ4LzEvV2xTNW9qTDdnRGwxb25PV0pENW84d3lBTnVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMtZmFiOWJmN2EyNmQ4 LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuefWMA0G CSqGSIb3DQEBCwUAA4IBAQBJQQXJmFYoPdWnwqU06pv4m2PK51HRYIk3SEv7902m /mB1LZ2Lza2vjIzIBw2FhUzNx29VNlJZtPGWZxhI4XoPPmFr4FBasPSZ2Qf0SMeA 6V4CXqHAw2kWYDsCY76WI4oRDfIkqSO/ik8nl0IGbW0FrQbkqlSmYDaxlGIvcctA YKOE512bxn3L8xn+kDDf6sK4yccU9WNaWpvxgkVFbqewKUeWaY51juzM/AefvvOM MQ7byy2E4uynVfD4uVl5HErhIcNa1AICH4UpHDe5Tqi/mvLJauS3sWFbMVF6t3AV IdF3VWf7nDcND5lV4RyDHKb89ghLwnYYYXDJQZ2fzJEB -----END CERTIFICATE-----Generated at Mon Jan 12 04:55:44 2026 by rpki-client