This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/pwbWCuGOLTFOrJupg71uoibxjHU.roa File: pwbWCuGOLTFOrJupg71uoibxjHU.roa (raw, json) Hash identifier: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48= Subject key identifier: A7:06:D6:0A:E1:8E:2D:31:4E:AC:9B:A9:83:BD:6E:A2:26:F1:8C:75 Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392 Certificate serial: 019B7D5D2E1C6F6F715345BFA16B4C3628F2 Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/pwbWCuGOLTFOrJupg71uoibxjHU.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8758 IP address blocks: 193.247.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2e:1c:6f:6f:71:53:45:bf:a1:6b:4c:36:28:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a706d60ae18e2d314eac9ba983bd6ea226f18c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:61:28:5e:b9:96:1c:75:46:50:42:fd:16: 69:fa:4a:27:f8:9e:09:75:3a:54:68:88:9a:62:90: cf:96:21:40:93:16:32:63:3f:97:a0:80:ce:a4:77: 06:83:b7:72:f3:c5:a5:0b:5b:33:54:0e:76:ec:53: ee:ce:45:84:23:da:53:eb:6f:a5:06:65:e2:00:db: 0c:10:21:fb:56:58:ad:73:27:83:e7:c7:a6:7b:25: 3f:b3:33:db:76:13:5b:1b:72:a9:1e:ae:96:0f:99: c0:5f:42:96:3f:39:86:9b:a0:93:f1:93:22:43:49: 35:a1:5b:4a:cf:be:74:e7:59:cb:02:62:8e:fc:38: 9b:5c:f5:6c:98:06:23:ed:a2:60:15:57:b3:30:45: d9:d6:dc:4d:ed:a3:55:cf:29:9f:5a:c0:02:4c:b1: e8:08:8b:61:0f:15:73:d2:64:54:de:4c:fd:f8:37: 18:1a:fc:14:ed:9a:63:a0:19:e8:bc:ab:9d:3c:63: f1:19:3a:b4:11:58:fb:be:53:ee:aa:a4:77:59:d9: 45:83:6f:76:eb:06:bd:8f:bc:00:a7:01:4c:f9:15: 69:d8:26:5a:6f:7f:06:d8:3e:aa:91:12:65:8d:b8: f8:6a:2b:09:73:65:e5:04:0b:d6:e8:f8:e0:36:08: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:06:D6:0A:E1:8E:2D:31:4E:AC:9B:A9:83:BD:6E:A2:26:F1:8C:75 X509v3 Authority Key Identifier: keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/pwbWCuGOLTFOrJupg71uoibxjHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.148.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:ac:5c:7b:87:8f:46:e5:fd:af:fe:94:f0:ef:0a:6d:04:74: 2a:f0:0c:39:97:6a:87:13:76:15:68:76:11:64:c2:8e:46:8d: e2:f8:83:6e:de:43:a5:a2:6e:43:7b:29:1d:fe:c6:fa:5f:e5: 3b:33:39:b8:ed:cf:c2:ec:05:b2:1e:a1:96:0b:43:e5:a8:71: 93:9f:d8:ae:0d:f7:5c:62:8b:7b:ad:11:33:24:bb:dd:29:95: a7:b5:29:4a:e5:8d:70:f6:39:ff:02:7a:7c:8a:e2:3e:31:eb: de:f4:6e:91:b2:66:f2:e6:45:f7:21:ed:4d:b8:2f:00:cf:e3: f1:41:a7:03:1e:9f:b9:2c:54:e2:5b:e3:a0:33:6c:61:b8:21: 63:11:7f:0e:f3:28:53:12:67:cd:65:ed:21:cf:82:98:49:47: e0:88:ca:bc:4d:5a:2f:e4:7e:3c:2e:d1:f5:8c:9b:84:65:65: b7:42:7a:50:29:d1:8d:78:b3:bd:5a:63:4e:8a:25:8a:3a:15: f4:eb:9b:d5:59:93:44:3c:f5:ad:c0:4c:9c:7e:5e:60:27:20: 45:7f:4b:4c:95:ce:65:64:6d:70:c1:62:0a:37:e4:dc:07:ee: 64:2d:19:0b:a4:c2:ee:9a:9b:08:4e:24:80:40:6b:2d:a5:b4: 90:0b:c2:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XS4cb29xU0W/oWtMNijyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTZlNzYzZjg5YzcyMGU4N2NlNGQ3OWY4YzA5ZDA3ZjJm YTYzOTIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzA2ZDYwYWUxOGUyZDMxNGVhYzliYTk4M2JkNmVhMjI2ZjE4Yzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGNhKF65lhx1RlBC/RZp+kon+J4J dTpUaIiaYpDPliFAkxYyYz+XoIDOpHcGg7dy88WlC1szVA527FPuzkWEI9pT62+l BmXiANsMECH7VlitcyeD58emeyU/szPbdhNbG3KpHq6WD5nAX0KWPzmGm6CT8ZMi Q0k1oVtKz75051nLAmKO/DibXPVsmAYj7aJgFVezMEXZ1txN7aNVzymfWsACTLHo CIthDxVz0mRU3kz9+DcYGvwU7ZpjoBnovKudPGPxGTq0EVj7vlPuqqR3WdlFg292 6wa9j7wApwFM+RVp2CZab38G2D6qkRJljbj4aisJc2XlBAvW6PjgNgg6MQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcG1grhji0xTqybqYO9bqIm8Yx1MB8GA1UdIwQY MBaAFGiW52P4nHIOh85NefjAnQfy+mOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEt Yzg4NDBmYTg1MTQxLzEvcHdiV0N1R09MVEZPckp1cGc3MXVvaWJ4akhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEtYzg4NDBmYTg1MTQx LzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwfeUMA0G CSqGSIb3DQEBCwUAA4IBAQBNrFx7h49G5f2v/pTw7wptBHQq8Aw5l2qHE3YVaHYR ZMKORo3i+INu3kOlom5Deykd/sb6X+U7Mzm47c/C7AWyHqGWC0PlqHGTn9iuDfdc Yot7rREzJLvdKZWntSlK5Y1w9jn/Anp8iuI+Meve9G6Rsmby5kX3Ie1NuC8Az+Px QacDHp+5LFTiW+OgM2xhuCFjEX8O8yhTEmfNZe0hz4KYSUfgiMq8TVov5H48LtH1 jJuEZWW3QnpQKdGNeLO9WmNOiiWKOhX065vVWZNEPPWtwEycfl5gJyBFf0tMlc5l ZG1wwWIKN+TcB+5kLRkLpMLumpsITiSAQGstpbSQC8JC -----END CERTIFICATE-----Generated at Mon Jan 26 14:54:44 2026 by rpki-client