This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/97I6aw0yc5ghlgnXfoPx1AXF_Js.roa File: 97I6aw0yc5ghlgnXfoPx1AXF_Js.roa (raw, json) Hash identifier: MfTKq7Nn0b67YpRTl+D+72YsWvXbSRgj0PmOH+uQQMs= Subject key identifier: F7:B2:3A:6B:0D:32:73:98:21:96:09:D7:7E:83:F1:D4:05:C5:FC:9B Certificate issuer: /CN=a72c20e7fe310a983b9a2371f942daf44be610b3 Certificate serial: 019B7AC80565626D4F3B1DE339A5BAF43FC9 Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/97I6aw0yc5ghlgnXfoPx1AXF_Js.roa Signing time: Thu 01 Jan 2026 18:18:07 +0000 ROA not before: Thu 01 Jan 2026 18:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401348 IP address blocks: 141.8.224.0/24 maxlen: 24 141.8.225.0/24 maxlen: 24 141.8.226.0/24 maxlen: 24 141.8.227.0/24 maxlen: 24 141.8.228.0/24 maxlen: 24 141.8.229.0/24 maxlen: 24 141.8.230.0/24 maxlen: 24 141.8.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:05:65:62:6d:4f:3b:1d:e3:39:a5:ba:f4:3f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3 Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7b23a6b0d327398219609d77e83f1d405c5fc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:e8:9e:8c:d9:96:37:6a:df:0a:a2:ed:d4: b1:05:74:66:f0:18:ce:4c:44:ae:41:3c:bc:04:5c: 98:6e:9f:51:df:a7:ea:99:50:d5:08:1a:74:2d:bb: 53:84:b9:15:68:5f:e0:28:15:bd:c8:0d:2e:16:89: 9f:ca:56:91:0b:b7:bf:a0:7a:d7:81:7d:5e:c0:dd: 4f:96:80:f1:c9:c8:22:4a:21:e6:5d:bc:61:26:ee: 69:58:5c:8e:4d:93:7a:3e:af:3c:c2:4c:c8:74:7c: 24:15:ec:f1:e8:94:8f:17:5e:bc:01:f9:c4:3e:03: 8a:48:58:a1:c9:ac:70:6f:5e:6f:4a:f6:71:b9:b7: f6:97:2f:81:86:6f:7e:05:72:10:b0:d0:f6:79:62: 88:c5:6d:14:2d:be:18:af:15:e1:1e:67:65:95:17: 1c:49:d7:74:ee:2c:ad:11:5b:d8:ee:ed:69:10:ee: f2:a4:e6:3e:ef:4c:97:08:50:1c:d6:e1:55:36:79: 4c:d0:35:87:8c:8f:d5:21:97:75:78:ac:74:4d:d9: 37:e4:36:72:54:64:8e:40:af:a8:53:1c:ff:25:aa: 2b:20:71:2f:78:5f:40:d6:4d:9c:90:e9:e0:77:0c: 64:ce:98:d5:73:03:91:47:c5:02:f1:d6:a2:76:e1: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B2:3A:6B:0D:32:73:98:21:96:09:D7:7E:83:F1:D4:05:C5:FC:9B X509v3 Authority Key Identifier: keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/97I6aw0yc5ghlgnXfoPx1AXF_Js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.8.224.0/21 Signature Algorithm: sha256WithRSAEncryption d2:c7:33:4b:87:8a:50:87:1a:c6:2c:0b:9d:14:53:59:24:61: 22:34:9e:72:f3:39:fd:a8:2d:f9:df:71:fe:f1:3b:a8:d1:b9: bc:81:cc:c0:58:e6:f5:4c:76:21:d5:95:d0:6f:e7:14:90:97: 4e:d8:d6:91:ee:aa:7b:71:cc:50:7a:f8:d5:5f:5b:03:41:b8: a4:e2:dc:f0:12:2d:db:6b:b2:b7:64:84:9c:e3:7e:93:0b:1b: d4:19:97:a1:ce:79:40:e0:e6:71:ab:c0:d4:7a:a0:52:3d:3c: 27:b3:a1:a0:30:66:a0:77:79:ed:5a:7a:76:9e:91:af:d8:65: ea:1b:57:ee:75:da:69:e0:ac:d2:20:55:26:1f:40:ae:01:98: 4a:2b:c7:db:00:7e:ea:5e:90:95:be:d4:78:4f:81:81:2c:07: 5f:59:5d:73:b0:f1:65:0d:97:59:8f:65:a8:ef:77:9e:02:41: 37:cf:0d:32:13:08:f0:69:74:c8:22:0a:06:c7:92:f8:cd:a3: b2:a2:bc:36:6f:05:5a:41:68:2a:6c:65:10:97:69:9d:54:8b: 7d:0e:d5:f4:a5:b0:21:6b:f6:72:7e:02:70:ca:c9:0f:76:10: d7:81:c6:ef:13:94:91:ae:5a:1a:db:d7:1f:24:66:4d:80:0d: ae:f7:ad:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAVlYm1POx3jOaW69D/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MmMyMGU3ZmUzMTBhOTgzYjlhMjM3MWY5NDJkYWY0NGJl NjEwYjMwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2IyM2E2YjBkMzI3Mzk4MjE5NjA5ZDc3ZTgzZjFkNDA1YzVmYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VTonozZljdq3wqi7dSxBXRm8BjO TESuQTy8BFyYbp9R36fqmVDVCBp0LbtThLkVaF/gKBW9yA0uFomfylaRC7e/oHrX gX1ewN1PloDxycgiSiHmXbxhJu5pWFyOTZN6Pq88wkzIdHwkFezx6JSPF168AfnE PgOKSFihyaxwb15vSvZxubf2ly+Bhm9+BXIQsND2eWKIxW0ULb4YrxXhHmdllRcc Sdd07iytEVvY7u1pEO7ypOY+70yXCFAc1uFVNnlM0DWHjI/VIZd1eKx0Tdk35DZy VGSOQK+oUxz/JaorIHEveF9A1k2ckOngdwxkzpjVcwORR8UC8daiduHdvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPeyOmsNMnOYIZYJ136D8dQFxfybMB8GA1UdIwQY MBaAFKcsIOf+MQqYO5ojcflC2vRL5hCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHl3ZzVfNHhDcGc3bWlOeC1VTGE5RXZtRUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYjk2MTQtOGJmYi00YmYxLWEyMGIt MmEzZDBkYzVkY2M5LzEvOTdJNmF3MHljNWdobGduWGZvUHgxQVhGX0pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lYjk2MTQtOGJmYi00YmYxLWEyMGItMmEzZDBkYzVkY2M5 LzEvcHl3ZzVfNHhDcGc3bWlOeC1VTGE5RXZtRUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjQjgMA0G CSqGSIb3DQEBCwUAA4IBAQDSxzNLh4pQhxrGLAudFFNZJGEiNJ5y8zn9qC3533H+ 8Tuo0bm8gczAWOb1THYh1ZXQb+cUkJdO2NaR7qp7ccxQevjVX1sDQbik4tzwEi3b a7K3ZISc436TCxvUGZehznlA4OZxq8DUeqBSPTwns6GgMGagd3ntWnp2npGv2GXq G1fuddpp4KzSIFUmH0CuAZhKK8fbAH7qXpCVvtR4T4GBLAdfWV1zsPFlDZdZj2Wo 73eeAkE3zw0yEwjwaXTIIgoGx5L4zaOyorw2bwVaQWgqbGUQl2mdVIt9DtX0pbAh a/ZyfgJwyskPdhDXgcbvE5SRrloa29cfJGZNgA2u960X -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:27 2026 by rpki-client