This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-W6z3H_WSsz6E0qXIObK7XoWh7A.roa File: 1-W6z3H_WSsz6E0qXIObK7XoWh7A.roa (raw, json) Hash identifier: fRNUNJ+GTJcbbLzUL7xtpKvN/QcjQyoORW9B8aGorYY= Subject key identifier: F9:6E:B3:DC:7F:D6:4A:CC:FA:13:4A:97:20:E6:CA:ED:7A:16:87:B0 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F5D50AA335B6EFD8D17CB38A7107D Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-W6z3H_WSsz6E0qXIObK7XoWh7A.roa Signing time: Fri 02 Jan 2026 02:18:00 +0000 ROA not before: Fri 02 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201592 IP address blocks: 213.189.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5d:50:aa:33:5b:6e:fd:8d:17:cb:38:a7:10:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f96eb3dc7fd64accfa134a9720e6caed7a1687b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:91:52:99:ee:7e:c8:cd:3e:80:ff:90:69: 6f:23:a1:e1:35:20:94:e1:35:64:a4:33:fd:b8:ad: 27:f6:40:ea:5b:ac:f4:7b:a4:76:e5:97:f2:47:d1: 9a:7c:50:70:d8:d5:49:55:17:8e:8a:1e:93:52:cc: d8:98:ae:a7:f4:83:da:d0:a4:0e:91:f2:39:3e:eb: ff:10:80:33:08:8e:3d:9a:b8:0f:54:6e:ed:8b:8d: 64:5b:68:71:41:4e:ab:89:33:dd:b5:84:9e:4c:de: fd:1d:57:89:f6:3e:78:1d:d9:fe:9a:83:86:9b:05: 17:59:b3:16:d3:cc:14:e6:4f:15:3b:fe:03:9e:ff: a2:b1:16:7c:a2:03:06:15:e8:32:b2:88:98:80:d1: 5d:4a:7a:71:12:01:44:65:89:ee:07:c4:1a:c0:0a: 01:6f:a2:d2:27:48:31:68:50:bd:3a:79:d0:6d:4f: db:34:7b:a8:20:39:39:9f:da:a8:c2:67:5f:d6:9b: c2:d7:f7:b5:19:72:3a:0e:e6:02:65:d1:a1:1e:7f: b7:c1:68:c8:a6:f4:3a:7c:6e:72:e8:ab:3c:bc:91: e6:c9:b7:bf:45:bc:c5:78:d7:81:bc:e4:f4:77:a4: 09:75:72:2a:cd:e2:fc:f0:c2:73:90:5c:89:24:2c: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6E:B3:DC:7F:D6:4A:CC:FA:13:4A:97:20:E6:CA:ED:7A:16:87:B0 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-W6z3H_WSsz6E0qXIObK7XoWh7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.189.40.0/24 Signature Algorithm: sha256WithRSAEncryption 78:64:c2:ed:68:fb:38:e5:e1:6b:ce:b8:d6:db:2d:1b:e3:91: b6:d2:1a:07:6d:f3:1b:86:1a:44:e5:c7:d7:c3:bc:61:a5:33: 5d:49:b3:80:11:01:89:a4:82:12:2c:4e:6a:83:e5:05:30:92: 77:0f:d0:aa:cb:7e:da:31:69:9e:84:2d:d9:37:85:ae:40:bb: b5:1e:ee:f0:f1:b5:30:d3:15:3a:a0:0f:d2:5f:e4:00:06:4b: c2:63:1a:9b:65:2e:d2:c2:eb:f6:88:9f:fc:61:4f:0c:3e:b7: f6:b3:d3:97:4a:0f:61:b3:a4:44:9e:3e:c2:21:7c:77:d8:ca: ce:33:c1:9d:b9:45:de:1f:fc:09:50:88:3f:64:e6:2b:40:d3: c5:d9:be:d4:17:7b:0d:54:a5:2b:5c:cd:7e:39:9e:94:c0:8d: 9e:63:fb:64:2e:23:24:29:95:f1:61:80:9e:9b:e3:d9:ba:8c: 01:e3:5d:0b:59:01:47:11:26:58:1a:06:b7:98:b1:2b:c4:3a: 4b:20:08:54:16:59:80:8d:de:33:12:29:c2:06:32:1c:c9:7a: e6:c2:f5:0e:5a:3b:38:90:70:cb:61:24:f8:eb:f4:2d:55:5f: 5f:32:9e:3e:75:74:6f:e6:69:f1:9e:07:65:65:e2:05:d6:e9: 7d:84:eb:b1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f11QqjNbbv2NF8s4pxB9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTZlYjNkYzdmZDY0YWNjZmExMzRhOTcyMGU2Y2FlZDdhMTY4N2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhuRUpnufsjNPoD/kGlvI6HhNSCU 4TVkpDP9uK0n9kDqW6z0e6R25ZfyR9GafFBw2NVJVReOih6TUszYmK6n9IPa0KQO kfI5Puv/EIAzCI49mrgPVG7ti41kW2hxQU6riTPdtYSeTN79HVeJ9j54Hdn+moOG mwUXWbMW08wU5k8VO/4Dnv+isRZ8ogMGFegysoiYgNFdSnpxEgFEZYnuB8QawAoB b6LSJ0gxaFC9OnnQbU/bNHuoIDk5n9qowmdf1pvC1/e1GXI6DuYCZdGhHn+3wWjI pvQ6fG5y6Ks8vJHmybe/RbzFeNeBvOT0d6QJdXIqzeL88MJzkFyJJCzxXwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlus9x/1krM+hNKlyDmyu16FoewMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvMS1XNnozSF9XU3N6NkUwcVhJT2JLN1hvV2g3QS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTgvZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2 YS8xL2FNVVFfSnVHWFpianI4ZkZZRmJ2clpvekRGcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANW9KDAN BgkqhkiG9w0BAQsFAAOCAQEAeGTC7Wj7OOXha8641tstG+ORttIaB23zG4YaROXH 18O8YaUzXUmzgBEBiaSCEixOaoPlBTCSdw/Qqst+2jFpnoQt2TeFrkC7tR7u8PG1 MNMVOqAP0l/kAAZLwmMam2Uu0sLr9oif/GFPDD639rPTl0oPYbOkRJ4+wiF8d9jK zjPBnblF3h/8CVCIP2TmK0DTxdm+1Bd7DVSlK1zNfjmelMCNnmP7ZC4jJCmV8WGA npvj2bqMAeNdC1kBRxEmWBoGt5ixK8Q6SyAIVBZZgI3eMxIpwgYyHMl65sL1Dlo7 OJBwy2Ek+Ov0LVVfXzKePnV0b+Zp8Z4HZWXiBdbpfYTrsQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:58 2026 by rpki-client