This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa File: wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa (raw, json) Hash identifier: bnv6CBVN0TxP3itZ4ZFUesEngt/ft27+17IUFJfqBMI= Subject key identifier: C0:93:69:60:7D:F1:F0:9B:91:41:EE:CD:37:66:42:57:F5:D0:99:13 Certificate issuer: /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79 Certificate serial: 019B78A3326B0C6D6EF2CEC80E16E535592A Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.147.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:32:6b:0c:6d:6e:f2:ce:c8:0e:16:e5:35:59:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c09369607df1f09b9141eecd37664257f5d09913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:50:f1:13:36:12:c3:20:ea:e2:f3:d4:df: f5:e7:8f:2a:f5:9e:f0:5d:5c:65:08:1e:e8:97:47: 4f:db:1d:5a:a5:0c:d0:e0:4d:78:3d:39:f1:69:f2: 6f:cb:6e:52:d3:62:12:a2:f1:78:f8:87:9f:e5:9d: 92:9f:58:b5:01:72:c0:d2:46:c0:ab:b7:d3:68:02: 67:d1:6c:f0:d4:1a:5e:05:50:e4:b4:e3:c2:df:1f: bb:ff:dc:3c:70:c5:29:fa:32:2b:7d:9e:05:13:17: d1:1b:44:52:53:c2:f7:9e:7a:24:c2:2a:80:45:42: 96:62:53:44:44:1f:b1:c4:ea:d7:53:35:2f:51:b4: 93:aa:b7:bd:18:59:87:bb:70:8c:b0:f8:20:5e:98: 48:94:fe:99:45:77:b2:7b:85:33:d8:0c:0f:a8:84: f0:e6:55:e8:7a:3a:71:58:34:ce:c7:34:7a:3a:d8: 10:2e:87:51:da:b8:50:0f:fe:1d:00:3c:3f:92:3e: bf:2c:1f:9e:59:40:9c:16:85:29:c4:be:23:09:3c: 0d:32:aa:bb:0b:cb:4f:b6:f5:28:50:e1:49:5e:d1: f9:7e:3d:12:d2:9c:89:10:2a:12:1c:e8:d8:48:ce: df:24:0d:5a:09:62:23:4a:b2:df:78:9b:00:27:fd: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:93:69:60:7D:F1:F0:9B:91:41:EE:CD:37:66:42:57:F5:D0:99:13 X509v3 Authority Key Identifier: keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.134.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:f6:b3:41:bf:41:ca:79:f5:1c:c5:d7:97:f3:fa:5d:c0:d7: de:cd:07:9a:6b:38:94:85:c3:7f:40:c5:60:8d:93:cd:b6:d7: 52:8f:1a:71:c3:61:1e:6d:78:7d:7c:69:b2:2c:88:39:fe:c9: 02:75:86:a9:8f:ca:0d:7a:e1:25:2e:c0:65:6f:36:6e:53:b3: 86:47:e0:d0:ed:22:68:2c:2e:71:9d:f6:e8:54:05:80:a6:d5: cf:de:5b:5c:f1:eb:5b:da:95:bd:5d:b6:56:1a:29:9d:10:3c: 8a:3f:ce:7a:3a:28:a4:a8:7f:0d:9e:b2:5e:3a:57:9c:f5:b2: 06:f3:50:ee:53:31:f6:44:40:02:a3:4d:8a:c4:46:ca:17:7c: a3:02:9b:e2:91:43:f3:88:6c:78:b5:51:ce:2a:a0:ee:aa:6e: 0e:9a:bb:fb:1d:04:7f:02:b4:23:9b:c0:9d:cd:fc:1f:bd:2a: 79:55:21:e2:2d:ad:73:74:59:d7:de:cd:89:b8:37:fb:be:d0: 46:83:9c:59:6f:2d:21:ed:13:63:76:5d:0c:33:27:e7:bd:b1: 99:ce:04:ef:70:c2:87:53:92:07:7e:25:03:bd:11:c9:c4:21: 75:f0:b2:35:8e:cd:1f:db:9b:98:52:4c:ab:16:63:6a:9c:b2: 2a:f6:a9:01 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4ozJrDG1u8s7IDhblNVkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MThhNWY4Yjk1MTUwMTdjOGQ2NDg4YTlhOTQ3ZDQ4MjBi NmZiNzkwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDkzNjk2MDdkZjFmMDliOTE0MWVlY2QzNzY2NDI1N2Y1ZDA5OTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRpQ8RM2EsMg6uLz1N/1548q9Z7w XVxlCB7ol0dP2x1apQzQ4E14PTnxafJvy25S02ISovF4+Ief5Z2Sn1i1AXLA0kbA q7fTaAJn0Wzw1BpeBVDktOPC3x+7/9w8cMUp+jIrfZ4FExfRG0RSU8L3nnokwiqA RUKWYlNERB+xxOrXUzUvUbSTqre9GFmHu3CMsPggXphIlP6ZRXeye4Uz2AwPqITw 5lXoejpxWDTOxzR6OtgQLodR2rhQD/4dADw/kj6/LB+eWUCcFoUpxL4jCTwNMqq7 C8tPtvUoUOFJXtH5fj0S0pyJECoSHOjYSM7fJA1aCWIjSrLfeJsAJ/1SUQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMCTaWB98fCbkUHuzTdmQlf10JkTMB8GA1UdIwQY MBaAFPkYpfi5UVAXyNZIipqUfUggtvt5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SaWwtTGxSVUJmSTFraUttcFI5U0NDMi0zay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYjIyZDZlLTRjNGYtNDU5ZC1hMDQ4 LWRkMzQ3NTM3NjgzZS8xL3dKTnBZSDN4OEp1UlFlN05OMlpDVl9YUW1STS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjcvYjIyZDZlLTRjNGYtNDU5ZC1hMDQ4LWRkMzQ3NTM3Njgz ZS8xLzEtUmlsLUxsUlVCZkkxa2lLbXBSOVNDQzItM2suY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHCk4Yw DQYJKoZIhvcNAQELBQADggEBAB/2s0G/Qcp59RzF15fz+l3A197NB5prOJSFw39A xWCNk82211KPGnHDYR5teH18abIsiDn+yQJ1hqmPyg164SUuwGVvNm5Ts4ZH4NDt ImgsLnGd9uhUBYCm1c/eW1zx61valb1dtlYaKZ0QPIo/zno6KKSofw2esl46V5z1 sgbzUO5TMfZEQAKjTYrERsoXfKMCm+KRQ/OIbHi1Uc4qoO6qbg6au/sdBH8CtCOb wJ3N/B+9KnlVIeItrXN0WdfezYm4N/u+0EaDnFlvLSHtE2N2XQwzJ+e9sZnOBO9w wodTkgd+JQO9EcnEIXXwsjWOzR/bm5hSTKsWY2qcsir2qQE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:25 2026 by rpki-client