This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/1WtXs1JyVc4equpJq3X_jQs-X4A.roa File: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (raw, json) Hash identifier: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI= Subject key identifier: D5:6B:57:B3:52:72:55:CE:1E:AA:EA:49:AB:75:FF:8D:0B:3E:5F:80 Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Certificate serial: 019B7F1572C8E3F6DB746A9D987AE09E1568 Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/1WtXs1JyVc4equpJq3X_jQs-X4A.roa Signing time: Fri 02 Jan 2026 14:21:10 +0000 ROA not before: Fri 02 Jan 2026 14:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39647 IP address blocks: 185.93.116.0/22 maxlen: 22 185.93.116.0/24 maxlen: 24 185.93.117.0/24 maxlen: 24 185.93.118.0/24 maxlen: 24 185.93.119.0/24 maxlen: 24 194.34.240.0/22 maxlen: 22 194.34.240.0/24 maxlen: 24 194.34.241.0/24 maxlen: 24 194.34.242.0/24 maxlen: 24 194.34.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:72:c8:e3:f6:db:74:6a:9d:98:7a:e0:9e:15:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Validity Not Before: Jan 2 14:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d56b57b3527255ce1eaaea49ab75ff8d0b3e5f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:53:63:8f:a1:64:a6:8a:f2:50:ee:29:88: bf:75:f5:58:41:67:ef:0e:8d:08:4b:16:48:96:53: 5e:3c:51:9b:cc:d7:93:c2:a2:d1:11:30:37:c3:f9: 99:60:d8:ab:e4:c8:3d:05:d6:69:3e:dc:22:de:88: 9f:1f:4d:dc:98:b6:f1:cc:f9:ff:dc:85:9c:1e:f0: a5:79:5e:29:b9:5a:c7:94:e4:2c:08:8b:48:ae:4a: eb:75:d1:97:6a:85:d6:a6:0c:a7:fd:52:d7:fd:7f: fd:e8:54:f3:1d:d0:db:5e:08:00:b8:fc:e1:06:a1: 1c:c7:12:64:37:d1:7e:cb:ec:c3:d2:1f:02:51:1e: 34:ec:4d:cc:4e:43:4d:0d:86:c2:58:4b:30:3f:26: 64:5f:a1:a7:a9:40:dd:8f:14:ea:f4:44:aa:2f:d1: b1:e6:ec:20:7b:e5:17:0b:14:df:7c:c1:ab:a2:75: 17:fd:d0:4d:0c:7b:f0:f5:a3:19:b7:4d:b9:55:3a: 1a:c9:47:d4:db:4c:df:a9:ea:42:93:71:77:7e:bc: d5:08:2b:9f:f0:da:e4:1b:ff:b0:8e:37:f1:5a:74: 23:a8:66:cb:d6:16:cc:68:c2:6f:b7:c6:0f:cf:fc: 8a:b5:9c:99:72:69:d2:cb:c4:66:b9:d3:e4:9f:66: f4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6B:57:B3:52:72:55:CE:1E:AA:EA:49:AB:75:FF:8D:0B:3E:5F:80 X509v3 Authority Key Identifier: keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/1WtXs1JyVc4equpJq3X_jQs-X4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.116.0/22 194.34.240.0/22 Signature Algorithm: sha256WithRSAEncryption 81:2f:77:ef:81:6d:91:1c:82:70:08:df:37:71:a1:22:6c:75: 68:77:61:89:24:bf:cd:22:45:c1:5e:cf:83:e4:ce:d0:b9:e1: ac:5b:75:14:40:ac:71:25:4c:04:3b:ad:06:79:15:0a:92:5a: cb:38:2d:6b:52:c6:bf:9e:c2:c2:ad:81:2b:69:a8:44:6e:52: a7:f5:3d:d3:cb:42:43:0d:98:1f:74:16:74:92:8f:be:05:0d: 7f:38:ac:79:b7:37:e9:3a:1b:ac:74:93:e6:73:40:f8:99:8f: cc:77:ba:76:b7:52:48:29:5b:e1:e6:1f:db:04:bf:33:17:94: ab:4d:a6:57:6f:42:2c:b9:ee:11:fb:ec:28:00:6e:bb:56:09: 0a:91:1c:15:ef:66:b3:7e:3e:44:4f:e8:3a:03:e3:8d:db:56: 12:f7:00:dd:a9:f0:a8:ce:1b:be:f1:39:d2:4b:32:2d:37:ad: 9c:b5:ba:ab:ac:5a:ec:1c:dc:bd:d9:75:09:e0:2c:17:e4:75: b3:35:46:29:cb:a1:7b:53:9a:75:83:0e:fe:9c:60:33:d9:60: 1d:b3:75:42:09:e7:c6:f1:9b:67:2d:16:9e:20:fc:d5:69:94: 1e:48:00:79:a8:2a:b2:6e:f7:da:17:b6:df:35:e1:c8:3e:0a: 04:92:3c:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FXLI4/bbdGqdmHrgnhVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi NjdlNDkwHhcNMjYwMTAyMTQyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTZiNTdiMzUyNzI1NWNlMWVhYWVhNDlhYjc1ZmY4ZDBiM2U1ZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcZTY4+hZKaK8lDuKYi/dfVYQWfv Do0ISxZIllNePFGbzNeTwqLRETA3w/mZYNir5Mg9BdZpPtwi3oifH03cmLbxzPn/ 3IWcHvCleV4puVrHlOQsCItIrkrrddGXaoXWpgyn/VLX/X/96FTzHdDbXggAuPzh BqEcxxJkN9F+y+zD0h8CUR407E3MTkNNDYbCWEswPyZkX6GnqUDdjxTq9ESqL9Gx 5uwge+UXCxTffMGronUX/dBNDHvw9aMZt025VToayUfU20zfqepCk3F3frzVCCuf 8NrkG/+wjjfxWnQjqGbL1hbMaMJvt8YPz/yKtZyZcmnSy8RmudPkn2b0pQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNVrV7NSclXOHqrqSat1/40LPl+AMB8GA1UdIwQY MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt YTQ4NmJlMzU2OWE3LzEvMVd0WHMxSnlWYzRlcXVwSnEzWF9qUXMtWDRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3 LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuV10AwQC wiLwMA0GCSqGSIb3DQEBCwUAA4IBAQCBL3fvgW2RHIJwCN83caEibHVod2GJJL/N IkXBXs+D5M7QueGsW3UUQKxxJUwEO60GeRUKklrLOC1rUsa/nsLCrYEraahEblKn 9T3Ty0JDDZgfdBZ0ko++BQ1/OKx5tzfpOhusdJPmc0D4mY/Md7p2t1JIKVvh5h/b BL8zF5SrTaZXb0Isue4R++woAG67VgkKkRwV72azfj5ET+g6A+ON21YS9wDdqfCo zhu+8TnSSzItN62ctbqrrFrsHNy92XUJ4CwX5HWzNUYpy6F7U5p1gw7+nGAz2WAd s3VCCefG8ZtnLRaeIPzVaZQeSAB5qCqybvfaF7bfNeHIPgoEkjwl -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:29 2026 by rpki-client