This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/wJWgNl2_DEPkp8xIgpJ8Ss_Z-T0.roa File: wJWgNl2_DEPkp8xIgpJ8Ss_Z-T0.roa (raw, json) Hash identifier: K0uXWKkS6wxjXv7wfhBBrFl5U+Bu+M5GtGmTqQt8DU8= Subject key identifier: C0:95:A0:36:5D:BF:0C:43:E4:A7:CC:48:82:92:7C:4A:CF:D9:F9:3D Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019B78A2FF84E06576254FF4A656D2A1B41B Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/wJWgNl2_DEPkp8xIgpJ8Ss_Z-T0.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 378 IP address blocks: 132.64.0.0/15 maxlen: 15 132.64.0.0/16 maxlen: 16 132.64.1.0/24 maxlen: 24 132.64.2.0/24 maxlen: 24 132.64.3.0/24 maxlen: 24 132.64.5.0/24 maxlen: 24 132.64.6.0/24 maxlen: 24 132.64.7.0/24 maxlen: 24 132.64.16.0/24 maxlen: 24 132.64.17.0/24 maxlen: 24 132.64.24.0/22 maxlen: 22 132.64.40.0/24 maxlen: 24 132.64.43.0/24 maxlen: 24 132.64.44.0/24 maxlen: 24 132.64.45.0/24 maxlen: 24 132.64.254.0/24 maxlen: 24 132.65.0.0/16 maxlen: 16 192.114.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ff:84:e0:65:76:25:4f:f4:a6:56:d2:a1:b4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c095a0365dbf0c43e4a7cc4882927c4acfd9f93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:69:d7:b5:4a:1d:0c:0f:c1:29:64:7d:f6: 0d:61:c3:29:b5:0b:b7:95:40:c2:68:86:50:5b:e8: d0:72:07:a0:2b:06:53:a2:23:e1:f8:18:33:b0:22: 2f:64:d5:a1:b2:96:9a:02:a1:99:84:08:6a:5d:12: 40:51:1e:25:09:f1:52:12:dd:5c:28:e7:0d:96:bb: f3:51:13:54:58:a6:23:34:0c:99:5b:c3:56:25:12: 5d:04:d2:3a:96:ff:6d:06:15:30:ff:5b:95:7e:a5: 67:62:41:de:09:3b:06:1a:20:e9:82:f7:5a:22:75: b8:fe:4b:0b:c8:43:87:3d:aa:c1:a0:3b:1b:4a:c0: f8:57:12:95:f2:30:e2:93:e3:88:93:9a:44:45:69: 6a:ba:ae:1e:4f:4b:5a:69:d5:1b:11:ac:3f:a9:bf: 96:41:38:e6:45:6c:37:54:55:f1:91:81:5d:3a:1c: fb:10:ea:79:95:2e:f0:30:27:9d:ea:d3:a7:4a:64: 43:92:1a:05:dc:27:d5:3c:49:97:93:6b:74:8c:79: 06:48:5e:c5:45:ea:55:af:f8:a6:d3:d2:68:19:99: a9:11:ac:23:5c:b6:29:cf:75:a4:26:3c:40:cc:2b: dd:e7:c4:ae:df:3c:34:d7:8b:10:b6:56:94:40:8b: c1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:95:A0:36:5D:BF:0C:43:E4:A7:CC:48:82:92:7C:4A:CF:D9:F9:3D X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/wJWgNl2_DEPkp8xIgpJ8Ss_Z-T0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.64.0.0/15 192.114.88.0/22 Signature Algorithm: sha256WithRSAEncryption 29:a9:ff:4b:0c:23:ab:73:c9:c2:80:0d:00:6f:e1:0c:7f:73: e2:a9:bb:09:84:2b:a0:93:bd:07:a1:68:17:15:e2:f9:ad:bb: 44:d0:26:77:59:68:12:e6:5a:4e:9d:6a:ce:1d:9d:90:95:c6: 0b:7a:9e:8f:9f:6c:9d:41:1e:2f:77:4e:fc:ed:6d:34:62:1f: e1:a4:41:92:9d:ef:56:51:3d:f3:0f:ff:94:d2:7c:84:b0:04: 69:4a:54:4d:58:06:ef:b4:16:ce:c7:d7:0c:51:e9:d5:82:c2: df:1d:a0:1a:de:46:57:fe:b6:15:86:43:61:49:c4:ec:b4:78: 8e:74:bb:2d:25:7a:63:4e:7c:12:af:fc:7f:31:26:90:0c:12: 45:2c:95:08:ed:42:cb:4c:1d:9a:c2:60:9f:0b:67:e3:28:b6: 4f:e5:7c:60:88:5d:43:ea:b6:6d:68:4b:b8:1b:60:0c:1d:8c: 9b:b8:44:3c:98:7a:eb:df:f7:cc:f3:1d:61:66:79:0b:cb:69: 89:fb:a2:f5:b2:60:e9:e2:b3:49:4e:22:d2:64:df:4a:9b:a1: b2:ce:fd:09:c1:b1:7e:f3:af:ec:7c:5e:55:3f:f4:54:45:b5: a5:00:4a:a2:84:c9:b1:1d:d5:28:53:16:bd:3b:04:20:56:d6: 8b:91:7e:71 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt4ov+E4GV2JU/0plbSobQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDk1YTAzNjVkYmYwYzQzZTRhN2NjNDg4MjkyN2M0YWNmZDlmOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtltp17VKHQwPwSlkffYNYcMptQu3 lUDCaIZQW+jQcgegKwZToiPh+BgzsCIvZNWhspaaAqGZhAhqXRJAUR4lCfFSEt1c KOcNlrvzURNUWKYjNAyZW8NWJRJdBNI6lv9tBhUw/1uVfqVnYkHeCTsGGiDpgvda InW4/ksLyEOHParBoDsbSsD4VxKV8jDik+OIk5pERWlquq4eT0taadUbEaw/qb+W QTjmRWw3VFXxkYFdOhz7EOp5lS7wMCed6tOnSmRDkhoF3CfVPEmXk2t0jHkGSF7F RepVr/im09JoGZmpEawjXLYpz3WkJjxAzCvd58Su3zw014sQtlaUQIvBYQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFMCVoDZdvwxD5KfMSIKSfErP2fk9MB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvd0pXZ05sMl9ERVBrcDh4SWdwSjhTc19aLVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMBhEADBALA clgwDQYJKoZIhvcNAQELBQADggEBACmp/0sMI6tzycKADQBv4Qx/c+KpuwmEK6CT vQehaBcV4vmtu0TQJndZaBLmWk6das4dnZCVxgt6no+fbJ1BHi93TvztbTRiH+Gk QZKd71ZRPfMP/5TSfISwBGlKVE1YBu+0Fs7H1wxR6dWCwt8doBreRlf+thWGQ2FJ xOy0eI50uy0lemNOfBKv/H8xJpAMEkUslQjtQstMHZrCYJ8LZ+Motk/lfGCIXUPq tm1oS7gbYAwdjJu4RDyYeuvf98zzHWFmeQvLaYn7ovWyYOnis0lOItJk30qbobLO /QnBsX7zr+x8XlU/9FRFtaUASqKEybEd1ShTFr07BCBW1ouRfnE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:24 2026 by rpki-client