This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/0nWWPWTzcFI4eXCWW9KNezctiis.roa File: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (raw, json) Hash identifier: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ= Subject key identifier: D2:75:96:3D:64:F3:70:52:38:79:70:96:5B:D2:8D:7B:37:2D:8A:2B Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Certificate serial: 019B7F15A536831FF01F7059B03AE255D799 Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/0nWWPWTzcFI4eXCWW9KNezctiis.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215687 IP address blocks: 193.56.200.0/23 maxlen: 24 193.56.226.0/23 maxlen: 24 2a13:4300::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a5:36:83:1f:f0:1f:70:59:b0:3a:e2:55:d7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d275963d64f37052387970965bd28d7b372d8a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:f7:93:84:4d:6d:c4:eb:3a:74:1d:2a:7c: 57:70:50:c0:28:8f:60:42:25:a3:59:47:8c:34:ab: 3b:7d:2d:e7:17:f5:48:80:46:82:45:84:2f:2d:47: 59:65:0f:9a:3e:a9:59:89:c2:28:b3:b1:b9:36:a3: 12:25:4f:72:d8:a4:bd:74:74:49:9b:dd:f5:51:f1: 7e:1d:e4:80:e9:a8:b6:ff:01:a7:a1:12:df:16:01: 18:c6:8c:9f:13:a2:dc:6e:eb:6f:bc:0c:bc:d7:b0: ef:ba:42:57:b1:00:6f:69:99:d1:b0:a0:95:0f:f1: 6a:cc:11:3a:f7:db:38:c5:8e:a9:c8:68:fc:eb:03: ac:16:81:72:16:6c:a3:f1:cc:43:76:34:b7:86:fd: 15:51:e7:a3:65:c9:1c:a2:7c:37:69:20:64:81:f3: ea:b1:2a:c3:e5:2a:31:68:7e:83:a1:ec:83:f7:f7: 00:42:ec:f5:a0:8d:c4:77:9f:a9:ab:90:a7:4f:e8: 1b:a5:49:db:fd:84:dd:d0:49:4d:44:c2:35:cb:f6: 15:5d:66:34:7f:43:3b:09:6c:27:85:28:11:d4:8d: 51:ec:d9:5a:2f:c5:b3:07:02:b8:94:81:93:51:03: c5:68:15:2b:3a:be:c4:df:01:20:24:ad:f2:61:68: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:75:96:3D:64:F3:70:52:38:79:70:96:5B:D2:8D:7B:37:2D:8A:2B X509v3 Authority Key Identifier: keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/0nWWPWTzcFI4eXCWW9KNezctiis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.200.0/23 193.56.226.0/23 IPv6: 2a13:4300::/29 Signature Algorithm: sha256WithRSAEncryption 36:f5:ab:41:71:31:65:b1:33:08:4e:d2:20:ce:9d:b5:ad:2e: 37:8b:dc:f9:08:9f:a6:80:80:4e:d2:50:ac:d3:9b:44:88:c8: aa:79:e8:ee:9b:c3:bd:cd:1c:cf:6c:49:03:85:d0:4d:a9:cf: 3b:8f:b7:52:68:92:cb:9e:bd:64:34:1f:6e:68:08:04:0c:ad: 29:fb:77:51:7a:49:30:bb:37:f7:b5:b4:8c:40:d9:c5:0a:ac: 34:d1:61:b0:20:6a:eb:5f:9d:8b:42:12:35:51:c5:fe:63:a9: eb:23:8b:f0:6b:ea:f7:40:7c:a2:da:92:05:7a:fb:35:39:d4: ff:41:98:2f:ea:fc:07:48:01:65:ed:91:30:80:ef:4f:83:47: 35:b6:bc:15:02:bc:0f:b7:eb:b2:4e:2d:ef:74:ec:36:38:28: db:fd:07:36:e8:92:0d:0f:e6:60:a5:7a:70:1d:7d:c5:75:59: 53:10:ba:8f:89:ba:ce:8c:9d:86:03:b6:88:c7:c9:cb:1a:36: 16:85:1c:cc:74:02:2d:c9:5c:7c:66:f2:de:f2:91:d8:ee:5a: 9a:9d:13:75:98:38:89:4d:03:31:ba:87:81:fd:36:ab:ba:4a: 3e:9e:30:cd:d1:ba:da:dc:24:fe:14:50:c9:78:96:38:b0:c0: b9:19:44:1d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FaU2gx/wH3BZsDriVdeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMjlhNGIzZjBhM2FmOGJiZWQ2MDI5YThiMjY1ZGM5MzIw NGU3ZGUwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjc1OTYzZDY0ZjM3MDUyMzg3OTcwOTY1YmQyOGQ3YjM3MmQ4YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzD3k4RNbcTrOnQdKnxXcFDAKI9g QiWjWUeMNKs7fS3nF/VIgEaCRYQvLUdZZQ+aPqlZicIos7G5NqMSJU9y2KS9dHRJ m931UfF+HeSA6ai2/wGnoRLfFgEYxoyfE6LcbutvvAy817DvukJXsQBvaZnRsKCV D/FqzBE699s4xY6pyGj86wOsFoFyFmyj8cxDdjS3hv0VUeejZckconw3aSBkgfPq sSrD5SoxaH6DoeyD9/cAQuz1oI3Ed5+pq5CnT+gbpUnb/YTd0ElNRMI1y/YVXWY0 f0M7CWwnhSgR1I1R7NlaL8WzBwK4lIGTUQPFaBUrOr7E3wEgJK3yYWhtnQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNJ1lj1k83BSOHlwllvSjXs3LYorMB8GA1UdIwQY MBaAFP8ppLPwo6+LvtYCmosmXckyBOfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYt Y2FmMmY3YTViNWY0LzEvMG5XV1BXVHpjRkk0ZVhDV1c5S05lemN0aWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYtY2FmMmY3YTViNWY0 LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwTjIAwQB wTjiMA0EAgACMAcDBQMqE0MAMA0GCSqGSIb3DQEBCwUAA4IBAQA29atBcTFlsTMI TtIgzp21rS43i9z5CJ+mgIBO0lCs05tEiMiqeejum8O9zRzPbEkDhdBNqc87j7dS aJLLnr1kNB9uaAgEDK0p+3dRekkwuzf3tbSMQNnFCqw00WGwIGrrX52LQhI1UcX+ Y6nrI4vwa+r3QHyi2pIFevs1OdT/QZgv6vwHSAFl7ZEwgO9Pg0c1trwVArwPt+uy Ti3vdOw2OCjb/Qc26JIND+ZgpXpwHX3FdVlTELqPibrOjJ2GA7aIx8nLGjYWhRzM dAItyVx8ZvLe8pHY7lqanRN1mDiJTQMxuoeB/Taruko+njDN0bra3CT+FFDJeJY4 sMC5GUQd -----END CERTIFICATE-----Generated at Tue Jan 27 04:41:01 2026 by rpki-client