This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/whONYnRHtd5YwfmSvNWf6OaBpcI.roa File: whONYnRHtd5YwfmSvNWf6OaBpcI.roa (raw, json) Hash identifier: paa6TEfOPRMyJ3RqNXwTPA8q4okB7nLbNC1XepDVwZ8= Subject key identifier: C2:13:8D:62:74:47:B5:DE:58:C1:F9:92:BC:D5:9F:E8:E6:81:A5:C2 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C7FFD7ACD42FDE3A50F09FE8B030460 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/whONYnRHtd5YwfmSvNWf6OaBpcI.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2278 IP address blocks: 139.100.0.0/16 maxlen: 16 161.105.128.0/17 maxlen: 17 161.106.0.0/16 maxlen: 16 192.144.77.0/24 maxlen: 24 2a01:cf00::/42 maxlen: 48 2a01:cf00:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fd:7a:cd:42:fd:e3:a5:0f:09:fe:8b:03:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2138d627447b5de58c1f992bcd59fe8e681a5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:10:de:7d:07:d8:a1:67:3e:89:9c:72:62: 9c:a6:20:76:50:97:21:6c:a3:c6:5f:29:07:23:78: a4:44:59:ba:21:b1:6d:fd:d3:94:e6:49:a1:8b:9f: 6c:12:6f:4b:e8:35:c9:33:05:b9:4e:00:36:dc:0c: 61:49:0a:f9:dd:0a:87:13:4c:d9:6f:ad:a9:f1:da: 9d:cd:5a:ef:b8:16:75:77:90:44:a2:18:0a:90:e1: 75:12:81:30:3c:3d:3b:83:ea:01:29:fd:4d:dd:37: ec:11:c4:37:35:f3:f6:2e:6a:ab:88:64:bf:da:a9: 2b:a7:32:bb:e5:9f:46:c3:e6:7a:23:f5:e2:cd:6d: 95:7b:d4:62:a0:96:38:e8:32:37:aa:a0:b3:90:02: e8:55:62:a2:28:10:de:cb:4d:4e:c2:f5:9a:64:d7: fa:03:f7:12:df:f0:0b:5f:fa:e4:7b:94:f4:e3:2e: 40:2e:c9:ff:d7:eb:66:98:54:0e:5c:2b:97:2f:4a: 30:b0:6b:39:c6:9d:36:33:dd:33:53:30:3e:55:ea: e8:69:d2:7a:fc:36:b8:8f:bf:a9:1e:9b:1c:c3:c3: e9:d3:de:74:4a:bc:43:c0:b5:e5:7d:49:82:f3:6f: 98:f5:a0:d5:30:54:16:86:39:da:69:ee:a4:be:fb: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:13:8D:62:74:47:B5:DE:58:C1:F9:92:BC:D5:9F:E8:E6:81:A5:C2 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/whONYnRHtd5YwfmSvNWf6OaBpcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.100.0.0/16 161.105.128.0-161.106.255.255 192.144.77.0/24 IPv6: 2a01:cf00::/42 Signature Algorithm: sha256WithRSAEncryption 45:61:a7:2b:29:4a:b2:79:b2:08:bf:fa:88:b0:15:1e:54:a4: fd:b9:a3:43:8e:00:c5:5b:6e:aa:4f:07:bc:c6:5d:6e:3a:f7: 06:06:1b:94:c2:5d:f0:43:27:b6:3e:af:db:16:5f:51:2f:9b: 7f:f0:8c:d5:82:2c:ee:d9:25:ba:cc:97:76:f3:1b:30:1a:ed: bd:fb:c3:eb:a2:b3:c6:65:18:eb:92:b6:f2:96:e3:35:19:66: ff:df:c8:fd:99:87:9a:aa:ad:a0:d8:f3:fe:a9:10:bf:11:50: da:86:f5:d0:c8:a7:4e:fa:f5:b1:6e:a5:79:7b:bf:55:45:da: e3:cf:5a:68:05:66:0e:16:29:be:04:a0:67:08:b5:ac:f7:98: ac:05:59:35:f6:b7:88:d8:76:5d:c8:8c:a5:8e:71:88:9f:19: 75:ea:8e:81:01:4d:f0:1d:f6:5a:77:e5:76:7b:84:6c:0e:36: 03:6d:84:28:f7:f8:7f:30:7c:70:2e:b5:81:51:9b:b7:14:b6: 4d:a5:ea:17:18:06:0d:d1:a0:d1:88:90:05:b8:b4:21:d3:3c: 36:b8:a8:48:06:b6:72:fe:7c:7b:e2:30:fb:ed:bc:89:e2:66: a7:09:fc:30:1d:2d:be:63:b0:5b:73:d5:81:91:30:25:30:8c: fb:a6:f1:95 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt8f/16zUL946UPCf6LAwRgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjEzOGQ2Mjc0NDdiNWRlNThjMWY5OTJiY2Q1OWZlOGU2ODFhNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3kQ3n0H2KFnPomccmKcpiB2UJch bKPGXykHI3ikRFm6IbFt/dOU5kmhi59sEm9L6DXJMwW5TgA23AxhSQr53QqHE0zZ b62p8dqdzVrvuBZ1d5BEohgKkOF1EoEwPD07g+oBKf1N3TfsEcQ3NfP2LmqriGS/ 2qkrpzK75Z9Gw+Z6I/XizW2Ve9RioJY46DI3qqCzkALoVWKiKBDey01OwvWaZNf6 A/cS3/ALX/rke5T04y5ALsn/1+tmmFQOXCuXL0owsGs5xp02M90zUzA+VeroadJ6 /Da4j7+pHpscw8Pp0950SrxDwLXlfUmC82+Y9aDVMFQWhjnaae6kvvvLFwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFMITjWJ0R7XeWMH5krzVn+jmgaXCMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvd2hPTlluUkh0ZDVZd2ZtU3ZOV2Y2T2FCcGNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwMAi2QwCwME B6FpgAMDAKFqAwQAwJBNMA8EAgACMAkDBwYqAc8AAAAwDQYJKoZIhvcNAQELBQAD ggEBAEVhpyspSrJ5sgi/+oiwFR5UpP25o0OOAMVbbqpPB7zGXW469wYGG5TCXfBD J7Y+r9sWX1Evm3/wjNWCLO7ZJbrMl3bzGzAa7b37w+uis8ZlGOuStvKW4zUZZv/f yP2Zh5qqraDY8/6pEL8RUNqG9dDIp0769bFupXl7v1VF2uPPWmgFZg4WKb4EoGcI taz3mKwFWTX2t4jYdl3IjKWOcYifGXXqjoEBTfAd9lp35XZ7hGwONgNthCj3+H8w fHAutYFRm7cUtk2l6hcYBg3RoNGIkAW4tCHTPDa4qEgGtnL+fHviMPvtvIniZqcJ /DAdLb5jsFtz1YGRMCUwjPum8ZU= -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:26 2026 by rpki-client