This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/wtbzjzOJZOQ2I2gZUMznpxIw0wQ.roa File: wtbzjzOJZOQ2I2gZUMznpxIw0wQ.roa (raw, json) Hash identifier: poF9+KRBQXPg+TESzwPW5iWNnjNJQEf8sS6oFcn136Y= Subject key identifier: C2:D6:F3:8F:33:89:64:E4:36:23:68:19:50:CC:E7:A7:12:30:D3:04 Certificate issuer: /CN=e5484ab7509bcbbda351e200091742d43366b347 Certificate serial: 019B7C12D996CE8AA7702BBC854B39F77CBD Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/wtbzjzOJZOQ2I2gZUMznpxIw0wQ.roa Signing time: Fri 02 Jan 2026 00:19:28 +0000 ROA not before: Fri 02 Jan 2026 00:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42394 IP address blocks: 193.33.84.0/23 maxlen: 23 193.33.84.0/24 maxlen: 24 193.33.85.0/24 maxlen: 24 193.33.85.240/28 maxlen: 28 195.62.92.0/23 maxlen: 23 195.62.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d9:96:ce:8a:a7:70:2b:bc:85:4b:39:f7:7c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347 Validity Not Before: Jan 2 00:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2d6f38f338964e43623681950cce7a71230d304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:cb:09:b5:41:48:42:e3:0d:c0:04:57:6e: 3d:6e:46:11:9b:0e:39:43:b9:0f:d1:13:64:5c:9e: fb:2e:06:2a:9f:60:42:dd:4f:62:a2:46:4c:2a:11: 55:3a:70:34:73:d6:1e:f1:40:e8:cf:f8:9a:52:de: 70:f3:14:75:2e:a6:61:59:c0:45:00:54:6b:d7:60: 05:17:37:75:84:e4:75:e6:f0:b6:08:7b:98:5c:11: 33:e6:9c:22:97:88:0e:60:0f:22:a4:fb:13:f2:fe: ae:7d:b9:c1:06:68:59:9a:fe:ca:ea:d8:f8:11:1c: 2a:e6:f1:fd:0c:17:fd:7a:9a:1b:45:14:ad:0f:bf: 5a:d4:15:60:f5:b0:ca:af:08:ff:11:1d:54:23:84: ec:33:7e:9a:82:d8:5a:8f:0d:84:59:7f:cd:c1:ab: 3c:e2:a5:5a:6e:af:98:71:2c:43:69:e2:b8:07:a5: b4:a9:77:a0:f9:e5:66:b9:34:af:57:33:9e:03:2c: d1:c0:24:69:60:34:98:c2:9f:c9:57:2b:47:94:a4: 4e:0c:c7:b1:57:f7:f0:9f:b3:28:6e:66:9c:46:fc: e3:f8:16:d8:c3:88:85:17:73:e8:f4:a5:72:9d:9e: 71:21:38:40:9e:c5:49:da:b0:33:3d:c5:37:e1:af: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D6:F3:8F:33:89:64:E4:36:23:68:19:50:CC:E7:A7:12:30:D3:04 X509v3 Authority Key Identifier: keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/wtbzjzOJZOQ2I2gZUMznpxIw0wQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.84.0/23 195.62.92.0/23 Signature Algorithm: sha256WithRSAEncryption 30:7f:2b:35:76:06:19:62:a6:d8:14:8f:42:38:1f:96:4b:41: ab:86:ed:46:96:36:bc:be:e7:91:8f:a5:33:14:68:9a:05:16: af:a9:0f:35:4a:8c:8f:f7:1e:3f:f3:2f:61:11:aa:94:3e:79: c0:b5:e0:91:81:5d:ae:8b:48:8a:a3:24:92:60:b6:47:33:f9: 9d:f0:64:87:4b:d4:cf:e2:72:db:64:29:0d:b7:05:87:bf:25: 56:aa:a4:83:79:e9:dc:90:03:8e:51:e0:8e:fe:f5:f7:15:c6: b9:64:d7:76:a6:c6:c8:1c:00:35:17:18:d3:f9:e4:1b:0a:94: 0b:b9:b2:b0:c6:c1:c4:e8:7c:be:4b:a2:0c:14:11:c4:6e:14: 3a:0f:2c:87:8b:dc:bb:e2:cd:f3:17:72:16:89:3c:e3:96:0d: 44:09:79:80:bf:31:cd:25:f9:bc:79:a4:63:79:ca:95:9c:0e: 35:89:be:39:86:f7:90:b8:88:7f:1b:be:a5:fa:ea:a6:e8:c6: 97:ea:c5:cd:38:19:48:57:db:59:d0:db:4a:0e:14:fb:7f:eb: e5:c6:99:17:a1:e3:d6:a3:7b:8a:1a:b0:be:02:8b:24:a9:61: 76:65:58:ad:a8:57:55:30:1b:cb:9f:45:63:99:3b:ae:d2:c6: 90:14:69:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EtmWzoqncCu8hUs593y9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDg0YWI3NTA5YmNiYmRhMzUxZTIwMDA5MTc0MmQ0MzM2 NmIzNDcwHhcNMjYwMTAyMDAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmQ2ZjM4ZjMzODk2NGU0MzYyMzY4MTk1MGNjZTdhNzEyMzBkMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIPLCbVBSELjDcAEV249bkYRmw45 Q7kP0RNkXJ77LgYqn2BC3U9iokZMKhFVOnA0c9Ye8UDoz/iaUt5w8xR1LqZhWcBF AFRr12AFFzd1hOR15vC2CHuYXBEz5pwil4gOYA8ipPsT8v6ufbnBBmhZmv7K6tj4 ERwq5vH9DBf9epobRRStD79a1BVg9bDKrwj/ER1UI4TsM36agthajw2EWX/Nwas8 4qVabq+YcSxDaeK4B6W0qXeg+eVmuTSvVzOeAyzRwCRpYDSYwp/JVytHlKRODMex V/fwn7MobmacRvzj+BbYw4iFF3Po9KVynZ5xIThAnsVJ2rAzPcU34a858QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMLW848ziWTkNiNoGVDM56cSMNMEMB8GA1UdIwQY MBaAFOVISrdQm8u9o1HiAAkXQtQzZrNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVoS3QxQ2J5NzJqVWVJQUNSZEMxRE5tczBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMzk0OTYtOTlhMS00YzE4LTk0YTMt YzE3MGM2NWYwOTM4LzEvd3Riemp6T0paT1EySTJnWlVNem5weEl3MHdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hMzk0OTYtOTlhMS00YzE4LTk0YTMtYzE3MGM2NWYwOTM4 LzEvNVVoS3QxQ2J5NzJqVWVJQUNSZEMxRE5tczBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwSFUAwQB wz5cMA0GCSqGSIb3DQEBCwUAA4IBAQAwfys1dgYZYqbYFI9COB+WS0Grhu1Glja8 vueRj6UzFGiaBRavqQ81SoyP9x4/8y9hEaqUPnnAteCRgV2ui0iKoySSYLZHM/md 8GSHS9TP4nLbZCkNtwWHvyVWqqSDeenckAOOUeCO/vX3Fca5ZNd2psbIHAA1FxjT +eQbCpQLubKwxsHE6Hy+S6IMFBHEbhQ6DyyHi9y74s3zF3IWiTzjlg1ECXmAvzHN Jfm8eaRjecqVnA41ib45hveQuIh/G76l+uqm6MaX6sXNOBlIV9tZ0NtKDhT7f+vl xpkXoePWo3uKGrC+AoskqWF2ZVitqFdVMBvLn0VjmTuu0saQFGnf -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:48 2026 by rpki-client