This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/ws9IrMCFTsyujEnp3NM74auDbZo.roa File: ws9IrMCFTsyujEnp3NM74auDbZo.roa (raw, json) Hash identifier: rNmcUDMhWLisI/rUnE9X9Uz3aN70rmmRCgpG26lV2pk= Subject key identifier: C2:CF:48:AC:C0:85:4E:CC:AE:8C:49:E9:DC:D3:3B:E1:AB:83:6D:9A Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792 Certificate serial: 019B7EA581C1CAAAF9BE023CA7C9381F5779 Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/ws9IrMCFTsyujEnp3NM74auDbZo.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212693 IP address blocks: 213.185.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:81:c1:ca:aa:f9:be:02:3c:a7:c9:38:1f:57:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792 Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2cf48acc0854eccae8c49e9dcd33be1ab836d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:62:37:47:f4:56:cf:7f:39:e8:3c:7e:4a: d7:36:e5:79:1c:82:0c:34:2d:ce:b3:1a:61:3f:56: 7a:cb:88:0b:5c:29:b8:ca:b3:eb:7f:1e:84:2a:b8: 36:6b:be:96:08:f9:8f:9d:dd:f1:2d:18:04:df:52: 6a:7c:9a:d6:67:dd:82:e4:82:45:41:73:27:0b:9c: 01:96:66:5f:98:95:a5:d3:ba:90:2a:78:9b:08:2a: 86:8b:b1:9e:f3:98:6c:63:42:6b:31:1e:b5:c5:9d: 1a:c2:fa:69:1b:60:d1:e5:22:d6:45:6f:fd:b6:f5: 10:ee:4b:43:c3:98:5c:0e:8e:96:a0:c5:33:89:82: 3d:6d:ed:eb:fc:22:d0:37:19:a0:c0:15:ae:f8:f2: d0:fc:d7:cb:f8:f5:6c:a9:ad:3f:33:d1:34:db:e4: d5:af:52:ae:6d:02:3d:8d:aa:59:26:fd:ca:59:e2: 0b:ae:02:be:e0:3e:ca:98:8c:10:72:2b:f9:6e:c1: 37:72:03:cf:b6:91:42:80:92:11:2a:60:c2:2f:71: 44:57:03:30:43:7a:32:fa:55:91:1a:af:d6:7a:36: 49:d5:75:cd:ad:7c:ba:ab:0e:a1:ac:4c:ad:dd:69: 1a:cd:b9:14:ce:58:b2:d1:a3:2b:9d:51:89:76:71: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CF:48:AC:C0:85:4E:CC:AE:8C:49:E9:DC:D3:3B:E1:AB:83:6D:9A X509v3 Authority Key Identifier: keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/ws9IrMCFTsyujEnp3NM74auDbZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.185.64.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:67:bf:5d:21:29:da:7f:ca:6b:d4:7e:a7:93:12:d8:f8:65: 69:87:ad:2a:fd:da:25:38:39:96:e3:00:54:28:2a:f2:8b:81: 15:1b:10:a9:84:78:ef:ca:c8:6b:84:50:b6:82:da:a1:4f:41: 80:13:85:a0:ea:7a:24:63:59:1c:24:4d:0d:11:5a:bd:e3:d5: b5:0b:03:df:23:94:e7:c4:d5:ec:ef:ce:9b:50:77:cd:a2:84: 9d:1a:b8:98:7c:72:cf:79:63:c9:56:8d:49:e6:8f:47:07:35: f6:54:36:ac:a8:68:8c:65:78:e6:e7:91:3f:50:c7:2a:21:57: 8a:2a:a7:e3:0c:b4:ba:09:e1:90:5c:4e:b8:5b:93:05:60:31: d1:3a:54:c8:dd:90:18:68:e1:dd:72:8f:8a:9a:69:0b:06:56: f4:a8:ed:2e:52:93:82:bd:6e:fe:65:a2:23:a5:52:7a:60:97: 69:58:cc:cf:b9:b6:15:8b:04:dc:79:51:66:50:a2:92:16:29: fc:f7:a7:9a:6a:ad:40:fc:26:86:49:20:8f:e8:cc:5d:3f:4f: 1e:4d:76:14:6a:a8:bf:f8:e8:45:df:3c:40:f1:00:5e:66:4d: 3b:01:79:97:30:fd:4e:39:30:f2:12:93:cc:b7:e9:65:b2:88: 57:72:79:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pYHByqr5vgI8p8k4H1d5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDRmOGU0NzYyMzc3Zjg2YjA3YTg3NTNmNmU5OGY2ZjRi NmI3OTIwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmNmNDhhY2MwODU0ZWNjYWU4YzQ5ZTlkY2QzM2JlMWFiODM2ZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fZiN0f0Vs9/Oeg8fkrXNuV5HIIM NC3OsxphP1Z6y4gLXCm4yrPrfx6EKrg2a76WCPmPnd3xLRgE31JqfJrWZ92C5IJF QXMnC5wBlmZfmJWl07qQKnibCCqGi7Ge85hsY0JrMR61xZ0awvppG2DR5SLWRW/9 tvUQ7ktDw5hcDo6WoMUziYI9be3r/CLQNxmgwBWu+PLQ/NfL+PVsqa0/M9E02+TV r1KubQI9japZJv3KWeILrgK+4D7KmIwQciv5bsE3cgPPtpFCgJIRKmDCL3FEVwMw Q3oy+lWRGq/WejZJ1XXNrXy6qw6hrEyt3WkazbkUzliy0aMrnVGJdnEe0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLPSKzAhU7MroxJ6dzTO+Grg22aMB8GA1UdIwQY MBaAFNvU+OR2I3f4aweodT9umPb0treSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUt NjIwYTc5Y2Y3OTJiLzEvd3M5SXJNQ0ZUc3l1akVucDNOTTc0YXVEYlpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUtNjIwYTc5Y2Y3OTJi LzEvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1blAMA0G CSqGSIb3DQEBCwUAA4IBAQBrZ79dISnaf8pr1H6nkxLY+GVph60q/dolODmW4wBU KCryi4EVGxCphHjvyshrhFC2gtqhT0GAE4Wg6nokY1kcJE0NEVq949W1CwPfI5Tn xNXs786bUHfNooSdGriYfHLPeWPJVo1J5o9HBzX2VDasqGiMZXjm55E/UMcqIVeK KqfjDLS6CeGQXE64W5MFYDHROlTI3ZAYaOHdco+KmmkLBlb0qO0uUpOCvW7+ZaIj pVJ6YJdpWMzPubYViwTceVFmUKKSFin896eaaq1A/CaGSSCP6MxdP08eTXYUaqi/ +OhF3zxA8QBeZk07AXmXMP1OOTDyEpPMt+llsohXcnkW -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:26 2026 by rpki-client