This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/pWHrs5rw_KgbSRJAL6KONruKqFc.roa File: pWHrs5rw_KgbSRJAL6KONruKqFc.roa (raw, json) Hash identifier: AB3huwEj/N+euzlEzjByisO3oP/M0v+P+iouNnZD7xs= Subject key identifier: A5:61:EB:B3:9A:F0:FC:A8:1B:49:12:40:2F:A2:8E:36:BB:8A:A8:57 Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F83611CF73A3C5E18A1D0A586903F4A Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/pWHrs5rw_KgbSRJAL6KONruKqFc.roa Signing time: Fri 02 Jan 2026 16:21:15 +0000 ROA not before: Fri 02 Jan 2026 16:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134094 IP address blocks: 89.252.132.0/24 maxlen: 24 89.252.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:61:1c:f7:3a:3c:5e:18:a1:d0:a5:86:90:3f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a561ebb39af0fca81b4912402fa28e36bb8aa857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:73:5d:18:21:48:f2:09:b5:96:28:16:28: f2:f2:0c:9a:93:87:f6:9b:0a:b9:d4:67:e0:da:b6: 6f:34:b1:38:35:31:5e:d4:d1:c6:a0:59:13:64:5a: 71:24:5f:b4:84:f5:27:10:10:93:60:96:dc:e4:4c: 80:cb:7c:73:16:30:12:66:f5:59:5f:ab:bf:c6:47: f4:7c:64:25:ed:60:5e:e2:18:0b:97:bd:82:68:11: 84:d6:e8:b3:94:c5:29:f0:d7:61:4f:f4:97:ab:a0: 3a:4b:c5:fa:66:25:24:b2:92:b0:06:b6:56:fc:ec: e3:33:f8:47:53:0d:d5:23:c9:45:f5:32:d5:5c:eb: 57:87:b9:47:40:06:cc:2c:5c:61:85:c0:3a:54:57: ff:50:cc:64:d8:25:44:fb:81:a5:4b:37:85:30:cc: 18:4f:42:86:92:fa:4a:70:e4:b1:fb:20:7c:b7:3b: de:d0:bc:71:82:02:2e:3e:48:a8:d7:f6:79:d1:9a: aa:4c:6e:f7:18:64:8b:04:5f:0c:5f:29:0b:05:73: a0:cb:63:88:ef:96:ea:6b:34:a7:58:4c:3a:a4:01: b4:d7:40:72:29:e6:68:2a:87:b9:fe:5a:17:17:48: 61:55:d6:2f:bf:2d:5c:42:f0:bf:f3:02:ad:5b:06: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:61:EB:B3:9A:F0:FC:A8:1B:49:12:40:2F:A2:8E:36:BB:8A:A8:57 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/pWHrs5rw_KgbSRJAL6KONruKqFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.252.132.0/23 Signature Algorithm: sha256WithRSAEncryption 46:17:0d:c0:db:39:b8:4c:d1:54:0f:af:ed:e3:d3:cb:ad:ca: 89:f1:23:f6:de:4f:e8:a7:fd:c4:9f:1e:71:66:b5:06:06:13: 35:d4:a9:7a:24:2d:3e:3d:78:24:84:90:a3:1c:4c:60:22:50: 1b:ca:0c:19:90:2d:f1:39:dd:fc:6b:35:85:9b:cd:b2:ca:21: c1:ae:4e:35:b9:7c:48:17:d4:a6:05:0d:3e:90:0d:de:84:57: cd:c0:94:c9:49:1a:00:fb:91:8e:2a:a5:27:1f:17:d7:31:52: ac:59:9d:b6:69:a5:80:9c:e8:c8:48:9b:46:31:6f:1a:22:d9: fd:d8:5a:5a:e4:98:bc:f3:b4:4d:7f:5b:3f:46:bf:34:9b:98: c1:03:d5:5b:8c:9d:9a:5b:35:ea:62:5e:88:16:dd:31:bf:40: d8:90:aa:b3:90:02:b0:5c:91:ac:8b:18:31:75:62:b7:0c:1f: cb:1d:13:69:6c:31:c8:64:5a:8a:83:59:0c:85:69:ca:15:8b: 01:eb:7e:d5:4b:a0:b6:15:e0:cc:61:03:36:ff:f4:5a:27:ee: df:3a:e9:3b:86:80:d7:18:30:01:0b:23:13:1b:ea:a0:9c:22: a8:66:a4:b7:d8:d6:e2:67:de:95:ba:71:ce:09:55:96:27:3c: 65:5c:83:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2Ec9zo8Xhih0KWGkD9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTYxZWJiMzlhZjBmY2E4MWI0OTEyNDAyZmEyOGUzNmJiOGFhODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeZzXRghSPIJtZYoFijy8gyak4f2 mwq51Gfg2rZvNLE4NTFe1NHGoFkTZFpxJF+0hPUnEBCTYJbc5EyAy3xzFjASZvVZ X6u/xkf0fGQl7WBe4hgLl72CaBGE1uizlMUp8NdhT/SXq6A6S8X6ZiUkspKwBrZW /OzjM/hHUw3VI8lF9TLVXOtXh7lHQAbMLFxhhcA6VFf/UMxk2CVE+4GlSzeFMMwY T0KGkvpKcOSx+yB8tzve0LxxggIuPkio1/Z50ZqqTG73GGSLBF8MXykLBXOgy2OI 75bqazSnWEw6pAG010ByKeZoKoe5/loXF0hhVdYvvy1cQvC/8wKtWwZ2KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVh67Oa8PyoG0kSQC+ijja7iqhXMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvcFdIcnM1cndfS2diU1JKQUw2S09OcnVLcUZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWfyEMA0G CSqGSIb3DQEBCwUAA4IBAQBGFw3A2zm4TNFUD6/t49PLrcqJ8SP23k/op/3Enx5x ZrUGBhM11Kl6JC0+PXgkhJCjHExgIlAbygwZkC3xOd38azWFm82yyiHBrk41uXxI F9SmBQ0+kA3ehFfNwJTJSRoA+5GOKqUnHxfXMVKsWZ22aaWAnOjISJtGMW8aItn9 2Fpa5Ji887RNf1s/Rr80m5jBA9VbjJ2aWzXqYl6IFt0xv0DYkKqzkAKwXJGsixgx dWK3DB/LHRNpbDHIZFqKg1kMhWnKFYsB637VS6C2FeDMYQM2//RaJ+7fOuk7hoDX GDABCyMTG+qgnCKoZqS32NbiZ96VunHOCVWWJzxlXIMW -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:37 2026 by rpki-client