This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PWI56OTX65z2OBF1ByhzA3lYAmg.roa File: PWI56OTX65z2OBF1ByhzA3lYAmg.roa (raw, json) Hash identifier: COdpG59GfzSYW9SKLbNRZIK9kMpJ9xS2Y8Wg1f9iiDc= Subject key identifier: 3D:62:39:E8:E4:D7:EB:9C:F6:38:11:75:07:28:73:03:79:58:02:68 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834806C4B619382BC75B7F014BA7D54 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PWI56OTX65z2OBF1ByhzA3lYAmg.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202780 IP address blocks: 192.165.130.0/24 maxlen: 24 192.165.133.0/24 maxlen: 24 193.234.68.0/23 maxlen: 23 194.132.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:80:6c:4b:61:93:82:bc:75:b7:f0:14:ba:7d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d6239e8e4d7eb9cf63811750728730379580268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:b8:05:63:fe:d1:7c:2c:20:29:5a:4c:08: 87:e8:c4:09:d1:13:10:22:c1:67:a3:24:25:c1:c3: 12:da:59:a0:be:26:6b:5f:58:b4:aa:f2:61:80:30: b3:ce:d4:d0:37:37:fb:3f:c4:2b:fc:5e:af:08:9e: 42:11:00:1d:cd:c6:bc:46:25:df:c9:81:85:f0:50: 58:e2:2b:00:6f:91:59:0a:c9:d3:66:9b:80:1b:e6: 3b:a1:07:b3:e7:77:3d:13:f7:ce:6f:49:c1:03:6f: d6:70:de:08:fc:98:2e:79:9e:1f:6f:4e:d2:65:d6: 6c:ee:c6:ec:cc:d0:22:c1:9c:81:24:42:b1:59:e9: db:2f:27:0d:48:92:99:35:98:22:8e:dc:01:f0:e2: e7:ab:2a:22:74:61:fa:4c:62:c6:71:b1:31:57:6a: 77:09:e3:06:42:be:e7:c2:4c:2a:96:5c:67:95:83: b4:fa:f9:31:b9:40:0d:3f:1e:97:14:cb:69:de:58: 23:2b:39:40:3a:e6:80:e3:ac:72:a4:5c:87:05:09: eb:ac:a6:f2:24:4a:58:fd:fb:e2:13:f2:15:f7:2d: a9:6e:4b:5b:6c:a4:48:84:18:62:b7:b4:c7:6b:88: 5d:8c:fb:65:ab:74:2c:0c:a7:fa:61:e7:07:49:6f: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:62:39:E8:E4:D7:EB:9C:F6:38:11:75:07:28:73:03:79:58:02:68 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PWI56OTX65z2OBF1ByhzA3lYAmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.130.0/24 192.165.133.0/24 193.234.68.0/23 194.132.36.0/22 Signature Algorithm: sha256WithRSAEncryption 29:da:45:0e:40:9d:0d:b6:6b:fa:26:41:97:75:8a:47:9b:1b: ab:63:c0:d9:de:8c:76:b9:dd:9c:04:cc:81:b7:ec:aa:06:45: 25:24:85:89:46:95:ab:04:90:75:62:3b:93:f6:0a:4e:05:e7: 98:49:c9:50:e3:c5:59:33:75:6b:ef:e3:61:fb:d6:13:ce:af: 14:46:b8:d6:88:c7:5d:31:d9:26:84:55:e3:2c:96:7c:a2:6e: c2:0a:6a:9c:1c:00:fb:91:96:f0:c2:95:13:90:30:d0:68:ba: c4:44:3b:02:9e:c7:73:65:cf:cd:0d:45:09:70:43:39:6d:c0: 6f:22:78:37:fb:6b:1b:a9:a8:de:45:f0:11:62:1a:c3:fa:d9: 1a:06:e1:da:c4:b8:92:58:7b:91:ff:5b:a2:64:5b:56:41:c9: 53:53:9c:dc:d2:5d:47:95:10:6c:25:4d:68:43:89:2a:a9:fc: e3:b2:2e:74:fd:42:8d:c9:9d:a3:93:2b:5f:c4:71:8a:e4:21: cf:44:88:f3:a2:22:a9:5e:65:c7:71:7b:f9:c8:c4:6e:93:f4: 51:c4:49:81:b3:93:12:74:8d:4b:28:77:57:16:ba:f4:c0:c0: 2a:dd:12:d8:4c:d4:3f:db:29:87:6f:72:60:9a:ac:63:57:87: d0:0c:af:aa -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NIBsS2GTgrx1t/AUun1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDYyMzllOGU0ZDdlYjljZjYzODExNzUwNzI4NzMwMzc5NTgwMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvC4BWP+0XwsIClaTAiH6MQJ0RMQ IsFnoyQlwcMS2lmgviZrX1i0qvJhgDCzztTQNzf7P8Qr/F6vCJ5CEQAdzca8RiXf yYGF8FBY4isAb5FZCsnTZpuAG+Y7oQez53c9E/fOb0nBA2/WcN4I/JgueZ4fb07S ZdZs7sbszNAiwZyBJEKxWenbLycNSJKZNZgijtwB8OLnqyoidGH6TGLGcbExV2p3 CeMGQr7nwkwqllxnlYO0+vkxuUANPx6XFMtp3lgjKzlAOuaA46xypFyHBQnrrKby JEpY/fviE/IV9y2pbktbbKRIhBhit7THa4hdjPtlq3QsDKf6YecHSW8dpwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFD1iOejk1+uc9jgRdQcocwN5WAJoMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUFdJNTZPVFg2NXoyT0JGMUJ5aHpBM2xZQW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwKWCAwQA wKWFAwQBwepEAwQCwoQkMA0GCSqGSIb3DQEBCwUAA4IBAQAp2kUOQJ0Ntmv6JkGX dYpHmxurY8DZ3ox2ud2cBMyBt+yqBkUlJIWJRpWrBJB1YjuT9gpOBeeYSclQ48VZ M3Vr7+Nh+9YTzq8URrjWiMddMdkmhFXjLJZ8om7CCmqcHAD7kZbwwpUTkDDQaLrE RDsCnsdzZc/NDUUJcEM5bcBvIng3+2sbqajeRfARYhrD+tkaBuHaxLiSWHuR/1ui ZFtWQclTU5zc0l1HlRBsJU1oQ4kqqfzjsi50/UKNyZ2jkytfxHGK5CHPRIjzoiKp XmXHcXv5yMRuk/RRxEmBs5MSdI1LKHdXFrr0wMAq3RLYTNQ/2ymHb3JgmqxjV4fQ DK+q -----END CERTIFICATE-----Generated at Sun Jan 25 10:29:14 2026 by rpki-client