This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WWW5qQCyFZXlRyJ-vW0wqUFw0N0.roa File: WWW5qQCyFZXlRyJ-vW0wqUFw0N0.roa (raw, json) Hash identifier: LXl5Fj9z3K6moZ/TxE0BVT/Ee9xzE1N42fZU4nfR2iQ= Subject key identifier: 59:65:B9:A9:00:B2:15:95:E5:47:22:7E:BD:6D:30:A9:41:70:D0:DD Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348FC1BB9E4019EB405A1A163173EC Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WWW5qQCyFZXlRyJ-vW0wqUFw0N0.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209797 IP address blocks: 192.71.207.0/24 maxlen: 24 192.71.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8f:c1:bb:9e:40:19:eb:40:5a:1a:16:31:73:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5965b9a900b21595e547227ebd6d30a94170d0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:79:59:95:35:5d:be:94:5c:f3:77:14:01: 15:bb:82:8a:2c:f9:c8:10:82:61:d0:6d:b7:66:b4: 38:f0:9d:7c:cb:ac:f8:12:05:6b:8f:aa:74:df:b1: 66:d6:d8:9f:c2:6d:92:4d:95:a4:23:99:e0:9d:0a: e6:66:6e:f4:6b:e6:27:a1:b9:17:81:bc:69:a8:be: d1:ae:b4:8a:b7:e3:7f:5d:12:82:36:34:00:ff:da: bb:0f:3d:75:23:c9:58:27:f6:8f:89:e5:63:42:cf: d0:b1:fc:18:0a:f1:34:23:81:24:40:79:ea:47:96: 66:89:2f:f0:6a:9c:90:18:94:1a:e6:d9:84:2d:70: 24:d7:80:c5:7b:01:0f:a5:a3:31:cf:0b:46:91:cc: e4:46:2d:7e:57:58:4a:31:32:8b:a9:36:d5:63:d9: f0:e2:87:07:11:c1:05:24:30:e5:f2:9e:ca:b2:a9: ec:b1:3f:e4:25:e9:e7:90:c9:0a:9a:ed:a4:96:f2: de:aa:b7:a3:86:73:11:c1:10:f8:64:3e:9f:03:40: f6:3a:15:ad:ea:17:20:cc:bc:ec:6e:fc:d4:9e:e7: df:5d:78:61:4b:05:b0:d5:d2:f5:50:30:59:39:0e: 96:a1:5b:86:12:49:fe:48:12:7f:27:26:9f:30:ed: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:65:B9:A9:00:B2:15:95:E5:47:22:7E:BD:6D:30:A9:41:70:D0:DD X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WWW5qQCyFZXlRyJ-vW0wqUFw0N0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.207.0-192.71.208.255 Signature Algorithm: sha256WithRSAEncryption 4c:af:22:98:d0:89:af:c7:53:33:8a:01:b1:b9:ae:a0:08:05: 99:d8:05:6b:35:0b:c6:8b:7d:e4:91:14:74:90:b0:5f:dd:5a: bf:0f:b3:e0:89:da:ba:6c:91:55:79:f3:35:14:89:cf:9c:ba: d2:27:cb:fd:aa:a0:ae:c2:4f:63:5e:0c:ba:1b:ba:15:3c:64: e7:b0:78:3d:a7:3e:8e:53:37:07:e9:73:ce:93:8a:e9:c7:21: 3c:e3:17:55:ef:9b:ea:54:40:33:db:6d:9f:d2:f0:c9:93:b1: f6:ea:89:88:5a:4f:40:6b:35:05:2c:50:95:df:9a:ab:5a:25: f0:aa:4d:8c:9c:d3:23:07:ba:94:df:df:97:84:21:ff:ef:fe: f1:02:77:bc:6d:32:f1:ec:d5:54:12:26:c3:7b:1d:7d:d5:07: 65:aa:db:4b:ed:af:99:9a:79:8e:6f:b5:d1:65:19:fc:c7:c6: c5:69:45:3c:c2:3e:49:9f:22:11:84:e2:65:2d:f3:1f:ad:af: 92:42:46:b9:78:b5:5f:9e:1d:02:b9:c2:b7:45:9e:77:54:19: f2:67:22:51:87:29:57:1f:4f:b8:e0:39:2b:6a:ab:a4:ba:c7: c4:af:78:71:19:fa:7f:cd:e2:61:69:30:c5:cc:16:38:96:00: aa:12:7a:04 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NI/Bu55AGetAWhoWMXPsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTY1YjlhOTAwYjIxNTk1ZTU0NzIyN2ViZDZkMzBhOTQxNzBkMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3l5WZU1Xb6UXPN3FAEVu4KKLPnI EIJh0G23ZrQ48J18y6z4EgVrj6p037Fm1tifwm2STZWkI5ngnQrmZm70a+YnobkX gbxpqL7RrrSKt+N/XRKCNjQA/9q7Dz11I8lYJ/aPieVjQs/QsfwYCvE0I4EkQHnq R5ZmiS/wapyQGJQa5tmELXAk14DFewEPpaMxzwtGkczkRi1+V1hKMTKLqTbVY9nw 4ocHEcEFJDDl8p7KsqnssT/kJennkMkKmu2klvLeqrejhnMRwRD4ZD6fA0D2OhWt 6hcgzLzsbvzUnuffXXhhSwWw1dL1UDBZOQ6WoVuGEkn+SBJ/JyafMO00XQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFlluakAshWV5Ucifr1tMKlBcNDdMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvV1dXNXFRQ3lGWlhsUnlKLXZXMHdxVUZ3ME4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAR88D BADAR9AwDQYJKoZIhvcNAQELBQADggEBAEyvIpjQia/HUzOKAbG5rqAIBZnYBWs1 C8aLfeSRFHSQsF/dWr8Ps+CJ2rpskVV58zUUic+cutIny/2qoK7CT2NeDLobuhU8 ZOeweD2nPo5TNwfpc86TiunHITzjF1Xvm+pUQDPbbZ/S8MmTsfbqiYhaT0BrNQUs UJXfmqtaJfCqTYyc0yMHupTf35eEIf/v/vECd7xtMvHs1VQSJsN7HX3VB2Wq20vt r5maeY5vtdFlGfzHxsVpRTzCPkmfIhGE4mUt8x+tr5JCRrl4tV+eHQK5wrdFnndU GfJnIlGHKVcfT7jgOStqq6S6x8SveHEZ+n/N4mFpMMXMFjiWAKoSegQ= -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:48 2026 by rpki-client