This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cw9d-4fF8m4hOrZRvfYy_s2hjSU.roa File: cw9d-4fF8m4hOrZRvfYy_s2hjSU.roa (raw, json) Hash identifier: UuFBU1YuxwMgVNjWYt3hkGKu80wp9oBGBAaianLtiEM= Subject key identifier: 73:0F:5D:FB:87:C5:F2:6E:21:3A:B6:51:BD:F6:32:FE:CD:A1:8D:25 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346AD5517EA98527C797D43F558E75 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cw9d-4fF8m4hOrZRvfYy_s2hjSU.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50764 IP address blocks: 192.36.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6a:d5:51:7e:a9:85:27:c7:97:d4:3f:55:8e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=730f5dfb87c5f26e213ab651bdf632fecda18d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:56:47:9f:6b:bb:52:2b:18:31:97:41:f0: c6:2d:c2:f0:cb:5f:e1:19:50:cd:08:05:ad:34:47: bb:ed:49:f8:4e:2c:8d:a4:96:fb:30:85:82:e0:f2: e9:2d:8c:23:51:7b:cb:d0:77:9b:7f:ed:36:95:43: 12:60:c7:cf:c0:fa:ba:bd:cb:a1:2b:df:73:10:d4: fa:7f:24:4c:79:3c:2e:fe:89:c2:c0:be:28:3b:55: 16:75:41:c7:8a:01:f3:08:79:e6:90:d2:81:88:2f: 44:d3:7e:ed:46:ce:0c:6a:34:82:53:a9:29:5d:2e: 82:6e:05:4b:e1:18:f4:9a:1b:e0:ad:ff:96:9a:0c: 69:09:f2:b3:15:38:43:8c:36:c2:71:fe:df:bf:47: 7d:53:9d:62:dc:4c:c1:90:4a:a6:1c:98:dd:a1:03: ca:37:cd:12:b9:48:7b:2f:b1:b4:95:5a:e5:a8:dd: f3:63:ce:4a:e1:c5:61:b6:16:d6:ec:d7:4b:7d:9d: bf:59:82:50:17:ef:7d:2f:fe:f3:b9:5b:42:43:b5: c9:69:89:57:85:d7:5b:4a:aa:37:2a:aa:60:d1:83: 06:fc:c3:27:dd:aa:49:e0:84:1e:e3:2e:83:83:d5: d0:78:6d:57:96:7b:4c:46:f3:82:9d:cc:f5:9f:a7: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0F:5D:FB:87:C5:F2:6E:21:3A:B6:51:BD:F6:32:FE:CD:A1:8D:25 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cw9d-4fF8m4hOrZRvfYy_s2hjSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.43.0/24 Signature Algorithm: sha256WithRSAEncryption b5:c3:ae:bf:72:95:82:ec:c7:05:f6:c3:5f:fd:7d:22:29:7f: 1d:74:e3:d0:86:71:18:66:82:af:92:9a:82:09:f3:ad:49:4c: d2:7d:0d:81:cb:03:5e:3a:9c:4f:a8:f1:dc:77:4f:57:06:63: 5e:f4:4a:4b:3b:9c:4d:4c:db:c0:74:c3:d2:9e:a6:22:d1:5f: 94:20:5c:12:84:b4:15:96:5b:8d:23:dc:50:c1:24:68:07:ba: f1:ad:45:04:e1:00:54:47:e1:13:89:60:d7:57:06:cd:5c:ce: 90:7d:53:0b:35:8c:df:7c:54:73:45:04:c9:be:10:15:e1:31: c9:6c:fb:c4:a0:94:f4:75:a3:ca:b8:b2:c4:fd:1b:74:d5:06: db:11:6b:1a:80:37:18:f8:fe:8d:e1:2c:88:6c:b6:c4:d3:f0: c9:1e:2e:fa:5a:51:0e:03:38:aa:3d:11:98:79:a3:a4:fe:9a: 9a:55:46:1d:02:2b:c9:44:74:bb:f3:70:13:85:af:86:01:bb: c0:09:e3:d1:4a:fc:f9:a8:29:f3:71:74:15:24:01:a2:5a:13: 24:34:1e:2f:4b:38:01:d2:c7:90:49:39:f8:ec:f2:5d:99:69: 18:32:e9:d3:25:37:25:67:1e:d6:96:46:7a:31:0d:2a:36:66: 69:e3:9a:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGrVUX6phSfHl9Q/VY51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzBmNWRmYjg3YzVmMjZlMjEzYWI2NTFiZGY2MzJmZWNkYTE4ZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUdWR59ru1IrGDGXQfDGLcLwy1/h GVDNCAWtNEe77Un4TiyNpJb7MIWC4PLpLYwjUXvL0Hebf+02lUMSYMfPwPq6vcuh K99zENT6fyRMeTwu/onCwL4oO1UWdUHHigHzCHnmkNKBiC9E037tRs4MajSCU6kp XS6CbgVL4Rj0mhvgrf+WmgxpCfKzFThDjDbCcf7fv0d9U51i3EzBkEqmHJjdoQPK N80SuUh7L7G0lVrlqN3zY85K4cVhthbW7NdLfZ2/WYJQF+99L/7zuVtCQ7XJaYlX hddbSqo3Kqpg0YMG/MMn3apJ4IQe4y6Dg9XQeG1XlntMRvOCncz1n6el6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMPXfuHxfJuITq2Ub32Mv7NoY0lMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvY3c5ZC00ZkY4bTRoT3JaUnZmWXlfczJoalNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCQrMA0G CSqGSIb3DQEBCwUAA4IBAQC1w66/cpWC7McF9sNf/X0iKX8ddOPQhnEYZoKvkpqC CfOtSUzSfQ2BywNeOpxPqPHcd09XBmNe9EpLO5xNTNvAdMPSnqYi0V+UIFwShLQV lluNI9xQwSRoB7rxrUUE4QBUR+ETiWDXVwbNXM6QfVMLNYzffFRzRQTJvhAV4THJ bPvEoJT0daPKuLLE/Rt01QbbEWsagDcY+P6N4SyIbLbE0/DJHi76WlEOAziqPRGY eaOk/pqaVUYdAivJRHS783ATha+GAbvACePRSvz5qCnzcXQVJAGiWhMkNB4vSzgB 0seQSTn47PJdmWkYMunTJTclZx7WlkZ6MQ0qNmZp45oi -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:45 2026 by rpki-client