This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wBTBPTY4Uc0m39zrlznRqEkbs1g.roa File: wBTBPTY4Uc0m39zrlznRqEkbs1g.roa (raw, json) Hash identifier: rzX+3xqTOQHkifRckHIGtPNvdpznTyFFpk1MO/Ob9G4= Subject key identifier: C0:14:C1:3D:36:38:51:CD:26:DF:DC:EB:97:39:D1:A8:49:1B:B3:58 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019BE6064DCAF8FABD643500B574BF868C7C Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wBTBPTY4Uc0m39zrlznRqEkbs1g.roa Signing time: Thu 22 Jan 2026 14:05:31 +0000 ROA not before: Thu 22 Jan 2026 14:05:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 192.71.161.0/24 maxlen: 24 193.180.119.0/24 maxlen: 24 193.182.245.0/24 maxlen: 24 193.234.82.0/24 maxlen: 24 193.235.104.0/24 maxlen: 24 193.235.106.0/24 maxlen: 24 193.235.108.0/23 maxlen: 24 194.71.221.0/24 maxlen: 24 194.132.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:06:4d:ca:f8:fa:bd:64:35:00:b5:74:bf:86:8c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 22 14:05:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c014c13d363851cd26dfdceb9739d1a8491bb358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3a:08:86:b3:2b:53:c7:6d:7b:b2:8d:c6:77: 96:30:c4:ea:24:a8:59:ea:c5:d6:9a:5f:ef:f2:f3: 12:0d:23:d3:99:5c:40:1c:9d:5b:ac:c3:15:ec:58: e3:ec:fb:68:18:ff:75:62:02:7e:a8:d9:83:f4:cc: a9:f0:c4:f1:6a:fe:67:81:19:7b:de:66:28:ea:36: 94:99:ab:b9:5d:70:8d:f9:4c:db:48:00:c8:60:a3: 32:84:38:a0:5f:66:2c:58:de:6b:c6:1b:1c:ce:6d: 4e:20:d7:67:6f:3a:d1:d2:5b:13:d2:1d:25:73:22: 8c:76:44:44:69:d9:4d:e9:1e:91:f7:31:77:9a:70: 50:d3:0d:d8:d4:fd:11:d1:ab:64:09:15:95:c2:1b: f9:66:47:cc:71:c4:47:f4:2e:8a:1b:8f:81:7e:ef: bf:a9:4b:f3:66:b0:bd:2b:a9:4e:54:eb:01:35:26: 4b:ce:9b:ac:59:52:3f:6b:18:5e:7f:0c:3a:9e:e4: e6:af:e0:0c:e7:72:28:af:a1:1d:de:98:7f:b7:38: 6d:c1:f9:8d:e6:ba:98:4f:d8:0d:6a:88:bf:2e:da: fe:3f:9b:15:74:a3:96:ff:b5:51:91:f0:3b:22:b4: db:ff:4c:62:92:29:fc:db:c8:6b:6c:72:d0:87:c9: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:C1:3D:36:38:51:CD:26:DF:DC:EB:97:39:D1:A8:49:1B:B3:58 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wBTBPTY4Uc0m39zrlznRqEkbs1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.161.0/24 193.180.119.0/24 193.182.245.0/24 193.234.82.0/24 193.235.104.0/24 193.235.106.0/24 193.235.108.0/23 194.71.221.0/24 194.132.122.0/24 Signature Algorithm: sha256WithRSAEncryption 34:46:c3:79:8c:f8:5b:18:36:7b:d3:04:07:94:aa:63:c2:13: f3:1b:0c:e2:46:aa:3d:73:60:19:c9:b1:d3:e2:40:bd:46:c2: 10:43:36:15:39:de:03:ca:16:cf:c9:6e:77:ec:f0:72:53:84: ff:90:b0:ec:8f:89:17:c4:97:19:be:89:74:47:08:3a:39:99: 21:b1:74:50:9e:1e:a4:e0:9b:c3:ee:b1:7a:ad:06:43:ed:53: a2:ff:bd:6f:86:32:24:52:f7:00:97:49:32:9d:68:65:14:06: 2f:55:ec:df:ce:5e:ad:e3:13:bc:de:e6:44:62:60:f4:db:32: 72:4c:00:5e:05:9c:31:38:b0:34:45:e0:86:b4:b3:88:d9:dc: 7b:93:e6:37:9e:9f:72:7c:14:8a:37:fd:35:4b:ae:db:aa:95: 69:96:80:e3:d5:04:2e:de:25:7c:d7:9b:96:93:e8:b8:13:2e: f2:6d:91:5c:8f:eb:d4:55:a5:73:d9:c2:0a:e3:db:53:10:d3: 5d:92:fd:8e:2c:c7:70:37:a0:12:f6:c7:51:9c:8d:b0:f9:c7: 64:94:5c:a7:b3:23:f1:8c:4e:b7:06:3d:a0:fc:f2:a8:b3:37: d4:c7:d5:fa:6e:98:69:4c:4b:22:13:de:28:63:5e:52:a6:11: f0:9f:6c:8c -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvmBk3K+Pq9ZDUAtXS/hox8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTIyMTQwNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDE0YzEzZDM2Mzg1MWNkMjZkZmRjZWI5NzM5ZDFhODQ5MWJiMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ToIhrMrU8dte7KNxneWMMTqJKhZ 6sXWml/v8vMSDSPTmVxAHJ1brMMV7Fjj7PtoGP91YgJ+qNmD9Myp8MTxav5ngRl7 3mYo6jaUmau5XXCN+UzbSADIYKMyhDigX2YsWN5rxhsczm1OINdnbzrR0lsT0h0l cyKMdkREadlN6R6R9zF3mnBQ0w3Y1P0R0atkCRWVwhv5ZkfMccRH9C6KG4+Bfu+/ qUvzZrC9K6lOVOsBNSZLzpusWVI/axhefww6nuTmr+AM53Ior6Ed3ph/tzhtwfmN 5rqYT9gNaoi/Ltr+P5sVdKOW/7VRkfA7IrTb/0xikin828hrbHLQh8mdowIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFMAUwT02OFHNJt/c65c50ahJG7NYMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvd0JUQlBUWTRVYzBtMzl6cmx6blJxRWticzFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwEehAwQA wbR3AwQAwbb1AwQAwepSAwQAwetoAwQAwetqAwQBwetsAwQAwkfdAwQAwoR6MA0G CSqGSIb3DQEBCwUAA4IBAQA0RsN5jPhbGDZ70wQHlKpjwhPzGwziRqo9c2AZybHT 4kC9RsIQQzYVOd4DyhbPyW537PByU4T/kLDsj4kXxJcZvol0Rwg6OZkhsXRQnh6k 4JvD7rF6rQZD7VOi/71vhjIkUvcAl0kynWhlFAYvVezfzl6t4xO83uZEYmD02zJy TABeBZwxOLA0ReCGtLOI2dx7k+Y3np9yfBSKN/01S67bqpVploDj1QQu3iV815uW k+i4Ey7ybZFcj+vUVaVz2cIK49tTENNdkv2OLMdwN6AS9sdRnI2w+cdklFynsyPx jE63Bj2g/PKoszfUx9X6bphpTEsiE94oY15SphHwn2yM -----END CERTIFICATE-----Generated at Sun Jan 25 11:02:00 2026 by rpki-client