This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wP-oYYHIkzx5-ojqe19m7WjUW74.roa File: wP-oYYHIkzx5-ojqe19m7WjUW74.roa (raw, json) Hash identifier: hi+d0qVCxJEm+JEZTDkJf3oaub10fsfB5PCdsCBP+PQ= Subject key identifier: C0:FF:A8:61:81:C8:93:3C:79:FA:88:EA:7B:5F:66:ED:68:D4:5B:BE Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019BC5FF948978135D16C189D7096F82CBCA Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wP-oYYHIkzx5-ojqe19m7WjUW74.roa Signing time: Fri 16 Jan 2026 08:50:19 +0000 ROA not before: Fri 16 Jan 2026 08:50:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8769 IP address blocks: 193.182.245.0/24 maxlen: 24 193.234.82.0/24 maxlen: 24 194.71.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:ff:94:89:78:13:5d:16:c1:89:d7:09:6f:82:cb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 16 08:50:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0ffa86181c8933c79fa88ea7b5f66ed68d45bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:cb:16:b7:3d:4e:b7:1a:5e:30:a6:21:5a: e4:1a:93:59:7c:78:c6:5d:35:6e:dd:6c:90:9f:20: 97:e3:6e:5d:dd:5a:70:42:26:b2:95:32:02:14:ff: c8:81:0a:40:c0:fd:d9:6d:8a:d7:81:b5:b3:fd:59: d1:74:bc:f4:40:24:9e:ae:e3:8a:9b:31:3c:d3:40: c9:ce:98:3d:ad:86:6d:cd:6e:8d:bb:75:7e:aa:58: 19:0b:62:f9:db:41:61:87:4c:ab:2d:3e:a0:44:67: 14:42:14:07:00:b7:c5:3f:70:d0:7c:1d:3b:9d:bd: a7:e0:cc:12:b4:3b:a4:7e:05:58:c9:b9:ce:a5:4d: d5:50:87:10:db:3a:fc:36:0c:2b:3e:0d:55:0a:46: 44:4d:53:2c:77:6f:a2:82:5f:6b:b8:e1:c3:bd:2f: 39:bf:f7:ab:97:2c:92:92:63:23:b3:06:27:a0:01: 01:20:b2:43:8f:dc:7c:86:7a:38:60:90:1d:5a:f5: 5e:fb:b6:60:07:41:50:7e:a1:fa:ca:13:10:82:91: bc:44:51:e9:b2:ff:2c:11:38:3d:4a:0b:af:ef:fd: c1:6c:da:d2:b2:74:22:b7:2b:f2:ab:2e:47:15:77: b2:c8:d9:38:83:d6:11:13:e5:a7:2d:f1:ba:ab:61: 5f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FF:A8:61:81:C8:93:3C:79:FA:88:EA:7B:5F:66:ED:68:D4:5B:BE X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wP-oYYHIkzx5-ojqe19m7WjUW74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.182.245.0/24 193.234.82.0/24 194.71.221.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:0f:2b:fb:53:dc:0e:be:b2:36:dd:66:ad:5d:31:3d:ff:18: 5c:72:d9:86:86:46:cc:ad:f1:96:dc:8d:07:53:8e:3b:5e:d0: 20:36:b4:6b:9b:87:81:24:cd:81:f7:bb:d5:be:53:2c:cd:8f: d9:5a:6d:ce:cf:5e:91:dc:70:b7:91:3d:9a:bd:b6:87:6d:27: 57:c8:77:50:42:9d:37:6a:01:f1:0e:fd:a3:87:4e:f7:5c:23: d4:9b:76:45:8e:68:a7:2f:75:0c:09:5f:15:67:6d:bd:cf:e7: 4b:e1:a8:4d:1e:9d:36:bb:f8:ec:00:01:a1:53:07:92:05:59: 33:46:00:9d:d3:67:c6:e1:e7:d0:94:2f:91:a3:dc:d5:ed:d2: d4:20:84:3e:d4:20:61:43:82:1c:c3:9b:eb:5f:4d:85:3a:cf: 2f:01:63:cf:a2:63:39:fa:d5:74:5a:8c:48:f0:8d:a5:ba:db: a2:c7:8b:65:bc:1d:61:bc:5d:49:30:c2:ec:38:a9:1d:d5:67: 44:bf:ed:a1:4a:ee:1d:7c:d7:fd:68:44:23:0b:af:aa:4f:01: 2b:71:a2:75:ec:ad:a9:7a:39:7c:88:85:77:ff:15:f4:16:af: 90:4e:49:73:37:48:78:26:65:f9:8a:7f:43:78:45:40:76:f5: eb:8f:a3:6e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvF/5SJeBNdFsGJ1wlvgsvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTE2MDg1MDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGZmYTg2MTgxYzg5MzNjNzlmYTg4ZWE3YjVmNjZlZDY4ZDQ1YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDLLFrc9TrcaXjCmIVrkGpNZfHjG XTVu3WyQnyCX425d3VpwQiaylTICFP/IgQpAwP3ZbYrXgbWz/VnRdLz0QCSeruOK mzE800DJzpg9rYZtzW6Nu3V+qlgZC2L520Fhh0yrLT6gRGcUQhQHALfFP3DQfB07 nb2n4MwStDukfgVYybnOpU3VUIcQ2zr8NgwrPg1VCkZETVMsd2+igl9ruOHDvS85 v/erlyySkmMjswYnoAEBILJDj9x8hno4YJAdWvVe+7ZgB0FQfqH6yhMQgpG8RFHp sv8sETg9Sguv7/3BbNrSsnQityvyqy5HFXeyyNk4g9YRE+WnLfG6q2FfLQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMD/qGGByJM8efqI6ntfZu1o1Fu+MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvd1Atb1lZSElreng1LW9qcWUxOW03V2pVVzc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwbb1AwQA wepSAwQAwkfdMA0GCSqGSIb3DQEBCwUAA4IBAQANDyv7U9wOvrI23WatXTE9/xhc ctmGhkbMrfGW3I0HU447XtAgNrRrm4eBJM2B97vVvlMszY/ZWm3Oz16R3HC3kT2a vbaHbSdXyHdQQp03agHxDv2jh073XCPUm3ZFjminL3UMCV8VZ229z+dL4ahNHp02 u/jsAAGhUweSBVkzRgCd02fG4efQlC+Ro9zV7dLUIIQ+1CBhQ4Icw5vrX02FOs8v AWPPomM5+tV0WoxI8I2lutuix4tlvB1hvF1JMMLsOKkd1WdEv+2hSu4dfNf9aEQj C6+qTwErcaJ17K2pejl8iIV3/xX0Fq+QTklzN0h4JmX5in9DeEVAdvXrj6Nu -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:54 2026 by rpki-client