This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wdMoTM7ZHiXMtiupiX46SIPgvC0.roa File: wdMoTM7ZHiXMtiupiX46SIPgvC0.roa (raw, json) Hash identifier: xU4LTvO7DMbMRKCpKPQ9a88yOAb/SYG7ecCTNacC+20= Subject key identifier: C1:D3:28:4C:CE:D9:1E:25:CC:B6:2B:A9:89:7E:3A:48:83:E0:BC:2D Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346607612F3AD37935F3D28CF08483 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wdMoTM7ZHiXMtiupiX46SIPgvC0.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49408 IP address blocks: 193.235.60.0/24 maxlen: 24 194.103.23.0/24 maxlen: 24 194.103.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:66:07:61:2f:3a:d3:79:35:f3:d2:8c:f0:84:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1d3284cced91e25ccb62ba9897e3a4883e0bc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:61:ae:c1:50:00:54:49:ab:3d:35:9b:ac: a4:5c:63:0f:83:c8:08:8e:4a:5e:ad:6e:96:f1:58: 01:88:b0:cd:de:29:c3:d2:69:b6:aa:2c:bd:8e:c6: 47:0f:10:f2:17:b5:ac:8b:b3:fc:8f:e2:aa:34:68: 9f:7f:c0:b9:df:3b:42:15:b2:25:af:cd:e9:37:4c: ab:48:8e:16:40:67:ba:e6:5b:53:cc:f0:9b:75:e4: 5d:2b:03:c5:83:09:e8:8e:7b:6a:b9:5f:18:56:0f: 1c:c3:05:1f:99:24:48:78:cc:4b:9e:ee:94:41:6b: 3b:7a:30:39:81:31:3f:92:13:76:06:08:d9:cb:0c: 27:87:2a:37:2a:c7:49:d6:fb:05:16:5a:34:da:3a: cb:46:d9:4d:18:24:66:a3:29:98:16:9e:14:20:9a: 18:ba:f8:91:bc:68:27:1e:10:f8:73:fe:c5:ca:5e: 2b:a7:63:ce:70:4d:8f:af:28:f6:61:f8:c7:5e:12: 6f:3c:60:8f:4c:41:68:e8:c4:e8:73:5b:b4:01:9c: da:8d:66:19:ee:48:91:69:fe:28:3e:6b:0b:31:0b: b4:e8:f3:7c:c2:73:73:25:13:02:a6:aa:e3:52:d1: 24:ee:4e:85:59:24:fd:b4:ca:2b:05:63:67:d4:18: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D3:28:4C:CE:D9:1E:25:CC:B6:2B:A9:89:7E:3A:48:83:E0:BC:2D X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wdMoTM7ZHiXMtiupiX46SIPgvC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.235.60.0/24 194.103.23.0/24 194.103.54.0/24 Signature Algorithm: sha256WithRSAEncryption 19:fe:36:b9:e5:7b:e6:31:7e:8a:10:d5:e3:68:58:42:43:f9: 9b:c3:58:cc:88:44:73:54:d5:69:54:50:29:ec:54:6f:61:06: 17:63:33:07:7c:c2:1a:5f:0a:61:b1:02:b4:1a:de:3f:25:32: 14:b8:99:8e:c3:54:ec:a8:77:11:bd:24:4c:29:db:f5:57:a4: 3a:ea:c7:8c:33:7c:7b:dd:a2:f1:34:c3:bd:72:d3:9d:6c:65: 70:1f:db:00:2d:f7:01:d6:1b:91:1b:85:2e:67:8d:af:d6:5c: 96:79:46:d4:6a:0c:fe:bd:4a:33:08:91:42:30:03:48:5a:dc: 3c:3a:7a:93:a5:42:ec:c1:fc:18:a0:59:56:3e:0b:aa:b9:fb: a8:fa:93:3b:0e:86:c1:9a:c0:52:81:47:19:14:1b:d4:53:9a: 3f:a2:f6:8a:bc:d5:c1:2e:c0:cb:5e:19:c3:32:f0:a1:62:6d: a4:70:2b:07:f5:79:39:74:54:38:81:ea:f9:e7:ca:bc:f2:75: ab:49:ec:b3:e4:0c:25:eb:c0:c3:76:8c:70:84:93:4b:2e:1e: 7b:a9:2d:07:cd:fd:b7:cd:3e:79:1a:50:de:2a:95:db:6e:ba: f4:2c:b6:42:54:08:68:38:11:d3:93:00:66:25:84:e3:db:f1: 14:fb:17:a7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NGYHYS8603k189KM8ISDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWQzMjg0Y2NlZDkxZTI1Y2NiNjJiYTk4OTdlM2E0ODgzZTBiYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoFhrsFQAFRJqz01m6ykXGMPg8gI jkperW6W8VgBiLDN3inD0mm2qiy9jsZHDxDyF7Wsi7P8j+KqNGiff8C53ztCFbIl r83pN0yrSI4WQGe65ltTzPCbdeRdKwPFgwnojntquV8YVg8cwwUfmSRIeMxLnu6U QWs7ejA5gTE/khN2BgjZywwnhyo3KsdJ1vsFFlo02jrLRtlNGCRmoymYFp4UIJoY uviRvGgnHhD4c/7Fyl4rp2POcE2Pryj2YfjHXhJvPGCPTEFo6MToc1u0AZzajWYZ 7kiRaf4oPmsLMQu06PN8wnNzJRMCpqrjUtEk7k6FWST9tMorBWNn1Bi68QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMHTKEzO2R4lzLYrqYl+OkiD4LwtMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvd2RNb1RNN1pIaVhNdGl1cGlYNDZTSVBndkMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwes8AwQA wmcXAwQAwmc2MA0GCSqGSIb3DQEBCwUAA4IBAQAZ/ja55XvmMX6KENXjaFhCQ/mb w1jMiERzVNVpVFAp7FRvYQYXYzMHfMIaXwphsQK0Gt4/JTIUuJmOw1TsqHcRvSRM Kdv1V6Q66seMM3x73aLxNMO9ctOdbGVwH9sALfcB1huRG4UuZ42v1lyWeUbUagz+ vUozCJFCMANIWtw8OnqTpULswfwYoFlWPguqufuo+pM7DobBmsBSgUcZFBvUU5o/ ovaKvNXBLsDLXhnDMvChYm2kcCsH9Xk5dFQ4ger558q88nWrSeyz5Awl68DDdoxw hJNLLh57qS0Hzf23zT55GlDeKpXbbrr0LLZCVAhoOBHTkwBmJYTj2/EU+xen -----END CERTIFICATE-----Generated at Sun Jan 25 16:33:13 2026 by rpki-client