This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wq5PryWU8g4Y_YJ-QKkl6-aUnls.roa File: wq5PryWU8g4Y_YJ-QKkl6-aUnls.roa (raw, json) Hash identifier: Mt4P3XU8i0OMh5Da4pBgHQqBuK7Qv5fMEtVshYhEoaE= Subject key identifier: C2:AE:4F:AF:25:94:F2:0E:18:FD:82:7E:40:A9:25:EB:E6:94:9E:5B Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834681B33078CD12F162C38AD978138 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wq5PryWU8g4Y_YJ-QKkl6-aUnls.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49769 IP address blocks: 192.165.156.0/24 maxlen: 24 193.235.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:68:1b:33:07:8c:d1:2f:16:2c:38:ad:97:81:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2ae4faf2594f20e18fd827e40a925ebe6949e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:af:6a:61:4f:40:8d:ec:65:ee:16:e5:59:57: 6f:00:25:a3:f9:be:f2:82:4c:ac:48:a3:64:01:f6: 1d:6d:8d:2b:e8:64:1f:e8:92:7f:9d:20:99:9e:6c: 9e:20:dd:11:79:8c:8d:07:35:bf:c1:2c:65:9c:18: 51:cb:50:8f:99:67:09:d1:8b:04:3c:40:45:ca:ac: eb:63:6c:ee:2e:74:51:5c:c1:27:60:c5:f8:a6:40: 04:83:7e:c0:93:c0:7a:af:60:d6:6d:d0:22:14:42: 4c:fe:26:fe:7b:c0:6a:d7:40:9c:58:87:06:9e:2f: 65:2c:fa:72:62:6b:62:d3:69:b0:1d:28:9c:ae:e1: 46:72:ad:97:40:2a:01:e1:16:e8:a1:92:85:a2:7c: fb:0b:71:6a:43:2f:95:8d:f4:d1:f8:50:35:07:79: 40:97:35:be:2a:8e:6b:10:1d:8a:35:3d:54:e3:97: aa:0d:f0:96:22:86:2f:03:55:ff:7f:f5:60:30:41: 18:84:4c:b5:99:af:54:c5:7f:44:08:5a:34:7a:bb: 41:31:38:c1:e0:06:e2:1c:ea:1d:7c:38:ae:d7:1a: df:79:d2:b8:7a:52:b8:83:55:e2:28:ed:ce:bc:91: 76:df:1c:c8:f8:0b:93:c5:57:92:d6:74:a5:86:c3: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AE:4F:AF:25:94:F2:0E:18:FD:82:7E:40:A9:25:EB:E6:94:9E:5B X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wq5PryWU8g4Y_YJ-QKkl6-aUnls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.156.0/24 193.235.2.0/24 Signature Algorithm: sha256WithRSAEncryption 13:18:a6:1a:c2:30:84:d3:d5:c9:67:b2:60:f1:97:3c:5e:c6: 29:5f:5d:9f:22:88:4c:b5:5e:68:be:ad:f2:a8:e7:37:ac:2b: c7:6a:a5:0e:97:d0:82:dd:b4:50:64:7f:91:c2:ce:9a:69:93: cf:ad:ea:77:ed:ab:39:30:01:76:c5:a1:39:64:c9:00:5e:54: bc:63:cc:6a:1a:06:4a:ed:ee:08:c1:cf:2a:d8:4b:90:ca:bc: 7a:52:64:9e:43:0b:ba:61:f3:15:29:d0:6e:de:3e:df:87:a6: 93:14:58:e1:44:c1:a8:31:7d:bf:dd:2c:82:22:fb:04:17:6b: 32:9b:8e:af:c1:40:7c:bd:0a:f0:a4:dc:5f:2b:ac:b5:44:2e: de:69:e6:ca:1a:af:43:07:ba:00:5e:b5:66:27:58:27:4d:7e: 67:f1:af:d1:3f:1b:f6:0f:0c:d4:14:6c:03:4c:94:42:2a:f3: a3:98:7a:d7:f7:93:c8:d5:f2:89:cb:75:40:45:55:ed:fa:d1: e0:ba:1d:4a:ce:eb:22:ca:db:76:0c:fa:0a:c4:1b:00:04:de: 02:3c:66:e9:f4:f4:7d:34:50:46:42:80:36:0d:92:c3:42:dd: a6:e6:c0:8d:62:c7:0b:cc:05:4a:3b:2a:5c:f9:0a:be:0e:a9: ce:4a:c7:f3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NGgbMweM0S8WLDitl4E4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmFlNGZhZjI1OTRmMjBlMThmZDgyN2U0MGE5MjVlYmU2OTQ5ZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a9qYU9Ajexl7hblWVdvACWj+b7y gkysSKNkAfYdbY0r6GQf6JJ/nSCZnmyeIN0ReYyNBzW/wSxlnBhRy1CPmWcJ0YsE PEBFyqzrY2zuLnRRXMEnYMX4pkAEg37Ak8B6r2DWbdAiFEJM/ib+e8Bq10CcWIcG ni9lLPpyYmti02mwHSicruFGcq2XQCoB4RbooZKFonz7C3FqQy+VjfTR+FA1B3lA lzW+Ko5rEB2KNT1U45eqDfCWIoYvA1X/f/VgMEEYhEy1ma9UxX9ECFo0ertBMTjB 4AbiHOodfDiu1xrfedK4elK4g1XiKO3OvJF23xzI+AuTxVeS1nSlhsM95QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMKuT68llPIOGP2CfkCpJevmlJ5bMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvd3E1UHJ5V1U4ZzRZX1lKLVFLa2w2LWFVbmxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwKWcAwQA wesCMA0GCSqGSIb3DQEBCwUAA4IBAQATGKYawjCE09XJZ7Jg8Zc8XsYpX12fIohM tV5ovq3yqOc3rCvHaqUOl9CC3bRQZH+Rws6aaZPPrep37as5MAF2xaE5ZMkAXlS8 Y8xqGgZK7e4Iwc8q2EuQyrx6UmSeQwu6YfMVKdBu3j7fh6aTFFjhRMGoMX2/3SyC IvsEF2sym46vwUB8vQrwpNxfK6y1RC7eaebKGq9DB7oAXrVmJ1gnTX5n8a/RPxv2 DwzUFGwDTJRCKvOjmHrX95PI1fKJy3VARVXt+tHguh1Kzusiytt2DPoKxBsABN4C PGbp9PR9NFBGQoA2DZLDQt2m5sCNYscLzAVKOypc+Qq+DqnOSsfz -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:29 2026 by rpki-client