This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wt5hpK1hdHBuLk0cfAA02HauErQ.roa File: wt5hpK1hdHBuLk0cfAA02HauErQ.roa (raw, json) Hash identifier: 3Djv1zBW2YbHT6XnfDN91qamBX7wD3k7KPTbZyDNEuU= Subject key identifier: C2:DE:61:A4:AD:61:74:70:6E:2E:4D:1C:7C:00:34:D8:76:AE:12:B4 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344F3D38417842A58E93C6BE9712B0 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wt5hpK1hdHBuLk0cfAA02HauErQ.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29518 IP address blocks: 193.235.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4f:3d:38:41:78:42:a5:8e:93:c6:be:97:12:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2de61a4ad6174706e2e4d1c7c0034d876ae12b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:e7:d2:c1:20:35:92:b0:4e:ef:af:78:61: b7:cf:b7:35:22:cc:a4:2c:68:ff:05:a5:be:9e:06: 90:86:fd:ef:17:29:93:de:64:c9:14:1d:80:b0:86: 87:9f:13:06:3d:e1:40:bc:ac:3f:91:7e:d9:d7:60: 29:1c:91:3e:2f:01:c4:f3:6c:c3:a1:b9:6f:df:a1: 52:92:52:ca:5a:ee:21:c0:8d:a8:2f:25:2a:e7:23: 13:91:66:93:f4:50:59:ea:d5:34:82:a0:ea:e2:89: c3:5c:3a:ab:27:92:28:fe:88:32:55:84:72:02:4f: 28:b6:4a:44:33:0a:c2:e4:63:dd:87:08:e9:aa:0c: 40:f1:b1:95:75:d7:93:3c:00:96:ea:ac:55:6e:93: 1f:ed:87:f0:2c:a3:13:54:ed:fb:2c:ab:a3:7f:9f: 27:86:d6:cc:4b:07:73:d2:96:ac:8f:b2:63:f5:e0: 00:57:9f:4f:1a:26:67:33:d0:81:ab:a9:3b:cc:df: c9:79:2b:0f:fa:41:88:50:cd:af:8b:42:50:42:73: 7e:52:23:5d:a5:e9:d9:72:f7:e3:34:88:02:b8:ad: 03:c4:b4:78:15:d5:2e:07:53:33:9a:ac:44:ab:13: 57:1a:38:78:3c:43:2c:59:29:cc:c4:e3:fb:b0:4c: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DE:61:A4:AD:61:74:70:6E:2E:4D:1C:7C:00:34:D8:76:AE:12:B4 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wt5hpK1hdHBuLk0cfAA02HauErQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.235.85.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:15:3a:0f:63:09:22:28:08:28:98:8e:62:a3:24:b6:60:12: 11:33:f3:35:d6:4f:ad:55:16:62:7e:e8:59:c5:04:84:3c:91: 18:a7:24:2b:4e:27:cd:7d:43:b4:a1:1b:fe:a5:54:e3:ef:a6: fa:bc:3c:33:69:ae:bd:ca:26:48:06:f2:79:bb:63:ec:0f:e8: ed:3c:89:e7:54:7a:9e:91:9f:1a:5a:05:96:a9:fb:95:14:14: 65:89:50:ce:39:30:0c:87:b8:a5:1b:92:39:67:cb:8d:5e:9c: d3:a1:53:b8:d2:8f:bc:6e:46:23:f9:14:65:7c:78:66:ab:c0: 3d:bb:4a:67:ff:8f:c6:32:f2:97:16:1d:b1:7e:73:9a:55:81: ab:ef:e0:81:cc:01:13:7c:0d:4a:4d:b6:f6:61:28:68:65:fa: c1:b5:74:bd:8f:cd:e4:40:0f:fd:b6:f1:fb:ba:b6:cd:a2:75: d8:db:a5:e0:1b:4d:76:13:44:d9:e9:47:04:d2:94:ba:16:b9: 77:aa:d5:bf:45:39:5c:cf:63:c0:00:3b:39:4d:e8:da:87:8d: f4:dd:c3:74:d4:69:70:ed:54:37:91:41:ce:74:d2:9d:52:cc: 11:14:3b:db:9c:2c:a4:a3:18:25:4d:57:fe:da:84:81:98:7e: 3a:ca:d9:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NE89OEF4QqWOk8a+lxKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmRlNjFhNGFkNjE3NDcwNmUyZTRkMWM3YzAwMzRkODc2YWUxMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliTn0sEgNZKwTu+veGG3z7c1Isyk LGj/BaW+ngaQhv3vFymT3mTJFB2AsIaHnxMGPeFAvKw/kX7Z12ApHJE+LwHE82zD oblv36FSklLKWu4hwI2oLyUq5yMTkWaT9FBZ6tU0gqDq4onDXDqrJ5Io/ogyVYRy Ak8otkpEMwrC5GPdhwjpqgxA8bGVddeTPACW6qxVbpMf7YfwLKMTVO37LKujf58n htbMSwdz0pasj7Jj9eAAV59PGiZnM9CBq6k7zN/JeSsP+kGIUM2vi0JQQnN+UiNd penZcvfjNIgCuK0DxLR4FdUuB1MzmqxEqxNXGjh4PEMsWSnMxOP7sExdhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLeYaStYXRwbi5NHHwANNh2rhK0MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvd3Q1aHBLMWhkSEJ1TGswY2ZBQTAySGF1RXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwetVMA0G CSqGSIb3DQEBCwUAA4IBAQCLFToPYwkiKAgomI5ioyS2YBIRM/M11k+tVRZifuhZ xQSEPJEYpyQrTifNfUO0oRv+pVTj76b6vDwzaa69yiZIBvJ5u2PsD+jtPInnVHqe kZ8aWgWWqfuVFBRliVDOOTAMh7ilG5I5Z8uNXpzToVO40o+8bkYj+RRlfHhmq8A9 u0pn/4/GMvKXFh2xfnOaVYGr7+CBzAETfA1KTbb2YShoZfrBtXS9j83kQA/9tvH7 urbNonXY26XgG012E0TZ6UcE0pS6Frl3qtW/RTlcz2PAADs5Tejah4303cN01Glw 7VQ3kUHOdNKdUswRFDvbnCykoxglTVf+2oSBmH46ytk5 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:26 2026 by rpki-client