This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/W_9CizajI-Jq4yu8EOHAH-58qn0.roa File: W_9CizajI-Jq4yu8EOHAH-58qn0.roa (raw, json) Hash identifier: ak8K9GcxXdSZ7IyX+XNEN4b3nMc5HWmOv+1OxaewRRQ= Subject key identifier: 5B:FF:42:8B:36:A3:23:E2:6A:E3:2B:BC:10:E1:C0:1F:EE:7C:AA:7D Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88 Certificate serial: 019B7B36F75553AC353CC1D9ADDD65E34CB3 Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/W_9CizajI-Jq4yu8EOHAH-58qn0.roa Signing time: Thu 01 Jan 2026 20:19:18 +0000 ROA not before: Thu 01 Jan 2026 20:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34572 IP address blocks: 83.173.64.0/19 maxlen: 19 83.173.64.0/21 maxlen: 21 83.173.72.0/21 maxlen: 21 83.173.80.0/21 maxlen: 21 83.173.88.0/21 maxlen: 24 83.173.96.0/21 maxlen: 21 83.173.112.0/22 maxlen: 24 83.173.115.0/24 maxlen: 24 83.173.116.0/24 maxlen: 24 185.170.151.0/24 maxlen: 24 2a02:6100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f7:55:53:ac:35:3c:c1:d9:ad:dd:65:e3:4c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88 Validity Not Before: Jan 1 20:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bff428b36a323e26ae32bbc10e1c01fee7caa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:96:c9:1b:2e:9e:9d:de:51:99:78:9a:2c:e9: 5c:f0:c3:14:46:52:2a:88:28:3b:a2:9c:c5:43:18: a2:5b:8d:f2:04:ef:83:2e:50:2f:f7:ed:38:f8:0f: f2:e0:c3:b0:b8:8b:ea:d8:f1:29:6f:a5:33:d1:85: fa:0c:48:26:b3:fe:ec:7a:d8:c4:d7:34:e4:4a:a3: 48:16:d2:7c:5e:7f:3c:63:d5:63:de:86:b5:23:4f: 78:46:0b:ec:43:84:93:b9:6b:bb:b0:86:d8:25:d8: 35:48:3d:15:f6:41:4e:05:30:a6:e7:05:56:d0:48: 15:f6:e6:8b:32:83:8b:a6:ca:8d:b2:b3:69:b1:e1: 41:a2:16:ef:8a:34:26:85:0d:64:36:41:4f:03:cd: 2a:22:57:f5:51:b8:36:96:5a:ab:2b:bf:31:65:67: 9d:09:e8:cd:06:ba:de:df:93:7d:29:23:78:ae:cb: 76:d5:21:51:a6:80:fc:95:35:b8:0e:fb:b6:c0:13: 77:06:c2:30:01:ae:31:d9:ff:e6:88:19:3a:ec:8c: 51:23:e1:b5:64:89:e7:6f:bb:cc:99:b6:b4:e2:74: 5d:62:c1:a2:97:4a:0e:e7:f5:61:92:0e:a9:50:9e: 0c:d6:33:29:5d:62:9c:67:9b:c8:8a:cd:a2:43:7b: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FF:42:8B:36:A3:23:E2:6A:E3:2B:BC:10:E1:C0:1F:EE:7C:AA:7D X509v3 Authority Key Identifier: keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/W_9CizajI-Jq4yu8EOHAH-58qn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.173.64.0-83.173.103.255 83.173.112.0-83.173.116.255 185.170.151.0/24 IPv6: 2a02:6100::/32 Signature Algorithm: sha256WithRSAEncryption 69:ca:31:c3:08:c0:2f:fa:49:b5:d9:ad:17:66:0d:8b:48:51: 12:f9:de:ce:84:83:6e:df:da:e2:90:25:7d:63:21:99:eb:f5: 93:fd:7e:e5:72:f2:f5:a2:1d:52:06:b6:66:07:a9:53:27:b2: b5:b1:a4:54:4a:62:e3:2a:bc:b4:5c:87:34:88:79:92:4c:cc: b0:e8:54:bb:43:e0:27:e2:b8:78:67:7e:ec:6e:52:d0:e9:4f: cd:51:cd:20:3e:49:07:42:6d:04:9e:a1:bd:97:ea:c6:98:e2: c9:2c:08:06:45:9f:fb:59:8f:4c:03:57:86:56:d6:59:e6:d1: 2a:3d:a3:b8:c6:44:a8:bc:37:da:9f:6d:b7:b1:24:4f:32:a6: 89:5e:9f:fd:f9:2c:20:d2:0e:19:e8:26:d1:00:f8:20:01:6e: 72:37:c6:38:ed:4d:79:61:6d:80:c5:c9:c1:af:f8:e4:af:f8: 5a:d6:d3:33:4d:db:4b:6f:8a:eb:09:d2:1e:7b:0e:16:bc:1c: 56:1e:24:bb:fa:7a:59:d5:65:32:79:98:57:fa:f0:6b:fe:92: 03:d7:ac:d1:2a:cf:4e:07:51:40:c9:d9:c1:80:67:d7:de:57: eb:fc:2b:f6:a9:15:69:01:f1:21:dd:3e:96:1b:98:c3:2d:19: 59:9e:96:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt7NvdVU6w1PMHZrd1l40yzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj NzRhODgwHhcNMjYwMTAxMjAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmZmNDI4YjM2YTMyM2UyNmFlMzJiYmMxMGUxYzAxZmVlN2NhYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pbJGy6end5RmXiaLOlc8MMURlIq iCg7opzFQxiiW43yBO+DLlAv9+04+A/y4MOwuIvq2PEpb6Uz0YX6DEgms/7setjE 1zTkSqNIFtJ8Xn88Y9Vj3oa1I094RgvsQ4STuWu7sIbYJdg1SD0V9kFOBTCm5wVW 0EgV9uaLMoOLpsqNsrNpseFBohbvijQmhQ1kNkFPA80qIlf1Ubg2llqrK78xZWed CejNBrre35N9KSN4rst21SFRpoD8lTW4Dvu2wBN3BsIwAa4x2f/miBk67IxRI+G1 ZInnb7vMmba04nRdYsGil0oO5/Vhkg6pUJ4M1jMpXWKcZ5vIis2iQ3sfgwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFFv/Qos2oyPiauMrvBDhwB/ufKp9MB8GA1UdIwQY MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt NDZhMGRmNzc0ZmUxLzEvV185Q2l6YWpJLUpxNHl1OEVPSEFILTU4cW4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiMAwDBAZTrUAD BANTrWAwDAMEBFOtcAMEAFOtdAMEALmqlzANBAIAAjAHAwUAKgJhADANBgkqhkiG 9w0BAQsFAAOCAQEAacoxwwjAL/pJtdmtF2YNi0hREvnezoSDbt/a4pAlfWMhmev1 k/1+5XLy9aIdUga2ZgepUyeytbGkVEpi4yq8tFyHNIh5kkzMsOhUu0PgJ+K4eGd+ 7G5S0OlPzVHNID5JB0JtBJ6hvZfqxpjiySwIBkWf+1mPTANXhlbWWebRKj2juMZE qLw32p9tt7EkTzKmiV6f/fksINIOGegm0QD4IAFucjfGOO1NeWFtgMXJwa/45K/4 WtbTM03bS2+K6wnSHnsOFrwcVh4ku/p6WdVlMnmYV/rwa/6SA9es0SrPTgdRQMnZ wYBn195X6/wr9qkVaQHxId0+lhuYwy0ZWZ6WNw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:34 2026 by rpki-client