This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/wRtbNPKwzn29lLHL-XgfTc7v1-E.roa File: wRtbNPKwzn29lLHL-XgfTc7v1-E.roa (raw, json) Hash identifier: HKr7T3FnocuYvThL/hQV2CDARcO253MaFTxSFktB4b8= Subject key identifier: C1:1B:5B:34:F2:B0:CE:7D:BD:94:B1:CB:F9:78:1F:4D:CE:EF:D7:E1 Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f Certificate serial: 019B78355774258694F59D151A70295DF71E Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/wRtbNPKwzn29lLHL-XgfTc7v1-E.roa Signing time: Thu 01 Jan 2026 06:18:40 +0000 ROA not before: Thu 01 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206192 IP address blocks: 31.169.91.0/24 maxlen: 24 185.21.4.0/24 maxlen: 24 185.33.61.0/24 maxlen: 24 185.93.249.0/24 maxlen: 24 185.193.4.0/23 maxlen: 23 185.193.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:57:74:25:86:94:f5:9d:15:1a:70:29:5d:f7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c11b5b34f2b0ce7dbd94b1cbf9781f4dceefd7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:17:4f:6c:45:c2:2c:23:30:be:9f:8b:12:15: 69:14:8b:b2:9c:d5:2f:ce:4c:eb:7c:3b:76:41:a2: b4:29:42:05:df:46:87:0d:f5:de:a3:67:05:13:9c: c6:24:ae:9c:bf:9e:a2:20:1f:d1:50:78:c3:17:89: 21:96:85:a3:51:d1:e9:20:bf:fa:cf:54:20:98:74: 16:5f:7b:93:42:90:14:41:be:16:fe:73:58:5a:99: 4d:88:d8:10:1f:31:d3:91:e5:c5:69:03:ee:ed:ab: 93:f0:d6:7a:b3:c6:a9:c5:45:6e:c6:ab:2e:d3:1c: 13:44:ee:20:00:1b:b2:f5:12:c9:2c:bc:af:8f:18: c4:21:89:df:4f:25:5a:d8:f5:6f:70:30:2b:4a:52: aa:61:dc:01:9b:81:9f:d1:9f:fc:79:88:15:2a:37: ef:dc:ca:31:4b:30:5b:04:ba:a0:b6:e0:5e:4a:e6: 8b:6f:82:75:17:32:0b:78:1a:da:75:ac:24:46:e9: 48:ab:c1:aa:0b:39:48:ed:8a:98:54:00:e3:e3:4b: 15:54:b4:cb:9d:b3:2c:64:55:c8:41:44:57:fd:8c: 3f:07:04:20:b7:67:d4:ed:6f:10:41:a8:da:05:c4: 1a:1e:d4:f7:6a:66:97:06:c3:f4:0b:ee:22:30:60: e9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:5B:34:F2:B0:CE:7D:BD:94:B1:CB:F9:78:1F:4D:CE:EF:D7:E1 X509v3 Authority Key Identifier: keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/wRtbNPKwzn29lLHL-XgfTc7v1-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.91.0/24 185.21.4.0/24 185.33.61.0/24 185.93.249.0/24 185.193.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:26:b0:71:99:3e:e9:30:f6:ed:17:ee:18:06:92:72:4a:c0: 94:59:77:e4:25:09:40:4a:32:30:38:1e:74:8a:53:b5:4a:6d: a8:e4:fe:29:36:f5:ce:4c:c7:1e:83:e4:bf:b7:95:77:06:d0: 54:a7:e1:38:8e:1a:44:37:1f:f4:ac:f0:dd:49:80:85:c1:0e: ec:df:00:41:d5:d7:9f:e0:96:81:ed:2e:67:96:43:77:c1:85: 36:5a:38:4c:9d:62:36:b2:55:6c:0c:18:4f:99:08:35:0c:d1: 26:f6:cd:8e:ce:7f:be:4a:f4:37:a8:19:6f:86:e2:8d:5e:25: e8:aa:da:5c:e3:df:4c:40:2f:17:cd:8f:f4:16:25:61:11:b0: 05:f5:29:a0:10:0e:1a:d8:d3:dd:c8:c2:2d:2b:27:d7:71:1d: 6c:f5:24:73:2b:ad:ec:2c:2c:04:68:34:81:d5:26:68:e8:43: 7c:d4:6f:df:07:6d:21:1c:d7:51:ba:1f:61:51:d9:8c:4f:51: 2b:61:70:4c:e4:90:1e:86:4b:c8:db:6d:8c:21:ca:0a:03:53: f2:06:12:1c:a2:fc:04:d9:eb:a6:82:4d:42:76:f7:66:0f:26: 81:35:9c:29:8a:18:50:a3:6b:df:bb:4e:22:97:38:58:31:2f: 9d:b7:d6:bc -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4NVd0JYaU9Z0VGnApXfceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWQ5MDUzNzE3YTE2YTc2YzEwYWU4MzhmNTYyNTA1NWJl MDQ4MWYwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTFiNWIzNGYyYjBjZTdkYmQ5NGIxY2JmOTc4MWY0ZGNlZWZkN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxdPbEXCLCMwvp+LEhVpFIuynNUv zkzrfDt2QaK0KUIF30aHDfXeo2cFE5zGJK6cv56iIB/RUHjDF4khloWjUdHpIL/6 z1QgmHQWX3uTQpAUQb4W/nNYWplNiNgQHzHTkeXFaQPu7auT8NZ6s8apxUVuxqsu 0xwTRO4gABuy9RLJLLyvjxjEIYnfTyVa2PVvcDArSlKqYdwBm4Gf0Z/8eYgVKjfv 3MoxSzBbBLqgtuBeSuaLb4J1FzILeBradawkRulIq8GqCzlI7YqYVADj40sVVLTL nbMsZFXIQURX/Yw/BwQgt2fU7W8QQajaBcQaHtT3amaXBsP0C+4iMGDpXQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMEbWzTysM59vZSxy/l4H03O79fhMB8GA1UdIwQY MBaAFAedkFNxehanbBCug49WJQVb4EgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAt MjdkMDNlMzkzZmI3LzEvd1J0Yk5QS3d6bjI5bExITC1YZ2ZUYzd2MS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAtMjdkMDNlMzkzZmI3 LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAH6lbAwQA uRUEAwQAuSE9AwQAuV35AwQCucEEMA0GCSqGSIb3DQEBCwUAA4IBAQBcJrBxmT7p MPbtF+4YBpJySsCUWXfkJQlASjIwOB50ilO1Sm2o5P4pNvXOTMceg+S/t5V3BtBU p+E4jhpENx/0rPDdSYCFwQ7s3wBB1def4JaB7S5nlkN3wYU2WjhMnWI2slVsDBhP mQg1DNEm9s2Ozn++SvQ3qBlvhuKNXiXoqtpc499MQC8XzY/0FiVhEbAF9SmgEA4a 2NPdyMItKyfXcR1s9SRzK63sLCwEaDSB1SZo6EN81G/fB20hHNdRuh9hUdmMT1Er YXBM5JAehkvI222MIcoKA1PyBhIcovwE2eumgk1CdvdmDyaBNZwpihhQo2vfu04i lzhYMS+dt9a8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:44 2026 by rpki-client