This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/_WXcBi7_Uss_zB6-JI3C0tlc1v8.roa File: _WXcBi7_Uss_zB6-JI3C0tlc1v8.roa (raw, json) Hash identifier: gklQnpRqRjoyiXOSmndBSsFWXpomSf1nATe9QRhcl5I= Subject key identifier: FD:65:DC:06:2E:FF:52:CB:3F:CC:1E:BE:24:8D:C2:D2:D9:5C:D6:FF Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6 Certificate serial: 019B77590571DC6DB06B03BBEA28B48BD48E Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/_WXcBi7_Uss_zB6-JI3C0tlc1v8.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49835 IP address blocks: 167.160.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:05:71:dc:6d:b0:6b:03:bb:ea:28:b4:8b:d4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd65dc062eff52cb3fcc1ebe248dc2d2d95cd6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:5c:e0:4d:35:cb:48:0a:5f:cc:a4:8b:19: 9c:53:60:17:8b:24:f0:75:2c:9a:37:1e:16:73:19: c5:0a:85:3a:20:4d:ba:23:6b:8a:8f:18:6c:6f:5a: fc:46:8e:59:b0:6a:bf:d4:90:0f:4c:dd:cc:57:95: 17:9f:1f:cf:e4:80:11:5a:65:ac:7e:4f:73:b8:5a: c8:14:be:66:4b:59:fa:73:7e:3c:14:52:7f:c3:f5: f0:3a:2f:c7:bf:0c:35:a6:7e:9f:77:11:3b:37:07: 58:65:a5:fe:0f:6d:03:14:68:9b:cb:41:f7:21:59: 51:0f:03:c9:cd:68:11:9f:a8:80:2d:a5:b7:43:3d: 66:6a:8b:48:b4:7c:9f:12:3a:b7:df:cd:54:4d:af: db:cf:60:5c:eb:dd:a0:52:13:e0:70:5d:ee:f7:97: bd:65:e9:37:45:97:ab:ba:31:22:81:7f:74:3c:89: fa:a9:af:b4:9f:3c:b5:62:c0:6d:89:20:62:93:85: f4:36:ca:fe:4e:f0:5d:2b:0c:ca:93:f9:b9:a4:06: 11:dc:7c:d2:87:29:ab:d8:ec:24:5a:2b:08:94:ec: cc:52:67:57:00:cd:d1:86:30:7c:26:7a:e6:06:f8: 2a:1e:87:db:48:79:6f:19:11:ba:2f:bb:6d:f1:a3: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:65:DC:06:2E:FF:52:CB:3F:CC:1E:BE:24:8D:C2:D2:D9:5C:D6:FF X509v3 Authority Key Identifier: keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/_WXcBi7_Uss_zB6-JI3C0tlc1v8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.160.15.0/24 Signature Algorithm: sha256WithRSAEncryption 13:9b:17:96:0e:94:6e:36:fd:32:fc:4e:45:9e:32:ba:72:a3: 74:a5:eb:cd:ab:49:6f:47:a2:88:bb:83:95:ea:ce:02:00:44: 3e:da:42:85:05:a6:6d:30:26:9b:3a:bb:62:83:cb:f6:6a:a9: f6:31:95:bb:33:b3:7e:fa:64:45:64:70:47:bd:63:74:73:63: b1:af:6a:2b:fc:13:b3:ff:f9:7b:27:56:ce:f5:56:cc:06:40: b7:6e:20:91:e5:bf:5d:15:37:59:38:61:a4:19:dd:6e:bb:37: 68:3a:77:b8:ce:a7:ab:da:27:35:61:08:0f:b8:a8:a2:d6:ad: c3:93:73:9f:8c:10:33:b7:03:7b:42:e1:34:19:e1:61:16:05: 8f:6c:47:e8:0a:f6:c9:42:81:35:1e:a6:a9:6d:a6:ee:5d:a8: 0e:f4:5c:45:be:6c:1f:fb:2c:f9:b4:e3:66:f7:9d:3e:11:36: 8b:e5:ec:e0:f4:c2:8a:ec:17:86:6b:39:c2:0c:0f:4a:c6:0a: e4:28:f2:69:99:50:4a:94:7a:8d:00:9f:79:47:10:23:61:21: aa:9d:d7:5f:3e:51:5b:c0:f0:12:81:f6:4f:5a:ae:d0:39:b6: 18:2f:14:0a:0e:29:29:b3:0b:f0:0b:e4:f8:3e:01:cb:a0:01: 31:86:a6:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQVx3G2wawO76ii0i9SOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi MjBmYTYwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDY1ZGMwNjJlZmY1MmNiM2ZjYzFlYmUyNDhkYzJkMmQ5NWNkNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtFc4E01y0gKX8ykixmcU2AXiyTw dSyaNx4WcxnFCoU6IE26I2uKjxhsb1r8Ro5ZsGq/1JAPTN3MV5UXnx/P5IARWmWs fk9zuFrIFL5mS1n6c348FFJ/w/XwOi/Hvww1pn6fdxE7NwdYZaX+D20DFGiby0H3 IVlRDwPJzWgRn6iALaW3Qz1maotItHyfEjq3381UTa/bz2Bc692gUhPgcF3u95e9 Zek3RZerujEigX90PIn6qa+0nzy1YsBtiSBik4X0Nsr+TvBdKwzKk/m5pAYR3HzS hymr2OwkWisIlOzMUmdXAM3RhjB8JnrmBvgqHofbSHlvGRG6L7tt8aN7LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1l3AYu/1LLP8weviSNwtLZXNb/MB8GA1UdIwQY MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It MmRjMjZkYzRiYzExLzEvX1dYY0JpN19Vc3NfekI2LUpJM0MwdGxjMXY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp6APMA0G CSqGSIb3DQEBCwUAA4IBAQATmxeWDpRuNv0y/E5FnjK6cqN0pevNq0lvR6KIu4OV 6s4CAEQ+2kKFBaZtMCabOrtig8v2aqn2MZW7M7N++mRFZHBHvWN0c2Oxr2or/BOz //l7J1bO9VbMBkC3biCR5b9dFTdZOGGkGd1uuzdoOne4zqer2ic1YQgPuKii1q3D k3OfjBAztwN7QuE0GeFhFgWPbEfoCvbJQoE1HqapbabuXagO9FxFvmwf+yz5tONm 950+ETaL5ezg9MKK7BeGaznCDA9KxgrkKPJpmVBKlHqNAJ95RxAjYSGqnddfPlFb wPASgfZPWq7QObYYLxQKDikpswvwC+T4PgHLoAExhqaj -----END CERTIFICATE-----Generated at Tue Feb 10 01:02:04 2026 by rpki-client