This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/iWpXIGhiwH7fwofoLu2xcq86kzE.roa File: iWpXIGhiwH7fwofoLu2xcq86kzE.roa (raw, json) Hash identifier: X0PfgdblFhAyZnopcIvEudnKhwK5PlO/KEXA8MHJFq8= Subject key identifier: 89:6A:57:20:68:62:C0:7E:DF:C2:87:E8:2E:ED:B1:72:AF:3A:93:31 Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c Certificate serial: 019C037F2603C93885B94499B0C4CAA52FDC Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/iWpXIGhiwH7fwofoLu2xcq86kzE.roa Signing time: Wed 28 Jan 2026 07:26:30 +0000 ROA not before: Wed 28 Jan 2026 07:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 378 IP address blocks: 132.66.0.0/15 maxlen: 24 132.66.0.0/16 maxlen: 24 132.67.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:7f:26:03:c9:38:85:b9:44:99:b0:c4:ca:a5:2f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c Validity Not Before: Jan 28 07:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=896a57206862c07edfc287e82eedb172af3a9331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:43:55:b1:10:c1:29:75:95:c7:3f:fb:12: 83:ec:09:7a:e2:8b:94:51:ac:04:32:c3:d8:02:aa: 3a:b0:bc:d9:86:dc:03:26:b8:2a:87:57:31:9b:f8: 44:e7:5c:81:5a:be:91:64:cf:67:e9:65:9a:a7:a1: 58:c3:b4:f6:ec:c0:05:05:69:c6:8f:8e:e6:04:0d: a0:bd:3c:0a:e2:6d:de:91:2f:29:83:66:28:44:46: 47:bf:2c:a4:7e:63:5e:cf:17:e4:ef:5e:82:64:21: 91:0f:ba:93:5a:2c:21:82:e5:0b:f8:9f:9d:db:c8: f3:5e:57:fe:33:10:b9:52:c5:4b:40:73:37:05:5d: 58:7f:75:9a:81:b1:4e:ed:0d:38:ff:28:38:8d:5e: 7a:73:42:e2:33:34:aa:f9:b5:36:68:18:76:34:52: fc:51:78:6d:b2:63:e1:85:5c:49:8d:98:23:a6:3b: 7a:29:11:5e:28:1d:24:6a:d2:d1:1c:04:8a:b1:90: 1c:bd:7b:79:0a:41:51:1f:be:e3:9d:00:58:f6:2b: f0:4f:f7:0b:42:4b:9b:c6:d9:1a:e8:51:58:91:25: 05:c3:1d:6f:54:43:4a:bf:06:dc:bb:72:03:79:01: 90:01:10:c8:be:27:7e:ed:16:97:f7:cf:17:8c:63: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6A:57:20:68:62:C0:7E:DF:C2:87:E8:2E:ED:B1:72:AF:3A:93:31 X509v3 Authority Key Identifier: keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/iWpXIGhiwH7fwofoLu2xcq86kzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.66.0.0/15 Signature Algorithm: sha256WithRSAEncryption 13:8c:49:23:21:6d:db:95:41:27:80:f8:f6:e8:e8:7a:02:01: 64:81:e5:c4:75:27:9d:7c:f4:3c:bd:7e:2c:08:24:7c:83:f1: 50:81:76:c7:da:1f:f5:0c:db:f5:cb:40:a0:70:22:00:e7:f3: 1d:87:9b:1a:e3:16:dd:6d:5c:18:1a:77:a0:74:1c:cc:09:e4: 27:a0:db:e2:59:e5:1d:53:19:fe:71:0c:08:e2:49:24:51:e2: 51:f6:84:88:79:b9:d3:38:94:ed:73:59:19:8a:79:c9:1a:61: 71:08:e3:1d:e9:e2:92:a2:8f:d9:f9:b6:b0:b9:99:f7:33:2d: b4:0a:fe:97:46:30:99:cb:b4:88:d7:d6:2b:5a:94:ee:d5:2c: b8:12:19:7b:ed:93:65:f0:ba:24:6b:72:82:ff:2f:59:95:c3: 8e:66:fe:9f:9e:94:57:ff:23:c9:0d:a8:58:2d:17:0a:b8:9f: ae:93:3e:a2:1e:24:b6:06:cd:a1:30:a7:62:df:1f:bb:01:6b: b1:67:f3:98:39:d9:78:6e:cf:7a:f3:a6:0f:13:cd:30:18:86: 48:ab:69:d4:e4:26:3d:74:e8:e4:44:6d:d8:38:4e:0e:f0:60: 21:ee:7b:91:9e:9e:4a:31:b1:49:65:e6:f2:41:29:61:c8:f1: 98:18:90:f5 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZwDfyYDyTiFuUSZsMTKpS/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMmNkY2I5Yzc2ZjVlMGNlMGMzODVkN2UwZWYxNTU3MmQx NWE1NGMwHhcNMjYwMTI4MDcyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTZhNTcyMDY4NjJjMDdlZGZjMjg3ZTgyZWVkYjE3MmFmM2E5MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDxDVbEQwSl1lcc/+xKD7Al64ouU UawEMsPYAqo6sLzZhtwDJrgqh1cxm/hE51yBWr6RZM9n6WWap6FYw7T27MAFBWnG j47mBA2gvTwK4m3ekS8pg2YoREZHvyykfmNezxfk716CZCGRD7qTWiwhguUL+J+d 28jzXlf+MxC5UsVLQHM3BV1Yf3WagbFO7Q04/yg4jV56c0LiMzSq+bU2aBh2NFL8 UXhtsmPhhVxJjZgjpjt6KRFeKB0katLRHASKsZAcvXt5CkFRH77jnQBY9ivwT/cL Qkubxtka6FFYkSUFwx1vVENKvwbcu3IDeQGQARDIvid+7RaX988XjGMwTwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFIlqVyBoYsB+38KH6C7tsXKvOpMxMB8GA1UdIwQY MBaAFB0s3LnHb14M4MOF1+DvFVctFaVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjY2NjYtYjNiNy00MjQ4LWFlNjUt NzYwZTRlZTRjNmIyLzEvaVdwWElHaGl3SDdmd29mb0x1MnhjcTg2a3pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNjY2NjYtYjNiNy00MjQ4LWFlNjUtNzYwZTRlZTRjNmIy LzEvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEIwDQYJ KoZIhvcNAQELBQADggEBABOMSSMhbduVQSeA+Pbo6HoCAWSB5cR1J5189Dy9fiwI JHyD8VCBdsfaH/UM2/XLQKBwIgDn8x2HmxrjFt1tXBgad6B0HMwJ5Ceg2+JZ5R1T Gf5xDAjiSSRR4lH2hIh5udM4lO1zWRmKeckaYXEI4x3p4pKij9n5trC5mfczLbQK /pdGMJnLtIjX1italO7VLLgSGXvtk2XwuiRrcoL/L1mVw45m/p+elFf/I8kNqFgt Fwq4n66TPqIeJLYGzaEwp2LfH7sBa7Fn85g52Xhuz3rzpg8TzTAYhkiradTkJj10 6OREbdg4Tg7wYCHue5GenkoxsUll5vJBKWHI8ZgYkPU= -----END CERTIFICATE-----Generated at Sat Feb 7 20:24:17 2026 by rpki-client