This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/_WqApLTSHnn-QALIm4js6GY_w-E.roa File: _WqApLTSHnn-QALIm4js6GY_w-E.roa (raw, json) Hash identifier: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54= Subject key identifier: FD:6A:80:A4:B4:D2:1E:79:FE:40:02:C8:9B:88:EC:E8:66:3F:C3:E1 Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e Certificate serial: 019B78A36FECD8D0198E28EA8FB1BAC66922 Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/_WqApLTSHnn-QALIm4js6GY_w-E.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.134.253.0/24 maxlen: 24 193.135.101.0/24 maxlen: 24 2a14:8980::/48 maxlen: 48 2a14:8981::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6f:ec:d8:d0:19:8e:28:ea:8f:b1:ba:c6:69:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd6a80a4b4d21e79fe4002c89b88ece8663fc3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:3d:99:cc:69:a4:e4:08:91:88:82:b9:e7: ef:99:49:59:a4:4e:f3:69:b7:3c:9f:45:61:8e:5a: 62:86:a5:cd:2b:04:d1:5c:f6:2c:d2:53:7d:a7:a5: c7:71:c3:96:96:cb:3f:f1:53:d1:46:be:ab:71:fb: fd:96:87:86:af:34:65:ac:1a:42:6d:e4:03:3a:e6: 32:b3:aa:2d:31:d4:58:c0:e7:2e:03:89:20:ba:11: df:6f:89:ac:25:f3:4f:61:28:d2:a1:d1:1a:d5:95: b2:30:64:09:db:08:c9:4f:03:90:b7:98:82:bb:f7: 85:13:d0:62:a7:75:78:47:a5:3c:25:32:f6:66:2b: 58:ee:a6:8e:a5:cf:e6:9a:ca:c5:ac:48:3d:22:a2: cb:ba:7f:e1:b9:f9:86:b8:d6:fe:d5:ad:90:90:94: 01:8e:32:1a:0a:14:01:01:d5:9f:d7:5d:ea:a0:b7: e2:3b:ba:ba:5c:25:41:3b:63:de:ff:a5:e2:d8:99: 9f:08:51:44:f3:fa:2b:a1:0e:f6:c1:fb:e2:ed:60: 90:2e:68:f6:91:a0:65:5e:28:2a:8b:f2:61:61:15: 12:ea:33:e4:bd:0c:9b:1a:6d:2b:15:81:20:18:f9: ca:9f:91:54:f0:21:86:d1:86:8f:08:45:76:3d:99: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6A:80:A4:B4:D2:1E:79:FE:40:02:C8:9B:88:EC:E8:66:3F:C3:E1 X509v3 Authority Key Identifier: keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/_WqApLTSHnn-QALIm4js6GY_w-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.253.0/24 193.135.101.0/24 IPv6: 2a14:8980::/48 2a14:8981::/48 Signature Algorithm: sha256WithRSAEncryption 6b:20:58:b3:6f:03:b9:f3:1d:81:55:8b:56:cc:75:ac:8f:5f: dd:c5:ef:d3:3b:25:8b:8e:86:6d:9e:4c:d4:49:08:78:58:c6: cd:50:da:47:7b:1b:ee:c2:26:96:cd:9a:ec:3d:25:db:b7:0d: f5:ed:96:b9:a7:b8:19:1a:2b:fa:ef:6a:73:4b:7d:9d:da:8d: a4:c2:dc:89:c4:34:5e:50:7c:d2:c9:49:08:a9:06:ce:4e:f4: 78:19:1c:d2:47:d8:f2:99:03:1d:e2:26:b0:6d:1b:66:b6:ad: 43:9a:61:72:d8:fb:03:2f:ac:95:cd:e3:b2:ee:e2:ed:f3:3d: d6:15:0e:ca:01:97:98:ad:db:d1:e8:d2:68:63:28:02:90:fb: c4:e7:47:97:e4:24:7c:b7:12:5b:ce:24:d6:1a:a9:2a:ac:c8: 99:c6:f2:77:4c:23:57:98:4d:26:ff:4b:03:a7:8a:e9:51:5e: 4a:b1:7c:a6:e1:26:ad:29:ce:74:61:e5:5e:34:bd:1d:6b:20: 06:11:37:be:42:d8:d6:7b:c5:70:c3:b3:af:40:17:83:8a:93: 7c:3f:72:a0:c8:11:6b:ce:38:2e:94:0c:9d:37:b5:56:8f:1b: 86:a6:14:33:84:41:fc:14:25:8b:7d:e1:d3:4f:76:b6:d1:da: 63:3a:e7:de -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt4o2/s2NAZjijqj7G6xmkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi ZTg2OGUwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDZhODBhNGI0ZDIxZTc5ZmU0MDAyYzg5Yjg4ZWNlODY2M2ZjM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YM9mcxppOQIkYiCuefvmUlZpE7z abc8n0VhjlpihqXNKwTRXPYs0lN9p6XHccOWlss/8VPRRr6rcfv9loeGrzRlrBpC beQDOuYys6otMdRYwOcuA4kguhHfb4msJfNPYSjSodEa1ZWyMGQJ2wjJTwOQt5iC u/eFE9Bip3V4R6U8JTL2ZitY7qaOpc/mmsrFrEg9IqLLun/hufmGuNb+1a2QkJQB jjIaChQBAdWf113qoLfiO7q6XCVBO2Pe/6Xi2JmfCFFE8/oroQ72wfvi7WCQLmj2 kaBlXigqi/JhYRUS6jPkvQybGm0rFYEgGPnKn5FU8CGG0YaPCEV2PZnY4QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFP1qgKS00h55/kACyJuI7OhmP8PhMB8GA1UdIwQY MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt NTNmNTc1MDRlZjM1LzEvX1dxQXBMVFNIbm4tUUFMSW00anM2R1lfdy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1 LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAwYb9AwQA wYdlMBgEAgACMBIDBwAqFImAAAADBwAqFImBAAAwDQYJKoZIhvcNAQELBQADggEB AGsgWLNvA7nzHYFVi1bMdayPX93F79M7JYuOhm2eTNRJCHhYxs1Q2kd7G+7CJpbN muw9Jdu3DfXtlrmnuBkaK/rvanNLfZ3ajaTC3InENF5QfNLJSQipBs5O9HgZHNJH 2PKZAx3iJrBtG2a2rUOaYXLY+wMvrJXN47Lu4u3zPdYVDsoBl5it29Ho0mhjKAKQ +8TnR5fkJHy3ElvOJNYaqSqsyJnG8ndMI1eYTSb/SwOniulRXkqxfKbhJq0pznRh 5V40vR1rIAYRN75C2NZ7xXDDs69AF4OKk3w/cqDIEWvOOC6UDJ03tVaPG4amFDOE QfwUJYt94dNPdrbR2mM6594= -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:33 2026 by rpki-client