This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/IWwnPa171sfGXqpY2mWfswCRM5U.roa File: IWwnPa171sfGXqpY2mWfswCRM5U.roa (raw, json) Hash identifier: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk= Subject key identifier: 21:6C:27:3D:AD:7B:D6:C7:C6:5E:AA:58:DA:65:9F:B3:00:91:33:95 Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92 Certificate serial: 019B7F8451A3EC5FDFA86E2059871D7E5BF0 Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/IWwnPa171sfGXqpY2mWfswCRM5U.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.36.241.0/24 maxlen: 24 193.36.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:51:a3:ec:5f:df:a8:6e:20:59:87:1d:7e:5b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92 Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=216c273dad7bd6c7c65eaa58da659fb300913395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:34:e5:4f:a5:25:9b:c1:97:34:78:ff:54: c1:04:b4:9f:1a:6b:e6:cd:d9:da:cc:6c:60:1e:f7: 25:52:c3:02:b4:24:1e:31:bd:1a:81:27:a4:e6:be: f5:76:ac:e0:e5:c6:90:0c:db:cd:6a:1d:7b:34:15: 51:a5:46:f2:a4:7d:a9:56:64:5a:41:fc:ef:42:55: f8:00:11:c7:d6:4f:20:13:b2:01:9d:ed:08:91:51: 4c:b5:c6:7d:42:ab:09:71:07:95:fe:39:ee:0d:68: 6b:3f:ef:0d:40:bb:b0:ef:2a:f4:3c:ca:d8:ce:26: 57:41:9f:86:dc:81:65:41:9d:40:b4:20:e7:a1:a6: 07:83:9e:f2:df:b2:ec:da:fc:09:58:08:15:24:fb: f7:90:05:ff:14:7d:71:9f:76:bf:45:5f:01:83:e9: 44:a4:0f:f3:9b:3a:b8:e9:46:f4:6a:83:e1:a1:6d: 43:89:a7:b1:da:a7:b6:0e:0c:ed:f4:4d:f7:ee:8b: 62:17:0d:20:c7:19:7e:20:13:b9:cf:77:4e:32:3e: 9c:03:66:7b:f8:39:da:c6:76:62:2a:5b:61:20:c9: 46:2b:61:06:ac:23:fb:b1:71:88:45:d1:23:45:09: 34:08:f0:31:cf:0b:20:21:e5:a1:17:ee:2f:68:80: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6C:27:3D:AD:7B:D6:C7:C6:5E:AA:58:DA:65:9F:B3:00:91:33:95 X509v3 Authority Key Identifier: keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/IWwnPa171sfGXqpY2mWfswCRM5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.241.0/24 193.36.254.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:24:6b:08:cf:4d:80:21:ac:a0:96:f9:2f:7b:e7:13:1e:3f: f8:c1:cf:33:e1:39:92:39:64:db:cf:94:1c:87:af:ed:a9:1c: 2d:44:c3:bc:0e:21:fd:ac:82:75:be:55:43:33:3c:55:94:a7: 5d:07:c0:ad:be:eb:16:43:59:42:82:01:b0:c9:35:18:f5:b3: 87:22:05:43:9a:32:b2:89:e8:f3:a5:a1:bb:60:1b:b9:25:1a: 92:f6:c8:0d:10:9c:97:97:0d:42:5e:21:44:b9:b5:02:ce:5e: d9:0f:c2:c3:8c:7d:1b:de:d5:36:7d:7a:4b:5e:04:fc:bc:b9: 2b:45:a0:55:07:64:bb:5a:88:b0:3e:4a:74:77:d8:07:2b:00: 13:52:fc:6e:22:1b:82:38:50:59:82:d0:00:c2:4b:5b:15:93: d4:6b:bf:da:8f:f4:84:a7:31:ac:b1:84:68:a0:5c:3a:82:13: 7a:40:e7:13:d0:93:cb:48:ac:a9:f2:30:cc:a6:2c:b0:7c:d6: 15:a8:dc:fe:cf:6a:2f:1b:06:1b:77:ef:56:1b:e6:6d:73:51: 57:a3:14:9b:e8:fa:a0:38:13:55:01:62:1a:58:11:09:52:c4: a4:95:fc:60:16:59:3a:81:8e:78:45:ea:5e:0b:50:62:3a:7d: ec:09:73:88 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hFGj7F/fqG4gWYcdflvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NTAwM2UyNGNlY2ZiZjhlOGMxNWZmNjM3ZGQxNWRiNGQ3 ZmFlOTIwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTZjMjczZGFkN2JkNmM3YzY1ZWFhNThkYTY1OWZiMzAwOTEzMzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyY05U+lJZvBlzR4/1TBBLSfGmvm zdnazGxgHvclUsMCtCQeMb0agSek5r71dqzg5caQDNvNah17NBVRpUbypH2pVmRa QfzvQlX4ABHH1k8gE7IBne0IkVFMtcZ9QqsJcQeV/jnuDWhrP+8NQLuw7yr0PMrY ziZXQZ+G3IFlQZ1AtCDnoaYHg57y37Ls2vwJWAgVJPv3kAX/FH1xn3a/RV8Bg+lE pA/zmzq46Ub0aoPhoW1Diaex2qe2Dgzt9E337otiFw0gxxl+IBO5z3dOMj6cA2Z7 +DnaxnZiKlthIMlGK2EGrCP7sXGIRdEjRQk0CPAxzwsgIeWhF+4vaICCnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCFsJz2te9bHxl6qWNpln7MAkTOVMB8GA1UdIwQY MBaAFNZQA+JM7Pv46MFf9jfdFdtNf66SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjIt YTIzNTFmNGU4OTE1LzEvSVd3blBhMTcxc2ZHWHFwWTJtV2Zzd0NSTTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjItYTIzNTFmNGU4OTE1 LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSTxAwQA wST+MA0GCSqGSIb3DQEBCwUAA4IBAQANJGsIz02AIayglvkve+cTHj/4wc8z4TmS OWTbz5Qch6/tqRwtRMO8DiH9rIJ1vlVDMzxVlKddB8CtvusWQ1lCggGwyTUY9bOH IgVDmjKyiejzpaG7YBu5JRqS9sgNEJyXlw1CXiFEubUCzl7ZD8LDjH0b3tU2fXpL XgT8vLkrRaBVB2S7WoiwPkp0d9gHKwATUvxuIhuCOFBZgtAAwktbFZPUa7/aj/SE pzGssYRooFw6ghN6QOcT0JPLSKyp8jDMpiywfNYVqNz+z2ovGwYbd+9WG+Ztc1FX oxSb6PqgOBNVAWIaWBEJUsSklfxgFlk6gY54RepeC1BiOn3sCXOI -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:03 2026 by rpki-client