This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/X-WCNfMWNcq-6apkcEwrlCz2H6w.roa File: X-WCNfMWNcq-6apkcEwrlCz2H6w.roa (raw, json) Hash identifier: 9W7kKyBv17OAGuHHDxkuQRF6ygflvkIjCWC8k9Ftf30= Subject key identifier: 5F:E5:82:35:F3:16:35:CA:BE:E9:AA:64:70:4C:2B:94:2C:F6:1F:AC Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B361B1F82D04448D9B9861CA56E40A6 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/X-WCNfMWNcq-6apkcEwrlCz2H6w.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213999 IP address blocks: 194.61.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1b:1f:82:d0:44:48:d9:b9:86:1c:a5:6e:40:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fe58235f31635cabee9aa64704c2b942cf61fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:d8:26:bf:e6:7d:60:fb:ba:4c:3a:0f:2a: 45:bc:3e:88:1c:ef:ef:fe:d0:be:2c:47:67:36:02: ca:da:12:d3:92:be:ce:6f:a6:ae:a9:d7:59:ce:e6: 3e:47:21:e9:cc:e3:53:a3:b2:5d:06:ab:d5:87:5c: 09:e0:c6:da:34:ad:a4:da:7f:eb:8d:9f:52:91:7c: 4a:55:53:ea:20:cb:b2:fd:39:01:c3:02:8b:75:c3: 41:2f:af:a0:2a:86:7c:f4:b1:8d:17:2f:1c:07:8a: c6:14:7d:20:86:1d:80:bd:33:61:6d:53:7b:47:17: 53:ea:22:66:b5:aa:25:a5:c9:89:b2:ca:85:79:22: 88:7d:29:a3:29:e2:7e:e3:d0:e9:a5:61:71:75:1f: 16:4a:9c:52:83:fb:cc:2e:d4:30:a5:13:3a:50:72: 9f:58:ed:5d:38:97:57:c9:6e:39:46:8f:a2:4c:9e: 5e:6b:cb:e0:7c:bb:ca:d6:2a:78:48:28:09:eb:54: a2:42:91:fa:ca:b9:c9:9d:91:c7:91:d9:f3:96:45: 24:5f:6e:42:5e:3c:2f:67:37:ca:d9:01:4a:91:f4: 81:4a:1c:ee:97:1f:44:c7:1d:35:24:4f:2a:81:b8: 39:48:8a:8e:f1:14:dd:cc:a6:8b:9c:a3:60:1c:b1: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E5:82:35:F3:16:35:CA:BE:E9:AA:64:70:4C:2B:94:2C:F6:1F:AC X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/X-WCNfMWNcq-6apkcEwrlCz2H6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.9.0/24 Signature Algorithm: sha256WithRSAEncryption 69:f7:01:b1:c7:8b:df:0c:b3:df:4c:10:dc:3c:51:00:17:17: 84:d1:b7:f1:8e:e0:3b:6e:13:53:5a:bd:7d:ca:93:b5:8d:f1: db:5d:01:65:a0:e8:88:80:21:78:6f:47:e7:75:0f:03:b7:13: 8f:ca:83:2b:ef:09:fc:19:53:31:3f:12:47:d1:e1:73:77:f2: aa:4a:e9:ca:c0:38:1c:65:2a:66:69:88:7a:b8:33:d6:44:b8: 05:bf:77:48:21:3a:7a:e3:b2:46:6f:aa:39:28:af:f2:a4:89: 48:33:e9:64:75:ea:4b:a8:34:51:73:d9:92:52:19:c0:f6:c9: 36:09:23:7d:58:d7:19:d6:e7:53:d3:ad:78:f7:55:8c:cd:0d: d2:36:b9:65:6d:2c:7d:b1:b8:32:53:4f:8e:47:1c:e4:a5:af: 26:e4:51:3d:ed:72:03:00:e8:f4:f6:27:9e:30:66:4c:34:00: 08:cc:e5:5b:b8:f4:47:35:7e:90:36:14:a7:ff:99:61:ac:9d: ca:4d:9b:e2:8d:6c:e9:06:bb:b1:90:15:dc:1b:b7:25:3c:54: 78:27:3f:10:e8:b7:f5:39:71:8c:4f:92:88:2b:94:ce:71:bf: 0b:b5:3e:d8:73:33:0a:2a:4d:4c:87:81:88:1b:f4:b3:8b:ed: 63:8e:b1:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhsfgtBESNm5hhylbkCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmU1ODIzNWYzMTYzNWNhYmVlOWFhNjQ3MDRjMmI5NDJjZjYxZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPzYJr/mfWD7ukw6DypFvD6IHO/v /tC+LEdnNgLK2hLTkr7Ob6auqddZzuY+RyHpzONTo7JdBqvVh1wJ4MbaNK2k2n/r jZ9SkXxKVVPqIMuy/TkBwwKLdcNBL6+gKoZ89LGNFy8cB4rGFH0ghh2AvTNhbVN7 RxdT6iJmtaolpcmJssqFeSKIfSmjKeJ+49DppWFxdR8WSpxSg/vMLtQwpRM6UHKf WO1dOJdXyW45Ro+iTJ5ea8vgfLvK1ip4SCgJ61SiQpH6yrnJnZHHkdnzlkUkX25C XjwvZzfK2QFKkfSBShzulx9Exx01JE8qgbg5SIqO8RTdzKaLnKNgHLH7SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/lgjXzFjXKvumqZHBMK5Qs9h+sMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvWC1XQ05mTVdOY3EtNmFwa2NFd3JsQ3oySDZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj0JMA0G CSqGSIb3DQEBCwUAA4IBAQBp9wGxx4vfDLPfTBDcPFEAFxeE0bfxjuA7bhNTWr19 ypO1jfHbXQFloOiIgCF4b0fndQ8DtxOPyoMr7wn8GVMxPxJH0eFzd/KqSunKwDgc ZSpmaYh6uDPWRLgFv3dIITp647JGb6o5KK/ypIlIM+lkdepLqDRRc9mSUhnA9sk2 CSN9WNcZ1udT061491WMzQ3SNrllbSx9sbgyU0+ORxzkpa8m5FE97XIDAOj09iee MGZMNAAIzOVbuPRHNX6QNhSn/5lhrJ3KTZvijWzpBruxkBXcG7clPFR4Jz8Q6Lf1 OXGMT5KIK5TOcb8LtT7YczMKKk1Mh4GIG/Szi+1jjrFl -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:34 2026 by rpki-client