This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/pWmm-znJ9h3QY4KDibvQqttBHk8.roa File: pWmm-znJ9h3QY4KDibvQqttBHk8.roa (raw, json) Hash identifier: +zU8e4lmjNY/s6v0j6Eqt+nFntwM2ddZGrZrcJphjHk= Subject key identifier: A5:69:A6:FB:39:C9:F6:1D:D0:63:82:83:89:BB:D0:AA:DB:41:1E:4F Certificate issuer: /CN=ea93edfc2aa748e4981050ec06e3a66920265e17 Certificate serial: 019B7759209BB97ABA82230E4DC1011D7628 Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/pWmm-znJ9h3QY4KDibvQqttBHk8.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 132.72.0.0/16 maxlen: 16 132.73.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:20:9b:b9:7a:ba:82:23:0e:4d:c1:01:1d:76:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a569a6fb39c9f61dd063828389bbd0aadb411e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:d6:9c:43:7d:69:fa:7e:0b:13:c2:8a:ed: 01:37:27:0b:b6:97:ca:cb:e8:d8:bf:66:d7:80:4b: 3c:7d:73:42:54:12:24:f7:46:1f:f5:00:d7:69:c1: 8a:1c:0e:b2:0d:93:2d:e5:9f:93:2a:7f:43:4a:7c: 5a:42:da:f3:ed:98:4b:eb:fb:f2:3f:73:c2:dd:f3: e7:d4:09:5f:97:16:28:de:87:34:b7:f1:eb:2d:93: 54:a7:65:95:7b:45:42:8c:85:61:fb:d9:76:65:77: 05:e0:16:19:ac:13:0c:6d:ca:91:94:c8:ba:74:48: 28:6b:3a:b2:77:7c:12:97:71:85:a1:02:b2:d9:c3: a3:ad:4d:ab:7c:62:ad:d3:96:bf:79:96:5e:49:7b: f5:62:d5:09:76:62:84:30:82:ad:f3:bb:1c:a7:ba: 9e:f8:3a:d1:34:a0:64:71:c3:8c:fc:24:3b:d7:0d: 3e:dc:b9:5c:88:f1:da:2f:96:e8:37:38:d0:0e:c5: 5a:60:8e:9d:b5:37:76:40:b9:10:4d:29:ee:60:d1: b6:ca:a0:57:c9:ea:1f:e3:36:f0:db:d7:55:4d:a6: 19:ac:92:5b:6c:f1:c9:45:15:9e:9c:ee:29:21:bb: a9:a2:a8:39:a9:4e:3c:1c:24:4a:19:7a:1d:92:93: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:69:A6:FB:39:C9:F6:1D:D0:63:82:83:89:BB:D0:AA:DB:41:1E:4F X509v3 Authority Key Identifier: keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/pWmm-znJ9h3QY4KDibvQqttBHk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.72.0.0/15 Signature Algorithm: sha256WithRSAEncryption c7:54:a5:08:af:4b:e7:8e:c5:fc:75:b8:9f:2a:2a:7d:17:53: 9e:2b:82:35:7a:d0:52:f1:46:8b:f0:a9:85:ba:34:49:4c:04: a8:30:ee:bd:79:87:bc:9f:de:56:19:98:c6:10:36:30:77:b9: 35:9b:00:d2:8b:50:d7:49:b0:8a:9f:96:6b:d3:fb:eb:95:c2: 73:c5:f8:38:45:df:95:66:64:c8:8b:c4:9b:06:ae:d2:3d:10: 54:e4:81:1d:45:be:a4:9b:21:1a:9d:6d:50:23:0e:cb:e7:16: d9:26:0b:05:4a:a0:60:6a:1f:a1:3c:79:56:3b:f7:ba:58:9d: 2c:81:99:7c:34:b6:4c:ef:1d:2a:dd:15:75:2b:bc:b7:18:23: 28:a9:b8:fa:5c:d7:5e:f6:57:c4:4e:e0:7a:ca:db:1c:12:20: d4:91:0d:21:89:6c:49:3a:ac:57:f5:43:93:cd:8e:92:89:1b: 56:5b:15:6b:b2:b2:97:c4:6d:68:d6:27:d9:ea:61:84:9b:2c: ee:f4:51:ee:63:4f:bd:14:86:77:a2:1e:8d:f2:ba:9a:74:54: a6:a8:4a:6d:4a:a7:6f:73:55:bb:87:a9:c4:38:0a:b4:0c:48: a5:6d:eb:a1:b1:c6:d8:80:64:c2:5b:01:4d:07:29:15:cb:80: d8:fd:06:a5 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WSCbuXq6giMOTcEBHXYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOTNlZGZjMmFhNzQ4ZTQ5ODEwNTBlYzA2ZTNhNjY5MjAy NjVlMTcwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTY5YTZmYjM5YzlmNjFkZDA2MzgyODM4OWJiZDBhYWRiNDExZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPDWnEN9afp+CxPCiu0BNycLtpfK y+jYv2bXgEs8fXNCVBIk90Yf9QDXacGKHA6yDZMt5Z+TKn9DSnxaQtrz7ZhL6/vy P3PC3fPn1AlflxYo3oc0t/HrLZNUp2WVe0VCjIVh+9l2ZXcF4BYZrBMMbcqRlMi6 dEgoazqyd3wSl3GFoQKy2cOjrU2rfGKt05a/eZZeSXv1YtUJdmKEMIKt87scp7qe +DrRNKBkccOM/CQ71w0+3LlciPHaL5boNzjQDsVaYI6dtTd2QLkQTSnuYNG2yqBX yeof4zbw29dVTaYZrJJbbPHJRRWenO4pIbupoqg5qU48HCRKGXodkpP1zQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFKVppvs5yfYd0GOCg4m70KrbQR5PMB8GA1UdIwQY MBaAFOqT7fwqp0jkmBBQ7AbjpmkgJl4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBQdF9DcW5TT1NZRUZEc0J1T21hU0FtWGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wZmQ1ZjQtNTZjMC00OGJhLWIwMmIt ZDEzOGE5YzRlNDNmLzEvcFdtbS16bko5aDNRWTRLRGlidlFxdHRCSGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8wZmQ1ZjQtNTZjMC00OGJhLWIwMmItZDEzOGE5YzRlNDNm LzEvNnBQdF9DcW5TT1NZRUZEc0J1T21hU0FtWGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEgwDQYJ KoZIhvcNAQELBQADggEBAMdUpQivS+eOxfx1uJ8qKn0XU54rgjV60FLxRovwqYW6 NElMBKgw7r15h7yf3lYZmMYQNjB3uTWbANKLUNdJsIqflmvT++uVwnPF+DhF35Vm ZMiLxJsGrtI9EFTkgR1FvqSbIRqdbVAjDsvnFtkmCwVKoGBqH6E8eVY797pYnSyB mXw0tkzvHSrdFXUrvLcYIyipuPpc1172V8RO4HrK2xwSINSRDSGJbEk6rFf1Q5PN jpKJG1ZbFWuyspfEbWjWJ9nqYYSbLO70Ue5jT70UhneiHo3yupp0VKaoSm1Kp29z VbuHqcQ4CrQMSKVt66GxxtiAZMJbAU0HKRXLgNj9BqU= -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:41 2026 by rpki-client