This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/rW9bkfJBSEOwz8sE6L555jHnWXM.roa File: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (raw, json) Hash identifier: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE= Subject key identifier: AD:6F:5B:91:F2:41:48:43:B0:CF:CB:04:E8:BE:79:E6:31:E7:59:73 Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c Certificate serial: 019B7B368B72F0334A935368DD13FD2ECE09 Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/rW9bkfJBSEOwz8sE6L555jHnWXM.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45040 IP address blocks: 185.216.160.0/22 maxlen: 22 2a0b:b9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8b:72:f0:33:4a:93:53:68:dd:13:fd:2e:ce:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad6f5b91f2414843b0cfcb04e8be79e631e75973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:0d:ed:c5:95:38:66:f2:77:93:84:f1:bd: f2:df:67:74:fe:d8:a7:96:18:1f:4d:44:98:80:7d: 92:eb:82:c7:e6:be:6e:67:a4:97:fc:29:9e:aa:06: 97:98:da:66:1b:fe:9a:e2:f0:ce:1a:df:59:76:8f: 4c:27:77:01:c4:c1:9f:30:9c:64:9d:c3:fe:e4:2e: ce:af:54:38:93:93:bb:1c:a5:d7:28:c0:6e:e7:00: 95:22:a4:be:a5:00:ba:bd:87:f8:45:3e:ee:7d:d0: 49:14:40:9b:cd:e5:29:84:11:79:97:46:18:1c:78: 9d:de:a4:a6:92:ac:29:ce:d9:e4:07:ea:02:b2:c1: d5:df:37:fd:c9:6e:98:16:20:33:ad:82:85:8d:cb: 6c:0d:70:35:90:fd:1c:99:c9:69:10:cb:1b:d6:13: 82:ec:d7:3b:ff:e4:1b:70:db:17:f9:87:f1:2c:d4: a1:d1:e0:0e:d3:11:e7:f6:b7:85:08:bf:2f:64:f3: 46:22:4f:2f:8c:6c:ce:79:3c:bd:89:d7:44:07:cc: d5:84:b8:39:8f:2b:1a:99:2c:9c:5d:25:17:3d:2e: 12:eb:35:73:f4:5a:fc:2a:95:35:d1:e9:80:a9:08: a1:e6:9b:c3:7b:a6:8c:27:a4:1c:08:53:ec:86:8d: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6F:5B:91:F2:41:48:43:B0:CF:CB:04:E8:BE:79:E6:31:E7:59:73 X509v3 Authority Key Identifier: keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/rW9bkfJBSEOwz8sE6L555jHnWXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.160.0/22 IPv6: 2a0b:b9c0::/32 Signature Algorithm: sha256WithRSAEncryption 45:44:89:6e:7a:e6:bb:b4:bb:9b:2e:8a:87:4c:28:0b:a6:6a: fc:0b:e7:7d:75:c0:e2:f3:25:51:51:d3:f6:47:91:e6:2f:71: b3:11:13:45:ae:f3:d0:e0:96:17:39:c5:f4:0b:80:c3:51:4d: e3:c0:fc:f6:7f:2b:f6:4c:33:7a:c6:39:d3:db:db:c7:3d:87: 7a:55:0b:31:f7:ee:94:04:c6:b5:47:02:83:cb:d3:7d:ac:42: 94:22:2c:ba:dc:24:20:02:0b:95:47:1b:bb:0d:d6:90:2a:f1: 98:f6:40:0e:a5:88:15:a9:96:75:2b:16:f2:33:80:29:14:79: 1a:cc:37:06:28:ea:cd:e3:0b:c2:fc:1f:9a:ec:65:c7:99:eb: a8:7d:9c:1b:e1:57:42:45:90:66:54:6b:b7:39:f9:57:3b:ed: 3c:3e:41:8f:37:0b:94:06:3d:ce:e7:93:29:c1:8c:9d:19:f2: 06:21:99:22:8c:2f:86:88:b1:92:cf:01:ba:88:0a:d4:9f:3e: 9a:3b:7c:0a:64:b2:3a:96:9a:1b:bd:60:64:e2:eb:de:b5:6a: 23:93:bd:2d:97:0d:e9:d9:66:d7:4d:e5:36:33:c7:91:89:43: 57:3b:61:76:84:47:3c:00:59:7a:8d:f8:ba:2c:08:c8:68:75: fe:14:33:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Noty8DNKk1No3RP9Ls4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YmYzNTM3MTVhMzRkZGEyODYwNWZkY2Y3YjdhZTgwNmQz MTE1OWMwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDZmNWI5MWYyNDE0ODQzYjBjZmNiMDRlOGJlNzllNjMxZTc1OTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9IN7cWVOGbyd5OE8b3y32d0/tin lhgfTUSYgH2S64LH5r5uZ6SX/CmeqgaXmNpmG/6a4vDOGt9Zdo9MJ3cBxMGfMJxk ncP+5C7Or1Q4k5O7HKXXKMBu5wCVIqS+pQC6vYf4RT7ufdBJFECbzeUphBF5l0YY HHid3qSmkqwpztnkB+oCssHV3zf9yW6YFiAzrYKFjctsDXA1kP0cmclpEMsb1hOC 7Nc7/+QbcNsX+YfxLNSh0eAO0xHn9reFCL8vZPNGIk8vjGzOeTy9iddEB8zVhLg5 jysamSycXSUXPS4S6zVz9Fr8KpU10emAqQih5pvDe6aMJ6QcCFPsho1svwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK1vW5HyQUhDsM/LBOi+eeYx51lzMB8GA1UdIwQY MBaAFGe/NTcVo03aKGBf3Pe3roBtMRWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYt NjlkODA5MmI1NGUxLzEvclc5YmtmSkJTRU93ejhzRTZMNTU1akhuV1hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYtNjlkODA5MmI1NGUx LzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudigMA0E AgACMAcDBQAqC7nAMA0GCSqGSIb3DQEBCwUAA4IBAQBFRIlueua7tLubLoqHTCgL pmr8C+d9dcDi8yVRUdP2R5HmL3GzERNFrvPQ4JYXOcX0C4DDUU3jwPz2fyv2TDN6 xjnT29vHPYd6VQsx9+6UBMa1RwKDy9N9rEKUIiy63CQgAguVRxu7DdaQKvGY9kAO pYgVqZZ1KxbyM4ApFHkazDcGKOrN4wvC/B+a7GXHmeuofZwb4VdCRZBmVGu3OflX O+08PkGPNwuUBj3O55MpwYydGfIGIZkijC+GiLGSzwG6iArUnz6aO3wKZLI6lpob vWBk4uvetWojk70tlw3p2WbXTeU2M8eRiUNXO2F2hEc8AFl6jfi6LAjIaHX+FDM5 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:21 2026 by rpki-client