This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/_wpzw66VKEMW8FxG_VKEr14dETY.roa File: _wpzw66VKEMW8FxG_VKEr14dETY.roa (raw, json) Hash identifier: xHCTmmzEwVn1LUFzYGym1m5KtZlUsVsWJXRwPwEc3nU= Subject key identifier: FF:0A:73:C3:AE:95:28:43:16:F0:5C:46:FD:52:84:AF:5E:1D:11:36 Certificate issuer: /CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7 Certificate serial: 019B797E6C0D9B79B41B2DCF0B6D9BF5BDBB Authority key identifier: 9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/_wpzw66VKEMW8FxG_VKEr14dETY.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198134 IP address blocks: 193.161.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6c:0d:9b:79:b4:1b:2d:cf:0b:6d:9b:f5:bd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7 Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff0a73c3ae95284316f05c46fd5284af5e1d1136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:a8:3f:5e:c5:9d:f8:43:be:b0:1d:c2:05: 3d:5c:17:04:94:5e:7c:28:e2:83:5d:37:29:11:ab: 0c:2b:04:9e:8a:3c:b8:fb:af:28:7a:b7:2e:13:60: 14:18:67:b3:a4:7a:d9:5b:65:fc:f6:f2:fd:f9:91: 3c:6d:0c:cf:3a:88:e0:7b:a4:3e:4e:7c:df:4f:e2: cc:4f:95:4a:27:46:74:0b:a7:cc:d6:be:88:d1:28: 06:a0:57:9f:03:fd:09:af:38:bf:6f:46:5a:2e:75: 5d:8a:78:44:77:61:a0:1c:ca:b3:cf:27:0f:54:36: a0:6c:ed:5c:94:58:b5:d0:75:53:47:89:18:ca:a8: 66:1a:30:c2:58:d3:16:46:ea:08:4e:0b:eb:1d:4e: 22:91:ca:9b:9c:28:8e:9d:fb:2b:4f:79:73:1f:20: d4:94:1d:bd:aa:d7:f5:58:4d:75:ab:63:65:ab:c1: af:0c:f8:ed:09:1e:59:1b:d0:9e:f7:42:fa:8f:7c: e6:3a:2c:44:57:9c:0f:54:a2:31:13:67:dd:09:73: 61:06:c7:04:a7:0f:7b:c9:1e:d5:98:f5:0b:48:5c: d4:2a:88:01:81:be:51:c1:59:22:c8:5d:10:d6:37: 36:8b:2e:db:c9:2b:13:53:5f:c9:62:ee:d9:75:c3: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0A:73:C3:AE:95:28:43:16:F0:5C:46:FD:52:84:AF:5E:1D:11:36 X509v3 Authority Key Identifier: keyid:9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/_wpzw66VKEMW8FxG_VKEr14dETY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.193.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:bd:07:3f:5a:72:2b:cc:7f:80:f4:16:4e:b3:71:d9:37:7d: 88:6e:9c:57:fa:48:54:9c:5e:d4:6b:98:c0:11:f8:6f:7f:11: 56:b5:8f:86:5e:ab:95:b4:86:25:bd:5f:98:dd:ea:04:07:c6: 92:bb:99:6e:27:3d:9a:c7:5e:b9:52:b2:c3:84:3a:a1:08:bc: e9:92:ed:61:35:fd:30:c4:5a:a7:3a:94:d2:92:ca:44:7d:0e: 06:76:d2:8f:f8:de:bd:92:85:29:c2:33:e2:c7:8d:01:cb:9c: 0d:4d:99:1d:ca:1b:6d:80:4a:cc:7f:0a:88:2f:88:41:65:5a: e3:c9:e5:e8:b0:ba:9d:a9:e5:6d:f4:7e:4b:ac:4f:13:7c:69: 3f:4e:db:6a:17:94:6a:83:fc:f3:1d:3a:95:b1:ec:e8:49:67: fe:f8:c3:96:b3:40:bc:08:aa:8d:a1:76:8e:33:e9:f3:33:c7: 24:dd:bf:83:b1:d6:f2:98:ba:d0:25:17:c9:7c:23:a4:04:a0: d6:9b:fb:38:c4:92:1b:e4:f2:da:83:5f:a3:e4:6c:ca:a2:79: e1:fb:40:b7:3c:19:5f:7f:d5:9a:c0:f2:de:94:90:69:02:90: 30:df:88:82:f4:0e:da:75:d4:10:cb:64:43:2a:dc:1e:41:f3: 83:4b:89:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmwNm3m0Gy3PC22b9b27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmMwYjlmYjEzZjQzMTZlZDZjYTNmODZmZmM3MTg1YzA5 ZGIzZDcwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjBhNzNjM2FlOTUyODQzMTZmMDVjNDZmZDUyODRhZjVlMWQxMTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DWoP17FnfhDvrAdwgU9XBcElF58 KOKDXTcpEasMKwSeijy4+68oercuE2AUGGezpHrZW2X89vL9+ZE8bQzPOojge6Q+ TnzfT+LMT5VKJ0Z0C6fM1r6I0SgGoFefA/0Jrzi/b0ZaLnVdinhEd2GgHMqzzycP VDagbO1clFi10HVTR4kYyqhmGjDCWNMWRuoITgvrHU4ikcqbnCiOnfsrT3lzHyDU lB29qtf1WE11q2Nlq8GvDPjtCR5ZG9Ce90L6j3zmOixEV5wPVKIxE2fdCXNhBscE pw97yR7VmPULSFzUKogBgb5RwVkiyF0Q1jc2iy7bySsTU1/JYu7ZdcMCBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP8Kc8OulShDFvBcRv1ShK9eHRE2MB8GA1UdIwQY MBaAFJpsC5+xP0MW7Wyj+G/8cYXAnbPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW13TG43RV9ReGJ0YktQNGJfeHhoY0NkczljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MGEyMzktZDViYy00MmZlLTk1YTUt MWFjMDhlOGE4Y2I0LzEvX3dwenc2NlZLRU1XOEZ4R19WS0VyMTRkRVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81MGEyMzktZDViYy00MmZlLTk1YTUtMWFjMDhlOGE4Y2I0 LzEvbW13TG43RV9ReGJ0YktQNGJfeHhoY0NkczljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaHBMA0G CSqGSIb3DQEBCwUAA4IBAQCcvQc/WnIrzH+A9BZOs3HZN32IbpxX+khUnF7Ua5jA EfhvfxFWtY+GXquVtIYlvV+Y3eoEB8aSu5luJz2ax165UrLDhDqhCLzpku1hNf0w xFqnOpTSkspEfQ4GdtKP+N69koUpwjPix40By5wNTZkdyhttgErMfwqIL4hBZVrj yeXosLqdqeVt9H5LrE8TfGk/TttqF5Rqg/zzHTqVsezoSWf++MOWs0C8CKqNoXaO M+nzM8ck3b+DsdbymLrQJRfJfCOkBKDWm/s4xJIb5PLag1+j5GzKonnh+0C3PBlf f9WawPLelJBpApAw34iC9A7addQQy2RDKtweQfODS4ke -----END CERTIFICATE-----Generated at Sat Jan 10 06:29:35 2026 by rpki-client