This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/RrwlRSSdwln9HbzArcN9f7ThR9c.roa File: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (raw, json) Hash identifier: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I= Subject key identifier: 46:BC:25:45:24:9D:C2:59:FD:1D:BC:C0:AD:C3:7D:7F:B4:E1:47:D7 Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Certificate serial: 019B7C12BBB4D7D2322859B27AA16D34D3EE Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/RrwlRSSdwln9HbzArcN9f7ThR9c.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 193.9.30.0/23 maxlen: 23 2a0f:9a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bb:b4:d7:d2:32:28:59:b2:7a:a1:6d:34:d3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46bc2545249dc259fd1dbcc0adc37d7fb4e147d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:c3:e7:4c:ce:53:dd:db:45:c6:d4:b9:f2: a4:4f:8c:b6:7f:92:46:27:78:0e:60:4a:45:09:53: da:57:af:57:34:63:e2:f9:70:ea:24:ba:37:b4:fb: f6:81:91:c4:a6:4f:0e:ae:16:28:cd:7d:56:6a:0d: b1:96:8f:20:0e:b6:03:98:b2:e5:69:a4:26:84:34: 91:d4:75:8d:b3:2d:b4:ba:5a:59:ff:e0:5c:e1:15: 40:2c:5a:81:8e:d6:6c:39:59:b3:68:24:a6:37:2a: 4f:5b:52:c2:c6:5e:b8:f1:08:71:03:fd:91:e3:fa: a5:a1:4f:87:0e:68:aa:6c:ae:26:82:2e:cf:34:d0: a6:26:bf:a2:7d:68:b8:01:46:93:0a:cc:9c:23:f9: ad:0d:de:66:ca:d7:97:9e:d0:40:13:97:c1:53:0d: e3:c6:78:44:0e:4b:3c:0c:a4:21:b2:3a:f0:4c:70: 60:03:20:c2:41:d6:f7:b9:44:30:ca:79:ea:b2:d8: da:6f:61:b4:97:2f:51:e8:e7:f9:04:f8:64:f4:4f: 3a:69:67:08:f0:ac:75:87:c0:cb:fa:f1:f3:b9:e7: 69:e4:85:52:c0:de:02:c0:1b:7e:5a:3d:62:3e:8a: 86:63:08:28:e2:f3:58:4b:35:c6:c2:26:31:5d:65: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BC:25:45:24:9D:C2:59:FD:1D:BC:C0:AD:C3:7D:7F:B4:E1:47:D7 X509v3 Authority Key Identifier: keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/RrwlRSSdwln9HbzArcN9f7ThR9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.30.0/23 IPv6: 2a0f:9a80::/29 Signature Algorithm: sha256WithRSAEncryption 31:d1:e9:e0:0d:8a:29:60:7a:c2:1f:8e:e9:92:50:12:8c:6a: 81:fb:c4:a4:60:19:dd:12:b6:6f:a1:b2:d5:2a:99:e5:32:bb: d3:ae:13:34:d3:2d:51:79:28:fb:6c:f1:bc:24:4c:ac:9c:6d: 19:67:08:d5:9c:86:d1:eb:54:93:58:27:c2:68:73:62:4d:d0: 6b:74:e2:6e:45:c1:76:28:19:55:95:2e:ce:18:34:8e:2e:73: 6f:6e:31:cb:db:2d:f9:c2:98:d0:ec:97:e4:cf:c7:24:f6:fa: 53:77:31:13:ca:ac:69:16:5b:4d:4d:d5:c2:32:86:42:e4:e2: e7:0a:2d:a8:dd:cb:11:99:22:f6:e4:d4:3a:f4:a4:3e:12:ef: 41:b1:7c:4e:7a:81:fe:33:3d:b1:2f:4b:73:f0:08:d0:e2:96: fb:d2:a3:e1:a4:8a:12:57:e8:65:1f:b6:d1:d4:18:3b:b8:57: d8:9f:25:2f:1b:2d:57:e9:04:e6:17:dd:b2:aa:d7:f6:2a:7c: f9:13:54:ef:ff:32:c8:3d:c1:cb:68:6e:5f:20:30:61:bc:01: 6b:70:7a:4d:56:80:9f:c8:e1:72:54:6c:b1:d6:f5:c2:a4:14: d5:12:e3:7e:ae:35:2b:dd:9e:e2:df:6c:62:0c:40:d2:2c:c4: 6f:04:ac:cb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Eru019IyKFmyeqFtNNPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2 ZjYyZDYwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmJjMjU0NTI0OWRjMjU5ZmQxZGJjYzBhZGMzN2Q3ZmI0ZTE0N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIvD50zOU93bRcbUufKkT4y2f5JG J3gOYEpFCVPaV69XNGPi+XDqJLo3tPv2gZHEpk8OrhYozX1Wag2xlo8gDrYDmLLl aaQmhDSR1HWNsy20ulpZ/+Bc4RVALFqBjtZsOVmzaCSmNypPW1LCxl648QhxA/2R 4/qloU+HDmiqbK4mgi7PNNCmJr+ifWi4AUaTCsycI/mtDd5myteXntBAE5fBUw3j xnhEDks8DKQhsjrwTHBgAyDCQdb3uUQwynnqstjab2G0ly9R6Of5BPhk9E86aWcI 8Kx1h8DL+vHzuedp5IVSwN4CwBt+Wj1iPoqGYwgo4vNYSzXGwiYxXWXjDQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEa8JUUkncJZ/R28wK3DfX+04UfXMB8GA1UdIwQY MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct NDAyMjM4NjM4ZWEzLzEvUnJ3bFJTU2R3bG45SGJ6QXJjTjlmN1RoUjljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwQkeMA0E AgACMAcDBQMqD5qAMA0GCSqGSIb3DQEBCwUAA4IBAQAx0engDYopYHrCH47pklAS jGqB+8SkYBndErZvobLVKpnlMrvTrhM00y1ReSj7bPG8JEysnG0ZZwjVnIbR61ST WCfCaHNiTdBrdOJuRcF2KBlVlS7OGDSOLnNvbjHL2y35wpjQ7Jfkz8ck9vpTdzET yqxpFltNTdXCMoZC5OLnCi2o3csRmSL25NQ69KQ+Eu9BsXxOeoH+Mz2xL0tz8AjQ 4pb70qPhpIoSV+hlH7bR1Bg7uFfYnyUvGy1X6QTmF92yqtf2Knz5E1Tv/zLIPcHL aG5fIDBhvAFrcHpNVoCfyOFyVGyx1vXCpBTVEuN+rjUr3Z7i32xiDEDSLMRvBKzL -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:54 2026 by rpki-client