This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RWpgTFKHkYqTBzF6UITSk5fWqDE.roa File: RWpgTFKHkYqTBzF6UITSk5fWqDE.roa (raw, json) Hash identifier: +88rw2K/oX/5A2Elasg8i2j+EVr9ixPn6PNExI+qbsw= Subject key identifier: 45:6A:60:4C:52:87:91:8A:93:07:31:7A:50:84:D2:93:97:D6:A8:31 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106B03A0566B93A33A59F76A85CFEC Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RWpgTFKHkYqTBzF6UITSk5fWqDE.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211804 IP address blocks: 188.132.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6b:03:a0:56:6b:93:a3:3a:59:f7:6a:85:cf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=456a604c5287918a9307317a5084d29397d6a831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:e3:94:4e:de:e2:ec:28:b1:69:87:d8:e6: 9c:94:0c:8c:f3:dc:79:e8:84:9a:a0:98:01:70:9d: e9:66:13:00:b1:92:f4:13:d8:0f:48:bc:48:be:3f: 91:c2:a1:15:93:e3:f4:e0:7d:2c:cf:89:d0:39:36: 89:cb:09:68:05:d9:09:1f:10:c3:f9:46:37:3e:f3: c5:0d:f1:f4:52:53:5e:a4:dd:ed:16:be:b7:80:f2: 99:52:0b:2d:fc:f4:34:5d:58:a2:b4:9d:c6:9c:c9: d7:4f:3d:45:0f:46:7a:88:20:c6:f5:79:4c:f6:11: 14:53:f4:4b:b0:88:2e:d2:8d:fe:af:19:c7:ec:12: 2c:e1:d7:62:e7:34:bb:8f:e9:f4:6b:a6:67:7a:da: 14:e6:f1:31:5c:f7:45:bf:75:ad:54:14:7b:c4:46: da:43:6a:bb:a8:47:6f:e1:f8:01:6a:02:69:ca:d6: db:12:a6:24:b3:79:f2:dc:5d:fe:01:22:aa:89:2d: 63:e7:05:6a:56:91:ff:29:79:c6:f2:f3:02:ac:43: 54:67:34:e3:f5:4b:c8:08:c7:0d:63:33:20:06:d7: 6e:85:05:9c:2b:e2:ca:d1:53:8a:19:fc:43:9a:94: 0f:8e:18:ce:a1:0e:14:c5:bf:de:71:33:09:39:1d: 77:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6A:60:4C:52:87:91:8A:93:07:31:7A:50:84:D2:93:97:D6:A8:31 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RWpgTFKHkYqTBzF6UITSk5fWqDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.153.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:ea:e4:c7:b5:b1:96:83:d0:bf:89:5b:b9:62:77:50:d5:ad: e3:06:ce:a6:8d:f2:32:09:e2:4b:0a:11:32:a3:0d:b0:99:d7: 4f:82:1a:b0:e1:0e:15:3a:42:27:45:d8:cd:72:d7:94:42:33: 69:0d:66:65:9c:5c:bb:b5:6f:e8:fd:3a:2d:fe:47:92:98:1f: e1:ee:5f:fd:c9:eb:c8:95:1a:ea:2a:84:05:d9:a0:07:24:4e: 36:b1:aa:e5:6f:63:da:44:bd:63:66:6e:69:0e:0a:38:4c:43: 16:b4:d7:c1:cf:cf:e3:7f:40:de:e2:68:79:55:c5:5d:78:f0: a8:c3:cb:4e:e7:2c:f9:9e:4f:9c:bd:cf:49:e9:cf:b5:89:74: 0d:72:46:76:c2:97:2b:ac:de:45:65:f1:c5:9a:cd:fc:fd:2c: 0c:fe:9a:16:1b:97:47:79:5e:eb:2c:5c:bf:43:56:3b:7e:f0: 50:85:2b:77:b9:b3:27:c0:4d:35:1e:15:b5:63:f3:de:87:35: ca:69:0c:ec:3e:f3:9a:27:c8:6f:7a:83:4a:c5:95:66:00:30: 7b:8f:fb:1b:6a:f8:0d:cb:71:81:32:0d:53:d9:07:88:60:7d: 5f:f6:2a:66:c2:43:e3:c0:1d:14:a3:ca:f1:68:b7:e0:99:e9: 53:6f:12:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGsDoFZrk6M6Wfdqhc/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTZhNjA0YzUyODc5MThhOTMwNzMxN2E1MDg0ZDI5Mzk3ZDZhODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/DjlE7e4uwosWmH2OaclAyM89x5 6ISaoJgBcJ3pZhMAsZL0E9gPSLxIvj+RwqEVk+P04H0sz4nQOTaJywloBdkJHxDD +UY3PvPFDfH0UlNepN3tFr63gPKZUgst/PQ0XViitJ3GnMnXTz1FD0Z6iCDG9XlM 9hEUU/RLsIgu0o3+rxnH7BIs4ddi5zS7j+n0a6ZnetoU5vExXPdFv3WtVBR7xEba Q2q7qEdv4fgBagJpytbbEqYks3ny3F3+ASKqiS1j5wVqVpH/KXnG8vMCrENUZzTj 9UvICMcNYzMgBtduhQWcK+LK0VOKGfxDmpQPjhjOoQ4Uxb/ecTMJOR13dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVqYExSh5GKkwcxelCE0pOX1qgxMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvUldwZ1RGS0hrWXFUQnpGNlVJVFNrNWZXcURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISZMA0G CSqGSIb3DQEBCwUAA4IBAQAs6uTHtbGWg9C/iVu5YndQ1a3jBs6mjfIyCeJLChEy ow2wmddPghqw4Q4VOkInRdjNcteUQjNpDWZlnFy7tW/o/Tot/keSmB/h7l/9yevI lRrqKoQF2aAHJE42sarlb2PaRL1jZm5pDgo4TEMWtNfBz8/jf0De4mh5VcVdePCo w8tO5yz5nk+cvc9J6c+1iXQNckZ2wpcrrN5FZfHFms38/SwM/poWG5dHeV7rLFy/ Q1Y7fvBQhSt3ubMnwE01HhW1Y/PehzXKaQzsPvOaJ8hveoNKxZVmADB7j/sbavgN y3GBMg1T2QeIYH1f9ipmwkPjwB0Uo8rxaLfgmelTbxJs -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:56 2026 by rpki-client