This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/PW2NzBYjmCkIapXJGhgJ2UVgowI.roa File: PW2NzBYjmCkIapXJGhgJ2UVgowI.roa (raw, json) Hash identifier: TuCKjLKlCycMWQsEtdWPySAj7DLrLOimYljtej7f8Lo= Subject key identifier: 3D:6D:8D:CC:16:23:98:29:08:6A:95:C9:1A:18:09:D9:45:60:A3:02 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B791142260583EC97B8D468E7F93D37A8 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/PW2NzBYjmCkIapXJGhgJ2UVgowI.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42532 IP address blocks: 216.173.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:42:26:05:83:ec:97:b8:d4:68:e7:f9:3d:37:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d6d8dcc16239829086a95c91a1809d94560a302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:c0:3d:85:a2:59:72:6f:8e:d7:f7:87:fa: b4:15:1e:57:f6:1a:c8:e6:aa:6f:f2:1a:e4:54:e1: ba:36:77:1a:11:b9:54:aa:98:e9:2c:6d:e0:6c:59: 4d:5d:e7:ce:13:1b:0c:4c:50:0b:51:32:36:9d:25: 2e:0d:3f:8e:b6:6a:cb:d9:4e:f0:a9:ca:9b:94:06: 6c:3c:77:35:6c:fa:84:53:d9:08:50:62:ee:d8:48: 36:5e:02:e7:22:18:05:64:18:2f:6a:f1:fe:ce:91: 97:c9:00:7c:35:57:42:3f:0c:83:1f:ba:48:6a:23: a0:9b:c6:df:c2:24:dc:a0:5e:9f:cd:ec:67:bf:df: f9:86:bd:f6:d2:e6:c4:23:f7:0e:5f:f4:22:27:24: 4a:ff:a5:15:1a:a5:3c:40:50:af:22:4c:4c:0f:c1: 5c:d8:24:3f:fa:c0:05:64:b0:4e:bf:27:e6:6c:19: 55:f5:1a:f8:5d:39:76:9e:e2:d7:3d:07:6f:47:81: 18:ab:15:bc:47:2b:18:cf:61:86:80:99:16:09:9e: f9:66:ef:86:60:78:f7:fd:7a:48:c6:d4:54:06:0b: da:92:bb:b5:c6:87:4f:23:6d:a5:0d:91:db:c1:84: 5d:b7:c6:f3:6f:be:89:40:c8:43:f4:ac:16:4a:06: 61:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6D:8D:CC:16:23:98:29:08:6A:95:C9:1A:18:09:D9:45:60:A3:02 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/PW2NzBYjmCkIapXJGhgJ2UVgowI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.173.68.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:a2:cd:3c:d3:5c:35:e7:83:9d:fa:ce:08:c2:f7:80:5f:54: d8:13:40:47:3b:08:2e:a9:c8:a4:81:ec:39:8d:25:db:5f:14: 81:07:d7:30:c1:f0:bb:91:23:d9:5e:73:22:e0:df:1e:e2:87: 84:3e:b2:69:d5:5e:25:74:d1:54:6e:a0:7d:77:5c:31:e3:a3: 8e:b9:5d:7f:7f:e9:8c:b0:42:17:08:49:55:72:3a:81:62:a4: 49:ca:0c:1e:01:07:7d:ed:16:59:e2:b6:ad:d4:dd:40:41:80: 0e:54:20:bf:42:36:4d:74:68:6a:9b:75:8b:55:45:7c:d5:f2: c5:a6:9a:93:d0:a8:eb:67:44:9d:d8:2a:3b:a9:65:50:af:5a: 4c:12:1f:55:7c:31:48:43:0a:22:b3:d5:1b:a2:05:51:d9:5d: d5:df:03:a9:9c:51:64:68:1e:34:a1:54:81:ef:2c:22:ab:8c: 65:ea:80:c2:df:04:62:5c:a6:f4:4f:d3:41:fc:ee:47:6a:e8: 09:c6:d2:5f:9f:03:33:97:80:27:74:dc:c5:76:de:c4:48:25: f7:7b:ca:29:34:20:12:c3:b5:4e:c4:19:c5:60:bd:d3:6e:ca: 19:61:13:98:d9:3f:a7:cf:24:ff:6e:d4:84:b6:0b:15:2d:d4: 55:b2:2a:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUImBYPsl7jUaOf5PTeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDZkOGRjYzE2MjM5ODI5MDg2YTk1YzkxYTE4MDlkOTQ1NjBhMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqzAPYWiWXJvjtf3h/q0FR5X9hrI 5qpv8hrkVOG6NncaEblUqpjpLG3gbFlNXefOExsMTFALUTI2nSUuDT+OtmrL2U7w qcqblAZsPHc1bPqEU9kIUGLu2Eg2XgLnIhgFZBgvavH+zpGXyQB8NVdCPwyDH7pI aiOgm8bfwiTcoF6fzexnv9/5hr320ubEI/cOX/QiJyRK/6UVGqU8QFCvIkxMD8Fc 2CQ/+sAFZLBOvyfmbBlV9Rr4XTl2nuLXPQdvR4EYqxW8RysYz2GGgJkWCZ75Zu+G YHj3/XpIxtRUBgvakru1xodPI22lDZHbwYRdt8bzb76JQMhD9KwWSgZhiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD1tjcwWI5gpCGqVyRoYCdlFYKMCMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvUFcyTnpCWWptQ2tJYXBYSkdoZ0oyVVZnb3dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2K1EMA0G CSqGSIb3DQEBCwUAA4IBAQBKos0801w154Od+s4IwveAX1TYE0BHOwguqcikgew5 jSXbXxSBB9cwwfC7kSPZXnMi4N8e4oeEPrJp1V4ldNFUbqB9d1wx46OOuV1/f+mM sEIXCElVcjqBYqRJygweAQd97RZZ4rat1N1AQYAOVCC/QjZNdGhqm3WLVUV81fLF ppqT0KjrZ0Sd2Co7qWVQr1pMEh9VfDFIQwois9UbogVR2V3V3wOpnFFkaB40oVSB 7ywiq4xl6oDC3wRiXKb0T9NB/O5HaugJxtJfnwMzl4AndNzFdt7ESCX3e8opNCAS w7VOxBnFYL3TbsoZYROY2T+nzyT/btSEtgsVLdRVsioj -----END CERTIFICATE-----Generated at Fri Jan 2 02:39:54 2026 by rpki-client