This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wajZXUOUOd0YLehxnlDn6XhTZuE.roa File: wajZXUOUOd0YLehxnlDn6XhTZuE.roa (raw, json) Hash identifier: blyJHDQS+Sz80Y54xPQ09aFzAOo4DqyZlWHLPiqIHOg= Subject key identifier: C1:A8:D9:5D:43:94:39:DD:18:2D:E8:71:9E:50:E7:E9:78:53:66:E1 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB8674CC8127C6AF9285529E09D373 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wajZXUOUOd0YLehxnlDn6XhTZuE.roa Signing time: Fri 02 Jan 2026 08:20:48 +0000 ROA not before: Fri 02 Jan 2026 08:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215314 IP address blocks: 176.53.172.0/24 maxlen: 24 176.53.173.0/24 maxlen: 24 176.53.174.0/24 maxlen: 24 176.53.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:86:74:cc:81:27:c6:af:92:85:52:9e:09:d3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1a8d95d439439dd182de8719e50e7e9785366e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d5:c7:b8:7d:5e:4b:62:52:91:5e:3e:8a:11: 70:6c:d1:c7:23:b2:d0:de:68:52:32:73:2c:1c:45: 65:aa:28:ea:49:77:91:04:6a:a8:bc:eb:b5:9c:09: b2:68:94:d4:97:8d:46:cc:bb:df:1e:f1:3b:12:88: ec:0b:d9:34:fa:01:96:66:a6:3c:a9:28:29:d2:01: b2:af:88:a8:f2:5a:93:c0:ab:51:2a:7f:a4:b0:b7: 26:d4:02:dc:ff:b8:dc:8e:4c:21:a1:1b:08:22:d0: 55:af:9c:50:4c:63:b7:c0:41:6f:80:fe:c7:de:98: d1:bf:43:b0:37:ff:c4:4a:15:af:bd:37:85:f2:99: 81:53:99:cd:a2:26:b6:80:39:bb:eb:35:90:8a:a3: 71:8c:b2:8a:e3:44:3c:19:28:36:4b:3d:18:10:f5: 52:62:5d:2d:8d:d3:44:f4:93:1c:cc:7e:e8:9e:24: 92:85:93:a5:0e:1f:39:e4:47:a0:34:3e:1d:c8:19: 1a:7b:84:73:fc:7d:5a:f4:8c:10:2a:28:f8:16:31: 45:9f:0e:d2:12:a0:cb:f2:0a:93:b2:b3:c9:6e:39: 01:56:56:4b:89:a4:95:7d:e7:74:6c:87:b4:e8:a5: ff:07:94:65:b9:ce:a5:d9:07:d9:01:56:68:d0:e1: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A8:D9:5D:43:94:39:DD:18:2D:E8:71:9E:50:E7:E9:78:53:66:E1 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wajZXUOUOd0YLehxnlDn6XhTZuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.172.0/22 Signature Algorithm: sha256WithRSAEncryption 12:fd:00:ad:60:3f:6a:7d:e0:9b:ee:e7:2e:cf:95:3a:a2:62: 8e:88:28:2a:38:87:52:bb:f8:a7:3d:8f:c5:ff:d8:73:c2:75: 39:0c:66:d7:62:09:e8:87:d6:3f:f6:5a:54:38:d5:77:37:ee: 7e:3a:8f:dd:85:61:d5:a1:9d:cd:69:2e:89:14:c6:fe:8d:07: de:b2:f2:37:9c:e5:55:6b:c9:76:d8:7b:83:30:2a:3e:29:46: df:8d:69:b0:c1:5f:91:28:a6:33:47:70:42:7a:1f:0f:5d:8f: f0:aa:37:c9:fa:bd:e8:7c:3f:6f:9a:72:27:a6:ba:32:40:c8: 28:5a:19:ab:d1:ad:d1:19:c7:f2:1b:23:88:b7:36:7c:fe:8a: a7:c6:ba:8d:c0:48:1d:f9:e8:df:d5:81:b1:42:a1:f9:3e:86: 9d:d8:1d:71:0e:26:c1:61:f7:19:58:4f:ce:8f:7e:3f:9f:bd: bb:ac:80:51:9e:1b:dd:ef:01:02:c6:c6:9a:25:02:43:88:82: c7:a4:db:b6:86:7c:f3:13:33:12:db:ab:d6:51:45:f6:0d:99: 27:16:81:99:5d:bf:85:78:b2:2e:80:9a:25:97:1c:29:f8:bd: 1a:7f:f6:38:01:6e:0e:b1:35:86:8f:cb:ea:8f:bc:df:2a:60: 41:4f:79:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4Z0zIEnxq+ShVKeCdNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWE4ZDk1ZDQzOTQzOWRkMTgyZGU4NzE5ZTUwZTdlOTc4NTM2NmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NXHuH1eS2JSkV4+ihFwbNHHI7LQ 3mhSMnMsHEVlqijqSXeRBGqovOu1nAmyaJTUl41GzLvfHvE7EojsC9k0+gGWZqY8 qSgp0gGyr4io8lqTwKtRKn+ksLcm1ALc/7jcjkwhoRsIItBVr5xQTGO3wEFvgP7H 3pjRv0OwN//EShWvvTeF8pmBU5nNoia2gDm76zWQiqNxjLKK40Q8GSg2Sz0YEPVS Yl0tjdNE9JMczH7oniSShZOlDh855EegND4dyBkae4Rz/H1a9IwQKij4FjFFnw7S EqDL8gqTsrPJbjkBVlZLiaSVfed0bIe06KX/B5Rluc6l2QfZAVZo0OGeWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMGo2V1DlDndGC3ocZ5Q5+l4U2bhMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvd2FqWlhVT1VPZDBZTGVoeG5sRG42WGhUWnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsDWsMA0G CSqGSIb3DQEBCwUAA4IBAQAS/QCtYD9qfeCb7ucuz5U6omKOiCgqOIdSu/inPY/F /9hzwnU5DGbXYgnoh9Y/9lpUONV3N+5+Oo/dhWHVoZ3NaS6JFMb+jQfesvI3nOVV a8l22HuDMCo+KUbfjWmwwV+RKKYzR3BCeh8PXY/wqjfJ+r3ofD9vmnInproyQMgo Whmr0a3RGcfyGyOItzZ8/oqnxrqNwEgd+ejf1YGxQqH5Poad2B1xDibBYfcZWE/O j34/n727rIBRnhvd7wECxsaaJQJDiILHpNu2hnzzEzMS26vWUUX2DZknFoGZXb+F eLIugJollxwp+L0af/Y4AW4OsTWGj8vqj7zfKmBBT3m+ -----END CERTIFICATE-----Generated at Tue Jan 20 00:00:01 2026 by rpki-client