This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/W7tmbPH6U650gZzNKHbR-toq7BQ.roa File: W7tmbPH6U650gZzNKHbR-toq7BQ.roa (raw, json) Hash identifier: tw1ZN2qvTykH8EB1vhhcNBXz7/GQH/E5FHpwwFv2Or0= Subject key identifier: 5B:BB:66:6C:F1:FA:53:AE:74:81:9C:CD:28:76:D1:FA:DA:2A:EC:14 Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Certificate serial: 019B7E37C7AB978CE6C43CA61498F79A778F Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/W7tmbPH6U650gZzNKHbR-toq7BQ.roa Signing time: Fri 02 Jan 2026 10:19:03 +0000 ROA not before: Fri 02 Jan 2026 10:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 195.13.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c7:ab:97:8c:e6:c4:3c:a6:14:98:f7:9a:77:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Validity Not Before: Jan 2 10:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bbb666cf1fa53ae74819ccd2876d1fada2aec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bc:45:20:5b:36:2c:c8:b2:69:be:a1:ca:4b: 62:01:71:7d:0a:a8:15:85:4d:b4:52:0b:5f:d2:1b: 76:ce:35:a1:f8:98:4e:0b:27:63:cf:d0:71:4b:d7: 2f:28:e1:13:eb:47:e6:7e:6e:23:fa:fd:ac:e1:2b: 50:95:7f:b5:37:be:6f:9d:51:b0:2e:53:2c:03:a8: 19:e9:24:62:b1:1c:a3:4a:39:cd:48:6a:c4:b3:5b: 5c:e9:71:ee:f7:58:88:42:d6:cf:69:56:9f:55:55: ab:b9:1d:19:56:12:1a:70:be:c6:dc:69:a6:20:de: 8d:66:43:73:fe:57:d6:61:b2:d6:85:ec:d7:60:06: b3:30:f5:d9:04:cc:58:a8:a6:eb:db:aa:d3:3a:75: cb:38:00:29:1c:fe:1c:e4:25:22:f9:2f:81:35:c2: 25:08:54:16:25:2d:ef:6d:69:b3:5d:5e:b5:f2:92: 54:40:3f:cf:51:f4:e6:f4:21:cb:dd:67:43:55:d8: 5a:8e:ac:a3:cf:25:f4:f4:ee:e7:2b:5c:42:3e:be: 9f:af:64:9a:3d:4c:42:ac:0a:e6:5f:a9:61:65:75: da:34:3a:01:88:db:26:e9:d3:2f:ec:89:02:ac:24: b3:21:8c:23:1b:27:80:46:bf:a5:69:8f:4d:54:0a: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BB:66:6C:F1:FA:53:AE:74:81:9C:CD:28:76:D1:FA:DA:2A:EC:14 X509v3 Authority Key Identifier: keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/W7tmbPH6U650gZzNKHbR-toq7BQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.13.60.0/24 Signature Algorithm: sha256WithRSAEncryption 50:62:f6:cc:1a:62:8a:bc:5b:e6:5b:5b:59:7b:a9:37:74:9e: 38:34:3b:99:34:67:02:6e:38:ce:d0:a5:b1:aa:b0:4f:15:3e: 17:c1:df:c8:7b:0f:90:d5:88:cb:ca:67:51:37:fd:b1:fb:e6: 2a:63:a3:ee:72:81:8a:5a:0d:f2:d5:9e:83:8c:39:09:f4:62: c6:67:63:42:11:2b:59:a4:5e:eb:a6:3c:5b:97:bc:58:69:d3: 37:43:f8:28:3f:7b:cb:a0:eb:c0:32:6a:0d:b1:71:37:7b:71: 58:33:3a:81:14:af:49:19:1a:e7:d4:59:77:cd:e1:bc:4d:aa: 21:9f:a9:78:5f:86:ef:56:fb:72:60:08:b3:55:93:dc:6b:a0: bf:8a:4f:a6:bf:d4:d2:d9:31:7f:bf:63:2b:42:c1:b9:33:6f: 41:b7:57:7b:2a:a0:f9:ca:32:ec:f8:f1:ab:8b:a0:6b:a3:48: 5d:32:86:f7:26:1c:13:c2:a6:dd:b6:7b:8b:71:05:0d:ee:16: 9f:fc:f2:da:d0:d3:ed:b3:f3:e1:0f:33:86:7a:9d:65:f9:07: 8a:29:c0:30:94:c1:31:5f:54:0e:b4:44:92:67:40:fb:ab:5d: e5:64:02:47:43:a7:a2:67:41:67:3b:b4:64:61:3d:f2:9d:bc: 4b:d8:8c:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8erl4zmxDymFJj3mnePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4 MjRjMjgwHhcNMjYwMTAyMTAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmJiNjY2Y2YxZmE1M2FlNzQ4MTljY2QyODc2ZDFmYWRhMmFlYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bxFIFs2LMiyab6hyktiAXF9CqgV hU20Ugtf0ht2zjWh+JhOCydjz9BxS9cvKOET60fmfm4j+v2s4StQlX+1N75vnVGw LlMsA6gZ6SRisRyjSjnNSGrEs1tc6XHu91iIQtbPaVafVVWruR0ZVhIacL7G3Gmm IN6NZkNz/lfWYbLWhezXYAazMPXZBMxYqKbr26rTOnXLOAApHP4c5CUi+S+BNcIl CFQWJS3vbWmzXV618pJUQD/PUfTm9CHL3WdDVdhajqyjzyX09O7nK1xCPr6fr2Sa PUxCrArmX6lhZXXaNDoBiNsm6dMv7IkCrCSzIYwjGyeARr+laY9NVApjbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFu7Zmzx+lOudIGczSh20fraKuwUMB8GA1UdIwQY MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt YTc4MzQxMzA5OWQzLzEvVzd0bWJQSDZVNjUwZ1p6TktIYlItdG9xN0JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAww08MA0G CSqGSIb3DQEBCwUAA4IBAQBQYvbMGmKKvFvmW1tZe6k3dJ44NDuZNGcCbjjO0KWx qrBPFT4Xwd/Iew+Q1YjLymdRN/2x++YqY6PucoGKWg3y1Z6DjDkJ9GLGZ2NCEStZ pF7rpjxbl7xYadM3Q/goP3vLoOvAMmoNsXE3e3FYMzqBFK9JGRrn1Fl3zeG8Taoh n6l4X4bvVvtyYAizVZPca6C/ik+mv9TS2TF/v2MrQsG5M29Bt1d7KqD5yjLs+PGr i6Bro0hdMob3JhwTwqbdtnuLcQUN7haf/PLa0NPts/PhDzOGep1l+QeKKcAwlMEx X1QOtESSZ0D7q13lZAJHQ6eiZ0FnO7RkYT3ynbxL2Iwv -----END CERTIFICATE-----Generated at Sat Jan 3 03:24:46 2026 by rpki-client