This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/w0kB1zEMHJSO_FqxY-PIC1zhJaM.roa File: w0kB1zEMHJSO_FqxY-PIC1zhJaM.roa (raw, json) Hash identifier: Jo7kfxvYvl4YezCWXB8JTsC1u0CS/mCRNmsNeTUMvRs= Subject key identifier: C3:49:01:D7:31:0C:1C:94:8E:FC:5A:B1:63:E3:C8:0B:5C:E1:25:A3 Certificate issuer: /CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d Certificate serial: 019B7CEE17CF6C1A0DCDE16E073A21B76469 Authority key identifier: 96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/w0kB1zEMHJSO_FqxY-PIC1zhJaM.roa Signing time: Fri 02 Jan 2026 04:18:57 +0000 ROA not before: Fri 02 Jan 2026 04:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34895 IP address blocks: 83.138.64.0/18 maxlen: 18 185.171.136.0/22 maxlen: 22 2a01:4da0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:17:cf:6c:1a:0d:cd:e1:6e:07:3a:21:b7:64:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c34901d7310c1c948efc5ab163e3c80b5ce125a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:5f:aa:58:63:34:4f:f9:db:60:b1:cc:66: 29:b5:6c:ae:8e:49:34:bf:57:20:ce:c5:e8:e5:5a: ab:92:61:fa:d1:55:7d:ab:cd:e0:0e:9e:88:2c:be: d6:2f:b4:40:1d:58:e6:ba:f9:68:66:99:b4:71:b9: 13:8c:e9:1f:1a:ae:4f:e5:8f:03:dc:68:72:52:6c: 65:97:08:7f:91:43:1e:80:fb:37:c5:bd:82:9d:53: f9:95:df:ef:85:a1:58:54:ef:4e:11:a0:c4:0c:c1: 41:04:5b:a8:33:3b:97:f8:c5:da:f6:67:6f:27:50: 4d:19:1b:f3:2a:4c:ba:24:30:4d:cc:c1:92:47:63: 2d:a0:a8:e9:55:96:2b:40:95:ab:d3:10:21:5f:2a: 8b:4f:04:63:b9:78:75:5a:70:f6:f6:c2:24:3d:18: 12:5b:cf:2f:61:2f:93:1b:32:e0:76:8d:8a:16:4b: 4e:ca:90:8e:fb:56:82:de:3a:1e:90:5d:ba:ea:e3: ab:a8:0f:e5:e5:d0:6a:d8:5a:c1:43:34:38:48:1f: bf:bd:d8:c0:1d:bc:a3:cd:c7:97:0c:fa:c6:fe:31: ce:9d:1e:21:ca:64:67:57:07:52:4a:9d:1f:05:8c: ff:d8:c4:2f:3b:d1:4c:a9:ed:03:38:5a:4b:d7:de: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:49:01:D7:31:0C:1C:94:8E:FC:5A:B1:63:E3:C8:0B:5C:E1:25:A3 X509v3 Authority Key Identifier: keyid:96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/w0kB1zEMHJSO_FqxY-PIC1zhJaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.138.64.0/18 185.171.136.0/22 IPv6: 2a01:4da0::/48 Signature Algorithm: sha256WithRSAEncryption 7f:ac:92:e7:ef:38:5c:01:d3:c6:ed:4e:54:c7:ba:24:be:4b: 18:8e:86:c7:8c:0f:30:d5:c8:db:7e:1e:38:1f:c2:99:12:10: d6:f0:9e:69:7d:0f:a8:13:26:86:3e:a7:41:a5:77:99:b2:cb: 1c:48:6f:43:56:f2:6b:22:4d:61:a6:b8:9b:9a:0a:ca:de:79: 9c:98:1e:0b:bf:cd:1e:66:5d:f8:4e:3e:5f:ff:d5:34:16:bd: a8:0f:40:da:43:45:75:39:a1:1a:51:14:25:b9:69:6e:d9:72: 98:3e:af:bb:74:3a:d6:32:22:3f:d7:55:d3:35:4b:e3:18:b7: 94:65:17:05:ad:bf:36:85:da:a7:56:44:ee:ce:fe:ba:df:c0: de:63:ab:8c:70:b5:66:cc:fe:47:9e:59:74:6e:41:06:a9:fb: f6:a1:f5:95:ea:85:a9:96:51:f4:24:8c:5f:5d:bd:d3:18:a7: 9a:95:c3:d3:87:71:92:3f:72:4b:cd:6d:8e:91:6c:6a:57:31: 58:4c:60:28:4f:05:c3:46:7a:7e:db:04:32:ae:18:3f:ca:9e: 5d:56:a7:70:8f:a8:04:84:4c:c3:da:12:bf:e4:94:00:bd:c7: 7f:c6:df:6c:34:0b:18:fa:40:48:53:ef:8c:73:54:2c:37:18: 15:73:82:77 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87hfPbBoNzeFuBzoht2RpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MWNjZmE5ZDAyY2JmMDU5NjBlM2EyZjkwNzk4NTljY2Q2 ZWFkNmQwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzQ5MDFkNzMxMGMxYzk0OGVmYzVhYjE2M2UzYzgwYjVjZTEyNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+ZfqlhjNE/522CxzGYptWyujkk0 v1cgzsXo5VqrkmH60VV9q83gDp6ILL7WL7RAHVjmuvloZpm0cbkTjOkfGq5P5Y8D 3GhyUmxllwh/kUMegPs3xb2CnVP5ld/vhaFYVO9OEaDEDMFBBFuoMzuX+MXa9mdv J1BNGRvzKky6JDBNzMGSR2MtoKjpVZYrQJWr0xAhXyqLTwRjuXh1WnD29sIkPRgS W88vYS+TGzLgdo2KFktOypCO+1aC3joekF266uOrqA/l5dBq2FrBQzQ4SB+/vdjA HbyjzceXDPrG/jHOnR4hymRnVwdSSp0fBYz/2MQvO9FMqe0DOFpL197IMQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFMNJAdcxDByUjvxasWPjyAtc4SWjMB8GA1UdIwQY MBaAFJYcz6nQLL8Flg46L5B5hZzNbq1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81NTU3ZmMtNzY1My00MGE5LTk5YzMt N2VhOTkwNWMzZmJkLzEvdzBrQjF6RU1ISlNPX0ZxeFktUElDMXpoSmFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81NTU3ZmMtNzY1My00MGE5LTk5YzMtN2VhOTkwNWMzZmJk LzEvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQGU4pAAwQC uauIMA8EAgACMAkDBwAqAU2gAAAwDQYJKoZIhvcNAQELBQADggEBAH+skufvOFwB 08btTlTHuiS+SxiOhseMDzDVyNt+HjgfwpkSENbwnml9D6gTJoY+p0Gld5myyxxI b0NW8msiTWGmuJuaCsreeZyYHgu/zR5mXfhOPl//1TQWvagPQNpDRXU5oRpRFCW5 aW7Zcpg+r7t0OtYyIj/XVdM1S+MYt5RlFwWtvzaF2qdWRO7O/rrfwN5jq4xwtWbM /keeWXRuQQap+/ah9ZXqhamWUfQkjF9dvdMYp5qVw9OHcZI/ckvNbY6RbGpXMVhM YChPBcNGen7bBDKuGD/Knl1Wp3CPqASETMPaEr/klAC9x3/G32w0Cxj6QEhT74xz VCw3GBVzgnc= -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:26 2026 by rpki-client