This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/rw4pdFSTNcqR4HSLH99TYBGU5M8.roa File: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (raw, json) Hash identifier: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw= Subject key identifier: AF:0E:29:74:54:93:35:CA:91:E0:74:8B:1F:DF:53:60:11:94:E4:CF Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B783443D751C74603384F496987D3FB6B Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/rw4pdFSTNcqR4HSLH99TYBGU5M8.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211282 IP address blocks: 80.72.18.0/23 maxlen: 32 2a00:8740:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:43:d7:51:c7:46:03:38:4f:49:69:87:d3:fb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af0e2974549335ca91e0748b1fdf53601194e4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:4c:c9:4b:c6:0f:8a:f6:24:d9:f4:7d:3d: 60:9a:38:5d:4b:eb:e9:cd:13:72:ca:e7:eb:a1:ad: 0d:18:ac:76:e1:28:c3:22:78:ce:c0:d6:a0:a1:ef: 3b:1f:18:82:31:22:b9:90:20:4d:87:fe:7e:e2:5d: 80:72:bc:85:6f:af:34:81:7b:8e:65:1c:fd:00:01: 74:91:0b:45:1f:c3:21:44:d3:ec:85:16:ca:25:c9: e9:ae:eb:f3:e9:60:26:dc:fb:e7:96:75:25:c6:28: 4f:fd:ad:8c:40:18:a8:24:8d:1c:36:e8:97:9b:6f: 0e:d8:44:9d:71:03:96:70:7a:b0:de:2b:c6:8f:50: 8c:62:56:ac:f0:23:ee:9a:01:54:a9:82:48:0f:0e: bb:55:9d:1d:3a:aa:cd:b4:7d:af:5b:ef:93:a5:de: 5a:84:16:b1:39:07:8e:82:24:bf:a1:57:28:f7:59: 29:9d:04:ed:f8:c8:3c:d2:56:38:d1:dc:43:df:42: 62:c6:e5:06:58:e5:2a:97:72:82:14:dd:72:c5:b1: a3:95:4b:a7:4d:bd:0a:f7:22:91:69:a6:2a:32:31: 04:c8:53:d4:40:14:d5:ed:37:98:b7:b2:8d:36:26: e1:11:d4:96:10:d3:50:a0:5e:b0:e5:a2:02:d2:ad: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0E:29:74:54:93:35:CA:91:E0:74:8B:1F:DF:53:60:11:94:E4:CF X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/rw4pdFSTNcqR4HSLH99TYBGU5M8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.72.18.0/23 IPv6: 2a00:8740:600::/40 Signature Algorithm: sha256WithRSAEncryption 06:31:73:93:ad:04:e8:75:8e:a9:ba:6a:a2:c6:be:0b:1e:a1: 84:25:fe:e5:d8:c6:ab:43:5a:8a:46:11:e3:b8:59:da:d4:8d: f5:63:64:6c:76:33:e1:50:c8:fa:42:d7:b1:de:3b:21:51:8b: 5f:57:49:25:bf:c5:e0:4c:2d:15:50:7c:18:55:a7:aa:db:7b: 74:4b:a0:05:59:81:82:34:3c:5c:c2:d2:a8:20:ec:0a:90:42: 04:22:7f:85:28:68:f4:64:99:7a:f0:56:99:aa:18:9c:39:1e: 4c:66:61:7b:11:b4:16:78:f9:08:38:c0:06:8e:13:24:90:bc: ca:78:ba:ac:84:33:f1:bc:93:ea:9c:1e:1e:90:a6:99:2a:84: ab:ba:8a:b0:e7:71:1e:69:6d:fd:f5:ba:fc:b2:13:e3:7d:dc: e6:0e:12:90:c1:99:55:37:9c:84:75:88:de:42:18:6e:ee:fe: f6:2e:9f:45:5c:aa:52:25:4a:1a:03:86:73:94:f2:50:b3:29: 7b:17:f4:60:03:0f:a3:7a:ba:34:e2:a7:d9:7c:99:12:9b:3b: 45:2c:23:ab:68:3f:e2:f6:df:d1:94:fb:fc:5d:a0:cf:3d:de: b5:fa:74:2b:7f:29:af:e9:91:80:90:db:84:39:c7:5f:13:1d: 66:5e:9f:b2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4NEPXUcdGAzhPSWmH0/trMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjBlMjk3NDU0OTMzNWNhOTFlMDc0OGIxZmRmNTM2MDExOTRlNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNJMyUvGD4r2JNn0fT1gmjhdS+vp zRNyyufroa0NGKx24SjDInjOwNagoe87HxiCMSK5kCBNh/5+4l2AcryFb680gXuO ZRz9AAF0kQtFH8MhRNPshRbKJcnpruvz6WAm3PvnlnUlxihP/a2MQBioJI0cNuiX m28O2ESdcQOWcHqw3ivGj1CMYlas8CPumgFUqYJIDw67VZ0dOqrNtH2vW++Tpd5a hBaxOQeOgiS/oVco91kpnQTt+Mg80lY40dxD30JixuUGWOUql3KCFN1yxbGjlUun Tb0K9yKRaaYqMjEEyFPUQBTV7TeYt7KNNibhEdSWENNQoF6w5aIC0q3ZdwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFK8OKXRUkzXKkeB0ix/fU2ARlOTPMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvcnc0cGRGU1ROY3FSNEhTTEg5OVRZQkdVNU04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBUEgSMA4E AgACMAgDBgAqAIdABjANBgkqhkiG9w0BAQsFAAOCAQEABjFzk60E6HWOqbpqosa+ Cx6hhCX+5djGq0NaikYR47hZ2tSN9WNkbHYz4VDI+kLXsd47IVGLX1dJJb/F4Ewt FVB8GFWnqtt7dEugBVmBgjQ8XMLSqCDsCpBCBCJ/hSho9GSZevBWmaoYnDkeTGZh exG0Fnj5CDjABo4TJJC8yni6rIQz8byT6pweHpCmmSqEq7qKsOdxHmlt/fW6/LIT 433c5g4SkMGZVTechHWI3kIYbu7+9i6fRVyqUiVKGgOGc5TyULMpexf0YAMPo3q6 NOKn2XyZEps7RSwjq2g/4vbf0ZT7/F2gzz3etfp0K38pr+mRgJDbhDnHXxMdZl6f sg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:02:28 2026 by rpki-client