This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/61mqPCCWhNbX67BIUF71mtqBCdI.roa File: 61mqPCCWhNbX67BIUF71mtqBCdI.roa (raw, json) Hash identifier: 0DCVdUX6gKmCd0/r1uVqZ3Z8KDhNYPwW1WvEER9Boj0= Subject key identifier: EB:59:AA:3C:20:96:84:D6:D7:EB:B0:48:50:5E:F5:9A:DA:81:09:D2 Certificate issuer: /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b Certificate serial: 019B7F848FBA525E2F8C5DF35D7BC83FDAFD Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/61mqPCCWhNbX67BIUF71mtqBCdI.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15923 IP address blocks: 193.41.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8f:ba:52:5e:2f:8c:5d:f3:5d:7b:c8:3f:da:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb59aa3c209684d6d7ebb048505ef59ada8109d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:84:5c:0a:a7:88:ec:2a:04:67:a1:79:13: be:80:b9:a1:ff:01:64:14:4f:8a:45:4e:bb:04:2a: 23:4d:bd:9b:65:0e:cf:13:f2:e1:11:98:01:a2:19: ca:ed:79:1f:db:c3:f5:b9:b9:fc:5f:09:41:73:33: 71:4b:2d:e0:0a:cd:3b:a4:85:71:50:03:0e:6b:0f: 97:d3:77:94:ee:bd:fa:39:39:2d:f9:53:12:f7:22: 24:29:a7:91:74:9f:d6:6f:2a:99:9a:a4:32:48:06: c8:53:18:e3:90:df:1f:60:d6:be:e8:6f:b5:fb:69: 49:ff:0a:81:c2:88:8f:f4:00:51:4d:93:0f:a5:c5: 09:17:4f:f7:38:ba:3c:33:82:a7:03:5e:5f:1f:f7: 68:72:0a:f4:51:df:0e:ef:02:01:43:59:dd:88:41: 84:e5:db:98:62:ca:89:1b:f1:43:6d:65:74:48:7c: 2d:6f:73:ef:e3:f7:54:0f:54:1a:8b:04:d0:e8:96: c2:fe:50:70:63:31:27:02:7c:a9:5b:49:ef:76:a8: 4d:30:48:ca:cd:46:17:c5:19:7a:6e:df:97:6c:e2: b0:e0:be:36:5e:34:3a:63:82:eb:07:c7:7b:dd:23: e7:48:b9:b2:88:85:33:d7:5b:4d:8c:52:16:55:fc: bf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:59:AA:3C:20:96:84:D6:D7:EB:B0:48:50:5E:F5:9A:DA:81:09:D2 X509v3 Authority Key Identifier: keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/61mqPCCWhNbX67BIUF71mtqBCdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.6.0/23 Signature Algorithm: sha256WithRSAEncryption 07:f6:6b:5a:90:f9:f1:2a:c3:9d:9e:c2:d3:1d:cc:65:10:45: b7:4e:7b:18:22:bb:06:c8:44:0f:15:9d:28:a4:bd:9e:4f:a9: 06:df:9f:47:f0:55:3d:cb:34:20:60:2a:31:00:b3:81:6d:2e: 77:36:5b:bf:9a:29:1c:61:e7:d8:f3:04:37:34:c1:0c:6d:2e: 65:9f:4e:3d:33:40:c4:56:2b:88:e8:07:33:86:25:43:12:90: 5d:a3:6a:d0:77:c7:e3:8a:4a:f8:f0:19:59:b4:62:84:a4:00: f4:65:b3:c0:75:d0:e6:4d:a2:55:97:da:61:a5:6b:b6:35:e8: a1:2a:0f:6f:51:73:3a:36:dc:ce:ce:8a:85:fa:5b:a1:69:97: bc:b0:a2:a1:0f:8d:2c:da:09:d0:9a:43:32:95:91:7b:76:fa: fc:5e:8c:13:fd:0b:9a:98:b3:a5:09:f9:45:48:9f:45:95:c4: 33:36:c0:a0:c4:61:51:e9:8b:cd:2f:3f:34:a5:dc:05:80:e1: 67:2c:9c:a9:0a:89:99:84:dc:c7:90:12:bd:43:8c:23:7f:4f: 75:f6:4c:f2:fd:5d:17:1c:35:5e:06:99:98:bf:2d:b0:65:f2: 3a:c5:ab:2a:90:33:cb:37:83:42:7b:b9:39:2a:7c:5b:0d:9a: 14:b3:bb:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hI+6Ul4vjF3zXXvIP9r9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmZkMTljMzNlOWIzZDMzMzUzY2ZlYjY0MTc5ZWY3M2Qz MjMzMmIwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjU5YWEzYzIwOTY4NGQ2ZDdlYmIwNDg1MDVlZjU5YWRhODEwOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug+EXAqniOwqBGeheRO+gLmh/wFk FE+KRU67BCojTb2bZQ7PE/LhEZgBohnK7Xkf28P1ubn8XwlBczNxSy3gCs07pIVx UAMOaw+X03eU7r36OTkt+VMS9yIkKaeRdJ/WbyqZmqQySAbIUxjjkN8fYNa+6G+1 +2lJ/wqBwoiP9ABRTZMPpcUJF0/3OLo8M4KnA15fH/docgr0Ud8O7wIBQ1ndiEGE 5duYYsqJG/FDbWV0SHwtb3Pv4/dUD1QaiwTQ6JbC/lBwYzEnAnypW0nvdqhNMEjK zUYXxRl6bt+XbOKw4L42XjQ6Y4LrB8d73SPnSLmyiIUz11tNjFIWVfy//QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtZqjwgloTW1+uwSFBe9ZragQnSMB8GA1UdIwQY MBaAFMG/0Zwz6bPTM1PP62QXnvc9MjMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mYjQxZjktM2MyZS00Y2MzLWIyNGQt NWQ4YzdhZGM3OTYyLzEvNjFtcVBDQ1doTmJYNjdCSVVGNzFtdHFCQ2RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9mYjQxZjktM2MyZS00Y2MzLWIyNGQtNWQ4YzdhZGM3OTYy LzEvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSkGMA0G CSqGSIb3DQEBCwUAA4IBAQAH9mtakPnxKsOdnsLTHcxlEEW3TnsYIrsGyEQPFZ0o pL2eT6kG359H8FU9yzQgYCoxALOBbS53Nlu/mikcYefY8wQ3NMEMbS5ln049M0DE ViuI6AczhiVDEpBdo2rQd8fjikr48BlZtGKEpAD0ZbPAddDmTaJVl9phpWu2Neih Kg9vUXM6NtzOzoqF+luhaZe8sKKhD40s2gnQmkMylZF7dvr8XowT/QuamLOlCflF SJ9FlcQzNsCgxGFR6YvNLz80pdwFgOFnLJypComZhNzHkBK9Q4wjf0919kzy/V0X HDVeBpmYvy2wZfI6xasqkDPLN4NCe7k5KnxbDZoUs7sO -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:59 2026 by rpki-client