This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/WspMkb0p51mqI6CuSe5VuWipa0M.roa File: WspMkb0p51mqI6CuSe5VuWipa0M.roa (raw, json) Hash identifier: irxEvyIWUgOHMwq1N9qORbjVDA2FSkyh31LjTzt2wmg= Subject key identifier: 5A:CA:4C:91:BD:29:E7:59:AA:23:A0:AE:49:EE:55:B9:68:A9:6B:43 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 019B79ECDC217205D9278CC993D4BDAB7724 Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/WspMkb0p51mqI6CuSe5VuWipa0M.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25152 IP address blocks: 193.0.14.0/23 maxlen: 23 193.0.14.0/24 maxlen: 24 193.0.15.0/24 maxlen: 24 193.0.16.0/23 maxlen: 24 2001:7fd::/32 maxlen: 32 2001:7fd::/48 maxlen: 48 2001:7fd:15::/48 maxlen: 48 2001:7fd:16::/48 maxlen: 48 2001:7fd:17::/48 maxlen: 48 2001:7fd:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:dc:21:72:05:d9:27:8c:c9:93:d4:bd:ab:77:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aca4c91bd29e759aa23a0ae49ee55b968a96b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0a:ed:7d:51:ba:ea:cb:8d:41:22:ad:9c:8d: ad:32:4e:13:b2:8a:08:34:1c:1c:46:8b:f0:c0:c4: e2:b2:c1:db:88:b6:2b:4c:35:a7:f2:ca:55:b6:84: 37:37:b4:a5:84:05:d1:e6:68:91:56:7c:a6:7e:55: 34:e1:64:b8:3e:b1:5f:d7:2e:f4:d8:7d:bd:11:b7: 81:5b:04:ba:0d:c9:ad:c3:e6:07:60:cf:3f:17:38: 37:55:1f:3e:1c:8a:e2:1e:17:36:96:3b:03:e3:c3: 7b:28:ca:d0:1b:5e:81:04:eb:37:4d:43:69:e8:da: ae:3c:6d:2e:72:50:33:51:01:4c:b9:f5:7e:96:8d: fe:81:7c:fd:03:ad:4e:69:bf:0c:c7:7d:3a:71:fb: 76:4e:44:ad:ec:76:9b:f1:d4:1c:94:d7:0b:1d:f4: 0c:6f:ee:23:e3:ea:b1:77:c5:ed:0a:de:dc:08:f1: c9:78:dc:55:6c:01:4d:ed:7f:10:7c:67:43:ef:a9: 63:ce:df:a0:c3:d6:00:5d:1c:c6:57:ff:9c:e1:7d: c2:fc:d1:4a:1b:66:9d:4a:89:35:6d:d8:aa:81:de: a0:65:6a:25:16:c5:4c:2b:30:2c:c7:53:20:a8:37: 61:c7:7b:cb:4e:8f:7e:40:9d:ce:67:62:8f:90:01: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CA:4C:91:BD:29:E7:59:AA:23:A0:AE:49:EE:55:B9:68:A9:6B:43 X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/WspMkb0p51mqI6CuSe5VuWipa0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.14.0-193.0.17.255 IPv6: 2001:7fd::/32 Signature Algorithm: sha256WithRSAEncryption 40:8d:af:01:d9:1c:00:e3:aa:bf:4a:bb:74:e5:07:02:cc:b0: 89:b8:e9:a1:bd:d2:ba:75:3a:ce:25:94:c0:ed:dc:6d:37:b2: b6:bd:6e:7d:23:26:29:9b:19:4d:80:5a:68:21:8b:e4:0c:12: cf:6c:fe:ab:1c:22:3e:29:0d:76:c9:c9:c0:82:93:ca:61:0f: e1:70:74:2a:16:a2:ca:73:8d:19:26:f6:d0:22:5f:30:6c:16: 5f:bb:25:f4:00:28:8a:00:85:98:3a:09:cd:a1:56:90:e8:a0: 0d:11:26:f2:70:fc:9a:1d:e3:f3:4d:98:7d:a2:99:3b:86:45: 5c:3e:bf:93:47:96:99:01:9b:bc:af:74:d5:0b:1b:a2:4f:6f: 1d:6a:6a:d9:35:ea:78:db:ca:62:d5:36:27:e2:16:28:b4:af: b6:6f:04:74:74:42:48:9f:92:40:30:00:6c:59:8d:de:81:9b: 05:d4:38:0c:92:4e:e3:38:16:30:64:8c:70:46:63:cc:64:f9: 5d:e2:54:2c:fb:45:4d:c9:37:91:24:1d:94:7d:8b:00:f6:9a: 71:0e:0f:2e:87:71:34:d7:fb:21:76:47:29:f0:88:e5:48:8c: bf:b4:7d:1d:23:2e:52:63:d3:b2:15:33:ab:19:76:fe:b6:bd: ae:07:07:55 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt57NwhcgXZJ4zJk9S9q3ckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWNhNGM5MWJkMjllNzU5YWEyM2EwYWU0OWVlNTViOTY4YTk2YjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QrtfVG66suNQSKtnI2tMk4TsooI NBwcRovwwMTissHbiLYrTDWn8spVtoQ3N7SlhAXR5miRVnymflU04WS4PrFf1y70 2H29EbeBWwS6Dcmtw+YHYM8/Fzg3VR8+HIriHhc2ljsD48N7KMrQG16BBOs3TUNp 6NquPG0uclAzUQFMufV+lo3+gXz9A61Oab8Mx306cft2TkSt7Hab8dQclNcLHfQM b+4j4+qxd8XtCt7cCPHJeNxVbAFN7X8QfGdD76ljzt+gw9YAXRzGV/+c4X3C/NFK G2adSok1bdiqgd6gZWolFsVMKzAsx1MgqDdhx3vLTo9+QJ3OZ2KPkAEkJwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFrKTJG9KedZqiOgrknuVbloqWtDMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvV3NwTWtiMHA1MW1xSTZDdVNlNVZ1V2lwYTBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAHBAA4D BAHBABAwDQQCAAIwBwMFACABB/0wDQYJKoZIhvcNAQELBQADggEBAECNrwHZHADj qr9Ku3TlBwLMsIm46aG90rp1Os4llMDt3G03sra9bn0jJimbGU2AWmghi+QMEs9s /qscIj4pDXbJycCCk8phD+FwdCoWospzjRkm9tAiXzBsFl+7JfQAKIoAhZg6Cc2h VpDooA0RJvJw/Jod4/NNmH2imTuGRVw+v5NHlpkBm7yvdNULG6JPbx1qatk16njb ymLVNifiFii0r7ZvBHR0QkifkkAwAGxZjd6BmwXUOAySTuM4FjBkjHBGY8xk+V3i VCz7RU3JN5EkHZR9iwD2mnEODy6HcTTX+yF2RynwiOVIjL+0fR0jLlJj07IVM6sZ dv62va4HB1U= -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:30 2026 by rpki-client