This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1pWPsnbek_3lH938N5WkJ80jYHc.roa File: 1pWPsnbek_3lH938N5WkJ80jYHc.roa (raw, json) Hash identifier: EIS/p7jxOSLBb0cKFHl7WgvF7bu9sWDdCzUEGa97BPg= Subject key identifier: D6:95:8F:B2:76:DE:93:FD:E5:1F:DD:FC:37:95:A4:27:CD:23:60:77 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F8170DBD5C6685CA78743DF845D98E6 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1pWPsnbek_3lH938N5WkJ80jYHc.roa Signing time: Fri 02 Jan 2026 16:19:07 +0000 ROA not before: Fri 02 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12741 IP address blocks: 168.199.12.0/24 maxlen: 24 168.199.16.0/24 maxlen: 24 168.199.50.0/24 maxlen: 24 168.199.54.0/24 maxlen: 24 168.199.58.0/24 maxlen: 24 168.199.62.0/24 maxlen: 24 168.199.118.0/24 maxlen: 24 168.199.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:70:db:d5:c6:68:5c:a7:87:43:df:84:5d:98:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6958fb276de93fde51fddfc3795a427cd236077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:45:ff:02:20:59:65:6a:47:7f:9b:d0:55: bf:16:a3:8b:e0:f7:65:b3:78:bb:87:8e:a6:44:c5: 08:ca:fd:60:87:c2:d4:aa:d6:15:f2:33:90:5d:a3: 5c:db:37:e6:1c:9f:0e:30:ea:61:d6:3f:32:1a:2d: 13:02:16:dd:3b:d4:8e:be:cf:ae:a5:66:83:62:c4: ea:94:76:01:ef:f5:a8:f9:46:bc:05:45:3a:1f:70: 9c:6d:a1:a9:e2:6c:ec:b9:e1:56:6e:e6:f3:6a:ff: 5a:6b:5f:24:6d:e5:c6:1f:74:77:e0:91:90:9e:c0: 24:56:15:dd:3b:c0:84:d5:1f:a9:9d:a9:f3:60:49: 90:f2:c4:96:f3:31:83:b3:6d:66:59:1c:de:d4:0d: f3:5a:7b:a9:0e:e6:54:76:cb:00:10:a6:fd:5e:13: 9d:4a:8a:01:7f:cf:58:d3:03:54:eb:d0:a3:8f:f6: c8:9a:8b:6f:7c:d0:c4:cd:4a:30:4d:96:2b:70:1a: 51:1c:62:fd:ba:19:86:c7:2b:50:17:d4:0c:6b:3d: 73:13:e3:67:78:df:6e:d4:2f:44:02:96:7b:ac:93: 47:d7:2b:d6:7b:bb:84:44:4d:8d:66:28:f3:db:4d: 5f:b5:5f:a6:ba:3a:82:b6:2a:b4:cb:06:98:84:e0: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:95:8F:B2:76:DE:93:FD:E5:1F:DD:FC:37:95:A4:27:CD:23:60:77 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1pWPsnbek_3lH938N5WkJ80jYHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.12.0/24 168.199.16.0/24 168.199.50.0/24 168.199.54.0/24 168.199.58.0/24 168.199.62.0/24 168.199.118.0/24 168.199.122.0/24 Signature Algorithm: sha256WithRSAEncryption 53:1a:60:ef:7c:f0:26:03:06:52:77:09:10:5c:a4:f6:ec:0c: 03:71:c6:03:f8:89:d2:f4:b6:9a:19:ec:b0:08:78:d7:8e:7a: d2:06:f9:8e:d0:69:a5:34:9c:7a:07:ea:19:b0:2c:30:71:a0: ce:7c:3b:52:d1:16:e2:a3:51:7f:fd:a9:8e:a2:d3:9a:13:d8: 0d:ee:89:ea:17:f1:c8:ab:b5:39:49:f2:72:c0:05:d5:c8:c1: fc:59:6c:a2:04:03:6d:21:77:c8:7e:d8:3d:78:1a:a8:1d:6e: 1e:ea:5d:31:81:48:19:50:91:72:80:40:88:61:22:53:b6:86: bd:bc:de:0b:58:6c:8b:a7:9a:7b:cb:6c:6b:30:92:e5:19:fb: a8:12:90:79:05:d2:51:67:9a:b9:61:4c:d8:f7:88:33:0e:2b: 50:41:68:07:6d:61:7e:ec:75:f7:f1:53:ac:b1:80:63:9c:ba: e2:8b:99:7f:b0:9c:07:6a:a3:dd:2e:7a:75:1f:9b:e7:b9:e4: a9:e3:1c:93:da:3a:8c:5b:ee:68:83:0b:3f:38:2a:53:cc:92: 9e:dc:68:f9:67:c4:cd:6d:22:1a:45:2a:19:80:58:e4:df:c2: 5e:85:74:bd:c5:b2:f6:5e:e9:56:f9:e0:e6:58:aa:9e:29:49: 52:5e:c7:8c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt/gXDb1cZoXKeHQ9+EXZjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjk1OGZiMjc2ZGU5M2ZkZTUxZmRkZmMzNzk1YTQyN2NkMjM2MDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTlF/wIgWWVqR3+b0FW/FqOL4Pdl s3i7h46mRMUIyv1gh8LUqtYV8jOQXaNc2zfmHJ8OMOph1j8yGi0TAhbdO9SOvs+u pWaDYsTqlHYB7/Wo+Ua8BUU6H3CcbaGp4mzsueFWbubzav9aa18kbeXGH3R34JGQ nsAkVhXdO8CE1R+pnanzYEmQ8sSW8zGDs21mWRze1A3zWnupDuZUdssAEKb9XhOd SooBf89Y0wNU69Cjj/bImotvfNDEzUowTZYrcBpRHGL9uhmGxytQF9QMaz1zE+Nn eN9u1C9EApZ7rJNH1yvWe7uERE2NZijz201ftV+mujqCtiq0ywaYhOD65QIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFNaVj7J23pP95R/d/DeVpCfNI2B3MB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvMXBXUHNuYmVrXzNsSDkzOE41V2tKODBqWUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAqMcMAwQA qMcQAwQAqMcyAwQAqMc2AwQAqMc6AwQAqMc+AwQAqMd2AwQAqMd6MA0GCSqGSIb3 DQEBCwUAA4IBAQBTGmDvfPAmAwZSdwkQXKT27AwDccYD+InS9LaaGeywCHjXjnrS BvmO0GmlNJx6B+oZsCwwcaDOfDtS0Rbio1F//amOotOaE9gN7onqF/HIq7U5SfJy wAXVyMH8WWyiBANtIXfIftg9eBqoHW4e6l0xgUgZUJFygECIYSJTtoa9vN4LWGyL p5p7y2xrMJLlGfuoEpB5BdJRZ5q5YUzY94gzDitQQWgHbWF+7HX38VOssYBjnLri i5l/sJwHaqPdLnp1H5vnueSp4xyT2jqMW+5ogws/OCpTzJKe3Gj5Z8TNbSIaRSoZ gFjk38JehXS9xbL2XulW+eDmWKqeKUlSXseM -----END CERTIFICATE-----Generated at Fri Jan 9 16:52:10 2026 by rpki-client