This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/RwRbsf_6_s1yWi7p-eL75QDFgPs.roa File: RwRbsf_6_s1yWi7p-eL75QDFgPs.roa (raw, json) Hash identifier: DgI/Jb/NnWPeaSYtffRytB12Xe456guJHdCzLMefKE8= Subject key identifier: 47:04:5B:B1:FF:FA:FE:CD:72:5A:2E:E9:F9:E2:FB:E5:00:C5:80:FB Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B79103A5D414F708899CF9ED9A0EFFFDF Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/RwRbsf_6_s1yWi7p-eL75QDFgPs.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32043 IP address blocks: 195.216.164.0/24 maxlen: 24 195.216.165.0/24 maxlen: 24 195.216.166.0/24 maxlen: 24 195.216.167.0/24 maxlen: 24 195.216.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3a:5d:41:4f:70:88:99:cf:9e:d9:a0:ef:ff:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47045bb1fffafecd725a2ee9f9e2fbe500c580fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ed:9f:64:28:67:75:f4:66:54:28:7b:58:f4: 2c:f6:14:d4:c8:56:59:9a:0a:47:fd:f9:56:fe:a3: fa:0a:a5:29:89:84:0a:9b:14:db:4d:30:1a:41:a5: 30:ec:b5:8e:1d:40:0a:db:c3:1e:b1:07:65:b0:76: de:b1:f1:73:03:2d:10:46:d5:31:2d:8c:53:a3:0f: 5a:76:d6:ce:a8:09:7f:a8:bb:aa:0a:b7:97:39:61: eb:7a:b1:e1:61:11:69:da:87:62:2d:ee:eb:24:d8: 04:6b:87:b4:ae:7f:3b:62:ca:43:f9:0f:91:f3:0e: 77:30:52:2d:9d:b5:14:f1:b6:16:b9:56:cf:a2:51: 04:c0:e4:b7:41:2e:1f:cd:b9:3d:6d:6f:2e:7e:44: 77:97:fb:6e:88:a1:48:7d:d2:95:a8:ee:19:c0:9d: 81:a7:49:da:42:90:e3:59:d9:f3:7c:c9:7a:1e:90: ab:07:9c:df:82:ee:b6:d9:38:a4:cf:a6:a7:d5:b0: 5c:e0:fa:0e:cd:5a:d3:53:80:8f:a3:e8:ba:99:ee: ba:16:d9:53:e3:c1:99:a5:de:e3:c5:7c:5f:16:41: ad:81:e3:ae:7c:e9:41:17:02:60:6a:8b:de:27:e3: 80:30:aa:a5:22:76:f0:27:b3:fe:9a:81:cd:59:76: 31:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:04:5B:B1:FF:FA:FE:CD:72:5A:2E:E9:F9:E2:FB:E5:00:C5:80:FB X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/RwRbsf_6_s1yWi7p-eL75QDFgPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.164.0/22 195.216.184.0/24 Signature Algorithm: sha256WithRSAEncryption 22:5c:aa:82:af:a9:cc:c5:2a:0f:89:c6:6e:78:0f:4f:7b:a9: 1d:7c:ae:e2:d5:e2:56:47:5d:76:62:3b:0f:1e:8c:3d:50:16: f6:c1:73:8a:63:33:28:27:2e:2b:bf:67:71:15:df:57:2c:8e: 95:a5:da:c6:34:1b:86:e9:3a:ff:c3:6e:71:54:0c:02:3b:5f: 2c:3b:13:7c:e5:0d:25:9e:89:34:1c:6a:f9:c4:24:72:aa:35: f6:a4:1a:e9:ec:ea:cd:8f:b8:05:6c:6d:06:6a:af:ac:e5:07: 1d:09:4c:82:d3:dd:fd:26:9f:02:38:c8:d3:6d:e2:b5:04:d0: d9:35:ea:d9:c0:bc:98:4a:91:f4:70:ef:23:94:b2:44:1b:f7: 76:85:91:79:67:ee:4a:ac:a7:c8:aa:b7:15:75:e0:2e:08:1a: ca:de:1d:51:b9:89:b2:09:1d:1f:35:7b:8f:f6:7c:cd:95:c0: 48:d9:00:e9:03:4b:7e:9e:3b:c0:1d:b2:7c:26:a1:15:1b:bf: 25:32:d0:b3:36:c2:86:af:3a:3c:c4:68:a5:22:fb:71:c4:2b: de:a7:33:c7:6f:93:a1:a8:b4:d7:c6:6e:8b:a1:d1:36:6a:78: 7c:8c:12:cc:3c:04:a7:88:c9:4c:64:b1:71:90:f7:ac:6f:de: 25:42:41:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EDpdQU9wiJnPntmg7//fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzA0NWJiMWZmZmFmZWNkNzI1YTJlZTlmOWUyZmJlNTAwYzU4MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5O2fZChndfRmVCh7WPQs9hTUyFZZ mgpH/flW/qP6CqUpiYQKmxTbTTAaQaUw7LWOHUAK28MesQdlsHbesfFzAy0QRtUx LYxTow9adtbOqAl/qLuqCreXOWHrerHhYRFp2odiLe7rJNgEa4e0rn87YspD+Q+R 8w53MFItnbUU8bYWuVbPolEEwOS3QS4fzbk9bW8ufkR3l/tuiKFIfdKVqO4ZwJ2B p0naQpDjWdnzfMl6HpCrB5zfgu622Tikz6an1bBc4PoOzVrTU4CPo+i6me66FtlT 48GZpd7jxXxfFkGtgeOufOlBFwJgaoveJ+OAMKqlInbwJ7P+moHNWXYxTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEcEW7H/+v7Nclou6fni++UAxYD7MB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvUndSYnNmXzZfczF5V2k3cC1lTDc1UURGZ1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw9ikAwQA w9i4MA0GCSqGSIb3DQEBCwUAA4IBAQAiXKqCr6nMxSoPicZueA9Pe6kdfK7i1eJW R112YjsPHow9UBb2wXOKYzMoJy4rv2dxFd9XLI6VpdrGNBuG6Tr/w25xVAwCO18s OxN85Q0lnok0HGr5xCRyqjX2pBrp7OrNj7gFbG0Gaq+s5QcdCUyC0939Jp8COMjT beK1BNDZNerZwLyYSpH0cO8jlLJEG/d2hZF5Z+5KrKfIqrcVdeAuCBrK3h1RuYmy CR0fNXuP9nzNlcBI2QDpA0t+njvAHbJ8JqEVG78lMtCzNsKGrzo8xGilIvtxxCve pzPHb5OhqLTXxm6LodE2anh8jBLMPASniMlMZLFxkPesb94lQkFl -----END CERTIFICATE-----Generated at Thu Jan 22 23:32:54 2026 by rpki-client