This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/w1gMt94WQ5eAPDOTWGJbst0F5fM.roa File: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (raw, json) Hash identifier: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc= Subject key identifier: C3:58:0C:B7:DE:16:43:97:80:3C:33:93:58:62:5B:B2:DD:05:E5:F3 Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121 Certificate serial: 019B7EA74E8C1EDB1E99FBE5B931FB9C475E Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/w1gMt94WQ5eAPDOTWGJbst0F5fM.roa Signing time: Fri 02 Jan 2026 12:20:52 +0000 ROA not before: Fri 02 Jan 2026 12:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16024 IP address blocks: 193.26.125.0/24 maxlen: 24 2001:67c:cd8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4e:8c:1e:db:1e:99:fb:e5:b9:31:fb:9c:47:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3580cb7de164397803c339358625bb2dd05e5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:b7:70:6a:04:94:e8:c8:24:ea:fd:96:89: 11:87:a2:bb:04:83:50:4f:e3:a1:ba:e3:a1:ff:af: 7e:d8:64:ef:de:00:f7:42:57:50:e7:49:91:65:6a: 25:4b:2f:c3:1d:3c:24:41:10:6e:58:d6:34:de:3e: 6e:27:42:f8:5b:a4:31:d0:f2:4f:de:be:91:5d:29: 21:95:10:0b:2a:4e:fa:cf:aa:3b:e8:12:87:f9:1a: fe:3f:66:d5:c9:e9:ff:d2:a2:8d:b8:49:2c:90:84: 52:c2:ed:ac:a7:33:bc:99:5c:0f:53:97:1d:38:ed: ad:19:e5:70:06:35:f3:11:b8:13:7d:14:b9:32:f1: e3:ca:cd:32:12:af:8b:6a:7e:cf:48:a5:82:fe:d1: b1:9f:56:e8:d9:d2:ac:22:67:f2:b8:45:a0:9c:2d: 6f:97:f7:13:96:1f:20:f0:5d:0d:be:5d:17:2a:50: 9d:bb:8b:22:72:3e:a4:f6:92:0c:1f:6e:df:f0:39: 6e:ef:56:62:4d:fe:80:c9:5c:a9:4b:31:e6:1d:98: bf:7a:25:fe:cc:5f:31:45:e2:4d:6e:d8:0f:86:3f: 11:f8:0b:a7:71:d6:08:6d:b3:86:00:97:d4:c3:58: e4:cd:c1:5d:08:6c:c5:4a:83:9a:71:ec:16:3b:b7: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:58:0C:B7:DE:16:43:97:80:3C:33:93:58:62:5B:B2:DD:05:E5:F3 X509v3 Authority Key Identifier: keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/w1gMt94WQ5eAPDOTWGJbst0F5fM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.125.0/24 IPv6: 2001:67c:cd8::/48 Signature Algorithm: sha256WithRSAEncryption 57:42:41:ad:26:43:cc:35:6e:5c:1c:72:f3:c6:59:5f:8a:32: cf:60:be:10:9d:e8:e1:fd:eb:b6:c1:77:e8:66:b0:17:8e:04: a7:bd:21:5f:24:c6:f4:27:30:2c:02:c4:19:5c:38:c3:89:fc: 9d:c4:7f:be:b3:9b:af:81:34:80:aa:8a:38:87:c6:46:e7:21: fc:55:9b:ed:82:cf:f0:0e:89:ea:6a:cd:01:6c:a2:5b:cd:e5: de:26:96:99:0e:86:a3:66:d2:85:14:42:63:7f:f6:96:2f:0c: 36:6a:dd:fc:19:c7:66:79:db:23:92:34:c5:56:41:1b:2c:ad: 08:27:c2:9e:4a:44:f0:90:c2:8f:47:50:6a:e2:68:bb:c4:ce: 30:19:83:97:e9:c9:77:77:80:f9:47:99:8f:14:88:4d:c3:6c: 8f:b2:a6:a9:20:f9:5e:02:3a:fd:88:91:e6:5b:6c:55:4a:17: 41:32:35:db:57:5f:a5:03:39:1e:a2:a3:28:3e:b0:a3:ff:4b: b8:33:63:16:0d:44:0e:fc:08:36:df:c9:86:bc:b0:6d:a5:3e: cc:f6:a5:a3:94:19:10:df:d9:3b:45:8a:92:d7:03:fe:d4:16: 7d:37:4b:4c:39:ad:76:09:ff:4b:46:5c:29:6d:82:fd:b6:56: df:6b:90:07 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+p06MHtsemfvluTH7nEdeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY5NDBmMWNjNTc3ZjM3MGYyODQyODg1MGRjN2JmNzQx OGYxMjEwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzU4MGNiN2RlMTY0Mzk3ODAzYzMzOTM1ODYyNWJiMmRkMDVlNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviS3cGoElOjIJOr9lokRh6K7BINQ T+OhuuOh/69+2GTv3gD3QldQ50mRZWolSy/DHTwkQRBuWNY03j5uJ0L4W6Qx0PJP 3r6RXSkhlRALKk76z6o76BKH+Rr+P2bVyen/0qKNuEkskIRSwu2spzO8mVwPU5cd OO2tGeVwBjXzEbgTfRS5MvHjys0yEq+Lan7PSKWC/tGxn1bo2dKsImfyuEWgnC1v l/cTlh8g8F0Nvl0XKlCdu4sicj6k9pIMH27f8Dlu71ZiTf6AyVypSzHmHZi/eiX+ zF8xReJNbtgPhj8R+AuncdYIbbOGAJfUw1jkzcFdCGzFSoOacewWO7fmiQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMNYDLfeFkOXgDwzk1hiW7LdBeXzMB8GA1UdIwQY MBaAFLaPlA8cxXfzcPKEKIUNx790GPEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt ZTA0ZGFjNjFjZTlkLzEvdzFnTXQ5NFdRNWVBUERPVFdHSmJzdDBGNWZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk LzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRp9MA8E AgACMAkDBwAgAQZ8DNgwDQYJKoZIhvcNAQELBQADggEBAFdCQa0mQ8w1blwccvPG WV+KMs9gvhCd6OH967bBd+hmsBeOBKe9IV8kxvQnMCwCxBlcOMOJ/J3Ef76zm6+B NICqijiHxkbnIfxVm+2Cz/AOiepqzQFsolvN5d4mlpkOhqNm0oUUQmN/9pYvDDZq 3fwZx2Z52yOSNMVWQRssrQgnwp5KRPCQwo9HUGriaLvEzjAZg5fpyXd3gPlHmY8U iE3DbI+ypqkg+V4COv2IkeZbbFVKF0EyNdtXX6UDOR6ioyg+sKP/S7gzYxYNRA78 CDbfyYa8sG2lPsz2paOUGRDf2TtFipLXA/7UFn03S0w5rXYJ/0tGXCltgv22Vt9r kAc= -----END CERTIFICATE-----Generated at Tue Jan 20 11:16:32 2026 by rpki-client