This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/iwnR0_v7DrZOMyhOwK5w8tNyMio.roa File: iwnR0_v7DrZOMyhOwK5w8tNyMio.roa (raw, json) Hash identifier: m9wlWVaLcH73FDQVsUWe6KN6JmhaiRLX69jEcq4ITXs= Subject key identifier: 8B:09:D1:D3:FB:FB:0E:B6:4E:33:28:4E:C0:AE:70:F2:D3:72:32:2A Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Certificate serial: 019B7C1112D3BD12D1B195D07C88ACB26F4C Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/iwnR0_v7DrZOMyhOwK5w8tNyMio.roa Signing time: Fri 02 Jan 2026 00:17:32 +0000 ROA not before: Fri 02 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57465 IP address blocks: 134.90.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:12:d3:bd:12:d1:b1:95:d0:7c:88:ac:b2:6f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Validity Not Before: Jan 2 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b09d1d3fbfb0eb64e33284ec0ae70f2d372322a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:64:d2:02:0c:45:45:c3:c3:f2:73:61:f8: cb:d1:01:00:bc:b5:a9:cb:76:05:7a:4f:2b:63:46: 61:10:6b:b0:3a:92:75:ce:eb:c1:04:b4:66:a8:35: 79:83:ba:94:24:4b:23:b1:c0:06:0c:d3:e5:90:e7: 6a:f3:50:f7:e9:04:ec:73:60:6d:6f:bf:86:e3:a0: a5:eb:00:27:90:f6:84:32:0b:66:5c:66:d2:c4:85: e0:e2:b5:b2:b7:3a:9e:bb:66:dd:ea:dc:c1:b1:18: c5:8d:73:c1:ea:13:13:60:1b:55:f3:b2:06:c4:53: 9b:4e:31:66:3f:c7:5a:d1:a3:0d:06:c4:d6:f9:27: c7:69:fd:5b:76:f9:69:55:80:9f:18:88:98:7a:be: 1c:a9:0f:82:4a:42:68:ed:f2:4c:05:9e:7a:de:fc: 1f:f4:f1:da:c6:c9:c4:61:fc:af:fc:2e:ec:63:2c: be:93:69:93:e2:01:78:50:93:83:3d:5c:b2:98:e5: dd:6e:eb:ca:ef:21:56:8f:78:da:13:a2:9f:9d:d1: 1e:32:a5:75:ec:11:42:f0:22:92:12:81:92:c1:83: c4:09:d1:c7:eb:c3:d6:f3:5f:9b:5a:19:21:49:e1: e7:4a:60:e2:27:2f:36:c8:75:64:51:19:41:b1:ab: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:09:D1:D3:FB:FB:0E:B6:4E:33:28:4E:C0:AE:70:F2:D3:72:32:2A X509v3 Authority Key Identifier: keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/iwnR0_v7DrZOMyhOwK5w8tNyMio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.90.216.0/22 Signature Algorithm: sha256WithRSAEncryption 77:9b:66:19:3d:30:78:59:dc:b7:71:63:0b:8c:0c:b8:82:58: 39:15:ad:49:7a:49:46:51:5b:eb:1b:27:cb:96:29:da:97:dd: eb:4a:8a:b9:1d:94:de:ba:d6:75:71:d2:9a:71:e7:52:66:9a: 10:58:42:da:ad:c0:92:4c:5f:50:43:d5:90:a3:bc:50:f5:de: d4:7c:51:8f:3b:24:53:f0:38:a4:e6:2e:c8:d6:aa:d6:d8:1d: 7b:f5:c0:91:1a:0e:16:3c:c0:ac:b9:70:4b:e3:52:51:3d:06: 27:54:03:8c:83:05:41:cb:7b:cf:26:67:e0:6b:4e:a2:da:4c: 41:e4:16:bb:1f:b6:e8:7d:67:2b:19:cf:4c:59:b1:5e:46:ec: fe:87:75:bf:a4:45:4c:66:84:f1:dc:77:c7:3a:99:a9:ee:26: ee:bc:b9:c5:45:a1:6b:a1:ad:6f:f2:09:98:00:88:38:93:4c: 61:8b:0c:22:24:d4:23:56:32:5d:9f:42:1d:ad:f5:63:88:27: 78:66:21:cc:b6:ef:dd:14:b6:3f:4b:d5:52:92:d3:25:bf:40: a3:23:0b:dd:41:25:cf:31:a7:ea:5e:64:cb:10:33:e6:f7:a8: 2a:b1:55:34:47:8f:53:b8:9f:d9:f1:6b:32:58:28:7f:78:ae: a4:15:2f:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ERLTvRLRsZXQfIissm9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx MmJiNjAwHhcNMjYwMTAyMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjA5ZDFkM2ZiZmIwZWI2NGUzMzI4NGVjMGFlNzBmMmQzNzIzMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAtk0gIMRUXDw/JzYfjL0QEAvLWp y3YFek8rY0ZhEGuwOpJ1zuvBBLRmqDV5g7qUJEsjscAGDNPlkOdq81D36QTsc2Bt b7+G46Cl6wAnkPaEMgtmXGbSxIXg4rWytzqeu2bd6tzBsRjFjXPB6hMTYBtV87IG xFObTjFmP8da0aMNBsTW+SfHaf1bdvlpVYCfGIiYer4cqQ+CSkJo7fJMBZ563vwf 9PHaxsnEYfyv/C7sYyy+k2mT4gF4UJODPVyymOXdbuvK7yFWj3jaE6KfndEeMqV1 7BFC8CKSEoGSwYPECdHH68PW81+bWhkhSeHnSmDiJy82yHVkURlBsavw+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsJ0dP7+w62TjMoTsCucPLTcjIqMB8GA1UdIwQY MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt OWNmODQzZjA1NjcwLzEvaXduUjBfdjdEclpPTXloT3dLNXc4dE55TWlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChlrYMA0G CSqGSIb3DQEBCwUAA4IBAQB3m2YZPTB4Wdy3cWMLjAy4glg5Fa1JeklGUVvrGyfL linal93rSoq5HZTeutZ1cdKacedSZpoQWELarcCSTF9QQ9WQo7xQ9d7UfFGPOyRT 8Dik5i7I1qrW2B179cCRGg4WPMCsuXBL41JRPQYnVAOMgwVBy3vPJmfga06i2kxB 5Ba7H7bofWcrGc9MWbFeRuz+h3W/pEVMZoTx3HfHOpmp7ibuvLnFRaFroa1v8gmY AIg4k0xhiwwiJNQjVjJdn0IdrfVjiCd4ZiHMtu/dFLY/S9VSktMlv0CjIwvdQSXP MafqXmTLEDPm96gqsVU0R49TuJ/Z8WsyWCh/eK6kFS98 -----END CERTIFICATE-----Generated at Fri Jan 2 21:43:09 2026 by rpki-client