This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/w7PWZXTPKCOZGHpSGcT5KoWpPAY.roa File: w7PWZXTPKCOZGHpSGcT5KoWpPAY.roa (raw, json) Hash identifier: 034E8i64C+y8Jw/x/z2Co+QWwQMda1HQeLdB0UlAnnM= Subject key identifier: C3:B3:D6:65:74:CF:28:23:99:18:7A:52:19:C4:F9:2A:85:A9:3C:06 Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832 Certificate serial: 019B7F80B75D1876A5E0E7096523526A6DFC Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/w7PWZXTPKCOZGHpSGcT5KoWpPAY.roa Signing time: Fri 02 Jan 2026 16:18:20 +0000 ROA not before: Fri 02 Jan 2026 16:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59516 IP address blocks: 81.161.116.0/22 maxlen: 22 2001:67c:2b78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b7:5d:18:76:a5:e0:e7:09:65:23:52:6a:6d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23607105955c764a813fd9524a7e41b940c56832 Validity Not Before: Jan 2 16:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3b3d66574cf282399187a5219c4f92a85a93c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:61:ef:f3:d4:ce:bf:1f:99:3f:d5:92:3a: 11:46:f5:d3:0c:40:e3:8e:40:c7:86:6e:43:c1:6e: 8c:49:0e:b3:fc:7b:d8:61:67:84:20:ea:89:ff:f9: fb:93:f2:d0:9a:88:29:2a:8d:03:4a:0f:32:be:96: 16:a7:11:dd:3e:cb:6a:79:65:f7:ab:27:18:39:de: 6d:a2:5c:22:f8:83:e0:e3:08:e4:b2:a5:68:07:8b: 22:61:49:c2:7b:c9:d2:46:01:d1:65:09:9f:1f:2d: 41:ca:86:58:c2:18:aa:5f:a2:49:bf:21:58:f3:ae: 76:3a:86:b6:c8:df:40:a5:cd:8b:f7:14:6f:c1:59: 07:d7:6d:fa:b3:09:86:f3:9e:66:49:38:fe:a4:d2: 14:b6:6b:75:7f:c8:54:ba:99:71:3c:f5:a0:5d:3a: 8d:48:7b:d9:89:0a:c6:f6:c3:3d:da:65:62:dc:6e: f5:36:78:e5:79:b6:5c:fc:53:aa:db:6c:6d:b7:32: 3f:25:32:62:93:25:61:43:6b:e7:5c:8f:a1:09:92: 3f:1f:83:5f:f0:64:17:17:e2:ba:cf:0f:43:cc:86: 91:ee:74:d8:e6:09:e2:9c:70:8c:9b:79:97:05:a8: b7:b8:c4:10:9b:7f:39:0c:e6:e7:9a:14:5a:29:fa: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B3:D6:65:74:CF:28:23:99:18:7A:52:19:C4:F9:2A:85:A9:3C:06 X509v3 Authority Key Identifier: keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/w7PWZXTPKCOZGHpSGcT5KoWpPAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.116.0/22 IPv6: 2001:67c:2b78::/48 Signature Algorithm: sha256WithRSAEncryption 64:98:6a:a4:e6:be:f4:ff:29:1b:18:af:85:19:85:3d:47:72: ec:8f:30:62:98:2c:2b:d4:28:15:26:9d:59:a4:ee:fa:9e:f7: c6:4f:6f:02:3d:3b:05:10:ea:44:f6:ec:3b:9d:a3:3f:c0:c4: 67:4a:10:e6:d5:6d:56:7b:27:28:2f:3b:24:53:29:30:cf:81: 25:fc:5d:d4:b6:67:ec:c6:81:b3:d2:9a:06:e0:c0:7e:10:73: 37:a6:88:4d:42:6a:73:e6:fa:b7:c1:65:aa:20:4b:71:d6:e1: 41:c6:7e:46:1a:99:5f:bc:2c:9d:82:82:88:8b:84:82:9d:35: 5c:94:5d:95:72:be:28:df:e3:b6:56:c2:45:b2:bd:12:f8:ae: 29:ac:a3:09:24:2d:b7:e1:fa:c2:a7:cf:60:d3:5f:14:45:f6: 4f:18:22:10:c3:65:6b:c1:b5:be:6a:8a:91:13:23:ff:93:da: 31:aa:06:8c:ae:aa:88:88:56:3d:4e:8c:e3:bf:e2:51:9e:a8: 0f:72:1c:2b:a2:66:b3:f8:3f:62:07:87:a0:09:a0:5f:ff:15: b2:58:9a:63:ab:24:84:80:e9:38:cb:b7:ac:e6:3f:af:fa:80: a1:23:49:b8:d9:8c:87:1a:52:a1:9f:43:90:5b:fc:77:89:a8: 02:45:94:28 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gLddGHal4OcJZSNSam38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjA3MTA1OTU1Yzc2NGE4MTNmZDk1MjRhN2U0MWI5NDBj NTY4MzIwHhcNMjYwMTAyMTYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2IzZDY2NTc0Y2YyODIzOTkxODdhNTIxOWM0ZjkyYTg1YTkzYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt9h7/PUzr8fmT/VkjoRRvXTDEDj jkDHhm5DwW6MSQ6z/HvYYWeEIOqJ//n7k/LQmogpKo0DSg8yvpYWpxHdPstqeWX3 qycYOd5tolwi+IPg4wjksqVoB4siYUnCe8nSRgHRZQmfHy1ByoZYwhiqX6JJvyFY 8652Ooa2yN9Apc2L9xRvwVkH1236swmG855mSTj+pNIUtmt1f8hUuplxPPWgXTqN SHvZiQrG9sM92mVi3G71NnjlebZc/FOq22xttzI/JTJikyVhQ2vnXI+hCZI/H4Nf 8GQXF+K6zw9DzIaR7nTY5gninHCMm3mXBai3uMQQm385DObnmhRaKfrnOQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMOz1mV0zygjmRh6UhnE+SqFqTwGMB8GA1UdIwQY MBaAFCNgcQWVXHZKgT/ZUkp+QblAxWgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTkt NDg0NzBmNjlkNzlkLzEvdzdQV1pYVFBLQ09aR0hwU0djVDVLb1dwUEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTktNDg0NzBmNjlkNzlk LzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCUaF0MA8E AgACMAkDBwAgAQZ8K3gwDQYJKoZIhvcNAQELBQADggEBAGSYaqTmvvT/KRsYr4UZ hT1HcuyPMGKYLCvUKBUmnVmk7vqe98ZPbwI9OwUQ6kT27Dudoz/AxGdKEObVbVZ7 JygvOyRTKTDPgSX8XdS2Z+zGgbPSmgbgwH4QczemiE1CanPm+rfBZaogS3HW4UHG fkYamV+8LJ2CgoiLhIKdNVyUXZVyvijf47ZWwkWyvRL4rimsowkkLbfh+sKnz2DT XxRF9k8YIhDDZWvBtb5qipETI/+T2jGqBoyuqoiIVj1OjOO/4lGeqA9yHCuiZrP4 P2IHh6AJoF//FbJYmmOrJISA6TjLt6zmP6/6gKEjSbjZjIcaUqGfQ5Bb/HeJqAJF lCg= -----END CERTIFICATE-----Generated at Mon Feb 9 18:37:53 2026 by rpki-client