This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa File: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (raw, json) Hash identifier: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8= Subject key identifier: 81:68:60:76:69:41:DA:5A:56:B8:E0:08:97:A5:69:18:55:98:BE:3E Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019B7E38D36F08503BDDFA018DF83BD33E2D Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 193.163.200.0/24 maxlen: 24 194.9.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d3:6f:08:50:3b:dd:fa:01:8d:f8:3b:d3:3e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=816860766941da5a56b8e00897a569185598be3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8f:f9:58:4c:05:30:6f:42:eb:7b:56:62:23: b9:6f:47:41:79:39:1e:82:d6:c5:75:b3:33:22:99: f0:19:84:a5:6f:0b:2f:90:f8:81:83:15:cd:a1:72: 68:36:3b:5a:04:c5:e5:1d:14:6e:78:af:7b:8c:0e: 56:bf:79:a9:8c:ed:27:74:ba:9f:ef:66:03:9f:f1: 38:9b:84:a6:91:c0:41:fe:05:cc:db:e4:e3:d3:e0: 87:ef:b0:af:87:15:b4:4c:65:38:bc:5a:43:25:bd: 0a:ca:f2:81:dc:f2:b0:2a:d2:07:4a:c8:e1:c9:4b: 2e:20:37:60:a5:c4:0a:de:2b:1a:92:44:d3:d9:78: bb:a0:d5:0c:26:17:a1:2d:19:e7:23:e3:31:5b:11: cd:54:d9:c8:23:6e:62:7d:34:58:a4:eb:ac:97:21: 4d:2f:4a:a7:3a:60:1f:1f:b7:b2:f8:89:e6:b7:5d: 5d:db:bd:53:76:aa:3a:b1:39:83:0b:7c:73:c4:99: 8c:70:be:07:8d:e4:38:1c:d9:fe:67:07:6d:af:e7: e1:50:f6:88:1a:7e:35:04:84:ff:bc:32:60:59:41: a9:2d:43:c4:ae:c4:72:4f:f8:ea:91:12:c1:ac:cc: 5c:2c:b6:c9:1e:86:c9:8b:b4:bd:d3:d2:2d:0e:f8: 9f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:68:60:76:69:41:DA:5A:56:B8:E0:08:97:A5:69:18:55:98:BE:3E X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.200.0/24 194.9.181.0/24 Signature Algorithm: sha256WithRSAEncryption 29:b6:9c:7c:85:5a:e6:63:a5:df:41:c4:2e:4e:e5:4b:bb:fd: 65:51:33:31:7e:4e:92:21:7c:d7:fe:4f:37:b3:81:9b:59:2b: b2:fc:d0:0c:e5:57:8d:3f:59:2f:ba:ea:49:ce:61:9e:87:df: c8:fe:b0:7f:34:3c:3a:f4:87:63:a7:9e:ef:fa:40:9a:0f:5a: 87:ad:b5:83:3f:72:35:16:cc:6e:1a:6f:46:77:b3:b3:9e:e2: a0:6c:99:4f:67:60:4b:0a:20:bb:ab:79:ae:38:f8:71:35:db: 8c:d3:18:8e:5a:4b:0e:ec:9d:ce:c8:0f:e1:4b:18:1d:16:60: 57:d0:f5:3b:31:cf:53:43:8b:b4:1e:95:05:34:93:90:18:65: d7:d7:83:ff:9a:60:da:8a:83:9d:dc:f3:9a:2d:4e:7c:a4:04: bc:f0:a0:ab:73:28:9e:b7:f8:a8:95:50:0c:d3:fa:93:44:15: 01:66:82:15:ee:a8:9b:85:1c:02:52:46:1b:6f:db:8d:a3:91: 85:16:86:35:c7:d2:32:e5:be:e2:c1:a7:79:96:b8:e9:34:d3: eb:ce:0a:0b:74:18:68:44:74:90:e3:93:cd:39:08:16:1e:84: bd:db:17:4b:c6:4c:c4:61:3b:80:49:90:5a:15:4f:57:dc:d2: d6:a4:07:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ONNvCFA73foBjfg70z4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTY4NjA3NjY5NDFkYTVhNTZiOGUwMDg5N2E1NjkxODU1OThiZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio/5WEwFMG9C63tWYiO5b0dBeTke gtbFdbMzIpnwGYSlbwsvkPiBgxXNoXJoNjtaBMXlHRRueK97jA5Wv3mpjO0ndLqf 72YDn/E4m4SmkcBB/gXM2+Tj0+CH77CvhxW0TGU4vFpDJb0KyvKB3PKwKtIHSsjh yUsuIDdgpcQK3isakkTT2Xi7oNUMJhehLRnnI+MxWxHNVNnII25ifTRYpOuslyFN L0qnOmAfH7ey+Inmt11d271Tdqo6sTmDC3xzxJmMcL4HjeQ4HNn+Zwdtr+fhUPaI Gn41BIT/vDJgWUGpLUPErsRyT/jqkRLBrMxcLLbJHobJi7S909ItDvifPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIFoYHZpQdpaVrjgCJelaRhVmL4+MB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvZ1doZ2RtbEIybHBXdU9BSWw2VnBHRldZdmo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwaPIAwQA wgm1MA0GCSqGSIb3DQEBCwUAA4IBAQAptpx8hVrmY6XfQcQuTuVLu/1lUTMxfk6S IXzX/k83s4GbWSuy/NAM5VeNP1kvuupJzmGeh9/I/rB/NDw69Idjp57v+kCaD1qH rbWDP3I1FsxuGm9Gd7OznuKgbJlPZ2BLCiC7q3muOPhxNduM0xiOWksO7J3OyA/h SxgdFmBX0PU7Mc9TQ4u0HpUFNJOQGGXX14P/mmDaioOd3POaLU58pAS88KCrcyie t/iolVAM0/qTRBUBZoIV7qibhRwCUkYbb9uNo5GFFoY1x9Iy5b7iwad5lrjpNNPr zgoLdBhoRHSQ45PNOQgWHoS92xdLxkzEYTuASZBaFU9X3NLWpAca -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:36 2026 by rpki-client