This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wu6TKtqX8CuSo4_AWguNrTmNuN8.roa File: wu6TKtqX8CuSo4_AWguNrTmNuN8.roa (raw, json) Hash identifier: Nxn6u5OMyCtL1/x2KM/pB3Sg86WT/n1xBMBOjVbLtSk= Subject key identifier: C2:EE:93:2A:DA:97:F0:2B:92:A3:8F:C0:5A:0B:8D:AD:39:8D:B8:DF Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D36DF16EF55666E110BEAE12CB761 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wu6TKtqX8CuSo4_AWguNrTmNuN8.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30937 IP address blocks: 80.68.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:36:df:16:ef:55:66:6e:11:0b:ea:e1:2c:b7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2ee932ada97f02b92a38fc05a0b8dad398db8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:36:0f:eb:be:73:e9:14:d6:0c:0d:25:b4: 8a:f7:36:80:07:b4:bc:bf:09:fd:be:95:4e:76:e6: db:86:9f:62:77:d7:05:1b:69:69:f4:c2:d8:a3:ac: 00:14:b8:22:f4:2c:e5:63:84:b3:ef:a7:4b:aa:d0: 40:64:db:92:f0:1e:b4:d2:eb:25:72:03:ac:df:d5: 9f:ca:c7:e3:86:bb:d1:6c:4e:a0:cf:3d:9a:b8:b2: 84:a0:1b:ad:3c:50:8a:5c:32:dd:89:02:10:16:ca: e2:bb:65:92:5c:1a:a7:a8:f5:2e:12:94:8c:92:5e: 5b:ff:a8:05:3c:11:89:b6:51:6c:7d:06:f3:99:a7: 7d:ec:d5:0c:90:64:7a:a8:9e:0e:bc:58:1d:53:c5: 1d:24:99:f9:2e:72:21:ee:25:05:c2:69:42:1a:c9: 89:dc:7f:11:59:43:20:48:e1:ca:c6:e9:c7:71:88: 22:83:ff:a2:76:fd:52:85:c5:9d:5e:79:51:d2:db: ce:af:08:ed:56:a3:74:de:12:71:21:e4:77:53:15: 60:67:38:94:08:0e:9d:c5:94:53:56:c4:05:1e:44: 74:9b:f1:77:f0:48:a4:de:c9:3a:1e:15:68:51:93: 3c:c4:f3:ac:5b:46:3e:8e:32:6f:43:fa:c4:c0:63: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EE:93:2A:DA:97:F0:2B:92:A3:8F:C0:5A:0B:8D:AD:39:8D:B8:DF X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wu6TKtqX8CuSo4_AWguNrTmNuN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.68.155.0/24 Signature Algorithm: sha256WithRSAEncryption 04:c6:65:39:38:e8:20:aa:aa:93:40:e2:91:c1:09:dc:9d:45: 90:8d:d3:56:60:ea:8a:42:9c:80:a0:ef:f5:b3:c9:97:7f:d2: ca:58:dd:94:de:ff:6b:d3:8c:8d:5b:c4:19:44:da:78:cc:31: c1:95:07:5a:31:a4:35:1b:f5:c8:50:29:f7:6e:6a:41:b4:97: ac:ac:8f:d2:7a:9a:c3:91:84:e1:d4:29:31:ae:ad:ae:e6:4c: c2:71:f6:c4:a3:b5:7d:ff:1f:0d:a5:cf:9e:fa:07:1b:db:d5: 2a:25:87:fb:be:95:54:51:1a:af:31:6a:e5:da:f4:2e:6e:34: eb:c5:0e:21:f9:b5:85:18:2d:b9:f6:76:d6:00:dd:0f:8a:1c: 05:27:bc:2e:1c:b9:f8:64:9f:0d:53:ef:6e:fd:a4:72:3d:83: 80:cf:0b:bb:78:ed:f1:95:57:de:e7:04:be:92:92:f3:37:d2: ca:94:57:e1:f3:47:dc:86:f8:1e:21:54:85:ee:f7:a3:3e:e1: 24:a3:31:ba:21:d9:5c:e5:e9:d3:70:e3:e0:b8:7c:6b:ee:fd: 2e:f2:bf:0e:54:99:ce:ed:58:56:3b:55:cb:77:8b:f4:2e:a6: e2:3f:91:07:e5:b4:97:fd:eb:4a:3e:44:21:88:8c:85:7c:fe: c2:68:2c:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTbfFu9VZm4RC+rhLLdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmVlOTMyYWRhOTdmMDJiOTJhMzhmYzA1YTBiOGRhZDM5OGRiOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lc2D+u+c+kU1gwNJbSK9zaAB7S8 vwn9vpVOdubbhp9id9cFG2lp9MLYo6wAFLgi9CzlY4Sz76dLqtBAZNuS8B600usl cgOs39WfysfjhrvRbE6gzz2auLKEoButPFCKXDLdiQIQFsriu2WSXBqnqPUuEpSM kl5b/6gFPBGJtlFsfQbzmad97NUMkGR6qJ4OvFgdU8UdJJn5LnIh7iUFwmlCGsmJ 3H8RWUMgSOHKxunHcYgig/+idv1ShcWdXnlR0tvOrwjtVqN03hJxIeR3UxVgZziU CA6dxZRTVsQFHkR0m/F38Eik3sk6HhVoUZM8xPOsW0Y+jjJvQ/rEwGNVRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLukyral/ArkqOPwFoLja05jbjfMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvd3U2VEt0cVg4Q3VTbzRfQVdndU5yVG1OdU44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUESbMA0G CSqGSIb3DQEBCwUAA4IBAQAExmU5OOggqqqTQOKRwQncnUWQjdNWYOqKQpyAoO/1 s8mXf9LKWN2U3v9r04yNW8QZRNp4zDHBlQdaMaQ1G/XIUCn3bmpBtJesrI/SeprD kYTh1Ckxrq2u5kzCcfbEo7V9/x8Npc+e+gcb29UqJYf7vpVUURqvMWrl2vQubjTr xQ4h+bWFGC259nbWAN0PihwFJ7wuHLn4ZJ8NU+9u/aRyPYOAzwu7eO3xlVfe5wS+ kpLzN9LKlFfh80fchvgeIVSF7vejPuEkozG6Idlc5enTcOPguHxr7v0u8r8OVJnO 7VhWO1XLd4v0LqbiP5EH5bSX/etKPkQhiIyFfP7CaCyY -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:05 2026 by rpki-client