This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/wrXPrBkvVYEiubXH_1rHl5x6rRY.roa File: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (raw, json) Hash identifier: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs= Subject key identifier: C2:B5:CF:AC:19:2F:55:81:22:B9:B5:C7:FF:5A:C7:97:9C:7A:AD:16 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C805241CB2B1F5C3388482A8B91AA9B Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/wrXPrBkvVYEiubXH_1rHl5x6rRY.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 92.61.97.0/24 maxlen: 24 92.61.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:52:41:cb:2b:1f:5c:33:88:48:2a:8b:91:aa:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2b5cfac192f558122b9b5c7ff5ac7979c7aad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:31:6f:47:fe:c9:bc:9d:de:d4:28:77:34: 4f:e4:08:04:8e:a1:2a:17:1a:42:57:ba:24:4f:c6: 06:71:46:83:3d:20:64:33:ad:2b:6a:b4:c3:17:ab: 24:cf:84:f0:bb:15:40:d8:f3:29:93:0d:66:68:45: 8c:58:83:f8:fc:bc:4c:f2:03:8f:58:59:8b:87:8b: e6:6a:2d:1c:14:2f:60:8d:4b:8f:fc:04:b6:d1:0f: d8:98:c4:e1:48:55:61:7b:c9:56:29:80:80:2f:0c: 96:42:58:d8:17:37:13:0f:ed:2f:4d:d1:2a:ce:d7: 3e:e3:75:28:c5:77:1e:8d:13:94:ff:45:53:56:68: c9:15:bc:17:84:d3:fd:f3:06:0c:70:f2:96:3c:50: aa:3c:36:62:f8:a9:38:b6:e7:cc:af:cb:e6:e3:f3: d6:6d:a8:d4:38:0d:3f:9c:26:df:05:c3:d8:bb:16: 8b:e3:73:04:b0:9a:42:de:33:e4:5d:b4:a9:84:2c: 45:3b:bf:a0:5b:3b:63:88:10:45:74:67:11:da:3e: cc:08:a2:9f:ec:74:02:6e:04:fa:e9:90:44:5b:d5: 30:7e:84:a3:b3:0b:cf:9e:2b:e9:c4:a9:04:24:6d: c7:e3:74:93:40:81:0b:9d:9a:ae:fa:44:fe:2d:6c: d3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B5:CF:AC:19:2F:55:81:22:B9:B5:C7:FF:5A:C7:97:9C:7A:AD:16 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/wrXPrBkvVYEiubXH_1rHl5x6rRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.61.97.0/24 92.61.108.0/24 Signature Algorithm: sha256WithRSAEncryption 41:5c:86:04:9d:94:0f:b3:d8:f9:0e:b8:16:f1:a4:cb:02:42: e2:f9:bd:3d:3a:55:75:7d:f4:e8:81:ce:9f:31:ab:83:ee:54: 47:0b:d5:2c:f8:a2:85:08:7d:d9:0f:b9:b9:f4:a5:36:f9:cc: 5c:a6:02:06:25:b0:d2:9f:1f:03:d1:83:e2:21:cf:bc:81:14: e5:94:eb:f6:4d:2b:31:5a:7a:68:30:90:1c:c7:e7:f6:d9:c7: 4e:17:ca:f2:ba:77:d7:b5:f1:f8:01:80:8d:e6:53:23:7e:a1: 10:97:12:d1:11:28:1d:e3:6d:49:68:b3:d7:1b:93:0d:2a:7b: 49:c8:31:3e:37:54:f1:48:84:2d:48:1d:39:39:09:cf:d0:04: ec:ce:81:3b:5e:9f:13:be:3e:31:a2:a8:bf:e6:1e:53:5e:80: 1e:63:b1:64:7e:ac:2f:fe:a1:ab:9b:7b:0c:8e:31:13:c4:3c: dd:b6:24:42:4d:34:bc:33:4f:1a:05:72:59:c5:0c:b1:63:88: d9:8f:89:89:f8:d6:5f:70:39:ee:95:8f:d3:90:70:e0:8c:b2: 16:2b:af:58:e0:67:10:23:73:95:da:ad:81:3b:fc:e8:31:f3: 58:e9:3b:71:ef:64:48:f2:32:8a:b4:01:52:e5:f8:3b:57:5f: 30:7a:21:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gFJByysfXDOISCqLkaqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmI1Y2ZhYzE5MmY1NTgxMjJiOWI1YzdmZjVhYzc5NzljN2FhZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsswxb0f+ybyd3tQodzRP5AgEjqEq FxpCV7okT8YGcUaDPSBkM60rarTDF6skz4TwuxVA2PMpkw1maEWMWIP4/LxM8gOP WFmLh4vmai0cFC9gjUuP/AS20Q/YmMThSFVhe8lWKYCALwyWQljYFzcTD+0vTdEq ztc+43UoxXcejROU/0VTVmjJFbwXhNP98wYMcPKWPFCqPDZi+Kk4tufMr8vm4/PW bajUOA0/nCbfBcPYuxaL43MEsJpC3jPkXbSphCxFO7+gWztjiBBFdGcR2j7MCKKf 7HQCbgT66ZBEW9UwfoSjswvPnivpxKkEJG3H43STQIELnZqu+kT+LWzTVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMK1z6wZL1WBIrm1x/9ax5eceq0WMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvd3JYUHJCa3ZWWUVpdWJYSF8xckhsNXg2clJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXD1hAwQA XD1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBXIYEnZQPs9j5DrgW8aTLAkLi+b09OlV1 ffTogc6fMauD7lRHC9Us+KKFCH3ZD7m59KU2+cxcpgIGJbDSnx8D0YPiIc+8gRTl lOv2TSsxWnpoMJAcx+f22cdOF8ryunfXtfH4AYCN5lMjfqEQlxLRESgd421JaLPX G5MNKntJyDE+N1TxSIQtSB05OQnP0ATszoE7Xp8Tvj4xoqi/5h5TXoAeY7Fkfqwv /qGrm3sMjjETxDzdtiRCTTS8M08aBXJZxQyxY4jZj4mJ+NZfcDnulY/TkHDgjLIW K69Y4GcQI3OV2q2BO/zoMfNY6Ttx72RI8jKKtAFS5fg7V18weiH4 -----END CERTIFICATE-----Generated at Wed Jan 21 04:59:48 2026 by rpki-client