This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wALkjM0sEl3RDId_W81tySHxBnU.roa File: wALkjM0sEl3RDId_W81tySHxBnU.roa (raw, json) Hash identifier: BiwH78+EtMKm/muVSn3FcR9ImZigU+/7Oxr8XGeX2EU= Subject key identifier: C0:02:E4:8C:CD:2C:12:5D:D1:0C:87:7F:5B:CD:6D:C9:21:F1:06:75 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78343F5AF985B19B542B6E45162A8C58 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wALkjM0sEl3RDId_W81tySHxBnU.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 194.132.24.0/24 maxlen: 24 194.132.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3f:5a:f9:85:b1:9b:54:2b:6e:45:16:2a:8c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c002e48ccd2c125dd10c877f5bcd6dc921f10675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b0:bb:db:d4:5f:26:96:1a:e0:20:f1:30:38: 17:e9:73:e5:b1:77:96:a9:fe:9e:71:ca:72:7d:db: 42:b7:80:36:c0:66:39:15:d5:68:49:f8:02:77:0b: 1b:a9:26:03:70:c6:42:ad:eb:52:12:8c:66:5a:2d: 1b:83:5f:a2:e9:db:2a:d8:c9:9a:3c:fc:99:b9:74: ff:1a:d7:e7:d3:da:6d:72:a2:a3:9e:ea:23:62:f8: 71:31:75:25:a0:cf:a0:ef:47:5b:d8:2c:2c:50:ed: 61:59:87:15:bb:1c:20:68:4e:f5:12:8e:31:32:94: d1:70:ce:84:97:e5:93:c2:3a:fe:79:7c:6b:01:b2: 09:46:5a:00:6b:f1:32:e0:4e:a0:84:62:85:a3:4b: 46:72:93:e2:20:ac:d3:cf:2a:9c:ff:22:c7:2b:be: f0:c1:4b:04:f6:0f:7c:ea:9a:8e:76:e8:ed:63:9b: 10:cd:61:72:18:e2:ee:2f:8f:29:38:8c:10:51:e7: c2:f2:a8:7d:3d:bf:7d:bb:29:80:e4:87:47:5c:87: 08:29:6e:85:3d:3b:13:c1:9d:79:56:6f:31:a5:f2: ad:77:f7:8b:a5:b1:bf:18:7d:66:53:72:94:16:91: cc:dc:5e:09:9e:b0:3e:6f:46:29:0f:6c:f3:2d:de: 76:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:02:E4:8C:CD:2C:12:5D:D1:0C:87:7F:5B:CD:6D:C9:21:F1:06:75 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wALkjM0sEl3RDId_W81tySHxBnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.132.24.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:79:92:c5:57:35:eb:c2:5a:cd:9e:7c:6d:fd:e0:8d:20:a4: 97:a2:e7:b8:39:09:ea:46:25:58:e7:86:39:a6:1c:90:cf:b0: d8:ef:b8:b1:01:86:2b:1d:f5:57:17:cc:b0:21:69:6e:08:b1: 15:24:aa:bb:b2:53:4c:dd:61:74:57:ad:6c:67:34:c8:b2:5f: 76:24:b6:82:3f:70:ad:85:69:30:f6:c5:9b:6c:e6:f7:6f:8a: 0a:1e:e1:50:05:46:64:a1:61:5c:85:5a:35:97:2b:90:4e:70: e7:86:88:65:0b:6c:46:8f:81:4e:17:7f:46:bb:0e:73:c3:22: 74:16:e9:b8:29:41:67:a4:02:47:52:8c:97:72:6a:78:4e:fc: ca:33:aa:6d:61:a3:ca:09:fa:5c:c8:11:6f:86:92:f9:72:54: dc:df:7a:75:3e:6e:a2:38:12:19:d6:74:39:5d:5a:04:42:8d: a4:0a:c4:41:3c:53:df:45:38:5f:9f:61:63:b2:42:da:cc:7e: 02:f2:0e:3f:4a:e0:e8:2c:15:d9:98:ef:16:e2:61:f9:de:e2: 30:8e:53:36:11:a1:28:72:75:fa:22:25:d7:f3:fd:6c:64:84: de:60:57:a5:34:29:f5:7f:57:4a:ca:23:0d:dc:9f:b6:72:c4: 60:b0:7f:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ND9a+YWxm1QrbkUWKoxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDAyZTQ4Y2NkMmMxMjVkZDEwYzg3N2Y1YmNkNmRjOTIxZjEwNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrC729RfJpYa4CDxMDgX6XPlsXeW qf6eccpyfdtCt4A2wGY5FdVoSfgCdwsbqSYDcMZCretSEoxmWi0bg1+i6dsq2Mma PPyZuXT/Gtfn09ptcqKjnuojYvhxMXUloM+g70db2CwsUO1hWYcVuxwgaE71Eo4x MpTRcM6El+WTwjr+eXxrAbIJRloAa/Ey4E6ghGKFo0tGcpPiIKzTzyqc/yLHK77w wUsE9g986pqOdujtY5sQzWFyGOLuL48pOIwQUefC8qh9Pb99uymA5IdHXIcIKW6F PTsTwZ15Vm8xpfKtd/eLpbG/GH1mU3KUFpHM3F4JnrA+b0YpD2zzLd525wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAC5IzNLBJd0QyHf1vNbckh8QZ1MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvd0FMa2pNMHNFbDNSRElkX1c4MXR5U0h4Qm5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwoQYMA0G CSqGSIb3DQEBCwUAA4IBAQCLeZLFVzXrwlrNnnxt/eCNIKSXoue4OQnqRiVY54Y5 phyQz7DY77ixAYYrHfVXF8ywIWluCLEVJKq7slNM3WF0V61sZzTIsl92JLaCP3Ct hWkw9sWbbOb3b4oKHuFQBUZkoWFchVo1lyuQTnDnhohlC2xGj4FOF39Guw5zwyJ0 Fum4KUFnpAJHUoyXcmp4TvzKM6ptYaPKCfpcyBFvhpL5clTc33p1Pm6iOBIZ1nQ5 XVoEQo2kCsRBPFPfRThfn2FjskLazH4C8g4/SuDoLBXZmO8W4mH53uIwjlM2EaEo cnX6IiXX8/1sZITeYFelNCn1f1dKyiMN3J+2csRgsH/Q -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:58 2026 by rpki-client