This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/w15_5Pw6YNCa9BuZawakXYCf3M8.roa File: w15_5Pw6YNCa9BuZawakXYCf3M8.roa (raw, json) Hash identifier: KKbNWbjHOrntBAMd1tqvEzHYIX6t8YcsC3l308ukvLc= Subject key identifier: C3:5E:7F:E4:FC:3A:60:D0:9A:F4:1B:99:6B:06:A4:5D:80:9F:DC:CF Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c Certificate serial: 019B7910F7513731F89513898FF49B571DA9 Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/w15_5Pw6YNCa9BuZawakXYCf3M8.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f7:51:37:31:f8:95:13:89:8f:f4:9b:57:1d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c35e7fe4fc3a60d09af41b996b06a45d809fdccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:32:a2:6b:0c:6d:9d:ba:bd:ad:3f:d7:7c:0d: db:46:8f:9f:cf:88:bf:07:b5:3e:1a:32:06:57:24: 1a:9e:6e:a2:43:24:f6:e8:8d:a3:60:c2:ac:fb:61: 8c:d6:3d:30:31:0d:d0:13:4e:92:df:28:4a:5a:22: e5:6b:30:b4:cf:e1:a2:12:60:32:c7:46:6b:c6:f0: 8d:3b:e5:21:9a:d6:5c:ad:ea:24:7c:35:0c:48:4f: a2:5a:11:bf:54:33:db:e8:2a:2e:f4:f2:60:2e:00: a9:77:96:7c:91:f7:84:5f:06:fb:e8:b9:99:87:a4: ca:24:0d:86:67:ab:c0:e9:91:fa:6b:5b:90:a0:21: d8:d8:85:55:0d:02:bd:ce:b2:2d:21:72:9b:f0:72: d1:12:3e:03:65:1e:4d:ee:23:07:9c:53:14:fc:9e: 5d:34:ef:50:18:33:c2:33:ba:9e:6d:3f:50:2b:7f: 53:de:c3:0d:71:59:43:08:a9:51:d7:fb:2f:0b:17: 0b:50:15:0b:7e:d7:21:bc:8a:e1:ea:2e:8c:7b:0c: db:32:d3:d4:26:3f:6d:49:49:00:5d:9d:af:d0:7c: 3d:fa:3d:d6:4a:ba:55:9c:50:c7:f5:88:79:a8:ed: d4:d3:8e:76:39:e6:9c:5d:a9:0b:0a:3b:1a:3e:e9: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:7F:E4:FC:3A:60:D0:9A:F4:1B:99:6B:06:A4:5D:80:9F:DC:CF X509v3 Authority Key Identifier: keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/w15_5Pw6YNCa9BuZawakXYCf3M8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 46:80:9d:a2:34:6b:76:db:74:19:54:91:6f:4c:a2:97:ac:b3: 8e:ec:1a:ab:f5:bf:6b:45:a9:5a:b6:a6:7a:f2:d3:81:4c:f1: 52:10:45:cb:03:c6:c9:ee:a5:0b:75:2e:83:7d:2e:b0:45:96: a1:d3:44:dc:d3:59:e8:7a:8e:57:c1:db:ab:8d:78:67:03:56: a1:09:91:37:e3:5b:77:f5:20:b0:c4:75:e0:a1:69:ff:e3:a5: de:bf:8f:35:31:48:14:d0:01:96:47:9a:c8:8f:58:05:6d:ba: d7:9c:b0:bd:e8:fd:5c:47:20:1e:5d:76:78:37:4c:61:12:73: 7c:a1:8e:f2:c2:06:fd:92:a0:9f:c6:11:be:1d:22:a5:30:ce: 1a:97:89:5e:63:f6:89:74:49:ac:67:65:3a:ce:71:3a:63:e6: 03:4f:e4:a2:d1:02:ec:16:36:d3:3d:63:eb:8f:5a:a9:d5:3f: 20:2a:75:2a:26:2a:b2:f8:32:64:ea:bb:49:c8:6a:df:32:f2: 47:d4:5a:25:d8:5d:50:d1:5a:48:9e:de:4b:21:67:5f:1f:46: fc:82:fa:ac:f1:a7:1b:30:32:52:14:5d:c6:04:6e:f7:3e:c5: 93:75:19:9d:47:b9:b1:ab:2c:da:c5:8a:c6:75:17:63:4b:7a: 02:e7:04:7e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EPdRNzH4lROJj/SbVx2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh MDQyOWMwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzVlN2ZlNGZjM2E2MGQwOWFmNDFiOTk2YjA2YTQ1ZDgwOWZkY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jKiawxtnbq9rT/XfA3bRo+fz4i/ B7U+GjIGVyQanm6iQyT26I2jYMKs+2GM1j0wMQ3QE06S3yhKWiLlazC0z+GiEmAy x0ZrxvCNO+UhmtZcreokfDUMSE+iWhG/VDPb6Cou9PJgLgCpd5Z8kfeEXwb76LmZ h6TKJA2GZ6vA6ZH6a1uQoCHY2IVVDQK9zrItIXKb8HLREj4DZR5N7iMHnFMU/J5d NO9QGDPCM7qebT9QK39T3sMNcVlDCKlR1/svCxcLUBULftchvIrh6i6MewzbMtPU Jj9tSUkAXZ2v0Hw9+j3WSrpVnFDH9Yh5qO3U0452OeacXakLCjsaPun+6wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMNef+T8OmDQmvQbmWsGpF2An9zPMB8GA1UdIwQY MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt NmFhNDQzNTI4Y2U1LzEvdzE1XzVQdzZZTkNhOUJ1WmF3YWtYWUNmM004LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1 LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEaAnaI0a3bbdBlUkW9M opess47sGqv1v2tFqVq2pnry04FM8VIQRcsDxsnupQt1LoN9LrBFlqHTRNzTWeh6 jlfB26uNeGcDVqEJkTfjW3f1ILDEdeChaf/jpd6/jzUxSBTQAZZHmsiPWAVtutec sL3o/VxHIB5ddng3TGESc3yhjvLCBv2SoJ/GEb4dIqUwzhqXiV5j9ol0SaxnZTrO cTpj5gNP5KLRAuwWNtM9Y+uPWqnVPyAqdSomKrL4MmTqu0nIat8y8kfUWiXYXVDR Wkie3kshZ18fRvyC+qzxpxswMlIUXcYEbvc+xZN1GZ1HubGrLNrFisZ1F2NLegLn BH4= -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:53 2026 by rpki-client