This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/rwrTXXvd3xuLJd2WdLXGwxgR7ZU.roa File: rwrTXXvd3xuLJd2WdLXGwxgR7ZU.roa (raw, json) Hash identifier: oMOWLalKve6BcbDPvs16UdYfNlQpBDtwtyZAEUofk5I= Subject key identifier: AF:0A:D3:5D:7B:DD:DF:1B:8B:25:DD:96:74:B5:C6:C3:18:11:ED:95 Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618 Certificate serial: 019B797E9BAC07B06FB1C1626D41BE304AE0 Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/rwrTXXvd3xuLJd2WdLXGwxgR7ZU.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 194.115.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9b:ac:07:b0:6f:b1:c1:62:6d:41:be:30:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618 Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af0ad35d7bdddf1b8b25dd9674b5c6c31811ed95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:69:d2:83:8a:ed:1b:d6:ee:1e:af:bc:e8: 7b:e5:99:f7:8d:c2:df:4c:2d:58:4c:a4:ab:8e:3d: e0:79:96:a1:37:71:0f:6b:af:4c:23:7f:9d:de:be: 50:70:78:7a:0e:89:7b:6a:2f:b2:ca:af:af:88:72: 96:18:0d:61:cf:73:f3:89:df:7d:01:ec:f5:f0:e2: 53:aa:82:71:ca:28:e1:b4:ae:ec:3b:e4:df:8b:95: 8b:70:58:65:3a:1b:10:18:72:b9:5f:f0:e8:89:3a: 3c:77:0a:b5:11:b0:41:aa:f6:07:33:1b:fa:52:2d: 32:c6:e6:9d:0a:43:25:ff:78:ce:8c:73:cb:df:f5: dd:51:56:22:5f:2b:d3:ed:9c:3d:3e:7e:5a:46:1a: ae:c2:88:63:be:a1:d7:c3:7b:17:2b:72:a5:d0:35: a3:38:d7:8f:a3:c4:1e:a6:79:2a:96:fe:24:43:e8: 44:67:85:e1:97:1e:4f:ee:6c:15:db:b2:fe:d6:82: 1e:4a:e6:4d:cc:3d:bf:ae:1f:10:e7:cc:80:6a:49: a8:29:0b:cc:67:5c:53:68:90:c4:ef:1d:27:72:21: 8a:0b:fa:b4:bf:13:36:0e:d3:3a:43:c7:17:2c:e7: 9f:4e:0f:47:6a:47:dc:b9:6d:45:9a:53:34:f7:13: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0A:D3:5D:7B:DD:DF:1B:8B:25:DD:96:74:B5:C6:C3:18:11:ED:95 X509v3 Authority Key Identifier: keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/rwrTXXvd3xuLJd2WdLXGwxgR7ZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.115.182.0/23 Signature Algorithm: sha256WithRSAEncryption 17:d4:ba:0c:72:f1:f0:a6:2a:db:d8:ad:8a:ee:ba:51:5c:ea: 61:ba:52:db:d2:77:01:0b:97:1b:ab:6f:8d:47:c1:d4:43:1e: 75:78:59:1d:7b:9f:8f:10:11:e7:1f:32:dc:e4:69:56:8c:86: 18:13:e4:98:ee:f3:6b:8e:a3:18:c4:70:99:39:c3:29:bb:6a: 46:87:6c:53:c5:a6:08:42:c9:37:6e:21:5d:81:74:1d:bc:bb: 0c:26:4b:07:3d:82:3d:87:26:f6:bd:f6:f9:74:d1:53:b6:29: b0:da:15:20:1a:7e:dd:3e:0a:ef:e0:35:a9:b7:5c:db:85:77: 5e:d1:ca:a9:13:62:15:39:a6:98:fe:37:96:e9:6a:7a:42:b5: 26:95:18:38:33:06:c7:a2:1b:f5:5d:de:22:b3:f4:4d:f9:c2: 96:0d:0a:f2:39:d7:cb:54:e1:79:18:0c:be:9c:71:4d:d0:a4: 9a:73:4b:f7:9a:f4:4a:53:a9:e5:2f:07:b2:b1:b6:42:94:00: ce:4e:6a:0c:fd:9d:5f:34:8a:eb:12:97:84:79:ca:83:e3:21: cb:52:01:a6:bf:3a:b1:d4:e9:52:4b:57:7f:49:dc:26:eb:1a: 07:82:7e:ae:20:8d:bd:82:bf:da:28:c4:78:bf:25:59:c5:43: 07:ff:89:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpusB7BvscFibUG+MErgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmZjOWE5ODMyNjY3YWMwZDZkMWUyNDA2NTUwNTMzYzNi NTU2MTgwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjBhZDM1ZDdiZGRkZjFiOGIyNWRkOTY3NGI1YzZjMzE4MTFlZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTdp0oOK7RvW7h6vvOh75Zn3jcLf TC1YTKSrjj3geZahN3EPa69MI3+d3r5QcHh6Dol7ai+yyq+viHKWGA1hz3Pzid99 Aez18OJTqoJxyijhtK7sO+Tfi5WLcFhlOhsQGHK5X/DoiTo8dwq1EbBBqvYHMxv6 Ui0yxuadCkMl/3jOjHPL3/XdUVYiXyvT7Zw9Pn5aRhquwohjvqHXw3sXK3Kl0DWj ONePo8Qepnkqlv4kQ+hEZ4Xhlx5P7mwV27L+1oIeSuZNzD2/rh8Q58yAakmoKQvM Z1xTaJDE7x0nciGKC/q0vxM2DtM6Q8cXLOefTg9HakfcuW1FmlM09xO2LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8K01173d8biyXdlnS1xsMYEe2VMB8GA1UdIwQY MBaAFLv/yamDJmesDW0eJAZVBTPDtVYYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmIt NzQ5N2U1YThmMTFiLzEvcndyVFhYdmQzeHVMSmQyV2RMWEd3eGdSN1pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmItNzQ5N2U1YThmMTFi LzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnO2MA0G CSqGSIb3DQEBCwUAA4IBAQAX1LoMcvHwpirb2K2K7rpRXOphulLb0ncBC5cbq2+N R8HUQx51eFkde5+PEBHnHzLc5GlWjIYYE+SY7vNrjqMYxHCZOcMpu2pGh2xTxaYI Qsk3biFdgXQdvLsMJksHPYI9hyb2vfb5dNFTtimw2hUgGn7dPgrv4DWpt1zbhXde 0cqpE2IVOaaY/jeW6Wp6QrUmlRg4MwbHohv1Xd4is/RN+cKWDQryOdfLVOF5GAy+ nHFN0KSac0v3mvRKU6nlLweysbZClADOTmoM/Z1fNIrrEpeEecqD4yHLUgGmvzqx 1OlSS1d/Sdwm6xoHgn6uII29gr/aKMR4vyVZxUMH/4kr -----END CERTIFICATE-----Generated at Mon Jan 19 11:49:48 2026 by rpki-client