This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/ipwbth9z_kAmFFiQQC69LkO_nQw.roa File: ipwbth9z_kAmFFiQQC69LkO_nQw.roa (raw, json) Hash identifier: NejJVwemsx7RaWRb+qhN37iXZFwIo50zil0wLKpDlFw= Subject key identifier: 8A:9C:1B:B6:1F:73:FE:40:26:14:58:90:40:2E:BD:2E:43:BF:9D:0C Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c Certificate serial: 019B7AC860EC8E5A76676C4B297F9BDC5940 Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/ipwbth9z_kAmFFiQQC69LkO_nQw.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39645 IP address blocks: 195.246.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:60:ec:8e:5a:76:67:6c:4b:29:7f:9b:dc:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a9c1bb61f73fe4026145890402ebd2e43bf9d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ed:44:32:6c:b7:58:db:09:cf:35:cb:e6:52: f8:30:d8:66:42:59:bd:f0:c7:e7:2e:1f:ae:f7:ff: b4:e0:50:e6:04:9b:68:cb:6b:da:65:ec:ea:e6:91: e4:7c:b4:35:c9:f5:ab:d1:f0:9a:3f:88:a1:00:92: 4b:98:55:5a:e2:42:c1:5a:a4:a7:da:a3:2b:24:c3: 0b:6a:c8:50:6b:44:fa:68:3a:66:9a:24:77:00:09: 12:61:a9:e3:c9:5d:b2:ef:45:d0:e2:56:60:d4:27: 6e:08:9f:6d:4b:ad:f7:d0:96:c6:8f:f5:57:3e:eb: 23:92:af:28:af:f2:d2:56:04:6d:71:ea:a1:5c:f0: fd:be:15:f3:4f:56:09:5e:19:b5:db:b6:72:8a:d7: b0:72:30:80:9c:bd:da:d1:eb:c4:39:8d:ad:b8:8b: 0c:59:d7:5d:1e:fa:94:af:ed:10:a8:ba:81:36:a0: 26:3f:65:42:3e:e9:ec:74:aa:06:dc:9c:2f:9e:c4: 89:3b:61:94:ae:3c:50:d8:5c:b2:14:47:fc:ba:5f: 2b:a6:c6:90:af:d3:b5:ff:ad:1e:94:40:61:1d:fa: 87:91:19:1a:7d:08:0c:fe:2c:6b:36:98:b7:07:6f: be:70:23:cb:e9:2d:3d:39:4a:68:cd:ba:fc:38:f8: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9C:1B:B6:1F:73:FE:40:26:14:58:90:40:2E:BD:2E:43:BF:9D:0C X509v3 Authority Key Identifier: keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/ipwbth9z_kAmFFiQQC69LkO_nQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.246.252.0/23 Signature Algorithm: sha256WithRSAEncryption 06:ff:08:b9:9c:95:f6:b8:28:8d:82:a6:13:93:bd:cf:9e:96: ad:21:44:1d:04:26:71:f1:34:d8:3c:73:bc:1e:15:34:8e:5e: 62:42:2f:0b:97:a9:49:61:bf:05:61:e4:db:84:01:92:5b:c4: ff:1f:01:2c:48:c3:17:a3:70:8a:d6:f0:39:9b:15:ff:c2:a6: ab:a7:51:64:1d:df:f2:bd:e1:b8:c4:a7:45:b7:3c:55:80:d4: 2e:b9:8a:cc:3d:4b:a3:c3:95:d9:c1:52:94:af:46:3d:89:df: 68:bd:47:43:85:ef:1d:84:bb:64:8f:1d:7b:e3:80:ff:6c:94: b6:30:e3:31:38:1a:06:87:82:b9:27:00:2d:7e:08:d4:90:df: 52:54:07:26:98:02:ca:9a:64:04:57:27:3b:a7:4f:f7:8a:68: c1:8a:2d:44:fa:f9:d0:7e:01:28:29:47:ee:d9:9a:aa:d2:d4: 67:26:95:e3:0c:3d:6e:c7:f1:51:e3:38:30:f9:df:73:6f:1d: 2a:7d:97:ca:03:6c:60:2f:e3:b9:99:23:14:01:fc:ce:69:f7: 69:2a:76:27:f8:6e:a4:52:2e:e9:fc:8c:66:74:c8:e4:51:cd: f3:70:c5:14:ac:2c:07:67:aa:b7:c7:32:c9:6f:2c:57:73:15: a3:c5:3e:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGDsjlp2Z2xLKX+b3FlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOGFhYmEwZjQ2YmFhMTQ0ZmRiMDkzOGU5MWMxNGY5NGM2 MTY1MGMwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTljMWJiNjFmNzNmZTQwMjYxNDU4OTA0MDJlYmQyZTQzYmY5ZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O1EMmy3WNsJzzXL5lL4MNhmQlm9 8MfnLh+u9/+04FDmBJtoy2vaZezq5pHkfLQ1yfWr0fCaP4ihAJJLmFVa4kLBWqSn 2qMrJMMLashQa0T6aDpmmiR3AAkSYanjyV2y70XQ4lZg1CduCJ9tS6330JbGj/VX Pusjkq8or/LSVgRtceqhXPD9vhXzT1YJXhm127ZyitewcjCAnL3a0evEOY2tuIsM WdddHvqUr+0QqLqBNqAmP2VCPunsdKoG3JwvnsSJO2GUrjxQ2FyyFEf8ul8rpsaQ r9O1/60elEBhHfqHkRkafQgM/ixrNpi3B2++cCPL6S09OUpozbr8OPjbwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIqcG7Yfc/5AJhRYkEAuvS5Dv50MMB8GA1UdIwQY MBaAFN2Kq6D0a6oUT9sJOOkcFPlMYWUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjIt YTgwYzk0NzYxZDIzLzEvaXB3YnRoOXpfa0FtRkZpUVFDNjlMa09fblF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjItYTgwYzk0NzYxZDIz LzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/b8MA0G CSqGSIb3DQEBCwUAA4IBAQAG/wi5nJX2uCiNgqYTk73PnpatIUQdBCZx8TTYPHO8 HhU0jl5iQi8Ll6lJYb8FYeTbhAGSW8T/HwEsSMMXo3CK1vA5mxX/wqarp1FkHd/y veG4xKdFtzxVgNQuuYrMPUujw5XZwVKUr0Y9id9ovUdDhe8dhLtkjx1744D/bJS2 MOMxOBoGh4K5JwAtfgjUkN9SVAcmmALKmmQEVyc7p0/3imjBii1E+vnQfgEoKUfu 2Zqq0tRnJpXjDD1ux/FR4zgw+d9zbx0qfZfKA2xgL+O5mSMUAfzOafdpKnYn+G6k Ui7p/IxmdMjkUc3zcMUUrCwHZ6q3xzLJbyxXcxWjxT7/ -----END CERTIFICATE-----Generated at Tue Jan 13 01:17:29 2026 by rpki-client