This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/wzT99Y6VJeV-LawXmeG4uyPQn74.roa File: wzT99Y6VJeV-LawXmeG4uyPQn74.roa (raw, json) Hash identifier: PiyyePtLis6XjJaibOMtUj5qAK5xdPa/K7tKPu4NwLs= Subject key identifier: C3:34:FD:F5:8E:95:25:E5:7E:2D:AC:17:99:E1:B8:BB:23:D0:9F:BE Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019B4ABD2A14CB5B7792A62595B4622C8856 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/wzT99Y6VJeV-LawXmeG4uyPQn74.roa Signing time: Tue 23 Dec 2025 10:24:29 +0000 ROA not before: Tue 23 Dec 2025 10:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42337 IP address blocks: 193.27.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:bd:2a:14:cb:5b:77:92:a6:25:95:b4:62:2c:88:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Dec 23 10:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c334fdf58e9525e57e2dac1799e1b8bb23d09fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fb:64:cb:44:85:7e:8e:04:2a:7d:a0:f2:dd: 7d:57:53:ee:06:fd:08:bb:fe:c7:83:e7:61:04:da: 11:49:fe:c1:2a:18:d7:b3:8b:bf:00:b1:fe:8f:34: eb:df:22:e5:74:3e:81:e7:7d:b0:c1:5f:88:2d:76: 0a:7b:7f:e6:ef:01:98:57:bc:a3:fd:3a:79:98:09: b9:42:9b:59:22:9b:3e:1a:a3:7d:9d:c3:34:69:04: ee:8c:ef:d3:f8:0c:8a:61:57:16:f2:66:05:12:b9: 82:cc:3d:ad:f5:02:0b:75:b9:36:d9:74:c4:47:b5: 9e:7a:0b:dd:0a:3b:d2:5b:f2:73:02:ee:66:86:0a: 05:76:28:b0:72:4b:0f:e1:00:90:94:1c:ff:96:c0: 24:aa:dd:57:ed:6e:3e:3c:e5:6b:8d:ed:32:56:44: 0d:e4:d1:8e:80:b5:d4:a4:63:55:3a:6b:18:9e:34: 75:22:79:4f:72:e7:4e:cd:26:d0:7b:06:ff:5e:21: d1:dc:f0:d1:2c:f9:ef:8e:84:1d:4f:42:c0:6a:b1: 9f:bd:62:f1:38:42:f8:81:46:39:fc:71:09:69:eb: 51:6f:61:65:1a:ae:98:8d:29:61:43:fe:b0:d7:ff: 7f:25:79:e0:bf:6c:83:03:5c:ae:b6:18:92:8a:e5: a5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:34:FD:F5:8E:95:25:E5:7E:2D:AC:17:99:E1:B8:BB:23:D0:9F:BE X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/wzT99Y6VJeV-LawXmeG4uyPQn74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.27.9.0/24 Signature Algorithm: sha256WithRSAEncryption 14:6c:d9:a3:97:cc:19:be:3b:ca:4b:28:ba:8a:f9:86:f3:fa: 66:c7:e1:a1:9f:6c:42:7d:34:3e:98:06:3d:a4:25:96:80:91: 73:d2:9a:02:fb:51:74:ab:23:99:42:f6:f3:55:90:e7:6e:ab: 0d:58:f5:35:9c:6d:ba:8e:76:e4:5c:06:f2:7e:47:b6:15:60: c7:58:af:50:89:e8:71:d0:43:69:78:d5:68:c2:5d:74:34:7f: 0e:ef:81:bf:1b:0b:d3:e1:14:ab:b8:bc:bd:aa:86:87:17:10: 9f:3b:26:77:92:13:3f:75:23:eb:21:1f:f2:be:49:24:3c:3c: a3:6b:2f:de:5d:b5:6f:d7:cd:73:d0:c7:ab:ec:f3:7f:2c:8a: bf:fb:da:26:f3:14:bf:f0:33:1d:09:25:f8:90:78:b2:b6:e7: 7b:79:29:10:1d:b5:42:73:b2:5e:9e:76:75:e7:4d:57:82:06: e0:f2:5e:8a:e7:9f:b6:6c:1e:70:af:77:2e:6c:b6:91:4b:1c: 65:a9:2b:e0:6d:be:ee:5a:cb:c9:94:33:13:9a:87:54:38:32: 73:dc:ed:a5:24:d8:8e:8c:3e:9f:5c:52:1d:93:1d:67:39:0f: 11:00:e7:36:ab:21:69:1d:3e:56:b2:1f:c9:8c:c6:a2:c4:40: df:91:22:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtKvSoUy1t3kqYllbRiLIhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjUxMjIzMTAyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzM0ZmRmNThlOTUyNWU1N2UyZGFjMTc5OWUxYjhiYjIzZDA5ZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/tky0SFfo4EKn2g8t19V1PuBv0I u/7Hg+dhBNoRSf7BKhjXs4u/ALH+jzTr3yLldD6B532wwV+ILXYKe3/m7wGYV7yj /Tp5mAm5QptZIps+GqN9ncM0aQTujO/T+AyKYVcW8mYFErmCzD2t9QILdbk22XTE R7WeegvdCjvSW/JzAu5mhgoFdiiwcksP4QCQlBz/lsAkqt1X7W4+POVrje0yVkQN 5NGOgLXUpGNVOmsYnjR1InlPcudOzSbQewb/XiHR3PDRLPnvjoQdT0LAarGfvWLx OEL4gUY5/HEJaetRb2FlGq6YjSlhQ/6w1/9/JXngv2yDA1yuthiSiuWl2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMM0/fWOlSXlfi2sF5nhuLsj0J++MB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvd3pUOTlZNlZKZVYtTGF3WG1lRzR1eVBRbjc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRsJMA0G CSqGSIb3DQEBCwUAA4IBAQAUbNmjl8wZvjvKSyi6ivmG8/pmx+Ghn2xCfTQ+mAY9 pCWWgJFz0poC+1F0qyOZQvbzVZDnbqsNWPU1nG26jnbkXAbyfke2FWDHWK9Qiehx 0ENpeNVowl10NH8O74G/GwvT4RSruLy9qoaHFxCfOyZ3khM/dSPrIR/yvkkkPDyj ay/eXbVv181z0Mer7PN/LIq/+9om8xS/8DMdCSX4kHiytud7eSkQHbVCc7JennZ1 501Xggbg8l6K55+2bB5wr3cubLaRSxxlqSvgbb7uWsvJlDMTmodUODJz3O2lJNiO jD6fXFIdkx1nOQ8RAOc2qyFpHT5Wsh/JjMaixEDfkSJb -----END CERTIFICATE-----Generated at Tue Dec 30 00:19:25 2025 by rpki-client