This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/PWqPuXgW_9Y9TvyR2FkZ0jJYBq8.roa File: PWqPuXgW_9Y9TvyR2FkZ0jJYBq8.roa (raw, json) Hash identifier: 19NEYDyyhBU0DYdUPGu2u1lBZKeokSrHjnAnkDsiz24= Subject key identifier: 3D:6A:8F:B9:78:16:FF:D6:3D:4E:FC:91:D8:59:19:D2:32:58:06:AF Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45 Certificate serial: 019B7834638CC546061BC8F62F54F471A945 Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/PWqPuXgW_9Y9TvyR2FkZ0jJYBq8.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35461 IP address blocks: 93.191.116.0/24 maxlen: 24 93.191.117.0/24 maxlen: 24 93.191.118.0/24 maxlen: 24 93.191.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:63:8c:c5:46:06:1b:c8:f6:2f:54:f4:71:a9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45 Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d6a8fb97816ffd63d4efc91d85919d2325806af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:fd:97:7f:cb:8a:9d:fa:b2:52:aa:2d:53: a7:cd:4f:e3:40:70:97:51:18:f0:fd:42:da:49:23: 7d:55:92:51:04:5c:67:0d:71:50:d0:f0:4e:09:b9: d8:ad:c4:2a:07:a4:c1:90:17:55:b2:41:57:25:7c: 23:e6:54:dd:2a:4e:72:ef:e0:08:72:55:5b:f8:38: 39:e8:fe:62:93:b6:48:dd:e3:21:75:f6:33:18:aa: 2c:22:67:3a:01:e0:34:1e:dd:4c:87:e1:00:29:08: a3:7d:fc:5e:4c:7f:8a:2e:5e:ef:90:f7:cd:3c:58: ac:80:db:bb:81:f4:b2:0a:df:66:0d:c2:97:03:a2: c7:5b:bc:13:ec:bf:cc:e7:8a:05:74:ea:f0:5d:f0: d3:b9:f6:ba:ed:50:0b:36:35:ac:ce:bb:68:0e:7e: fa:2f:4e:eb:68:8b:f2:5e:b1:9c:37:bb:5d:51:75: b9:eb:eb:27:e6:86:1e:a6:4c:d3:d0:65:e0:ea:e7: 78:a9:1c:90:48:6d:00:b3:e8:4c:87:36:f3:b9:8f: 59:80:ab:4e:56:0e:68:52:8a:12:11:9b:57:9c:52: 57:ad:ef:1a:74:19:95:d0:21:03:62:bb:23:85:48: c6:b0:99:3b:73:8b:29:c5:6c:ad:c9:54:c3:3e:99: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6A:8F:B9:78:16:FF:D6:3D:4E:FC:91:D8:59:19:D2:32:58:06:AF X509v3 Authority Key Identifier: keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/PWqPuXgW_9Y9TvyR2FkZ0jJYBq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.116.0/22 Signature Algorithm: sha256WithRSAEncryption dd:32:d3:2f:b3:db:ce:74:99:be:d6:4f:80:d6:a0:0b:13:1d: 07:96:3d:4a:28:d6:16:5d:a4:c4:5f:cf:aa:f0:06:01:77:5d: 5a:24:86:36:89:26:5a:ab:de:ef:bb:5f:07:ac:37:5e:3a:4c: ed:08:45:dd:ab:e9:93:e8:c8:d5:ba:53:a0:8a:30:9a:da:08: fc:78:9b:6c:eb:07:9c:4d:38:de:f5:fa:16:ff:09:e5:d8:9a: e2:6b:c8:6a:55:4b:c8:e5:86:87:8e:90:b1:7e:78:2f:cf:10: 85:d3:73:e3:f4:ab:d6:c2:88:2a:e4:b6:0d:80:56:be:c5:59: 3a:10:fc:8f:ac:b2:4b:ca:b5:a1:71:2b:ac:c0:a2:d2:c3:6c: 9c:b0:10:aa:dd:c4:d8:95:ba:f5:f2:22:4f:84:69:8b:a0:05: 7f:0a:03:e9:f3:c1:10:dc:40:4d:13:f5:90:8b:8c:7b:2a:27: e8:53:98:0f:94:cd:41:de:c1:4d:52:5d:ef:e2:bf:47:20:72: c1:69:79:91:a8:98:b2:e0:aa:78:2b:30:63:09:80:b8:e2:3b: f7:ef:30:7c:83:ac:ea:57:c9:19:08:eb:ea:09:cb:5e:ad:9d: 97:c3:bf:e2:8a:6e:17:c8:7c:02:43:33:2d:f6:b3:e7:31:4b: 7b:30:b2:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGOMxUYGG8j2L1T0calFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTZhMDY4NGQxZDM4YmFjZjQzMzhjMmIwMWRiM2I0MTM3 MGViNDUwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDZhOGZiOTc4MTZmZmQ2M2Q0ZWZjOTFkODU5MTlkMjMyNTgwNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuj9l3/Lip36slKqLVOnzU/jQHCX URjw/ULaSSN9VZJRBFxnDXFQ0PBOCbnYrcQqB6TBkBdVskFXJXwj5lTdKk5y7+AI clVb+Dg56P5ik7ZI3eMhdfYzGKosImc6AeA0Ht1Mh+EAKQijffxeTH+KLl7vkPfN PFisgNu7gfSyCt9mDcKXA6LHW7wT7L/M54oFdOrwXfDTufa67VALNjWszrtoDn76 L07raIvyXrGcN7tdUXW56+sn5oYepkzT0GXg6ud4qRyQSG0As+hMhzbzuY9ZgKtO Vg5oUooSEZtXnFJXre8adBmV0CEDYrsjhUjGsJk7c4spxWytyVTDPpn46QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD1qj7l4Fv/WPU78kdhZGdIyWAavMB8GA1UdIwQY MBaAFLMWoGhNHTi6z0M4wrAds7QTcOtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjct MTRiOTdjZmJhZDQ3LzEvUFdxUHVYZ1dfOVk5VHZ5UjJGa1owakpZQnE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjctMTRiOTdjZmJhZDQ3 LzEvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXb90MA0G CSqGSIb3DQEBCwUAA4IBAQDdMtMvs9vOdJm+1k+A1qALEx0Hlj1KKNYWXaTEX8+q 8AYBd11aJIY2iSZaq97vu18HrDdeOkztCEXdq+mT6MjVulOgijCa2gj8eJts6wec TTje9foW/wnl2Jria8hqVUvI5YaHjpCxfngvzxCF03Pj9KvWwogq5LYNgFa+xVk6 EPyPrLJLyrWhcSuswKLSw2ycsBCq3cTYlbr18iJPhGmLoAV/CgPp88EQ3EBNE/WQ i4x7KifoU5gPlM1B3sFNUl3v4r9HIHLBaXmRqJiy4Kp4KzBjCYC44jv37zB8g6zq V8kZCOvqCcterZ2Xw7/iim4XyHwCQzMt9rPnMUt7MLJ5 -----END CERTIFICATE-----Generated at Mon Jan 12 16:58:47 2026 by rpki-client