This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/wGaqU_DNliz6bO3fuK5PtZAOWpA.roa File: wGaqU_DNliz6bO3fuK5PtZAOWpA.roa (raw, json) Hash identifier: tPysOkFuZLc2+Bw4qaBrfBbJsbT2UW/meawq1uqH85g= Subject key identifier: C0:66:AA:53:F0:CD:96:2C:FA:6C:ED:DF:B8:AE:4F:B5:90:0E:5A:90 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37F1123E42DC4731900A559D1088DC Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/wGaqU_DNliz6bO3fuK5PtZAOWpA.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61418 IP address blocks: 62.244.224.0/24 maxlen: 24 195.87.95.0/24 maxlen: 24 195.87.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f1:12:3e:42:dc:47:31:90:0a:55:9d:10:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c066aa53f0cd962cfa6ceddfb8ae4fb5900e5a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:ee:5a:83:d8:21:e3:ee:ab:e6:c8:1f:29: 20:ec:87:29:82:fb:e5:f1:b7:40:69:b0:4d:3a:35: 00:c8:6d:4e:e1:55:f6:c0:6b:6c:d8:25:15:7c:96: 04:98:53:5f:d0:eb:8b:aa:61:c5:f0:52:32:96:7c: ab:9d:34:da:ae:74:bb:e1:f6:40:85:4c:bb:be:fb: 3a:e9:2d:81:ba:40:53:fb:34:ed:8a:53:42:d2:8a: f4:1d:2e:b7:f0:a9:1e:f4:a3:7a:28:21:e7:d2:cc: bc:d8:18:56:46:f3:d3:2c:6a:5a:ff:36:a2:72:c9: 3b:96:98:b4:3e:76:78:cc:29:3b:15:5d:40:ac:75: d8:d7:48:50:01:fa:e0:95:2e:ce:2e:8d:b6:4d:a3: 21:c8:fe:7b:05:3a:b9:a8:e8:ba:f7:1d:55:13:6e: b4:ac:fb:07:ab:2c:22:a5:49:77:41:b2:82:47:6b: 92:fc:4f:2a:dd:cb:48:a9:94:fb:08:38:bd:aa:8e: ef:5b:ea:b3:07:f4:1a:63:a0:6d:15:3a:df:37:5e: d8:4f:68:d6:2a:12:dd:e4:aa:18:65:bd:98:6e:64: 2b:3e:79:d6:e9:82:15:13:12:54:66:cd:9a:e4:12: 0a:c7:c4:a5:95:25:fd:e8:b4:fc:85:ca:2c:64:fd: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:66:AA:53:F0:CD:96:2C:FA:6C:ED:DF:B8:AE:4F:B5:90:0E:5A:90 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/wGaqU_DNliz6bO3fuK5PtZAOWpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.224.0/24 195.87.95.0/24 195.87.125.0/24 Signature Algorithm: sha256WithRSAEncryption ce:d0:80:85:18:07:d9:80:dd:30:5c:58:3a:38:bb:1e:bb:66: ad:e8:7c:0b:bc:b7:28:2c:05:45:3f:99:f4:40:cd:3d:a2:4f: e9:de:28:b2:55:41:34:33:7e:59:64:0f:f2:9e:fd:09:5f:6f: d7:83:6c:25:53:43:d4:8b:fb:a2:2c:20:b9:70:26:15:05:d7: aa:79:d4:cd:b6:f6:9f:c2:b8:76:e3:bc:4a:37:61:d7:60:bd: e0:a5:84:33:f9:f5:e1:2a:18:b3:af:68:e1:dc:1c:d0:fb:b2: 70:a8:6d:f4:bf:78:18:00:2e:ff:02:d1:51:69:29:34:8c:52: 52:78:01:68:c3:7a:70:05:2c:9e:89:db:c3:d1:bf:53:40:e2: 8b:33:73:7b:1d:06:af:68:44:03:6e:0f:fe:7a:d0:1d:bf:c1: 19:00:df:89:56:05:59:1e:2a:9b:7b:0e:f1:8f:0a:fb:b4:83: aa:58:88:9d:b1:f8:9d:16:cf:75:39:91:fb:1d:73:85:c0:9d: 03:9e:f8:e0:76:ef:b1:5f:24:39:9c:68:01:af:3d:89:95:ba: b6:78:64:5b:37:23:ad:1f:d9:83:10:82:9c:62:56:40:28:bd: a4:c1:29:f3:c7:0e:53:6b:cc:97:c5:88:cd:10:72:85:c0:f5: 66:05:41:68 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N/ESPkLcRzGQClWdEIjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDY2YWE1M2YwY2Q5NjJjZmE2Y2VkZGZiOGFlNGZiNTkwMGU1YTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmnuWoPYIePuq+bIHykg7Icpgvvl 8bdAabBNOjUAyG1O4VX2wGts2CUVfJYEmFNf0OuLqmHF8FIylnyrnTTarnS74fZA hUy7vvs66S2BukBT+zTtilNC0or0HS638Kke9KN6KCHn0sy82BhWRvPTLGpa/zai csk7lpi0PnZ4zCk7FV1ArHXY10hQAfrglS7OLo22TaMhyP57BTq5qOi69x1VE260 rPsHqywipUl3QbKCR2uS/E8q3ctIqZT7CDi9qo7vW+qzB/QaY6BtFTrfN17YT2jW KhLd5KoYZb2YbmQrPnnW6YIVExJUZs2a5BIKx8SllSX96LT8hcosZP0/OwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMBmqlPwzZYs+mzt37iuT7WQDlqQMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvd0dhcVVfRE5saXo2Yk8zZnVLNVB0WkFPV3BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPvTgAwQA w1dfAwQAw1d9MA0GCSqGSIb3DQEBCwUAA4IBAQDO0ICFGAfZgN0wXFg6OLseu2at 6HwLvLcoLAVFP5n0QM09ok/p3iiyVUE0M35ZZA/ynv0JX2/Xg2wlU0PUi/uiLCC5 cCYVBdeqedTNtvafwrh247xKN2HXYL3gpYQz+fXhKhizr2jh3BzQ+7JwqG30v3gY AC7/AtFRaSk0jFJSeAFow3pwBSyeidvD0b9TQOKLM3N7HQavaEQDbg/+etAdv8EZ AN+JVgVZHiqbew7xjwr7tIOqWIidsfidFs91OZH7HXOFwJ0Dnvjgdu+xXyQ5nGgB rz2Jlbq2eGRbNyOtH9mDEIKcYlZAKL2kwSnzxw5Ta8yXxYjNEHKFwPVmBUFo -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:44 2026 by rpki-client