This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/RWhg5dykMAyiD73Q4T3IDgPuoVY.roa File: RWhg5dykMAyiD73Q4T3IDgPuoVY.roa (raw, json) Hash identifier: btU2vDOWfazE6wfyTegJ86hgsn+iO0cAhM7Jywody24= Subject key identifier: 45:68:60:E5:DC:A4:30:0C:A2:0F:BD:D0:E1:3D:C8:0E:03:EE:A1:56 Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d Certificate serial: 019B7FF2A130C65B646ADA8A36B44A508CA5 Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/RWhg5dykMAyiD73Q4T3IDgPuoVY.roa Signing time: Fri 02 Jan 2026 18:22:46 +0000 ROA not before: Fri 02 Jan 2026 18:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 212.89.192.0/24 maxlen: 24 212.89.200.0/21 maxlen: 21 212.89.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a1:30:c6:5b:64:6a:da:8a:36:b4:4a:50:8c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d Validity Not Before: Jan 2 18:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=456860e5dca4300ca20fbdd0e13dc80e03eea156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:2e:d2:4f:55:98:1f:86:cb:59:a7:7c:78: 13:f9:bd:5c:7a:5a:fe:cd:36:3b:25:3d:ef:32:d0: 7b:ef:90:a3:4d:57:91:0e:10:9e:04:91:02:b1:91: d9:78:65:d5:d6:c4:fd:36:9f:68:45:44:e4:84:86: 2d:c0:12:74:bd:45:9d:26:d5:0c:70:49:76:fd:82: 96:e9:a6:b9:15:06:91:cb:4b:1a:fb:2e:1d:ba:5b: a7:d1:2f:b3:b9:6d:a8:7f:02:c2:fa:df:c2:5b:9a: 3f:be:6b:55:d2:e1:1a:b0:58:fe:a8:55:ed:3c:e1: db:bd:ce:d4:1d:e5:8b:d9:bd:1f:28:a1:ff:99:26: 6b:65:11:ec:88:c9:be:3d:35:0a:9c:0f:85:3c:9c: fd:4d:8c:b7:86:65:83:88:72:42:e3:7c:01:6c:ee: 24:a9:49:9e:f4:50:cf:f4:6f:6a:15:a9:52:56:77: 91:c1:20:64:22:5f:1c:01:92:40:61:b7:c8:48:7c: 33:55:04:57:0d:5a:e8:1f:f4:3d:11:7a:36:f5:24: be:83:69:75:16:e9:6a:b1:c2:88:e6:a4:c9:32:30: 3e:43:66:85:05:fe:30:57:82:ee:85:86:c1:74:40: 88:2c:1c:02:0a:a8:f4:17:28:10:64:04:58:56:60: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:68:60:E5:DC:A4:30:0C:A2:0F:BD:D0:E1:3D:C8:0E:03:EE:A1:56 X509v3 Authority Key Identifier: keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/RWhg5dykMAyiD73Q4T3IDgPuoVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.89.192.0/24 212.89.200.0-212.89.223.255 Signature Algorithm: sha256WithRSAEncryption 08:63:41:23:e8:46:52:49:eb:35:57:b8:67:b4:e3:7a:fe:12: bd:17:88:8b:67:e3:ee:c6:df:c7:d4:ce:7c:74:b2:84:a1:f7: 93:44:8f:36:c8:dd:b1:71:24:3a:b5:ce:1e:b0:f5:d3:df:2f: 5b:fa:33:18:1e:5e:fc:1e:db:1f:7f:21:12:4c:ed:2b:f1:0a: d8:8f:c3:0e:05:62:45:c8:32:a3:6d:a3:df:78:18:42:e2:42: fb:fa:94:38:7a:e1:77:3c:8d:48:43:a0:f3:46:7c:1b:1e:eb: 18:a1:a9:75:63:d4:4e:49:58:a2:96:f8:f3:4e:89:57:0d:8d: 6c:ab:4f:95:2a:13:8f:8b:05:52:03:5d:d2:dc:68:5f:90:f2: 68:48:9d:73:be:81:4e:f3:98:0d:97:c3:92:76:5a:5d:a1:b1: 35:bc:1a:57:5e:ea:cf:96:02:56:8d:a4:c4:fe:49:d7:c1:ce: e8:f2:62:36:2a:71:36:a2:c7:97:cc:7f:90:24:93:69:04:0c: c2:ca:04:5a:d5:2f:6a:cb:43:6b:bd:58:50:58:b4:f1:9c:e4: e6:86:94:c0:e8:f5:4c:1e:77:81:75:aa:5b:fc:ca:0d:02:73: 96:d6:44:69:e8:97:80:04:0d:9f:74:3f:6a:4c:4c:74:e1:e3: 7f:77:34:67 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/8qEwxltkatqKNrRKUIylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YmNkNzcwZjhlYTNkNDhlY2JiNGMzZWFiODk1ZjQyMmZm YWM5MGQwHhcNMjYwMTAyMTgyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTY4NjBlNWRjYTQzMDBjYTIwZmJkZDBlMTNkYzgwZTAzZWVhMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Eu0k9VmB+Gy1mnfHgT+b1celr+ zTY7JT3vMtB775CjTVeRDhCeBJECsZHZeGXV1sT9Np9oRUTkhIYtwBJ0vUWdJtUM cEl2/YKW6aa5FQaRy0sa+y4dulun0S+zuW2ofwLC+t/CW5o/vmtV0uEasFj+qFXt POHbvc7UHeWL2b0fKKH/mSZrZRHsiMm+PTUKnA+FPJz9TYy3hmWDiHJC43wBbO4k qUme9FDP9G9qFalSVneRwSBkIl8cAZJAYbfISHwzVQRXDVroH/Q9EXo29SS+g2l1 FulqscKI5qTJMjA+Q2aFBf4wV4LuhYbBdECILBwCCqj0FygQZARYVmBfKwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEVoYOXcpDAMog+90OE9yA4D7qFWMB8GA1UdIwQY MBaAFEe813D46j1I7LtMPquJX0Iv+skNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEt YTZkMDAwMjAzZmI1LzEvUldoZzVkeWtNQXlpRDczUTRUM0lEZ1B1b1ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEtYTZkMDAwMjAzZmI1 LzEvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA1FnAMAwD BAPUWcgDBAXUWcAwDQYJKoZIhvcNAQELBQADggEBAAhjQSPoRlJJ6zVXuGe043r+ Er0XiItn4+7G38fUznx0soSh95NEjzbI3bFxJDq1zh6w9dPfL1v6MxgeXvwe2x9/ IRJM7SvxCtiPww4FYkXIMqNto994GELiQvv6lDh64Xc8jUhDoPNGfBse6xihqXVj 1E5JWKKW+PNOiVcNjWyrT5UqE4+LBVIDXdLcaF+Q8mhInXO+gU7zmA2Xw5J2Wl2h sTW8Glde6s+WAlaNpMT+SdfBzujyYjYqcTaix5fMf5Akk2kEDMLKBFrVL2rLQ2u9 WFBYtPGc5OaGlMDo9Uwed4F1qlv8yg0Cc5bWRGnol4AEDZ90P2pMTHTh4393NGc= -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:23 2026 by rpki-client