This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/9WzxqECMXW8fZGU-rQmRPVWb_os.roa File: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (raw, json) Hash identifier: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U= Subject key identifier: F5:6C:F1:A8:40:8C:5D:6F:1F:64:65:3E:AD:09:91:3D:55:9B:FE:8B Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac Certificate serial: 019B797EE22F6D47DB951F351AE1F8683A26 Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/9WzxqECMXW8fZGU-rQmRPVWb_os.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211541 IP address blocks: 185.244.226.0/24 maxlen: 24 2a10:c640::/48 maxlen: 48 2a10:c640:6170::/48 maxlen: 48 2a10:c640:6575::/48 maxlen: 48 2a10:c640:7573::/48 maxlen: 48 2a10:c640:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e2:2f:6d:47:db:95:1f:35:1a:e1:f8:68:3a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f56cf1a8408c5d6f1f64653ead09913d559bfe8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:47:6f:5f:8d:92:5e:d0:45:4d:27:06:a4: b8:d8:85:85:46:cf:45:96:f6:cd:62:16:e3:09:3a: 22:69:0a:7b:d9:d8:5b:77:51:d5:7c:87:7b:98:c8: 83:e5:65:88:4d:e5:e3:15:7d:c4:1e:48:43:dc:15: e6:03:18:ae:5b:64:17:29:e9:db:db:86:e7:8d:5a: 14:72:b1:4c:03:b9:3a:02:21:ff:d1:d2:e4:b6:9c: 03:14:eb:eb:08:f8:9b:dc:d2:3d:cd:1f:b6:5a:b3: b0:85:d4:89:79:9a:5c:fa:d2:b2:15:c7:8c:70:57: b7:95:fa:94:98:f4:c3:15:a0:8c:c7:8d:52:6b:70: c3:2b:e1:61:96:4c:0c:c2:03:07:b7:23:6f:bd:47: 39:7f:f2:fa:bd:f4:7c:db:bf:a9:81:db:64:0f:c0: 67:e7:79:b9:1c:03:73:e4:d4:45:fc:da:e0:5a:bb: 85:40:98:68:43:97:a7:26:a4:ae:17:2d:c9:82:75: 86:51:c8:be:c1:40:08:6e:66:c5:df:a2:da:3b:dd: 9d:ad:7d:e7:00:e1:9e:46:7a:84:8f:e3:87:5a:13: 05:96:a9:0a:d1:43:79:0e:5a:69:24:72:c1:96:b5: 2b:b4:76:ad:cf:a0:2d:87:64:95:6b:f6:1b:3e:e1: a2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:F1:A8:40:8C:5D:6F:1F:64:65:3E:AD:09:91:3D:55:9B:FE:8B X509v3 Authority Key Identifier: keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/9WzxqECMXW8fZGU-rQmRPVWb_os.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.226.0/24 IPv6: 2a10:c640::/48 2a10:c640:6170::/48 2a10:c640:6575::/48 2a10:c640:7573::/48 2a10:c640:dead::/48 Signature Algorithm: sha256WithRSAEncryption 7a:ac:c5:ed:4e:88:92:9b:8e:ff:bf:b2:e3:c5:d4:04:6d:35: da:8e:88:f3:25:09:90:96:66:e9:be:b7:57:56:ab:13:f8:4a: 43:22:a3:42:74:95:c2:8c:0c:6d:38:f6:bb:d1:05:1f:4d:91: 17:cc:9a:ac:15:f2:70:8e:59:f3:81:47:ae:64:12:d0:9b:2c: 8f:f1:7d:ca:de:24:d7:62:3a:30:f7:90:73:17:e2:19:e8:e0: 40:78:b8:0e:f1:70:e6:70:43:f0:d7:9c:1a:9c:78:47:e2:be: 62:bd:59:31:77:90:c1:03:29:9f:38:bf:50:ec:4f:76:72:0a: 79:25:53:bf:87:5b:ee:10:2d:d8:a7:0b:09:9e:83:32:1a:d8: 64:a7:02:91:e2:61:78:e8:19:64:b1:11:a9:8d:ca:37:86:5c: bc:52:a6:22:13:a7:56:13:5b:92:4c:7b:80:cf:b0:72:29:95: b2:59:8a:48:f5:4a:b1:a8:ae:a0:77:05:94:c2:b3:3f:fb:94: ce:60:40:c6:eb:9f:0e:1b:cf:6b:b4:51:a9:16:db:4e:0b:47: f1:ca:70:dd:de:96:58:da:86:9c:a8:6f:fa:1b:52:b8:22:e0: a6:bb:95:5f:93:3d:42:0a:55:87:0a:92:0a:82:5c:3a:9e:46: 93:ef:2c:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt5fuIvbUfblR81GuH4aDomMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMGFkNDY1NWFlZDA3YzQ3NDE2ZTdhOTQ1NjA0Nzk0ZWJh ODk3YWMwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTZjZjFhODQwOGM1ZDZmMWY2NDY1M2VhZDA5OTEzZDU1OWJmZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31RHb1+Nkl7QRU0nBqS42IWFRs9F lvbNYhbjCToiaQp72dhbd1HVfId7mMiD5WWITeXjFX3EHkhD3BXmAxiuW2QXKenb 24bnjVoUcrFMA7k6AiH/0dLktpwDFOvrCPib3NI9zR+2WrOwhdSJeZpc+tKyFceM cFe3lfqUmPTDFaCMx41Sa3DDK+FhlkwMwgMHtyNvvUc5f/L6vfR827+pgdtkD8Bn 53m5HANz5NRF/NrgWruFQJhoQ5enJqSuFy3JgnWGUci+wUAIbmbF36LaO92drX3n AOGeRnqEj+OHWhMFlqkK0UN5DlppJHLBlrUrtHatz6Ath2SVa/YbPuGiUwIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFPVs8ahAjF1vH2RlPq0JkT1Vm/6LMB8GA1UdIwQY MBaAFFoK1GVa7QfEdBbnqUVgR5TrqJesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dyVVpWcnRCOFIwRnVlcFJXQkhsT3VvbDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80MWI3MmEtMGZjMC00YTBmLWFjYmYt ZWZjMzFlMDhlN2NkLzEvOVd6eHFFQ01YVzhmWkdVLXJRbVJQVldiX29zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy80MWI3MmEtMGZjMC00YTBmLWFjYmYtZWZjMzFlMDhlN2Nk LzEvV2dyVVpWcnRCOFIwRnVlcFJXQkhsT3VvbDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAMBAIAATAGAwQAufTiMDME AgACMC0DBwAqEMZAAAADBwAqEMZAYXADBwAqEMZAZXUDBwAqEMZAdXMDBwAqEMZA 3q0wDQYJKoZIhvcNAQELBQADggEBAHqsxe1OiJKbjv+/suPF1ARtNdqOiPMlCZCW Zum+t1dWqxP4SkMio0J0lcKMDG049rvRBR9NkRfMmqwV8nCOWfOBR65kEtCbLI/x fcreJNdiOjD3kHMX4hno4EB4uA7xcOZwQ/DXnBqceEfivmK9WTF3kMEDKZ84v1Ds T3ZyCnklU7+HW+4QLdinCwmegzIa2GSnApHiYXjoGWSxEamNyjeGXLxSpiITp1YT W5JMe4DPsHIplbJZikj1SrGorqB3BZTCsz/7lM5gQMbrnw4bz2u0UakW204LR/HK cN3elljahpyob/obUrgi4Ka7lV+TPUIKVYcKkgqCXDqeRpPvLGI= -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:56 2026 by rpki-client