This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/wFT-gzmhRqgVywX_alBqSQGShuo.roa File: wFT-gzmhRqgVywX_alBqSQGShuo.roa (raw, json) Hash identifier: gX1S45YD4ooSsAhPDzvbDfjjDz84SBGIWiAajTxl5cw= Subject key identifier: C0:54:FE:83:39:A1:46:A8:15:CB:05:FF:6A:50:6A:49:01:92:86:EA Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Certificate serial: 019B7C12542160D1461E78EBD9433480CB6B Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/wFT-gzmhRqgVywX_alBqSQGShuo.roa Signing time: Fri 02 Jan 2026 00:18:54 +0000 ROA not before: Fri 02 Jan 2026 00:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201785 IP address blocks: 62.69.145.0/24 maxlen: 24 62.69.151.0/24 maxlen: 24 91.223.211.0/24 maxlen: 24 193.200.230.0/24 maxlen: 24 195.43.88.0/23 maxlen: 24 195.43.88.0/24 maxlen: 24 2a01:9ec0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:54:21:60:d1:46:1e:78:eb:d9:43:34:80:cb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c054fe8339a146a815cb05ff6a506a49019286ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b5:30:43:7b:44:d1:c3:ad:49:cd:ec:f6:fc: e4:37:51:a9:f6:75:e6:66:25:99:47:20:17:59:c3: 9b:d5:49:dc:cc:e7:e5:eb:3a:36:af:5b:bf:ac:39: f8:00:71:62:26:f6:91:be:ed:5e:05:19:d0:e8:02: 8b:2e:a5:df:d3:f6:42:f1:d9:d5:bc:07:5c:98:fb: 0a:cb:05:8d:bc:22:b8:d9:5f:e7:87:fd:7e:3f:bf: f4:71:26:8c:f4:90:ae:34:65:f6:af:b8:dc:05:2b: c1:c8:c9:f0:91:6d:c5:4d:ce:ff:97:fd:c2:53:e9: 3c:ed:67:f5:a1:bf:02:a6:6f:4e:6d:c9:9f:48:0f: 4e:1e:4d:fc:11:5e:77:9e:79:c0:d6:50:3a:15:9a: 6f:09:2a:e4:8e:c1:2d:3c:69:28:1d:0d:14:2a:a2: 38:e9:05:19:16:99:07:78:e8:eb:64:dc:57:75:90: 7e:ee:9e:a8:f5:4c:b6:91:1c:5b:3e:16:38:f6:71: f1:39:62:fc:c6:29:62:9a:73:c1:2b:e7:ad:50:9f: 56:31:cc:a1:90:01:4a:5f:46:4f:62:0d:d8:6e:bd: 99:01:d8:b7:51:91:1b:8d:0f:e2:6f:f2:82:55:42: 20:60:9c:02:b1:5c:2c:47:31:87:dd:5e:00:13:e2: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:54:FE:83:39:A1:46:A8:15:CB:05:FF:6A:50:6A:49:01:92:86:EA X509v3 Authority Key Identifier: keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/wFT-gzmhRqgVywX_alBqSQGShuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.69.145.0/24 62.69.151.0/24 91.223.211.0/24 193.200.230.0/24 195.43.88.0/23 IPv6: 2a01:9ec0::/29 Signature Algorithm: sha256WithRSAEncryption 38:51:da:72:26:48:32:25:a7:64:d2:fe:45:65:b2:cb:ce:8b: 39:cd:d0:c8:17:6f:a5:4a:79:82:73:61:de:3c:35:d8:ed:ac: a0:06:47:a7:c5:06:6f:3c:fa:f0:bc:a1:21:4a:e1:a0:20:84: c1:ae:71:cb:59:c8:0b:eb:ab:76:85:42:dd:a5:11:86:46:cd: 7f:37:94:8c:00:f9:bc:1d:c1:a5:9c:54:e7:cb:45:d9:ef:37: 60:7f:c0:83:a7:c1:55:7f:e9:1b:d1:fa:84:a5:00:7b:ca:74: 13:87:36:84:5b:93:7d:b6:da:26:bd:4b:4c:ee:6f:fa:29:ed: 66:59:fb:23:ae:b8:ac:a2:1a:5c:d6:62:6e:8b:1f:f2:7b:84: c6:2f:81:17:da:25:f2:11:8a:7e:2b:0a:5e:9b:21:8a:88:d7: 9a:77:ff:ee:3b:0e:70:19:d5:5f:0d:52:10:09:d4:c5:17:f5: 4e:23:69:5b:04:25:58:43:6b:fb:a4:dd:0d:f4:21:0a:49:12: 72:f7:f4:e1:c9:13:d7:59:e0:c9:ef:03:84:36:b4:84:41:c5: 9d:b6:e5:55:1e:79:24:8a:5c:06:92:56:37:53:ff:1b:1a:b4: 7b:a9:5e:10:ac:cb:6c:9b:54:cd:4d:cf:d5:26:62:38:f8:bc: fc:55:5f:81 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8ElQhYNFGHnjr2UM0gMtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjE1MjFhNzEyNzE1N2Y3ZGFmMGFkMDkxMzk0YWQ1YTFj Y2U3NzkwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDU0ZmU4MzM5YTE0NmE4MTVjYjA1ZmY2YTUwNmE0OTAxOTI4NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LUwQ3tE0cOtSc3s9vzkN1Gp9nXm ZiWZRyAXWcOb1UnczOfl6zo2r1u/rDn4AHFiJvaRvu1eBRnQ6AKLLqXf0/ZC8dnV vAdcmPsKywWNvCK42V/nh/1+P7/0cSaM9JCuNGX2r7jcBSvByMnwkW3FTc7/l/3C U+k87Wf1ob8Cpm9ObcmfSA9OHk38EV53nnnA1lA6FZpvCSrkjsEtPGkoHQ0UKqI4 6QUZFpkHeOjrZNxXdZB+7p6o9Uy2kRxbPhY49nHxOWL8xilimnPBK+etUJ9WMcyh kAFKX0ZPYg3Ybr2ZAdi3UZEbjQ/ib/KCVUIgYJwCsVwsRzGH3V4AE+I1OQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFMBU/oM5oUaoFcsF/2pQakkBkobqMB8GA1UdIwQY MBaAFA8hUhpxJxV/fa8K0JE5StWhzOd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQt ZmFkNWZkNzk3MGJhLzEvd0ZULWd6bWhScWdWeXdYX2FsQnFTUUdTaHVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQtZmFkNWZkNzk3MGJh LzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAPkWRAwQA PkWXAwQAW9/TAwQAwcjmAwQBwytYMA0EAgACMAcDBQMqAZ7AMA0GCSqGSIb3DQEB CwUAA4IBAQA4UdpyJkgyJadk0v5FZbLLzos5zdDIF2+lSnmCc2HePDXY7aygBken xQZvPPrwvKEhSuGgIITBrnHLWcgL66t2hULdpRGGRs1/N5SMAPm8HcGlnFTny0XZ 7zdgf8CDp8FVf+kb0fqEpQB7ynQThzaEW5N9ttomvUtM7m/6Ke1mWfsjrrisohpc 1mJuix/ye4TGL4EX2iXyEYp+KwpemyGKiNead//uOw5wGdVfDVIQCdTFF/VOI2lb BCVYQ2v7pN0N9CEKSRJy9/ThyRPXWeDJ7wOENrSEQcWdtuVVHnkkilwGklY3U/8b GrR7qV4QrMtsm1TNTc/VJmI4+Lz8VV+B -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:05 2026 by rpki-client