This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/wRTMOrkX1ouLA7Ftep2w9MCoso8.roa File: wRTMOrkX1ouLA7Ftep2w9MCoso8.roa (raw, json) Hash identifier: ZiDIanCBWcKXO0L8q8SokXWtymLcGL3qIpU5tjdgTQc= Subject key identifier: C1:14:CC:3A:B9:17:D6:8B:8B:03:B1:6D:7A:9D:B0:F4:C0:A8:B2:8F Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Certificate serial: 019BBC0629C10DACC39D6648667BF48EAF6D Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/wRTMOrkX1ouLA7Ftep2w9MCoso8.roa Signing time: Wed 14 Jan 2026 10:21:18 +0000 ROA not before: Wed 14 Jan 2026 10:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 194.11.207.0/24 maxlen: 24 194.11.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:06:29:c1:0d:ac:c3:9d:66:48:66:7b:f4:8e:af:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Validity Not Before: Jan 14 10:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c114cc3ab917d68b8b03b16d7a9db0f4c0a8b28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:0e:93:06:4f:b2:5b:9a:7f:89:f9:15:3c: 40:0b:f0:6e:47:4b:7f:5a:74:66:61:2e:d0:1e:8d: 7c:f9:43:08:26:c7:b1:52:2d:d9:78:39:63:d2:b9: dd:bd:ea:be:01:b1:f8:0a:4f:2f:e5:67:71:32:af: 64:93:d6:ae:af:fa:4d:5a:e2:f4:4a:df:af:ef:3b: aa:88:35:43:0b:7c:db:77:60:cd:d1:df:43:09:65: 39:83:bc:65:b8:82:a8:39:a0:b2:6d:57:01:b0:9c: b6:ce:f7:97:be:44:51:cb:c2:cd:d8:8c:28:3a:5c: 85:1c:e5:c5:6a:9e:f3:92:f0:c2:08:15:08:d5:9b: 71:e7:19:b8:53:ee:4d:95:b2:2e:b3:8a:8b:de:d7: f5:43:47:ae:6d:45:01:7d:ab:4e:a3:60:31:0b:39: 66:a2:83:96:fb:4e:b1:ea:37:25:2f:1e:16:2f:b5: eb:3b:69:6f:bc:15:fa:f9:1c:f4:e5:60:c3:cd:e1: 88:60:b5:5b:1a:1f:32:b3:ce:fe:05:97:d4:ef:20: 49:b7:eb:72:e6:7c:e2:35:5d:99:ed:67:b6:cf:fb: fa:84:7b:be:a6:2c:85:0e:fa:de:0a:1c:97:45:e2: 8f:8b:da:eb:c9:29:8c:e4:31:22:ff:f3:69:cd:f7: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:14:CC:3A:B9:17:D6:8B:8B:03:B1:6D:7A:9D:B0:F4:C0:A8:B2:8F X509v3 Authority Key Identifier: keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/wRTMOrkX1ouLA7Ftep2w9MCoso8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.207.0/24 194.11.212.0/24 Signature Algorithm: sha256WithRSAEncryption 68:56:ac:2a:d0:62:12:fa:5a:0d:3a:70:7c:42:cf:67:4f:b1: 3e:72:07:de:de:90:ce:01:6a:bc:98:6f:35:c0:e8:ad:7f:18: 1b:ef:85:17:2a:a1:55:ac:8c:8a:d2:de:ae:f2:88:e7:e0:9d: a7:66:d9:ff:7d:a5:cf:ba:ac:6b:3e:81:da:2f:f3:83:8e:4d: 9d:a1:4c:67:0a:da:b2:31:a4:e4:a5:29:59:d6:9d:62:5b:50: 9a:cd:79:5c:4b:cf:37:37:22:b2:27:f1:54:95:cf:99:f2:47: 5a:a3:cd:b1:1e:79:e1:04:47:dc:f0:aa:10:58:dc:91:ab:f6: fc:f9:7e:7c:9d:6a:55:c0:23:81:76:7a:db:99:6c:f8:98:92: a0:1d:c0:5b:e3:a5:e2:ef:0b:75:e7:60:e6:78:c8:93:78:6f: ed:e7:e2:c2:44:ae:46:90:10:0c:a1:66:8f:e0:b7:49:25:c7: be:d7:51:d9:7c:1f:e8:2c:88:a1:d9:62:76:5a:dd:d0:3e:cf: 82:31:8b:6f:3c:81:3e:8d:1d:2b:5b:14:9a:6f:8f:a2:b1:ed: 66:4f:0a:9e:3e:57:5e:18:f2:ea:d0:28:29:3b:29:81:14:32: 48:55:52:34:d9:a5:24:0e:8f:4e:a9:d7:b4:e7:7d:d6:78:ba: 2f:f7:fa:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZu8BinBDazDnWZIZnv0jq9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDZjZjk2NGE0NmZiNTBmMjViNWQxNGZkOTY1ZmQ2ODYx MDQ4YTUwHhcNMjYwMTE0MTAyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTE0Y2MzYWI5MTdkNjhiOGIwM2IxNmQ3YTlkYjBmNGMwYThiMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1QOkwZPsluaf4n5FTxAC/BuR0t/ WnRmYS7QHo18+UMIJsexUi3ZeDlj0rndveq+AbH4Ck8v5WdxMq9kk9aur/pNWuL0 St+v7zuqiDVDC3zbd2DN0d9DCWU5g7xluIKoOaCybVcBsJy2zveXvkRRy8LN2Iwo OlyFHOXFap7zkvDCCBUI1Ztx5xm4U+5NlbIus4qL3tf1Q0eubUUBfatOo2AxCzlm ooOW+06x6jclLx4WL7XrO2lvvBX6+Rz05WDDzeGIYLVbGh8ys87+BZfU7yBJt+ty 5nziNV2Z7We2z/v6hHu+piyFDvreChyXReKPi9rrySmM5DEi//NpzffUWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMEUzDq5F9aLiwOxbXqdsPTAqLKPMB8GA1UdIwQY MBaAFG9Gz5ZKRvtQ8ltdFP2WX9aGEEilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjIt OTlhMDhiOTEyNzRjLzEvd1JUTU9ya1gxb3VMQTdGdGVwMnc5TUNvc284LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjItOTlhMDhiOTEyNzRj LzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgvPAwQA wgvUMA0GCSqGSIb3DQEBCwUAA4IBAQBoVqwq0GIS+loNOnB8Qs9nT7E+cgfe3pDO AWq8mG81wOitfxgb74UXKqFVrIyK0t6u8ojn4J2nZtn/faXPuqxrPoHaL/ODjk2d oUxnCtqyMaTkpSlZ1p1iW1CazXlcS883NyKyJ/FUlc+Z8kdao82xHnnhBEfc8KoQ WNyRq/b8+X58nWpVwCOBdnrbmWz4mJKgHcBb46Xi7wt152DmeMiTeG/t5+LCRK5G kBAMoWaP4LdJJce+11HZfB/oLIih2WJ2Wt3QPs+CMYtvPIE+jR0rWxSab4+ise1m TwqePldeGPLq0CgpOymBFDJIVVI02aUkDo9Oqde0533WeLov9/qB -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:35 2026 by rpki-client