This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/wA-hfRcLQDeGt5CtIuqae7_R8vk.roa File: wA-hfRcLQDeGt5CtIuqae7_R8vk.roa (raw, json) Hash identifier: /Y6WA6ClXm7DeMMUhB/vYFyvxO+T8Bk+qE5LtkXuWg8= Subject key identifier: C0:0F:A1:7D:17:0B:40:37:86:B7:90:AD:22:EA:9A:7B:BF:D1:F2:F9 Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Certificate serial: 019B7D5D3A56C2FB4EEE6AAF7062D508936D Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/wA-hfRcLQDeGt5CtIuqae7_R8vk.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206109 IP address blocks: 185.195.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3a:56:c2:fb:4e:ee:6a:af:70:62:d5:08:93:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c00fa17d170b403786b790ad22ea9a7bbfd1f2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:67:67:15:62:b8:69:8c:e8:b3:82:c7:78: 6d:3d:8c:97:6c:ab:3e:fb:c3:cf:fc:ab:f1:13:fb: 90:e2:c0:67:36:eb:4e:16:48:bb:4b:25:0c:81:ec: e1:07:df:10:00:7b:08:ca:71:ca:88:66:9b:5f:e5: 91:97:51:3f:df:71:e8:4d:4f:c9:e5:9c:17:c0:27: 90:6b:25:f2:7c:82:d3:2c:72:86:ed:69:cd:78:96: 12:a4:1a:b0:1a:26:55:b1:46:32:e6:64:9d:7e:bc: 74:ed:23:f8:df:2f:e3:97:ed:6f:6c:d5:cb:b8:8e: 6f:07:1c:6c:29:39:80:21:6b:06:a4:d1:23:47:63: 87:f5:25:11:d8:b6:6f:ed:02:6b:86:3b:22:7a:1e: f1:d6:a6:66:7c:f5:6d:47:32:34:62:09:1b:b1:77: a6:35:44:85:69:92:7a:2b:94:0c:ce:a6:13:b4:a5: e5:39:19:8d:03:1e:fb:67:5d:d1:a9:77:c7:24:61: 55:18:c8:cd:31:17:b5:b5:4b:29:38:11:27:1b:39: e6:c7:cf:19:74:68:94:95:5a:96:f3:46:9a:53:8d: 4e:fd:90:73:92:91:15:17:cd:5c:07:b5:e8:42:9e: f1:e1:0f:ce:ba:50:0a:ae:d5:40:fc:58:1e:9f:0e: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0F:A1:7D:17:0B:40:37:86:B7:90:AD:22:EA:9A:7B:BF:D1:F2:F9 X509v3 Authority Key Identifier: keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/wA-hfRcLQDeGt5CtIuqae7_R8vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.204.0/22 Signature Algorithm: sha256WithRSAEncryption b8:a8:1b:92:d2:0a:07:65:96:a5:7b:dc:a4:0d:37:7d:f4:ba: 98:f7:c0:5e:3f:ea:8f:6e:23:e8:5d:3e:39:2f:14:7d:57:6c: 71:33:7f:85:40:03:1f:1d:18:a9:c9:0e:de:75:74:85:25:b2: f2:7f:9f:60:9c:49:e4:8d:29:9e:76:f8:85:1b:97:81:16:a3: 1f:94:33:32:7f:0b:fb:0c:4f:ec:ee:2f:5b:81:63:3d:51:56: 31:89:13:7d:b0:1f:eb:61:28:36:51:b3:76:4b:19:c3:53:2e: e4:08:13:9a:ad:b9:69:c3:4f:9c:1d:c4:6a:e3:b8:89:3a:dd: 3f:b2:39:b8:3b:cd:c8:a6:7e:d1:ac:8e:38:fe:df:3d:a5:33: 09:f4:fa:27:8f:74:9f:31:3c:4a:b4:71:75:55:75:70:84:51: 23:58:d1:7a:10:36:da:83:6b:03:8e:f5:46:d6:b3:e1:6e:27: c2:66:19:7e:f4:a7:d8:b4:53:69:1e:8d:78:b0:7a:ca:22:d4: 90:6f:84:35:9b:e9:bf:53:00:43:b7:94:62:d1:7d:43:c2:ea: f7:1e:14:17:ef:38:20:3b:17:d4:3c:24:c4:d3:ed:3d:d7:53: bb:91:b1:d9:b0:39:12:27:3e:cb:04:65:71:e0:c8:35:73:23: e7:3e:5c:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTpWwvtO7mqvcGLVCJNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1 ZThmNTgwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDBmYTE3ZDE3MGI0MDM3ODZiNzkwYWQyMmVhOWE3YmJmZDFmMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQRnZxViuGmM6LOCx3htPYyXbKs+ +8PP/KvxE/uQ4sBnNutOFki7SyUMgezhB98QAHsIynHKiGabX+WRl1E/33HoTU/J 5ZwXwCeQayXyfILTLHKG7WnNeJYSpBqwGiZVsUYy5mSdfrx07SP43y/jl+1vbNXL uI5vBxxsKTmAIWsGpNEjR2OH9SUR2LZv7QJrhjsieh7x1qZmfPVtRzI0YgkbsXem NUSFaZJ6K5QMzqYTtKXlORmNAx77Z13RqXfHJGFVGMjNMRe1tUspOBEnGznmx88Z dGiUlVqW80aaU41O/ZBzkpEVF81cB7XoQp7x4Q/OulAKrtVA/Fgenw4ZAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAPoX0XC0A3hreQrSLqmnu/0fL5MB8GA1UdIwQY MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt YjU5YzJhYzk1MWNiLzEvd0EtaGZSY0xRRGVHdDVDdEl1cWFlN19SOHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucPMMA0G CSqGSIb3DQEBCwUAA4IBAQC4qBuS0goHZZale9ykDTd99LqY98BeP+qPbiPoXT45 LxR9V2xxM3+FQAMfHRipyQ7edXSFJbLyf59gnEnkjSmedviFG5eBFqMflDMyfwv7 DE/s7i9bgWM9UVYxiRN9sB/rYSg2UbN2SxnDUy7kCBOarblpw0+cHcRq47iJOt0/ sjm4O83Ipn7RrI44/t89pTMJ9Ponj3SfMTxKtHF1VXVwhFEjWNF6EDbag2sDjvVG 1rPhbifCZhl+9KfYtFNpHo14sHrKItSQb4Q1m+m/UwBDt5Ri0X1Dwur3HhQX7zgg OxfUPCTE0+0911O7kbHZsDkSJz7LBGVx4Mg1cyPnPlxF -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:39 2026 by rpki-client