This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/8WGCMkLHivRZtBn2lCr7Peb5fB8.roa File: 8WGCMkLHivRZtBn2lCr7Peb5fB8.roa (raw, json) Hash identifier: Lec00BWr1FDj5Se46w/SW9Oe5vFyDVib4D6WgGcoj3Q= Subject key identifier: F1:61:82:32:42:C7:8A:F4:59:B4:19:F6:94:2A:FB:3D:E6:F9:7C:1F Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Certificate serial: 019B7DCB5CB2D218ECC3891940AF808CCF70 Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/8WGCMkLHivRZtBn2lCr7Peb5fB8.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29256 IP address blocks: 79.141.224.0/20 maxlen: 20 193.43.140.0/24 maxlen: 24 193.43.145.0/24 maxlen: 24 193.43.149.0/24 maxlen: 24 193.43.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5c:b2:d2:18:ec:c3:89:19:40:af:80:8c:cf:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f161823242c78af459b419f6942afb3de6f97c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:19:fe:3c:80:53:f5:73:8b:2c:ad:6b:fd: d2:87:35:34:76:fd:35:21:82:db:06:f1:e7:be:2b: 4d:15:39:6d:e7:4a:e1:cb:8e:38:78:22:d6:24:0d: 1f:c7:8a:43:60:c9:5c:fd:df:50:27:c2:2b:60:e9: 7a:7c:30:33:c9:1c:45:a1:3f:49:1b:01:33:b0:0f: e5:eb:74:7a:5c:b5:6f:cf:90:8e:d5:71:e3:ce:c0: fc:37:27:25:16:12:44:ce:46:f1:d6:35:8e:df:7c: 81:16:b7:d1:ef:89:35:c5:35:e7:7a:52:53:3f:ea: 7b:ba:a4:31:c9:b1:f8:57:35:ca:75:f9:82:e0:a6: f1:05:ff:40:78:6b:d6:25:ad:bd:94:39:a8:7e:c7: 28:f3:f6:17:87:5e:86:95:8d:01:02:37:49:a1:79: d9:84:c8:0e:ff:18:68:8c:58:c5:11:0e:f4:de:c1: 28:c0:7d:cd:7b:45:7f:ff:f3:d2:a0:91:d5:85:0d: 5e:f0:c2:a8:34:2a:c6:c1:7c:1c:4d:76:1c:2f:2a: 4a:08:26:65:6e:6b:d3:19:c8:cc:3b:3f:42:60:1c: c0:ac:fd:d9:fc:8c:18:4e:62:8b:6b:d4:22:71:5d: 0e:be:cf:3e:62:54:2b:b5:5b:f4:17:1c:e6:53:8c: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:61:82:32:42:C7:8A:F4:59:B4:19:F6:94:2A:FB:3D:E6:F9:7C:1F X509v3 Authority Key Identifier: keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/8WGCMkLHivRZtBn2lCr7Peb5fB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.141.224.0/20 193.43.140.0/24 193.43.145.0/24 193.43.149.0/24 193.43.159.0/24 Signature Algorithm: sha256WithRSAEncryption ac:b9:fe:13:7e:8f:d3:3d:48:2f:a9:e6:eb:4b:12:02:ad:e8: b8:f3:9f:f1:38:f1:05:9f:f3:b4:a9:cd:97:91:a7:d2:0f:3e: 6f:be:af:66:1c:5a:1e:8f:f1:ab:41:e5:46:c4:87:f6:f5:d2: 67:d9:ef:3c:ac:92:c3:6b:7a:53:9e:28:90:5e:89:c3:db:08: 1f:66:4b:5f:98:ba:20:13:25:8e:86:ad:e2:8c:4f:4d:56:5c: 1c:be:45:fd:d5:ad:59:9d:79:e6:fb:3c:88:d4:34:92:6b:3a: df:60:22:ef:d9:a8:3b:97:ac:04:63:7e:3c:4d:fa:00:65:ce: 80:ac:bd:71:05:23:0e:0f:94:51:a3:d7:26:16:3f:63:48:95: 8e:7a:23:b2:37:7b:85:0a:50:61:ac:1a:6a:5d:49:d4:77:ee: 09:a2:9c:25:c7:07:44:84:08:77:e6:a2:ac:47:9f:f0:a5:93: df:ae:1c:5e:e0:1b:d8:c5:c2:3b:c9:79:6b:c2:ae:69:af:c2: 57:b0:50:f4:c5:87:65:b7:4e:85:8f:d7:59:f6:00:ed:f4:2c: a1:ea:8c:2d:8d:ed:49:a2:95:84:9c:bf:d6:9a:9b:f1:c8:3b: 86:6c:1e:80:09:40:4a:53:47:4d:3d:61:91:da:2d:5f:d4:0d: 7b:b9:0e:b4 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9y1yy0hjsw4kZQK+AjM9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNjUzNzVhNGQzNmY1Y2FlMWExZmUyNDU4YTM4MDUyNmNm ZWRiNmEwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTYxODIzMjQyYzc4YWY0NTliNDE5ZjY5NDJhZmIzZGU2Zjk3YzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoToZ/jyAU/Vziyyta/3ShzU0dv01 IYLbBvHnvitNFTlt50rhy444eCLWJA0fx4pDYMlc/d9QJ8IrYOl6fDAzyRxFoT9J GwEzsA/l63R6XLVvz5CO1XHjzsD8NyclFhJEzkbx1jWO33yBFrfR74k1xTXnelJT P+p7uqQxybH4VzXKdfmC4KbxBf9AeGvWJa29lDmofsco8/YXh16GlY0BAjdJoXnZ hMgO/xhojFjFEQ703sEowH3Ne0V///PSoJHVhQ1e8MKoNCrGwXwcTXYcLypKCCZl bmvTGcjMOz9CYBzArP3Z/IwYTmKLa9QicV0Ovs8+YlQrtVv0FxzmU4xuLQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPFhgjJCx4r0WbQZ9pQq+z3m+XwfMB8GA1UdIwQY MBaAFD9lN1pNNvXK4aH+JFijgFJs/ttqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTkt ZTI4MTZlZTZiYTU2LzEvOFdHQ01rTEhpdlJadEJuMmxDcjdQZWI1ZkI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTktZTI4MTZlZTZiYTU2 LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQET43gAwQA wSuMAwQAwSuRAwQAwSuVAwQAwSufMA0GCSqGSIb3DQEBCwUAA4IBAQCsuf4Tfo/T PUgvqebrSxICrei485/xOPEFn/O0qc2XkafSDz5vvq9mHFoej/GrQeVGxIf29dJn 2e88rJLDa3pTniiQXonD2wgfZktfmLogEyWOhq3ijE9NVlwcvkX91a1ZnXnm+zyI 1DSSazrfYCLv2ag7l6wEY348TfoAZc6ArL1xBSMOD5RRo9cmFj9jSJWOeiOyN3uF ClBhrBpqXUnUd+4JopwlxwdEhAh35qKsR5/wpZPfrhxe4BvYxcI7yXlrwq5pr8JX sFD0xYdlt06Fj9dZ9gDt9Cyh6owtje1JopWEnL/WmpvxyDuGbB6ACUBKU0dNPWGR 2i1f1A17uQ60 -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:34 2026 by rpki-client