This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa File: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (raw, json) Hash identifier: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho= Subject key identifier: C1:64:30:26:DE:67:2C:A2:35:3B:98:84:5A:B5:FA:C9:45:F7:11:10 Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Certificate serial: 019B7C7EFFC35161AC77F6DBF1DC48D4B27B Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa Signing time: Fri 02 Jan 2026 02:17:36 +0000 ROA not before: Fri 02 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 92.116.0.0/15 maxlen: 20 109.250.0.0/16 maxlen: 20 185.235.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:ff:c3:51:61:ac:77:f6:db:f1:dc:48:d4:b2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Validity Not Before: Jan 2 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1643026de672ca2353b98845ab5fac945f71110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:8a:7c:e5:47:56:37:d0:1d:73:2f:01:50: e9:7b:49:eb:f2:dd:fd:53:29:7e:1f:33:a7:e7:96: d7:59:a4:7e:1b:b8:2c:5d:37:b4:47:65:31:f0:09: 7e:19:14:73:67:1d:bc:c8:4e:db:05:04:70:a9:2e: 89:f9:76:ec:15:15:46:15:18:a2:ca:70:bd:39:55: 8e:a2:be:91:ac:c1:3f:0f:18:0b:d9:dd:96:f1:22: 57:43:7a:f0:90:9b:97:84:80:65:af:a8:96:0a:ee: 19:e1:8d:97:80:d8:67:cd:84:74:cd:ee:c0:01:3b: 0c:65:75:d3:4a:7d:77:1f:95:35:e0:8b:4c:fb:0a: ee:78:3d:51:4a:0f:1a:08:9e:e3:ca:0e:1c:87:17: 34:30:3e:47:da:33:c0:cb:e1:8b:0d:b9:17:47:78: 96:99:03:f4:81:bd:9e:d4:d4:7a:54:95:65:8f:1c: 12:a5:ff:e6:81:b6:cd:d1:4c:bd:01:89:d8:55:30: 80:f9:ca:a5:e8:5a:fe:63:81:81:e7:1a:76:3f:17: 4c:ae:39:59:43:2b:46:60:c4:50:31:b7:6c:71:91: c5:30:7e:25:c0:af:31:f9:bc:d9:1b:49:b8:7b:34: a5:06:72:08:83:af:c9:70:fe:c6:95:bb:20:b3:87: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:64:30:26:DE:67:2C:A2:35:3B:98:84:5A:B5:FA:C9:45:F7:11:10 X509v3 Authority Key Identifier: keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.116.0.0/15 109.250.0.0/16 185.235.232.0/22 Signature Algorithm: sha256WithRSAEncryption 31:16:c8:ef:e6:cc:88:34:ef:00:86:9a:59:3c:41:44:d6:9c: 1c:6b:ed:64:d6:bd:48:f4:2c:b0:f2:5e:9d:36:8f:25:39:1d: b3:a4:c7:2e:df:f1:b5:bc:b6:f3:63:8e:92:f0:84:71:b8:e6: 46:ff:42:b3:35:e5:72:ed:9c:b9:4f:36:5f:c9:8e:7f:63:fd: 1c:a1:e6:73:11:12:7b:e6:72:fc:00:d3:83:45:70:dc:b5:27: a4:1f:7d:cf:b9:6a:0a:ad:93:3c:a4:14:15:12:16:e8:ae:7d: 14:b6:87:a1:81:c6:b5:bb:bb:90:93:6d:8b:b8:a5:76:cb:3f: bd:d8:32:d6:7e:4c:01:d5:fd:10:6f:0e:68:46:d0:d3:c6:ff: 8d:cc:35:f4:52:b1:de:0f:36:6f:fc:fb:00:dd:74:b6:e4:52: d7:94:de:f6:9c:76:1d:06:07:81:06:4f:76:23:dd:64:1f:33: 04:51:f3:40:f8:f2:d6:f4:4d:1e:c1:c7:b5:7d:e2:d0:e7:3e: b8:e6:9b:f4:63:53:2e:45:de:5f:63:c2:e5:62:3a:62:21:ca: 6a:16:53:13:9b:2c:d3:a8:cc:4f:2e:17:d4:2d:88:80:9d:47: be:ab:fe:4d:7e:0d:81:90:f2:24:4c:97:7b:fa:c6:11:4d:0e: c2:5c:5f:ea -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt8fv/DUWGsd/bb8dxI1LJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj Yjg2YWIwHhcNMjYwMTAyMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTY0MzAyNmRlNjcyY2EyMzUzYjk4ODQ1YWI1ZmFjOTQ1ZjcxMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzKKfOVHVjfQHXMvAVDpe0nr8t39 Uyl+HzOn55bXWaR+G7gsXTe0R2Ux8Al+GRRzZx28yE7bBQRwqS6J+XbsFRVGFRii ynC9OVWOor6RrME/DxgL2d2W8SJXQ3rwkJuXhIBlr6iWCu4Z4Y2XgNhnzYR0ze7A ATsMZXXTSn13H5U14ItM+wrueD1RSg8aCJ7jyg4chxc0MD5H2jPAy+GLDbkXR3iW mQP0gb2e1NR6VJVljxwSpf/mgbbN0Uy9AYnYVTCA+cql6Fr+Y4GB5xp2PxdMrjlZ QytGYMRQMbdscZHFMH4lwK8x+bzZG0m4ezSlBnIIg6/JcP7Glbsgs4eRXQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFMFkMCbeZyyiNTuYhFq1+slF9xEQMB8GA1UdIwQY MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt Y2VmOTQ0ODEyNGIwLzEvd1dRd0p0NW5MS0kxTzVpRVdyWDZ5VVgzRVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAATAQAwMBXHQDAwBt +gMEArnr6DANBgkqhkiG9w0BAQsFAAOCAQEAMRbI7+bMiDTvAIaaWTxBRNacHGvt ZNa9SPQssPJenTaPJTkds6THLt/xtby282OOkvCEcbjmRv9CszXlcu2cuU82X8mO f2P9HKHmcxESe+Zy/ADTg0Vw3LUnpB99z7lqCq2TPKQUFRIW6K59FLaHoYHGtbu7 kJNti7ildss/vdgy1n5MAdX9EG8OaEbQ08b/jcw19FKx3g82b/z7AN10tuRS15Te 9px2HQYHgQZPdiPdZB8zBFHzQPjy1vRNHsHHtX3i0Oc+uOab9GNTLkXeX2PC5WI6 YiHKahZTE5ss06jMTy4X1C2IgJ1Hvqv+TX4NgZDyJEyXe/rGEU0Owlxf6g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:00 2026 by rpki-client