This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/CaWkjFlDf_GHD_D0djsNXKtYuE8.roa File: CaWkjFlDf_GHD_D0djsNXKtYuE8.roa (raw, json) Hash identifier: o86xqFgz878m1TntBnMgIpo2h0QiuhFjerPYUxCcs3A= Subject key identifier: 09:A5:A4:8C:59:43:7F:F1:87:0F:F0:F4:76:3B:0D:5C:AB:58:B8:4F Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC83204384E1AECC703E6AA900EEB25 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/CaWkjFlDf_GHD_D0djsNXKtYuE8.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211614 IP address blocks: 84.15.125.0/24 maxlen: 24 84.15.126.0/24 maxlen: 24 84.15.127.0/24 maxlen: 24 213.252.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:32:04:38:4e:1a:ec:c7:03:e6:aa:90:0e:eb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09a5a48c59437ff1870ff0f4763b0d5cab58b84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:56:9f:71:7c:f6:00:8b:a9:c4:24:6f:47: dc:27:b5:53:df:a3:7c:18:9c:02:59:ae:0b:f4:ac: a4:3d:34:19:00:07:28:80:0e:dd:5a:94:cf:ec:7e: de:89:aa:22:6b:8a:0f:98:88:5b:3e:0a:45:34:68: d6:a4:84:5c:ea:ad:6f:5e:fd:1f:2b:07:cf:a3:a2: 86:09:0a:37:9d:62:72:5a:03:4c:31:49:ce:e6:cd: 58:fe:2a:58:2a:63:7c:69:41:46:95:bc:e5:ab:b0: d3:80:7d:2c:51:ed:df:28:fa:e2:c7:1d:01:78:ff: d3:46:70:38:5c:a1:5a:a9:f7:c0:f5:6a:09:b8:67: c8:e1:a8:e7:52:90:50:52:ce:da:4e:2a:dc:cb:1d: f2:57:ec:2c:84:48:ae:39:c7:b4:c0:f2:94:c3:17: fc:1a:db:1f:c0:fe:65:f7:da:a5:9a:47:9d:56:0f: c5:68:2d:45:95:f5:ec:6e:43:6a:f0:b9:0a:81:82: 8f:76:27:3b:a9:94:25:24:a1:56:e2:f5:88:c6:39: 24:1f:00:86:a9:4a:5e:0b:65:30:8f:11:8d:b3:ee: 56:eb:13:85:5a:cb:db:ab:7b:74:71:14:6e:02:af: 4d:9d:ca:82:a0:ca:58:81:82:19:7b:c8:50:c6:b4: 2d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A5:A4:8C:59:43:7F:F1:87:0F:F0:F4:76:3B:0D:5C:AB:58:B8:4F X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/CaWkjFlDf_GHD_D0djsNXKtYuE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.15.125.0-84.15.127.255 213.252.243.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:20:22:ef:15:00:72:d9:7b:9b:44:74:23:21:f2:87:25:de: a4:5d:8c:b3:d8:16:e8:34:b5:30:66:28:07:8c:fd:71:8f:49: d0:6e:6b:80:da:e1:52:a3:95:72:4b:a6:0d:26:b8:17:1c:02: fa:12:00:0c:cc:9a:da:9f:49:69:e1:79:2e:75:7d:a3:01:8a: 84:48:31:ba:30:44:47:58:3a:31:d7:0b:11:1b:a5:47:10:09: 7f:d8:58:b3:60:33:5f:af:09:e5:94:4c:77:90:ab:45:e1:b3: 4a:31:0c:27:b3:73:ba:1c:3d:a4:27:96:36:a9:95:94:a7:4b: 0e:17:60:db:54:e6:7f:1f:5d:3f:cd:91:79:a2:ee:a9:f3:28: 04:f5:a7:3a:08:7e:15:8c:86:89:a6:ba:2d:c2:00:ad:ef:96: c8:b0:2c:e3:7a:4d:c5:2b:fa:95:1b:55:b4:d3:50:ed:49:1a: a3:90:e8:d2:6c:c5:ca:0e:eb:95:62:27:ed:21:42:51:7c:35: 4e:90:8d:2d:c2:96:7f:17:e4:f2:8d:14:0a:86:11:16:8b:86: 86:8c:eb:87:ee:ef:41:bc:c8:f0:f4:65:9d:d6:64:b8:6a:9d: 87:f8:1f:b4:55:d7:19:58:8d:8b:c1:96:50:3a:2d:ca:60:d0: cf:ce:1d:5c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6yDIEOE4a7McD5qqQDuslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWE1YTQ4YzU5NDM3ZmYxODcwZmYwZjQ3NjNiMGQ1Y2FiNThiODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUtWn3F89gCLqcQkb0fcJ7VT36N8 GJwCWa4L9KykPTQZAAcogA7dWpTP7H7eiaoia4oPmIhbPgpFNGjWpIRc6q1vXv0f KwfPo6KGCQo3nWJyWgNMMUnO5s1Y/ipYKmN8aUFGlbzlq7DTgH0sUe3fKPrixx0B eP/TRnA4XKFaqffA9WoJuGfI4ajnUpBQUs7aTircyx3yV+wshEiuOce0wPKUwxf8 GtsfwP5l99qlmkedVg/FaC1FlfXsbkNq8LkKgYKPdic7qZQlJKFW4vWIxjkkHwCG qUpeC2UwjxGNs+5W6xOFWsvbq3t0cRRuAq9NncqCoMpYgYIZe8hQxrQtqwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAmlpIxZQ3/xhw/w9HY7DVyrWLhPMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvQ2FXa2pGbERmX0dIRF9EMGRqc05YS3RZdUU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABUD30D BAdUDwADBADV/PMwDQYJKoZIhvcNAQELBQADggEBAA0gIu8VAHLZe5tEdCMh8ocl 3qRdjLPYFug0tTBmKAeM/XGPSdBua4Da4VKjlXJLpg0muBccAvoSAAzMmtqfSWnh eS51faMBioRIMbowREdYOjHXCxEbpUcQCX/YWLNgM1+vCeWUTHeQq0Xhs0oxDCez c7ocPaQnljaplZSnSw4XYNtU5n8fXT/NkXmi7qnzKAT1pzoIfhWMhommui3CAK3v lsiwLON6TcUr+pUbVbTTUO1JGqOQ6NJsxcoO65ViJ+0hQlF8NU6QjS3Cln8X5PKN FAqGERaLhoaM64fu70G8yPD0ZZ3WZLhqnYf4H7RV1xlYjYvBllA6Lcpg0M/OHVw= -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:59 2026 by rpki-client