This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/wQ6vji0X6ZD_O1caODXBBWwmeVM.roa File: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (raw, json) Hash identifier: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc= Subject key identifier: C1:0E:AF:8E:2D:17:E9:90:FF:3B:57:1A:38:35:C1:05:6C:26:79:53 Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Certificate serial: 019B7AC84E829AB9E810FC88F37E932CA15F Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/wQ6vji0X6ZD_O1caODXBBWwmeVM.roa Signing time: Thu 01 Jan 2026 18:18:26 +0000 ROA not before: Thu 01 Jan 2026 18:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200302 IP address blocks: 94.242.0.0/19 maxlen: 19 94.242.32.0/20 maxlen: 20 2a00:1838:aaaa::/48 maxlen: 48 2a00:1838:cccc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4e:82:9a:b9:e8:10:fc:88:f3:7e:93:2c:a1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c10eaf8e2d17e990ff3b571a3835c1056c267953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b0:cb:12:9b:f2:d0:88:e9:ca:50:ca:51:35: b4:27:f1:8f:2c:c3:4c:5f:2f:7b:ad:07:b6:e2:6e: 68:a1:69:3f:b1:8c:a6:e8:2d:d4:78:e8:d8:86:32: 4e:a2:65:f5:d7:f1:fd:f3:3f:f9:7a:09:f9:cc:c6: ff:88:0f:5e:99:f1:57:5b:51:fc:38:4b:d2:4d:d0: 86:50:f4:50:4c:f1:40:29:0c:96:d2:24:77:b3:a4: f6:bc:d5:2a:a8:c6:03:31:75:0a:cc:f8:1e:d5:ad: ab:53:49:db:e3:c7:e0:1f:ae:59:be:34:a6:6f:6c: c1:17:88:a4:b4:c9:be:c8:57:fe:69:86:88:0d:a5: 96:a2:05:c7:9d:3c:a2:0a:68:b7:2d:93:e0:8d:3d: aa:44:9c:15:ed:e1:e1:ad:9c:d6:82:76:58:79:80: a6:79:42:85:16:69:d9:7e:6f:96:d9:4b:46:69:0a: 06:33:ce:49:b0:8c:f9:b4:b3:9e:75:7c:d5:d3:70: 9f:70:a7:15:ac:ef:f2:59:e3:34:0e:99:53:ab:cd: ce:a2:9f:f2:f9:ba:93:41:09:ad:3a:81:36:3a:f7: 56:58:8c:fe:09:36:7e:43:7a:cc:9b:ec:59:9c:ef: fa:a3:70:c9:66:23:8c:e3:5c:2a:88:5e:11:5d:e9: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0E:AF:8E:2D:17:E9:90:FF:3B:57:1A:38:35:C1:05:6C:26:79:53 X509v3 Authority Key Identifier: keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/wQ6vji0X6ZD_O1caODXBBWwmeVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.242.0.0-94.242.47.255 IPv6: 2a00:1838:aaaa::/48 2a00:1838:cccc::/48 Signature Algorithm: sha256WithRSAEncryption 41:ad:ad:24:0c:4b:4b:46:00:21:a4:7a:b3:f3:46:b7:39:c2: a6:35:80:cf:fd:20:02:58:c2:aa:e5:aa:4b:51:9e:a0:53:df: 8d:b0:6c:43:b4:82:5d:7a:96:d5:99:66:00:05:4b:5e:50:8e: e5:c2:0e:2c:fc:04:05:50:cf:9a:67:f9:9a:43:19:49:5d:3f: 35:0f:a7:5a:83:a1:9b:07:4c:fe:2b:bf:a6:70:9e:1b:eb:51: 04:73:f0:47:be:3e:36:0b:29:c6:36:47:4a:01:eb:ed:d0:cd: 9d:0e:e9:49:f5:6e:9b:a6:6a:8b:a6:de:99:e4:ff:c3:57:e1: bf:c5:25:07:28:ec:36:0d:ee:1e:fc:aa:40:29:a2:57:e7:2b: a2:5a:84:0d:15:da:94:4e:fd:a8:ea:ca:a9:e1:21:6c:3d:47: 0d:28:14:79:28:5e:25:91:fb:30:0a:36:57:35:4f:77:83:78: 5c:ed:c2:21:c5:ca:28:72:b3:91:67:b8:dd:68:b1:bc:27:71: 08:e9:10:7a:eb:0a:a1:08:48:d2:30:f1:22:ac:44:01:8d:e3: fd:8d:0c:43:ee:0d:9a:ef:48:57:09:aa:40:f8:42:49:d8:d5: 7b:82:cc:90:dc:fb:17:f0:81:58:40:ee:76:f6:37:38:de:d5: 1e:ef:d2:79 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6yE6CmrnoEPyI836TLKFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh NjU4MjkwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTBlYWY4ZTJkMTdlOTkwZmYzYjU3MWEzODM1YzEwNTZjMjY3OTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirDLEpvy0IjpylDKUTW0J/GPLMNM Xy97rQe24m5ooWk/sYym6C3UeOjYhjJOomX11/H98z/5egn5zMb/iA9emfFXW1H8 OEvSTdCGUPRQTPFAKQyW0iR3s6T2vNUqqMYDMXUKzPge1a2rU0nb48fgH65ZvjSm b2zBF4iktMm+yFf+aYaIDaWWogXHnTyiCmi3LZPgjT2qRJwV7eHhrZzWgnZYeYCm eUKFFmnZfm+W2UtGaQoGM85JsIz5tLOedXzV03CfcKcVrO/yWeM0DplTq83Oop/y +bqTQQmtOoE2OvdWWIz+CTZ+Q3rMm+xZnO/6o3DJZiOM41wqiF4RXelfIwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMEOr44tF+mQ/ztXGjg1wQVsJnlTMB8GA1UdIwQY MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt ZWQ1ZjAwYzk1MDY3LzEvd1E2dmppMFg2WkRfTzFjYU9EWEJCV3dtZVZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3 LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzATBAIAATANMAsDAwFe8gME BF7yIDAYBAIAAjASAwcAKgAYOKqqAwcAKgAYOMzMMA0GCSqGSIb3DQEBCwUAA4IB AQBBra0kDEtLRgAhpHqz80a3OcKmNYDP/SACWMKq5apLUZ6gU9+NsGxDtIJdepbV mWYABUteUI7lwg4s/AQFUM+aZ/maQxlJXT81D6dag6GbB0z+K7+mcJ4b61EEc/BH vj42CynGNkdKAevt0M2dDulJ9W6bpmqLpt6Z5P/DV+G/xSUHKOw2De4e/KpAKaJX 5yuiWoQNFdqUTv2o6sqp4SFsPUcNKBR5KF4lkfswCjZXNU93g3hc7cIhxcoocrOR Z7jdaLG8J3EI6RB66wqhCEjSMPEirEQBjeP9jQxD7g2a70hXCapA+EJJ2NV7gsyQ 3PsX8IFYQO529jc43tUe79J5 -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:38 2026 by rpki-client