This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/wgOHPQR9tp0LbGH9PUDLI1hKOuI.roa File: wgOHPQR9tp0LbGH9PUDLI1hKOuI.roa (raw, json) Hash identifier: XEU3YLncsndIejQxm0E7Frwok/sigMI7wKaH9HopGIE= Subject key identifier: C2:03:87:3D:04:7D:B6:9D:0B:6C:61:FD:3D:40:CB:23:58:4A:3A:E2 Certificate issuer: /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Certificate serial: 019B7F8538E887D7062D755D88A41E81EC2C Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/wgOHPQR9tp0LbGH9PUDLI1hKOuI.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52048 IP address blocks: 46.183.216.0/21 maxlen: 21 46.183.216.0/24 maxlen: 24 46.183.217.0/24 maxlen: 24 46.183.218.0/24 maxlen: 24 46.183.219.0/24 maxlen: 24 46.183.220.0/24 maxlen: 24 46.183.221.0/24 maxlen: 24 46.183.222.0/24 maxlen: 24 46.183.223.0/24 maxlen: 24 84.38.130.0/24 maxlen: 24 84.38.132.0/24 maxlen: 24 84.38.134.0/24 maxlen: 24 84.38.135.0/24 maxlen: 24 185.28.47.0/24 maxlen: 24 2a02:4840::/48 maxlen: 48 2a02:4840:1::/48 maxlen: 48 2a02:4840:2::/48 maxlen: 48 2a02:4840:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:38:e8:87:d7:06:2d:75:5d:88:a4:1e:81:ec:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c203873d047db69d0b6c61fd3d40cb23584a3ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:2c:3b:d5:ea:96:96:1a:62:ff:a5:1a:15: 87:1d:bf:46:dc:46:9c:8d:a5:61:a8:4b:1e:68:0a: 5c:90:10:6c:b9:52:dd:8f:9c:97:7a:6d:32:f4:60: 12:15:6f:73:90:c2:e5:83:ea:5a:b0:b7:04:18:07: c6:bf:d3:44:c8:d3:f1:5b:44:cb:da:4a:c6:cd:f9: fc:41:1d:d2:dc:eb:a1:fe:88:5e:08:9c:2e:4c:16: 76:d5:50:b5:da:e5:0c:ce:41:58:ec:b0:64:e4:10: 12:7c:a9:ad:bc:90:3f:7e:ce:0c:99:73:f5:ad:04: 87:d7:dd:1c:13:c1:f3:15:49:3d:24:76:42:b6:93: 95:fc:d3:60:45:05:ea:0c:7c:00:c2:a3:20:3a:c6: 34:56:dd:c7:d6:d3:72:51:ac:d9:e5:3a:22:9e:bb: ed:8d:92:47:dc:b2:a8:2d:9f:ee:8f:69:80:bb:a5: 17:5f:08:b3:f8:0e:36:5c:65:56:b6:03:17:5c:ea: 5e:58:47:90:6e:6e:d8:09:6f:cd:25:7f:64:3a:05: c6:94:2f:43:40:ba:98:5a:a3:48:ed:de:d5:f3:e2: fc:f3:d7:9f:bb:1f:79:b6:f4:3e:fb:2f:d4:98:f6: 2e:04:b2:8f:a0:84:87:b4:45:66:e3:0d:b2:4b:8d: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:03:87:3D:04:7D:B6:9D:0B:6C:61:FD:3D:40:CB:23:58:4A:3A:E2 X509v3 Authority Key Identifier: keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/wgOHPQR9tp0LbGH9PUDLI1hKOuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.216.0/21 84.38.130.0/24 84.38.132.0/24 84.38.134.0/23 185.28.47.0/24 IPv6: 2a02:4840::-2a02:4840:2:ffff:ffff:ffff:ffff:ffff 2a02:4840:1000::/48 Signature Algorithm: sha256WithRSAEncryption 28:42:18:e7:b3:cf:e8:d0:be:3c:c0:c4:45:40:8c:15:90:22: 29:93:6d:05:53:36:5b:17:ac:0c:84:50:09:c1:7a:d9:31:b9: 71:d3:f7:1d:2f:ea:be:82:30:da:55:d1:1d:fa:43:19:43:c4: ce:f4:cd:55:52:16:b0:14:62:df:bf:58:3b:72:b8:4d:82:e9: 5c:bc:e0:b5:ed:67:48:16:ba:f0:f3:1c:31:10:4a:be:c0:fd: ec:c5:61:1b:b6:6a:e4:df:f2:41:84:32:fe:49:82:1a:3e:c5: 48:3e:7e:3d:05:93:47:3e:0e:ef:62:d5:72:0a:74:ff:4c:56: e0:65:10:6c:f6:40:61:12:c2:34:a8:5f:cc:00:12:b9:13:eb: 4f:10:0f:84:49:bd:7d:5a:3b:42:0b:96:8d:3c:b4:ba:08:3c: c7:66:30:c2:a9:e0:04:7d:31:4e:70:03:c8:ed:78:49:13:ca: c0:81:20:94:77:b8:74:0e:dc:ac:cf:95:6d:3d:02:e9:ee:3e: c0:36:c4:58:a8:61:f3:d0:29:cf:39:b6:d7:fd:e6:cd:fb:73: 2e:1d:af:9b:a0:b9:f8:03:10:50:1e:fa:e0:a2:89:2d:43:d0: 9e:9f:04:5b:69:b0:5a:f1:43:3c:3d:55:df:7d:b8:61:74:04: 01:fd:0e:ba -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt/hTjoh9cGLXVdiKQegewsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTkzODNhM2UzZjExNmE5YmNjNDc2OWM4NTE3Y2RjZTQw NzY1YzcwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjAzODczZDA0N2RiNjlkMGI2YzYxZmQzZDQwY2IyMzU4NGEzYWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQgsO9XqlpYaYv+lGhWHHb9G3Eac jaVhqEseaApckBBsuVLdj5yXem0y9GASFW9zkMLlg+pasLcEGAfGv9NEyNPxW0TL 2krGzfn8QR3S3Ouh/oheCJwuTBZ21VC12uUMzkFY7LBk5BASfKmtvJA/fs4MmXP1 rQSH190cE8HzFUk9JHZCtpOV/NNgRQXqDHwAwqMgOsY0Vt3H1tNyUazZ5Toinrvt jZJH3LKoLZ/uj2mAu6UXXwiz+A42XGVWtgMXXOpeWEeQbm7YCW/NJX9kOgXGlC9D QLqYWqNI7d7V8+L889efux95tvQ++y/UmPYuBLKPoISHtEVm4w2yS40edwIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFMIDhz0EfbadC2xh/T1AyyNYSjriMB8GA1UdIwQY MBaAFPIZODo+PxFqm8xHachRfNzkB2XHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAt NmNjOWY2Y2JhYWM0LzEvd2dPSFBRUjl0cDBMYkdIOVBVRExJMWhLT3VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAtNmNjOWY2Y2JhYWM0 LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAkBAIAATAeAwQDLrfYAwQA VCaCAwQAVCaEAwQBVCaGAwQAuRwvMCEEAgACMBswEAMFBioCSEADBwAqAkhAAAID BwAqAkhAEAAwDQYJKoZIhvcNAQELBQADggEBAChCGOezz+jQvjzAxEVAjBWQIimT bQVTNlsXrAyEUAnBetkxuXHT9x0v6r6CMNpV0R36QxlDxM70zVVSFrAUYt+/WDty uE2C6Vy84LXtZ0gWuvDzHDEQSr7A/ezFYRu2auTf8kGEMv5Jgho+xUg+fj0Fk0c+ Du9i1XIKdP9MVuBlEGz2QGESwjSoX8wAErkT608QD4RJvX1aO0ILlo08tLoIPMdm MMKp4AR9MU5wA8jteEkTysCBIJR3uHQO3KzPlW09AunuPsA2xFioYfPQKc85ttf9 5s37cy4dr5ugufgDEFAe+uCiiS1D0J6fBFtpsFrxQzw9Vd99uGF0BAH9Dro= -----END CERTIFICATE-----Generated at Sun Jan 25 16:15:16 2026 by rpki-client