This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ifWbhMbb3pyiGG9PFyvX93aWAws.roa File: ifWbhMbb3pyiGG9PFyvX93aWAws.roa (raw, json) Hash identifier: w5mzcfBVZn0K1/y6/MDigxJwc4IlH1S5Ee+TGsyj6Xg= Subject key identifier: 89:F5:9B:84:C6:DB:DE:9C:A2:18:6F:4F:17:2B:D7:F7:76:96:03:0B Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Certificate serial: 019BC331CB3347CA9B6D373E2AD77596C410 Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ifWbhMbb3pyiGG9PFyvX93aWAws.roa Signing time: Thu 15 Jan 2026 19:46:18 +0000 ROA not before: Thu 15 Jan 2026 19:46:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62651 IP address blocks: 185.147.212.0/24 maxlen: 24 185.147.213.0/24 maxlen: 24 185.147.214.0/24 maxlen: 24 185.147.215.0/24 maxlen: 24 2a03:efc0:500::/40 maxlen: 40 2a03:efc0:700::/40 maxlen: 40 2a03:efc0:900::/40 maxlen: 40 2a03:efc0:1100::/40 maxlen: 40 2a03:efc0:1500::/40 maxlen: 40 2a03:efc0:1700::/40 maxlen: 40 2a03:efc0:2300::/40 maxlen: 40 2a03:efc0:2500::/40 maxlen: 40 2a03:efc0:2700::/40 maxlen: 40 2a03:efc0:2900::/40 maxlen: 40 2a03:efc0:3100::/40 maxlen: 40 2a03:efc0:3300::/40 maxlen: 40 2a03:efc0:3500::/40 maxlen: 40 2a03:efc0:3700::/40 maxlen: 40 2a03:efc0:4100::/40 maxlen: 40 2a03:efc0:5400::/40 maxlen: 40 2a03:efc0:6600::/40 maxlen: 40 2a03:efc0:7200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:31:cb:33:47:ca:9b:6d:37:3e:2a:d7:75:96:c4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Validity Not Before: Jan 15 19:46:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89f59b84c6dbde9ca2186f4f172bd7f77696030b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:ee:19:31:ef:8d:83:aa:9a:9f:97:c8:59: 32:38:cd:aa:d6:1f:69:47:0e:95:67:73:55:04:c2: 99:46:c0:98:c0:a1:e9:8d:bc:b0:43:a8:93:28:bf: 4c:20:0b:45:1c:78:5f:7a:28:aa:bc:4c:c8:c9:5a: e1:11:18:aa:e0:98:bd:2f:72:ae:08:95:0e:1b:f2: dc:54:c3:8a:6c:59:03:c9:cf:f5:ed:fb:e9:54:61: 1a:93:d4:f1:f0:95:b5:29:17:11:37:1b:ac:af:47: 59:6c:12:c9:08:3b:24:3b:93:40:7f:44:68:58:28: 30:1e:03:16:1b:9b:96:d7:c5:57:ce:af:ca:e6:de: 36:19:ad:96:8a:27:83:2d:58:45:ea:92:30:59:5d: 67:f8:19:db:dc:ec:c6:fa:6e:df:77:a5:63:c2:5d: 17:b8:f9:2d:23:22:9f:45:5f:36:ef:1e:90:6b:c1: 70:28:df:de:02:e6:6d:3a:3e:7d:da:fd:39:63:37: b7:9e:62:f9:89:92:e2:db:f0:3d:f1:96:eb:ae:59: 35:e7:bd:2d:03:5f:f8:0c:5f:68:12:89:fa:53:75: a9:74:64:e1:aa:28:f7:0c:a9:40:ee:c0:28:f0:27: df:4f:34:ce:39:32:2b:c3:12:d3:8a:a4:62:24:c7: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F5:9B:84:C6:DB:DE:9C:A2:18:6F:4F:17:2B:D7:F7:76:96:03:0B X509v3 Authority Key Identifier: keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ifWbhMbb3pyiGG9PFyvX93aWAws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.212.0/22 IPv6: 2a03:efc0:500::/40 2a03:efc0:700::/40 2a03:efc0:900::/40 2a03:efc0:1100::/40 2a03:efc0:1500::/40 2a03:efc0:1700::/40 2a03:efc0:2300::/40 2a03:efc0:2500::/40 2a03:efc0:2700::/40 2a03:efc0:2900::/40 2a03:efc0:3100::/40 2a03:efc0:3300::/40 2a03:efc0:3500::/40 2a03:efc0:3700::/40 2a03:efc0:4100::/40 2a03:efc0:5400::/40 2a03:efc0:6600::/40 2a03:efc0:7200::/40 Signature Algorithm: sha256WithRSAEncryption 2c:04:66:e7:50:d9:79:52:9b:d9:ed:f4:67:5c:f0:60:0f:dd: 50:4c:a9:74:a1:87:59:4f:c5:47:9a:af:ba:8e:2f:af:aa:91: ba:a7:b1:0c:95:35:c6:14:fa:05:89:b2:49:7a:ca:95:0d:ac: 4d:38:9e:a1:df:e2:49:9c:a2:cf:53:24:87:68:94:4f:bd:c2: 97:5e:ff:92:c8:60:9f:fa:20:eb:5d:dd:6e:d5:b5:73:c8:f8: 03:63:3c:5c:e2:ec:78:83:27:52:e1:0c:49:27:1e:f7:59:12: 84:50:77:0c:69:88:0b:b0:4b:a1:dd:33:ac:f0:c4:4f:20:f7: a1:b9:7d:af:e8:ff:c2:50:62:02:48:ca:ba:e2:5a:93:f8:5f: 2a:f2:7d:f4:3e:3e:b7:76:bd:50:b1:c4:e8:a0:c6:89:21:e0: f0:d2:35:1e:55:cb:63:91:01:46:15:aa:e9:17:9b:7a:92:8a: 50:af:d5:f9:bc:80:d7:a4:ec:ee:67:b9:a7:75:21:58:29:39: 0f:6f:69:d1:3a:95:dd:13:78:bc:9b:16:25:ce:56:e8:00:78: 73:95:a2:d0:39:30:f1:03:73:86:cb:09:52:99:04:05:95:c9: ab:67:85:7e:07:9c:85:ff:d2:b2:6f:21:0d:f5:a6:7f:ae:f8: 81:9d:f8:7d -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZvDMcszR8qbbTc+Ktd1lsQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0 YjU5ODQwHhcNMjYwMTE1MTk0NjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWY1OWI4NGM2ZGJkZTljYTIxODZmNGYxNzJiZDdmNzc2OTYwMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptXuGTHvjYOqmp+XyFkyOM2q1h9p Rw6VZ3NVBMKZRsCYwKHpjbywQ6iTKL9MIAtFHHhfeiiqvEzIyVrhERiq4Ji9L3Ku CJUOG/LcVMOKbFkDyc/17fvpVGEak9Tx8JW1KRcRNxusr0dZbBLJCDskO5NAf0Ro WCgwHgMWG5uW18VXzq/K5t42Ga2WiieDLVhF6pIwWV1n+Bnb3OzG+m7fd6Vjwl0X uPktIyKfRV827x6Qa8FwKN/eAuZtOj592v05Yze3nmL5iZLi2/A98Zbrrlk1570t A1/4DF9oEon6U3WpdGThqij3DKlA7sAo8CffTzTOOTIrwxLTiqRiJMeo+QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIn1m4TG296cohhvTxcr1/d2lgMLMB8GA1UdIwQY MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt MDFiOGJiNmFkOTBhLzEvaWZXYmhNYmIzcHlpR0c5UEZ5dlg5M2FXQXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDAMBAIAATAGAwQCuZPU MIGXBAIAAjCBkAMGACoD78AFAwYAKgPvwAcDBgAqA+/ACQMGACoD78ARAwYAKgPv wBUDBgAqA+/AFwMGACoD78AjAwYAKgPvwCUDBgAqA+/AJwMGACoD78ApAwYAKgPv wDEDBgAqA+/AMwMGACoD78A1AwYAKgPvwDcDBgAqA+/AQQMGACoD78BUAwYAKgPv wGYDBgAqA+/AcjANBgkqhkiG9w0BAQsFAAOCAQEALARm51DZeVKb2e30Z1zwYA/d UEypdKGHWU/FR5qvuo4vr6qRuqexDJU1xhT6BYmySXrKlQ2sTTieod/iSZyiz1Mk h2iUT73Cl17/kshgn/og613dbtW1c8j4A2M8XOLseIMnUuEMSSce91kShFB3DGmI C7BLod0zrPDETyD3obl9r+j/wlBiAkjKuuJak/hfKvJ99D4+t3a9ULHE6KDGiSHg 8NI1HlXLY5EBRhWq6RebepKKUK/V+byA16Ts7me5p3UhWCk5D29p0TqV3RN4vJsW Jc5W6AB4c5Wi0Dkw8QNzhssJUpkEBZXJq2eFfgechf/Ssm8hDfWmf674gZ34fQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:52 2026 by rpki-client