This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/wQFCgIWKeHWn0AoEBFccOjnC2TU.roa File: wQFCgIWKeHWn0AoEBFccOjnC2TU.roa (raw, json) Hash identifier: JB49W9zliA5p5Mlat2myJvjej3ubOs2xynZ5e8qh7Lw= Subject key identifier: C1:01:42:80:85:8A:78:75:A7:D0:0A:04:04:57:1C:3A:39:C2:D9:35 Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8 Certificate serial: 019B7B35B38FE9BFF9C9CECEE5B7FCEB54D4 Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/wQFCgIWKeHWn0AoEBFccOjnC2TU.roa Signing time: Thu 01 Jan 2026 20:17:55 +0000 ROA not before: Thu 01 Jan 2026 20:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212329 IP address blocks: 91.236.64.0/22 maxlen: 24 185.216.48.0/24 maxlen: 24 2a10:a700::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b3:8f:e9:bf:f9:c9:ce:ce:e5:b7:fc:eb:54:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8 Validity Not Before: Jan 1 20:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1014280858a7875a7d00a0404571c3a39c2d935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:d4:f3:3e:4a:0b:f4:f6:4e:20:e3:94:57: 76:1a:bc:9c:71:b0:54:78:c6:f8:b1:f3:40:ac:eb: a2:6c:b6:ae:6b:06:2e:1a:a4:1c:01:93:1b:d7:ac: 55:8f:dd:1e:c3:19:71:54:75:97:50:04:f4:d4:15: c9:1b:59:d5:fa:69:74:c1:2b:bc:e6:b1:ef:3a:db: ef:69:bf:0f:d6:53:d9:50:12:77:1a:48:8c:96:0f: 5d:bc:f4:9b:40:1e:57:2b:31:22:dd:a3:10:6c:27: 21:4e:4f:a0:89:3d:51:44:4f:a2:0e:1f:09:8e:ec: 0a:f6:c6:9f:1c:26:ea:14:dd:30:b2:b6:78:da:74: 38:ff:58:d9:f5:ca:b3:05:4e:f4:e2:b2:38:fd:8b: 71:9c:cc:82:fb:dd:91:d1:35:76:71:67:40:84:e5: b8:7b:a7:bf:84:bf:bb:47:2b:95:7e:b4:f6:90:8f: 8e:16:cf:70:01:2d:d5:63:ce:5a:d4:88:56:13:10: 1d:4a:6a:de:7e:31:3e:80:a1:bf:6e:81:d2:bb:04: 30:9d:93:45:7b:0c:91:40:bf:0b:e6:6f:57:c4:25: d8:90:98:ea:8c:66:d9:41:fd:a0:3a:c0:45:eb:d4: cb:8a:00:62:df:46:df:0b:e5:84:4e:c9:3f:90:a0: 9a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:01:42:80:85:8A:78:75:A7:D0:0A:04:04:57:1C:3A:39:C2:D9:35 X509v3 Authority Key Identifier: keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/wQFCgIWKeHWn0AoEBFccOjnC2TU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.64.0/22 185.216.48.0/24 IPv6: 2a10:a700::/29 Signature Algorithm: sha256WithRSAEncryption 64:16:63:8c:5c:dd:df:95:e1:f1:1e:21:2c:2d:c8:00:5f:26: 91:40:b3:0a:71:08:fc:8f:2e:f6:1e:c0:e0:b8:fc:60:d9:92: 1c:8c:75:89:7e:64:91:87:ac:57:58:65:45:7e:35:a8:5a:dd: 27:54:cd:72:56:b2:0d:fd:8f:8e:a1:05:79:d1:c3:4c:9d:6c: 8c:d9:d3:57:42:da:02:2d:73:eb:c4:d9:93:73:d6:f6:2b:19: 7c:50:cf:bb:72:66:4c:c7:ae:c1:96:47:7c:39:c6:5a:21:44: 7d:13:89:9b:a6:52:b2:96:3a:bb:f6:4d:37:05:66:6b:74:f9: f9:25:1d:a1:2b:00:64:06:54:68:59:4d:6b:e1:1b:d7:c2:35: a5:c5:5b:aa:44:5f:9a:68:09:a2:62:78:03:16:ac:0e:e7:36: 5e:b2:f3:05:7d:62:1a:9f:7b:90:ba:2e:fa:eb:e7:37:08:b8: 40:94:c8:8e:40:6a:0e:c4:66:c1:03:30:64:d9:a4:30:7e:55: b0:af:94:89:60:cf:ec:01:c8:7a:6e:3f:cf:27:2b:b6:df:5b: c2:0e:7b:bf:fc:08:ea:f7:40:05:08:a8:9b:fb:59:c0:88:fd: 95:55:d0:03:e4:fe:29:5e:05:5e:2d:38:e1:70:4b:dc:3b:32: 26:17:5f:5a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NbOP6b/5yc7O5bf861TUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmFlN2Q0ZTY5ZDQyZTRmNGM5NWQ5OWY0ODJiOWE5NDRk YmVmYzgwHhcNMjYwMTAxMjAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTAxNDI4MDg1OGE3ODc1YTdkMDBhMDQwNDU3MWMzYTM5YzJkOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsenU8z5KC/T2TiDjlFd2GryccbBU eMb4sfNArOuibLauawYuGqQcAZMb16xVj90ewxlxVHWXUAT01BXJG1nV+ml0wSu8 5rHvOtvvab8P1lPZUBJ3GkiMlg9dvPSbQB5XKzEi3aMQbCchTk+giT1RRE+iDh8J juwK9safHCbqFN0wsrZ42nQ4/1jZ9cqzBU704rI4/YtxnMyC+92R0TV2cWdAhOW4 e6e/hL+7RyuVfrT2kI+OFs9wAS3VY85a1IhWExAdSmrefjE+gKG/boHSuwQwnZNF ewyRQL8L5m9XxCXYkJjqjGbZQf2gOsBF69TLigBi30bfC+WETsk/kKCaZQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMEBQoCFinh1p9AKBARXHDo5wtk1MB8GA1UdIwQY MBaAFNz659TmnULk9MldmfSCualE2+/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYt MzcyNzNkZjM5MDFjLzEvd1FGQ2dJV0tlSFduMEFvRUJGY2NPam5DMlRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYtMzcyNzNkZjM5MDFj LzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW+xAAwQA udgwMA0EAgACMAcDBQMqEKcAMA0GCSqGSIb3DQEBCwUAA4IBAQBkFmOMXN3fleHx HiEsLcgAXyaRQLMKcQj8jy72HsDguPxg2ZIcjHWJfmSRh6xXWGVFfjWoWt0nVM1y VrIN/Y+OoQV50cNMnWyM2dNXQtoCLXPrxNmTc9b2Kxl8UM+7cmZMx67Blkd8OcZa IUR9E4mbplKyljq79k03BWZrdPn5JR2hKwBkBlRoWU1r4RvXwjWlxVuqRF+aaAmi YngDFqwO5zZesvMFfWIan3uQui766+c3CLhAlMiOQGoOxGbBAzBk2aQwflWwr5SJ YM/sAch6bj/PJyu231vCDnu//Ajq90AFCKib+1nAiP2VVdAD5P4pXgVeLTjhcEvc OzImF19a -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:30 2026 by rpki-client