This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/DW1iDd0pypItq6VGgqdUHsmuOGU.roa File: DW1iDd0pypItq6VGgqdUHsmuOGU.roa (raw, json) Hash identifier: aaLxcZGvfmO8Z7JuB1q/hijXPFvlEoyV2irJBeZLhZo= Subject key identifier: 0D:6D:62:0D:DD:29:CA:92:2D:AB:A5:46:82:A7:54:1E:C9:AE:38:65 Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Certificate serial: 019B7F15048E4D0C872424C2A3FFF411B801 Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/DW1iDd0pypItq6VGgqdUHsmuOGU.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50979 IP address blocks: 92.118.148.0/24 maxlen: 24 176.126.162.0/24 maxlen: 24 185.237.218.0/23 maxlen: 23 195.20.208.0/24 maxlen: 24 2a0a:8c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:04:8e:4d:0c:87:24:24:c2:a3:ff:f4:11:b8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d6d620ddd29ca922daba54682a7541ec9ae3865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:20:61:00:7b:0c:13:01:3b:f1:25:c1:ef: 07:93:63:e4:4a:0f:9f:b3:bb:16:7e:87:dd:1b:54: 16:be:91:0c:92:7a:b2:1e:6b:46:84:0a:3b:58:81: f3:c2:d1:61:52:54:1b:05:73:7f:00:84:26:2c:0c: b0:81:87:b3:75:91:35:14:63:ad:4a:af:7d:62:c3: 9a:ff:2d:81:4a:08:ea:d5:d6:8d:70:ae:a3:34:e9: 0d:ce:7f:fd:c8:cf:a9:30:74:87:6e:7a:1e:44:33: b3:10:68:b6:83:65:fc:1a:43:e2:5d:92:71:27:e9: 2a:1c:16:7d:0d:00:43:58:ac:9c:72:c7:30:21:3e: 27:9a:0f:03:85:26:e1:67:e8:92:d4:fe:2d:68:4c: 60:27:05:b3:09:f4:df:8b:9f:0e:c9:df:93:5e:1a: 44:12:bc:47:9e:4b:a5:f6:4a:c5:34:33:8b:93:27: ad:7a:0e:53:c5:3a:82:2c:c9:ee:80:ca:9c:4a:d5: cc:3c:78:84:d7:62:4a:97:9b:d1:72:3c:13:6d:07: a3:5e:58:a1:e8:90:92:69:c6:b8:0d:36:01:f4:7a: 56:b8:ee:f3:61:a5:e0:bf:65:4b:b2:2a:85:5b:7a: 49:c1:dc:7c:27:f3:0e:40:f9:a6:ce:c4:e5:80:f7: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6D:62:0D:DD:29:CA:92:2D:AB:A5:46:82:A7:54:1E:C9:AE:38:65 X509v3 Authority Key Identifier: keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/DW1iDd0pypItq6VGgqdUHsmuOGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.148.0/24 176.126.162.0/24 185.237.218.0/23 195.20.208.0/24 IPv6: 2a0a:8c40::/32 Signature Algorithm: sha256WithRSAEncryption a8:4a:19:f7:36:66:57:10:d3:86:d1:ea:66:3f:99:d0:05:0b: 82:97:85:2b:e7:46:21:56:d1:2d:69:fe:6c:56:3a:5c:18:52: 02:45:df:7b:61:16:a2:cc:a9:9f:d7:7a:93:6e:23:e3:e3:3a: b0:f3:85:27:49:f6:7a:3b:f5:09:76:60:3a:23:e9:6b:58:ba: d5:4a:7f:39:3a:bc:8b:a8:d6:f9:3d:f5:10:90:97:fb:40:fc: af:84:50:e9:30:c3:e5:95:36:46:bc:91:f1:c9:dd:f0:81:c7: 17:ed:8c:ed:d3:ab:18:c5:63:55:c4:c0:de:ec:b5:96:00:24: 90:68:ae:61:9d:bf:11:ea:9f:c5:94:96:83:ad:46:56:c0:80: cc:95:0f:15:12:8e:ba:c7:13:33:4a:0d:25:d1:50:38:6f:a9: ca:8f:91:fb:3c:80:8f:88:fa:ff:38:76:1b:f2:66:90:8d:5a: 3c:8e:3e:72:92:1b:2e:87:50:f5:22:6b:43:68:e1:5d:f9:56: 5b:93:76:91:39:84:3b:51:ec:ee:26:d1:7a:25:10:45:82:66: f4:0f:3d:26:e6:b2:47:58:e3:47:23:29:da:6e:17:f9:05:c9: d7:ef:38:3a:3d:84:d1:77:0e:15:e9:2e:20:7d:91:91:29:cc: da:54:75:21 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FQSOTQyHJCTCo//0EbgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5 Yzk3MTgwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDZkNjIwZGRkMjljYTkyMmRhYmE1NDY4MmE3NTQxZWM5YWUzODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy8gYQB7DBMBO/Elwe8Hk2PkSg+f s7sWfofdG1QWvpEMknqyHmtGhAo7WIHzwtFhUlQbBXN/AIQmLAywgYezdZE1FGOt Sq99YsOa/y2BSgjq1daNcK6jNOkNzn/9yM+pMHSHbnoeRDOzEGi2g2X8GkPiXZJx J+kqHBZ9DQBDWKyccscwIT4nmg8DhSbhZ+iS1P4taExgJwWzCfTfi58Oyd+TXhpE ErxHnkul9krFNDOLkyeteg5TxTqCLMnugMqcStXMPHiE12JKl5vRcjwTbQejXlih 6JCSaca4DTYB9HpWuO7zYaXgv2VLsiqFW3pJwdx8J/MOQPmmzsTlgPcGNwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFA1tYg3dKcqSLaulRoKnVB7JrjhlMB8GA1UdIwQY MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt YTc3NGU0MWQyNjRjLzEvRFcxaURkMHB5cEl0cTZWR2dxZFVIc211T0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAXHaUAwQA sH6iAwQBue3aAwQAwxTQMA0EAgACMAcDBQAqCoxAMA0GCSqGSIb3DQEBCwUAA4IB AQCoShn3NmZXENOG0epmP5nQBQuCl4Ur50YhVtEtaf5sVjpcGFICRd97YRaizKmf 13qTbiPj4zqw84UnSfZ6O/UJdmA6I+lrWLrVSn85OryLqNb5PfUQkJf7QPyvhFDp MMPllTZGvJHxyd3wgccX7Yzt06sYxWNVxMDe7LWWACSQaK5hnb8R6p/FlJaDrUZW wIDMlQ8VEo66xxMzSg0l0VA4b6nKj5H7PICPiPr/OHYb8maQjVo8jj5ykhsuh1D1 ImtDaOFd+VZbk3aROYQ7UezuJtF6JRBFgmb0Dz0m5rJHWONHIynabhf5BcnX7zg6 PYTRdw4V6S4gfZGRKczaVHUh -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:23 2026 by rpki-client