This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/fWrVWO3Qdl8cPmv42q3hMALhIj8.roa File: fWrVWO3Qdl8cPmv42q3hMALhIj8.roa (raw, json) Hash identifier: TQo5JavRn3eW6VS8sjnDE/2uLbkZQpycWjKQhd4KcM8= Subject key identifier: 7D:6A:D5:58:ED:D0:76:5F:1C:3E:6B:F8:DA:AD:E1:30:02:E1:22:3F Certificate issuer: /CN=72e6826c8628489db041fe78c09ef28b5421e45c Certificate serial: 019B78A35A61545B59120B644A2F916787AE Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/fWrVWO3Qdl8cPmv42q3hMALhIj8.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34385 IP address blocks: 31.47.200.0/21 maxlen: 21 217.28.192.0/20 maxlen: 20 2a02:24f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5a:61:54:5b:59:12:0b:64:4a:2f:91:67:87:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d6ad558edd0765f1c3e6bf8daade13002e1223f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:f3:c3:fd:47:f2:9f:86:af:dc:03:82:76: 03:a4:83:96:93:91:9d:30:f8:38:8a:9f:ef:36:91: 44:bf:a3:a2:bb:5c:c2:27:cc:47:7d:51:9b:86:77: 88:d9:64:1a:42:16:a0:4f:f3:47:90:36:18:63:eb: e0:e6:35:9e:80:4d:54:e9:79:09:bd:4c:c9:0f:17: 36:86:a9:51:26:b3:5d:cd:59:14:96:0c:35:90:5b: 1a:99:71:dc:4f:29:75:40:af:27:fb:93:7f:43:54: 81:60:10:b2:fe:1f:6f:1f:f3:03:fb:7d:02:51:ea: 25:a4:0a:34:f2:90:9f:83:bb:60:ba:c4:a9:bb:f5: 40:51:a2:3c:b5:ca:03:42:60:81:bb:98:42:33:83: b7:f6:64:85:1c:16:5a:2e:fa:54:93:46:f6:e7:1d: 43:08:c6:82:bd:b7:7d:75:01:ca:b0:bb:6e:17:ab: 1a:59:16:2c:58:4e:86:c7:1c:c3:b6:44:ef:5b:80: 51:d8:03:29:80:95:0a:b5:a9:0e:ae:86:03:a6:7a: 7e:2c:b4:53:89:68:7d:19:3e:41:1f:ca:63:8f:30: 67:63:43:68:ac:8e:b7:df:b1:15:21:53:86:54:22: a4:9e:af:4c:5e:b0:d2:6b:b2:d6:0f:d5:05:10:39: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6A:D5:58:ED:D0:76:5F:1C:3E:6B:F8:DA:AD:E1:30:02:E1:22:3F X509v3 Authority Key Identifier: keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/fWrVWO3Qdl8cPmv42q3hMALhIj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.200.0/21 217.28.192.0/20 IPv6: 2a02:24f8::/32 Signature Algorithm: sha256WithRSAEncryption 9e:64:43:f7:46:2c:fa:e5:96:3f:ae:da:e0:b9:96:bc:52:50: af:87:18:6c:d2:ac:ae:a7:34:72:69:5b:e6:ad:25:c6:ac:b6: 16:5f:3c:b0:f2:38:02:70:b1:b9:82:8c:e5:70:d2:0c:a3:d5: 21:26:29:73:c7:eb:bf:2e:b1:ff:d7:79:1b:49:ff:d5:11:58: a8:01:23:a4:2e:f3:c0:c6:6b:43:07:8a:8b:a4:f8:e1:48:63: bb:3b:69:dd:f0:62:c7:13:69:06:f7:d0:c3:4a:bb:b8:13:db: 9c:37:7d:42:75:c8:df:80:ae:6f:d4:bd:ad:2f:b5:79:e7:d9: d8:ab:64:fc:72:ac:ec:98:7a:c7:2e:af:60:90:2d:70:35:ff: 6e:f9:97:78:f6:64:45:7a:ee:9d:bb:64:5f:06:9f:7e:1e:05: 87:6f:22:05:49:fa:d2:11:b3:31:e7:71:a1:6c:e5:46:f4:b0: fa:39:1b:20:14:a5:ff:e1:4b:c9:36:8b:a1:47:f2:e8:74:15: d1:1d:db:2e:88:f0:49:43:96:a8:78:5b:58:96:f7:71:79:2f: e8:19:99:83:90:99:70:90:0a:94:70:a0:bf:f0:1d:cd:ee:25: c3:6a:63:12:12:05:14:2e:ee:67:ea:76:b3:1e:f7:7b:6a:9d: 4d:68:35:e9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4o1phVFtZEgtkSi+RZ4euMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTY4MjZjODYyODQ4OWRiMDQxZmU3OGMwOWVmMjhiNTQy MWU0NWMwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDZhZDU1OGVkZDA3NjVmMWMzZTZiZjhkYWFkZTEzMDAyZTEyMjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxunzw/1H8p+Gr9wDgnYDpIOWk5Gd MPg4ip/vNpFEv6Oiu1zCJ8xHfVGbhneI2WQaQhagT/NHkDYYY+vg5jWegE1U6XkJ vUzJDxc2hqlRJrNdzVkUlgw1kFsamXHcTyl1QK8n+5N/Q1SBYBCy/h9vH/MD+30C UeolpAo08pCfg7tgusSpu/VAUaI8tcoDQmCBu5hCM4O39mSFHBZaLvpUk0b25x1D CMaCvbd9dQHKsLtuF6saWRYsWE6GxxzDtkTvW4BR2AMpgJUKtakOroYDpnp+LLRT iWh9GT5BH8pjjzBnY0NorI6337EVIVOGVCKknq9MXrDSa7LWD9UFEDlqyQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFH1q1Vjt0HZfHD5r+Nqt4TAC4SI/MB8GA1UdIwQY MBaAFHLmgmyGKEidsEH+eMCe8otUIeRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEt OTc1YWQwM2Q4OGU2LzEvZldyVldPM1FkbDhjUG12NDJxM2hNQUxoSWo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEtOTc1YWQwM2Q4OGU2 LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHy/IAwQE 2RzAMA0EAgACMAcDBQAqAiT4MA0GCSqGSIb3DQEBCwUAA4IBAQCeZEP3Riz65ZY/ rtrguZa8UlCvhxhs0qyupzRyaVvmrSXGrLYWXzyw8jgCcLG5gozlcNIMo9UhJilz x+u/LrH/13kbSf/VEVioASOkLvPAxmtDB4qLpPjhSGO7O2nd8GLHE2kG99DDSru4 E9ucN31CdcjfgK5v1L2tL7V559nYq2T8cqzsmHrHLq9gkC1wNf9u+Zd49mRFeu6d u2RfBp9+HgWHbyIFSfrSEbMx53GhbOVG9LD6ORsgFKX/4UvJNouhR/LodBXRHdsu iPBJQ5aoeFtYlvdxeS/oGZmDkJlwkAqUcKC/8B3N7iXDamMSEgUULu5n6nazHvd7 ap1NaDXp -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:12 2026 by rpki-client