This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/w70489xMl6X6aCjHRjAC8Ah5HNc.roa File: w70489xMl6X6aCjHRjAC8Ah5HNc.roa (raw, json) Hash identifier: rqJZ3tCvcXQJoQ6aJMbBqiFsgTmKKLtIm5U+CF77FX8= Subject key identifier: C3:BD:38:F3:DC:4C:97:A5:FA:68:28:C7:46:30:02:F0:08:79:1C:D7 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D2619992C8DFF9F7EF99579274D2F Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/w70489xMl6X6aCjHRjAC8Ah5HNc.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211595 IP address blocks: 84.1.236.0/24 maxlen: 24 84.2.54.0/24 maxlen: 24 195.228.4.0/24 maxlen: 24 195.228.15.0/24 maxlen: 24 195.228.31.0/24 maxlen: 24 195.228.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:26:19:99:2c:8d:ff:9f:7e:f9:95:79:27:4d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3bd38f3dc4c97a5fa6828c7463002f008791cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:f6:b4:d4:b7:63:36:96:94:30:19:04:13: f9:b7:2f:c0:da:70:f6:ec:df:70:e9:e3:88:b6:a5: d4:a6:e1:c3:a3:5f:b2:30:0f:da:1a:b5:98:23:25: e6:8d:85:46:87:7d:df:6f:a8:ee:08:78:5e:ed:41: ee:2d:04:7e:97:b0:3f:d7:c9:a0:91:5f:5f:98:93: ec:b3:a6:21:a9:3d:22:66:5b:e1:54:bb:59:f8:14: fe:f7:b3:e6:09:97:71:68:87:8b:38:20:04:67:c0: 91:c3:ad:1d:82:ef:a9:28:c4:b8:c7:48:1f:1e:30: 1a:95:e0:ab:bf:6b:fa:58:9e:11:c4:34:15:3a:45: 33:d9:38:c1:c6:9c:e6:23:2c:b6:e9:94:05:f5:52: 8e:f6:87:35:33:cb:e6:06:a5:25:36:91:42:8a:bc: 2a:95:8e:45:2a:27:34:46:92:28:cc:2a:25:23:dc: c4:47:51:35:16:75:64:1c:5d:9d:ff:65:3b:5e:20: 25:2b:e3:01:ec:09:a6:6a:ca:40:35:01:1f:02:9e: f1:f3:f5:32:74:f8:e7:88:4b:cf:fa:bf:d7:d7:49: 54:9f:0e:8b:d6:be:63:e2:71:d7:ca:27:8e:37:7e: a8:84:ad:eb:61:38:07:f6:de:6e:b0:99:85:da:9d: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BD:38:F3:DC:4C:97:A5:FA:68:28:C7:46:30:02:F0:08:79:1C:D7 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/w70489xMl6X6aCjHRjAC8Ah5HNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.1.236.0/24 84.2.54.0/24 195.228.4.0/24 195.228.15.0/24 195.228.31.0/24 195.228.112.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:d1:d1:be:5b:2b:59:20:a0:a9:c6:d1:6c:8f:99:c9:7a:12: 14:1a:db:9b:85:f9:18:11:f6:9f:80:9c:61:ec:f4:a0:37:35: 46:af:02:d2:9b:ec:6a:bc:35:53:6b:39:3e:6e:4e:41:f4:e5: 9f:f3:28:93:bf:f4:23:68:01:98:9d:5a:88:39:2f:32:47:d3: 8b:0f:aa:54:3c:c2:c4:cc:d1:cf:c7:96:1d:17:5a:55:ba:6e: 7c:28:ba:d0:4e:52:be:a0:53:c9:61:12:dc:b1:00:cb:97:54: 5a:47:fc:ff:5e:39:93:0f:23:93:b5:9f:1a:7b:bd:48:34:43: 1b:51:d1:a4:64:4a:0d:6d:3e:19:91:eb:72:49:57:3a:02:d5: 8c:27:92:86:59:0f:f4:6c:32:b1:38:d7:84:34:a5:ab:dc:6b: f0:81:ae:c0:41:75:e6:e3:39:28:c9:0e:ee:57:a5:a1:b6:57: 67:ee:19:d5:4b:78:2a:6d:7d:63:d7:cc:b5:d5:f9:d4:ac:27: 81:31:94:0d:68:16:0d:53:6d:de:a8:9f:e4:5d:b1:59:22:34: f6:79:d6:7f:bb:aa:8a:20:08:27:ce:d0:64:20:81:c2:e4:70: e2:3d:36:43:de:fc:fa:82:48:81:2a:94:e7:53:84:60:64:55: f6:2d:e0:e1 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9XSYZmSyN/59++ZV5J00vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2JkMzhmM2RjNGM5N2E1ZmE2ODI4Yzc0NjMwMDJmMDA4NzkxY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtb2tNS3YzaWlDAZBBP5ty/A2nD2 7N9w6eOItqXUpuHDo1+yMA/aGrWYIyXmjYVGh33fb6juCHhe7UHuLQR+l7A/18mg kV9fmJPss6YhqT0iZlvhVLtZ+BT+97PmCZdxaIeLOCAEZ8CRw60dgu+pKMS4x0gf HjAaleCrv2v6WJ4RxDQVOkUz2TjBxpzmIyy26ZQF9VKO9oc1M8vmBqUlNpFCirwq lY5FKic0RpIozColI9zER1E1FnVkHF2d/2U7XiAlK+MB7AmmaspANQEfAp7x8/Uy dPjniEvP+r/X10lUnw6L1r5j4nHXyieON36ohK3rYTgH9t5usJmF2p09SwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMO9OPPcTJel+mgox0YwAvAIeRzXMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvdzcwNDg5eE1sNlg2YUNqSFJqQUM4QWg1SE5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVAHsAwQA VAI2AwQAw+QEAwQAw+QPAwQAw+QfAwQAw+RwMA0GCSqGSIb3DQEBCwUAA4IBAQAr 0dG+WytZIKCpxtFsj5nJehIUGtubhfkYEfafgJxh7PSgNzVGrwLSm+xqvDVTazk+ bk5B9OWf8yiTv/QjaAGYnVqIOS8yR9OLD6pUPMLEzNHPx5YdF1pVum58KLrQTlK+ oFPJYRLcsQDLl1RaR/z/XjmTDyOTtZ8ae71INEMbUdGkZEoNbT4ZketySVc6AtWM J5KGWQ/0bDKxONeENKWr3Gvwga7AQXXm4zkoyQ7uV6Whtldn7hnVS3gqbX1j18y1 1fnUrCeBMZQNaBYNU23eqJ/kXbFZIjT2edZ/u6qKIAgnztBkIIHC5HDiPTZD3vz6 gkiBKpTnU4RgZFX2LeDh -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:19 2026 by rpki-client