This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/_IW__XFXehaq9QdxRfT864VriOU.roa File: _IW__XFXehaq9QdxRfT864VriOU.roa (raw, json) Hash identifier: k90WCGYeq167jhMKLuGJ73HDgSUqj5sLLRTsPnjXIoA= Subject key identifier: FC:85:BF:FD:71:57:7A:16:AA:F5:07:71:45:F4:FC:EB:85:6B:88:E5 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019B7DCA0CA4B2932515B0DA73088F0B70D3 Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/_IW__XFXehaq9QdxRfT864VriOU.roa Signing time: Fri 02 Jan 2026 08:19:11 +0000 ROA not before: Fri 02 Jan 2026 08:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 46.148.209.0/24 maxlen: 24 46.148.210.0/24 maxlen: 24 46.148.211.0/24 maxlen: 24 84.22.151.0/24 maxlen: 24 91.204.180.0/24 maxlen: 24 91.204.181.0/24 maxlen: 24 91.204.182.0/23 maxlen: 23 91.204.182.0/24 maxlen: 24 91.218.139.0/24 maxlen: 24 91.218.176.0/22 maxlen: 24 91.218.179.0/24 maxlen: 24 91.232.8.0/22 maxlen: 24 195.234.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:0c:a4:b2:93:25:15:b0:da:73:08:8f:0b:70:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Jan 2 08:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc85bffd71577a16aaf5077145f4fceb856b88e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9c:76:9a:5f:b8:af:af:7f:eb:e8:35:1a:a0: 4c:14:ce:33:7b:f6:45:20:c1:b9:09:5d:eb:b0:57: d5:5a:48:5d:f5:ce:21:40:ee:2e:da:32:c6:06:20: 4c:2b:03:6e:7f:7f:9c:2f:d2:43:0c:7c:f5:e6:70: a8:c2:68:a0:5e:75:7c:2c:94:20:b9:8c:2d:a0:40: cf:cc:c5:20:95:b9:e3:ba:0a:44:b7:cd:c4:26:88: 7f:ec:34:cf:02:45:6d:d9:0a:74:eb:cb:c2:5a:47: 51:d2:37:c9:de:99:9f:b9:13:c5:1e:7e:1d:0d:9e: 26:d0:4f:d1:90:0d:13:e4:81:b0:77:47:58:39:04: c6:a7:20:11:03:40:85:fb:b1:29:1c:de:57:9d:5e: 0d:5a:0f:03:f4:02:97:97:6f:1b:65:b1:85:a7:ec: b8:58:08:a7:23:9d:68:e9:33:1f:73:57:d7:9c:af: 64:e3:e3:4f:d8:25:da:35:2f:12:f3:f7:24:f5:cc: 39:28:ce:db:61:28:b2:0d:4f:10:76:9c:c9:5a:ba: d5:7d:84:48:a3:fd:1b:ca:a1:a1:a7:88:c5:78:04: 4c:1f:6e:92:43:25:0c:be:45:37:a7:3c:b8:5b:4a: 49:83:fc:2b:63:da:c5:c8:8d:0a:79:1b:3d:a2:b0: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:85:BF:FD:71:57:7A:16:AA:F5:07:71:45:F4:FC:EB:85:6B:88:E5 X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/_IW__XFXehaq9QdxRfT864VriOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.209.0-46.148.211.255 84.22.151.0/24 91.204.180.0/22 91.218.139.0/24 91.218.176.0/22 91.232.8.0/22 195.234.90.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:d9:3b:8c:e8:47:5b:24:d6:4c:10:25:52:69:c9:a3:35:cf: e1:75:90:5e:92:51:3d:b2:59:8c:f8:87:d9:06:e0:7f:9e:ba: 02:c8:ba:68:43:7e:af:ad:ab:28:8a:71:e3:af:52:de:09:c6: 23:47:d4:7d:32:19:19:f7:8e:68:1e:ac:b6:ce:6d:92:54:74: 19:97:e2:51:71:8a:57:44:19:81:03:e9:89:5e:cb:79:56:6b: 9a:81:ad:2a:38:33:33:a0:74:92:7b:4f:82:e7:d2:46:20:e2: 3c:ce:7f:7e:af:28:62:68:d3:18:74:fb:f1:35:91:d4:66:87: fd:1d:f9:17:82:79:10:a7:a2:90:de:df:f5:79:f7:2a:d3:0c: 59:42:b0:7f:6e:4e:c9:c5:58:05:77:24:f0:26:f7:e1:c2:64: d0:7f:f3:bf:a7:ea:d8:07:77:8f:62:e5:2f:8a:ad:91:51:77: e1:5d:fb:e1:c9:33:d3:71:24:25:99:c1:40:16:2e:7c:75:d0: 0b:75:1f:21:9e:cc:9e:98:bd:1b:fb:eb:68:70:52:a4:11:83: 41:c7:06:18:33:8b:ab:73:7c:9f:60:53:5a:db:89:21:63:3e: b3:ca:90:aa:7c:6d:aa:f7:72:d5:53:3b:1c:cc:6d:88:fb:07: fa:0b:39:0f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt9ygykspMlFbDacwiPC3DTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjYwMTAyMDgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzg1YmZmZDcxNTc3YTE2YWFmNTA3NzE0NWY0ZmNlYjg1NmI4OGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75x2ml+4r69/6+g1GqBMFM4ze/ZF IMG5CV3rsFfVWkhd9c4hQO4u2jLGBiBMKwNuf3+cL9JDDHz15nCowmigXnV8LJQg uYwtoEDPzMUglbnjugpEt83EJoh/7DTPAkVt2Qp068vCWkdR0jfJ3pmfuRPFHn4d DZ4m0E/RkA0T5IGwd0dYOQTGpyARA0CF+7EpHN5XnV4NWg8D9AKXl28bZbGFp+y4 WAinI51o6TMfc1fXnK9k4+NP2CXaNS8S8/ck9cw5KM7bYSiyDU8QdpzJWrrVfYRI o/0byqGhp4jFeARMH26SQyUMvkU3pzy4W0pJg/wrY9rFyI0KeRs9orDq9QIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFPyFv/1xV3oWqvUHcUX0/OuFa4jlMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvX0lXX19YRlhlaGFxOVFkeFJmVDg2NFZyaU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBAAulNED BAIulNADBABUFpcDBAJbzLQDBABb2osDBAJb2rADBAJb6AgDBADD6lowDQYJKoZI hvcNAQELBQADggEBAF3ZO4zoR1sk1kwQJVJpyaM1z+F1kF6SUT2yWYz4h9kG4H+e ugLIumhDfq+tqyiKceOvUt4JxiNH1H0yGRn3jmgerLbObZJUdBmX4lFxildEGYED 6Yley3lWa5qBrSo4MzOgdJJ7T4Ln0kYg4jzOf36vKGJo0xh0+/E1kdRmh/0d+ReC eRCnopDe3/V59yrTDFlCsH9uTsnFWAV3JPAm9+HCZNB/87+n6tgHd49i5S+KrZFR d+Fd++HJM9NxJCWZwUAWLnx10At1HyGezJ6YvRv762hwUqQRg0HHBhgzi6tzfJ9g U1rbiSFjPrPKkKp8bar3ctVTOxzMbYj7B/oLOQ8= -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:58 2026 by rpki-client