This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/_W2M19fEeYWYsJYF-LdRGnP5HT4.roa File: _W2M19fEeYWYsJYF-LdRGnP5HT4.roa (raw, json) Hash identifier: Pmvi6OlA3CER/RWwL2L21FShj4gRY6R+MGZg5vLD+/o= Subject key identifier: FD:6D:8C:D7:D7:C4:79:85:98:B0:96:05:F8:B7:51:1A:73:F9:1D:3E Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Certificate serial: 019B7BA4D924B16391C897B51B6441B68AE5 Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/_W2M19fEeYWYsJYF-LdRGnP5HT4.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1881 IP address blocks: 143.118.0.0/16 maxlen: 16 2001:1400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d9:24:b1:63:91:c8:97:b5:1b:64:41:b6:8a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd6d8cd7d7c4798598b09605f8b7511a73f91d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:a4:9a:c4:5f:cc:90:05:72:34:bc:79:3e: 51:84:d9:be:d3:29:3e:a2:db:03:f5:c9:aa:55:1e: 78:29:84:a8:e3:20:d7:11:2c:87:0e:0e:69:ed:40: 21:fe:71:d8:29:cf:8e:f4:5b:79:0d:69:b3:35:e5: 1b:e1:82:3c:98:6d:25:5b:46:10:26:cf:be:3c:3a: c2:c3:3b:d4:2f:d6:93:aa:67:32:1e:df:64:e8:76: 30:63:30:90:d0:75:a4:00:f2:12:b3:26:8e:38:19: 75:af:be:c5:66:35:7f:ae:72:8e:97:1f:0c:51:bc: e2:bc:e6:f4:d2:f4:63:1f:0c:af:e1:f8:35:68:a4: 8e:60:10:64:5d:e5:94:52:fe:0a:8b:32:1a:4a:aa: 2d:c2:8f:de:2b:b9:75:6b:09:13:11:41:a1:e8:1c: 02:e2:37:75:a3:51:76:30:d9:c2:a3:1a:72:4b:78: 2c:e4:68:cc:17:1d:cb:99:70:09:5d:50:eb:29:f0: 01:ec:0a:20:aa:7c:37:45:c7:9f:cb:0e:a3:b4:c0: f5:df:f1:ff:6d:93:5d:ae:9f:f4:d6:aa:51:0a:30: ca:51:9a:18:4a:79:ab:01:16:ec:e5:56:cd:40:ad: 65:ba:5b:38:2c:0d:97:65:cc:8b:02:9f:d6:cd:43: 14:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6D:8C:D7:D7:C4:79:85:98:B0:96:05:F8:B7:51:1A:73:F9:1D:3E X509v3 Authority Key Identifier: keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/_W2M19fEeYWYsJYF-LdRGnP5HT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.118.0.0/16 IPv6: 2001:1400::/48 Signature Algorithm: sha256WithRSAEncryption 49:2a:60:3e:23:74:12:21:85:d4:a8:0f:a0:62:a4:01:4d:4a: 97:1f:4d:a4:61:56:e9:ef:38:88:78:61:87:3b:4b:c5:2e:b6: 07:00:9a:08:1b:48:e6:71:73:42:87:1e:1d:2f:65:ae:a2:35: 88:2d:c1:ca:a8:b4:e1:73:a0:d6:52:64:31:4a:9c:b8:bc:9d: f4:a9:7b:51:a3:fd:84:85:b6:f2:0e:9a:a9:94:0d:ad:d7:08: f0:6f:48:28:db:95:da:fc:4f:21:ea:ba:60:fa:d0:f9:9d:17: 62:51:9e:ba:e3:98:1e:0e:38:2b:40:cd:8d:7a:ec:0f:97:74: f6:1c:3c:39:95:e0:98:d9:49:83:3a:c0:88:08:73:d9:6a:0b: 5b:42:8d:8f:7a:c2:94:1e:3e:0f:8e:12:cc:64:2d:84:54:88: 6c:1b:8c:ee:7c:d3:3d:e0:8e:15:af:1f:e4:c9:b7:6f:86:cf: 55:3f:4f:9c:10:13:e0:d7:e1:7f:89:b6:c7:1d:c9:98:c0:df: 0b:1b:1f:61:b9:0d:be:fe:fa:16:bb:b7:b6:6d:4e:5f:c3:2b: 9a:f6:a7:ab:98:7e:4a:90:6f:69:ee:1c:f4:ae:11:f1:51:09: c1:03:77:94:ea:81:4f:1b:3d:0b:38:a0:77:7d:03:bd:37:89: 11:30:fc:9c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt7pNkksWORyJe1G2RBtorlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmM5YmMyZDJkYWNmZDZmMTMwZDg1YTg0ZmVkZWFiZjE3 OWE1NjcwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDZkOGNkN2Q3YzQ3OTg1OThiMDk2MDVmOGI3NTExYTczZjkxZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zmkmsRfzJAFcjS8eT5RhNm+0yk+ otsD9cmqVR54KYSo4yDXESyHDg5p7UAh/nHYKc+O9Ft5DWmzNeUb4YI8mG0lW0YQ Js++PDrCwzvUL9aTqmcyHt9k6HYwYzCQ0HWkAPISsyaOOBl1r77FZjV/rnKOlx8M UbzivOb00vRjHwyv4fg1aKSOYBBkXeWUUv4KizIaSqotwo/eK7l1awkTEUGh6BwC 4jd1o1F2MNnCoxpyS3gs5GjMFx3LmXAJXVDrKfAB7Aogqnw3Rcefyw6jtMD13/H/ bZNdrp/01qpRCjDKUZoYSnmrARbs5VbNQK1luls4LA2XZcyLAp/WzUMUJQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFP1tjNfXxHmFmLCWBfi3URpz+R0+MB8GA1UdIwQY MBaAFKgsm8LS2s/W8TDYWoT+3qvxeaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgt NTVjMTQwYzlmNTRmLzEvX1cyTTE5ZkVlWVdZc0pZRi1MZFJHblA1SFQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgtNTVjMTQwYzlmNTRm LzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAj3YwDwQC AAIwCQMHACABFAAAADANBgkqhkiG9w0BAQsFAAOCAQEASSpgPiN0EiGF1KgPoGKk AU1Klx9NpGFW6e84iHhhhztLxS62BwCaCBtI5nFzQoceHS9lrqI1iC3Byqi04XOg 1lJkMUqcuLyd9Kl7UaP9hIW28g6aqZQNrdcI8G9IKNuV2vxPIeq6YPrQ+Z0XYlGe uuOYHg44K0DNjXrsD5d09hw8OZXgmNlJgzrAiAhz2WoLW0KNj3rClB4+D44SzGQt hFSIbBuM7nzTPeCOFa8f5Mm3b4bPVT9PnBAT4Nfhf4m2xx3JmMDfCxsfYbkNvv76 Fru3tm1OX8Mrmvanq5h+SpBvae4c9K4R8VEJwQN3lOqBTxs9Czigd30DvTeJETD8 nA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:30 2026 by rpki-client