This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa File: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (raw, json) Hash identifier: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0= Subject key identifier: C3:40:76:1A:A6:F0:7F:3A:7F:34:9B:B6:AF:12:56:B6:F2:78:D4:31 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B7B36D2B009C112CB25163830820BB355 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216363 IP address blocks: 212.59.104.0/22 maxlen: 22 212.59.104.0/23 maxlen: 23 212.59.106.0/23 maxlen: 23 212.59.106.0/24 maxlen: 24 212.59.107.0/24 maxlen: 24 212.59.108.0/24 maxlen: 24 212.59.110.0/23 maxlen: 23 212.59.110.0/24 maxlen: 24 212.59.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d2:b0:09:c1:12:cb:25:16:38:30:82:0b:b3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c340761aa6f07f3a7f349bb6af1256b6f278d431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:bb:0f:34:bf:5a:22:a3:aa:e2:80:a0:24: 92:45:3a:b1:d6:8e:bb:82:f7:f7:0f:bc:8d:5c:db: 68:6c:61:1b:79:23:3b:ce:a4:8a:03:d2:9c:15:f5: df:24:d0:05:84:1f:c6:72:9b:a6:b2:a0:3d:7d:b6: e1:bd:8e:a9:d6:f3:28:a7:fb:a2:20:2b:11:cb:24: ff:76:04:8d:4e:31:b1:13:bf:f7:11:6c:4f:c1:ec: 2b:e9:4a:71:59:ce:f5:90:6e:cf:96:7b:94:52:de: 63:43:9d:0f:9e:88:fa:12:26:0d:26:33:19:b2:f2: 03:e9:b4:68:1e:5e:29:e8:05:fe:c6:e7:1f:5f:4e: 86:87:ba:97:7c:00:29:1a:b6:2f:2e:75:fa:d2:d1: 17:cf:e8:17:33:96:40:9a:34:d3:92:a6:f9:1f:54: 6d:0f:3a:3b:dc:a4:02:5a:2a:05:b2:28:fb:0a:f8: a4:3f:b7:76:5d:a7:66:8c:91:2e:7e:65:f4:6e:49: bd:d5:a7:4e:a0:d0:7e:7f:61:2f:ed:8f:30:1f:77: a7:3d:44:8b:da:cc:55:7d:1a:07:2c:ae:b7:70:40: 15:9f:65:7b:f1:9c:36:f1:20:8f:a6:35:5a:0e:5f: ec:53:b1:0b:4e:a8:98:72:53:db:59:2f:77:99:d9: 15:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:40:76:1A:A6:F0:7F:3A:7F:34:9B:B6:AF:12:56:B6:F2:78:D4:31 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.59.104.0-212.59.108.255 212.59.110.0/23 Signature Algorithm: sha256WithRSAEncryption 23:54:d2:f2:1c:af:2a:66:88:69:67:43:66:36:14:95:83:d6: cc:5b:76:be:f6:8a:cb:d4:50:f6:46:44:48:21:05:f2:8a:1a: 4c:e4:65:a0:70:75:44:3b:13:2a:97:09:e1:13:81:da:16:4d: 82:84:c3:eb:6c:b8:a0:f5:e0:a1:ac:e1:b5:0a:52:46:ad:84: 28:f7:a9:dc:07:aa:05:81:7a:da:28:17:0b:67:38:eb:17:f1: 09:91:71:e8:aa:7f:e4:9e:b0:65:24:ec:fe:9c:60:ac:01:64: 8b:b9:ec:a5:d6:a7:ab:ba:01:59:6a:78:4c:a9:5a:b1:25:27: b2:68:53:77:d8:ef:84:e4:31:02:73:f6:1d:e6:36:8e:1f:48: 24:64:d3:0b:6b:14:d0:a1:6e:81:08:dd:8e:1a:39:fe:ab:c2: 03:6d:b6:d6:f1:57:84:55:43:84:35:22:67:47:0a:2e:95:dd: 92:0a:76:a2:5a:35:27:08:be:1f:26:9b:44:59:ef:a3:de:8a: 79:30:e8:34:c6:19:49:9d:80:cf:da:04:db:03:3b:30:33:1c: 31:f9:c8:49:2a:14:51:6e:95:07:a8:2c:45:98:0c:d2:00:4a: 20:53:d2:c3:f2:9e:7e:d2:6d:44:85:14:78:26:ed:a9:0c:89: cc:b5:3e:8d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7NtKwCcESyyUWODCCC7NVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzQwNzYxYWE2ZjA3ZjNhN2YzNDliYjZhZjEyNTZiNmYyNzhkNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb+7DzS/WiKjquKAoCSSRTqx1o67 gvf3D7yNXNtobGEbeSM7zqSKA9KcFfXfJNAFhB/GcpumsqA9fbbhvY6p1vMop/ui ICsRyyT/dgSNTjGxE7/3EWxPwewr6UpxWc71kG7PlnuUUt5jQ50Pnoj6EiYNJjMZ svID6bRoHl4p6AX+xucfX06Gh7qXfAApGrYvLnX60tEXz+gXM5ZAmjTTkqb5H1Rt Dzo73KQCWioFsij7CvikP7d2XadmjJEufmX0bkm91adOoNB+f2Ev7Y8wH3enPUSL 2sxVfRoHLK63cEAVn2V78Zw28SCPpjVaDl/sU7ELTqiYclPbWS93mdkVMwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMNAdhqm8H86fzSbtq8SVrbyeNQxMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvdzBCMkdxYndmenBfTkp1MnJ4Sld0dko0MURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAPUO2gD BADUO2wDBAHUO24wDQYJKoZIhvcNAQELBQADggEBACNU0vIcrypmiGlnQ2Y2FJWD 1sxbdr72isvUUPZGREghBfKKGkzkZaBwdUQ7EyqXCeETgdoWTYKEw+tsuKD14KGs 4bUKUkathCj3qdwHqgWBetooFwtnOOsX8QmRceiqf+SesGUk7P6cYKwBZIu57KXW p6u6AVlqeEypWrElJ7JoU3fY74TkMQJz9h3mNo4fSCRk0wtrFNChboEI3Y4aOf6r wgNtttbxV4RVQ4Q1ImdHCi6V3ZIKdqJaNScIvh8mm0RZ76Peinkw6DTGGUmdgM/a BNsDOzAzHDH5yEkqFFFulQeoLEWYDNIASiBT0sPynn7SbUSFFHgm7akMicy1Po0= -----END CERTIFICATE-----Generated at Mon Jan 26 07:43:26 2026 by rpki-client