This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/rwGpW4rplS3HHtgebmY44eIYOGo.roa File: rwGpW4rplS3HHtgebmY44eIYOGo.roa (raw, json) Hash identifier: kNy2CiPdlTnpuyB9W6wLc1+xpE7hDldySuoRvEO4j5E= Subject key identifier: AF:01:A9:5B:8A:E9:95:2D:C7:1E:D8:1E:6E:66:38:E1:E2:18:38:6A Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Certificate serial: 019BE16EC0E591071914F5AA6C8F0C1AE0ED Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/rwGpW4rplS3HHtgebmY44eIYOGo.roa Signing time: Wed 21 Jan 2026 16:41:30 +0000 ROA not before: Wed 21 Jan 2026 16:41:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 89.126.225.0/24 maxlen: 24 89.126.226.0/24 maxlen: 24 89.126.227.0/24 maxlen: 24 89.126.229.0/24 maxlen: 24 89.126.230.0/24 maxlen: 24 89.126.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:6e:c0:e5:91:07:19:14:f5:aa:6c:8f:0c:1a:e0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Validity Not Before: Jan 21 16:41:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af01a95b8ae9952dc71ed81e6e6638e1e218386a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:15:bc:2f:4d:3a:3d:7e:fa:64:d3:e0:df: 59:5e:2e:22:bc:9e:17:1c:64:66:2e:14:af:ed:c1: 24:04:5a:3b:f2:4a:07:7d:a7:2c:2b:07:b5:a8:d5: c0:13:f3:c3:18:86:1d:84:8c:75:ad:cd:32:a9:aa: ed:21:59:93:e3:12:43:e3:49:06:03:1a:1f:98:84: d4:32:f8:62:54:ed:c0:8d:1b:91:07:20:8f:e9:19: b4:12:25:b4:88:ab:c9:39:8a:f7:20:c1:a0:5d:a2: 8e:d5:10:ce:19:f3:60:a4:36:31:5c:01:1a:f3:00: cd:b9:64:77:13:26:43:dc:cc:a3:ec:48:85:e2:9a: 86:a2:6d:28:cb:6d:fc:f0:a2:37:77:1d:dc:3d:80: 32:e4:4d:d2:78:d5:1e:60:e9:8d:f5:d5:36:dd:3e: f0:9b:cb:6c:49:71:f6:f3:6e:30:73:a8:b3:16:d4: c6:8a:fe:c9:41:52:af:78:0a:a6:ad:59:ec:ff:da: a2:69:06:44:72:a1:b0:0b:de:57:b2:c4:75:f4:06: 66:e9:fd:a6:9c:c9:bb:c2:47:9d:ab:9e:8c:b3:8f: d4:ac:2c:fd:8d:27:67:4b:e6:b2:68:68:c6:05:2d: 25:dc:52:68:30:62:31:a3:3e:35:ab:c9:34:c3:16: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:01:A9:5B:8A:E9:95:2D:C7:1E:D8:1E:6E:66:38:E1:E2:18:38:6A X509v3 Authority Key Identifier: keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/rwGpW4rplS3HHtgebmY44eIYOGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.126.225.0-89.126.227.255 89.126.229.0-89.126.231.255 Signature Algorithm: sha256WithRSAEncryption 7b:ec:27:01:f5:15:74:a2:00:af:9c:f9:92:42:d7:5f:7a:c8: 80:b6:4f:70:99:23:27:f2:a9:72:11:7c:62:7c:af:9f:5f:83: 92:11:66:03:a9:b2:9c:f7:b6:ee:a6:34:a8:c0:c5:2e:6a:b8: 30:35:1a:8a:0c:fd:fd:fb:c3:18:97:b0:d6:ec:b9:71:ce:2e: 80:07:01:49:d2:b1:0a:33:56:8d:27:16:bd:13:2a:34:85:85: e7:54:85:f7:d4:21:a0:b1:22:86:ce:5f:32:65:5e:d2:2d:c4: dd:c5:0f:25:55:29:17:74:5b:13:3f:9d:30:7c:fb:fb:b7:86: 96:15:c2:68:b1:05:6f:4d:c6:20:9f:7b:87:38:4b:84:25:00: 57:f0:f3:95:16:03:5f:e9:54:06:0d:87:0b:7c:81:23:51:3b: b1:fc:84:20:44:05:bc:5a:dd:23:41:f1:79:14:12:ca:98:1c: f9:07:66:61:8b:92:b3:47:69:6e:bc:2b:61:ef:13:10:75:f1: 05:88:67:c6:23:8d:9d:e4:4d:2f:12:65:41:5e:94:4b:7a:a8: 20:dc:2b:54:64:f3:db:dd:a9:4f:a9:2b:64:79:8b:a4:f5:2f: 56:01:56:2e:91:55:4a:7e:f3:f8:96:94:36:14:6e:e2:22:37: e2:0a:91:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZvhbsDlkQcZFPWqbI8MGuDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl MjlkMjUwHhcNMjYwMTIxMTY0MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjAxYTk1YjhhZTk5NTJkYzcxZWQ4MWU2ZTY2MzhlMWUyMTgzODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrIVvC9NOj1++mTT4N9ZXi4ivJ4X HGRmLhSv7cEkBFo78koHfacsKwe1qNXAE/PDGIYdhIx1rc0yqartIVmT4xJD40kG AxofmITUMvhiVO3AjRuRByCP6Rm0EiW0iKvJOYr3IMGgXaKO1RDOGfNgpDYxXAEa 8wDNuWR3EyZD3Myj7EiF4pqGom0oy2388KI3dx3cPYAy5E3SeNUeYOmN9dU23T7w m8tsSXH2824wc6izFtTGiv7JQVKveAqmrVns/9qiaQZEcqGwC95XssR19AZm6f2m nMm7wkedq56Ms4/UrCz9jSdnS+ayaGjGBS0l3FJoMGIxoz41q8k0wxaozwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFK8BqVuK6ZUtxx7YHm5mOOHiGDhqMB8GA1UdIwQY MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct NWNmNTZlZTQzNWIzLzEvcndHcFc0cnBsUzNISHRnZWJtWTQ0ZUlZT0dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABZfuED BAJZfuAwDAMEAFl+5QMEA1l+4DANBgkqhkiG9w0BAQsFAAOCAQEAe+wnAfUVdKIA r5z5kkLXX3rIgLZPcJkjJ/KpchF8Ynyvn1+DkhFmA6mynPe27qY0qMDFLmq4MDUa igz9/fvDGJew1uy5cc4ugAcBSdKxCjNWjScWvRMqNIWF51SF99QhoLEihs5fMmVe 0i3E3cUPJVUpF3RbEz+dMHz7+7eGlhXCaLEFb03GIJ97hzhLhCUAV/DzlRYDX+lU Bg2HC3yBI1E7sfyEIEQFvFrdI0HxeRQSypgc+QdmYYuSs0dpbrwrYe8TEHXxBYhn xiONneRNLxJlQV6US3qoINwrVGTz292pT6krZHmLpPUvVgFWLpFVSn7z+JaUNhRu 4iI34gqRMg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:09:08 2026 by rpki-client