This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa File: w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa (raw, json) Hash identifier: EISykekcQVtgn8+ieX6zMsyVfY2p3kqpa+AlDb9TqBo= Subject key identifier: C3:6F:FD:1F:A6:E7:43:7E:26:5A:99:2F:37:64:29:32:3F:72:FE:D1 Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B6B105402202EFD18AB93C7140E0E Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa Signing time: Thu 01 Jan 2026 16:19:30 +0000 ROA not before: Thu 01 Jan 2026 16:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59599 IP address blocks: 62.132.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6b:10:54:02:20:2e:fd:18:ab:93:c7:14:0e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c36ffd1fa6e7437e265a992f376429323f72fed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:0f:47:b1:db:89:86:04:80:fd:0d:78:fb: 7a:8b:fe:59:7b:f1:a3:f5:02:9c:c0:4f:25:cf:34: 46:d5:48:ee:97:7a:30:01:58:49:3c:20:57:69:8e: 05:c4:23:de:28:c6:90:ff:2d:f6:cb:a2:a9:8a:69: a2:3a:bf:c7:1e:d9:d9:d1:51:56:b5:de:1b:bc:1a: 57:e8:8d:2d:eb:de:ea:70:b9:8b:ad:50:da:8f:a7: 2c:74:49:6e:9b:07:17:3f:98:82:ca:9d:f0:a4:3e: d7:3c:9a:9e:84:20:cb:df:cf:ae:15:94:0c:49:09: 85:21:32:14:2c:e1:e5:66:b5:ea:70:a4:1d:ea:de: 90:3f:46:52:32:56:03:b3:a2:ea:35:1d:66:18:b1: 9c:f3:95:c5:89:04:da:1e:bf:87:6b:17:c4:c6:ce: 26:93:90:c4:75:4d:2f:b7:f1:f0:8d:29:43:3f:5e: 67:f8:c3:e4:09:70:6a:26:2b:30:8b:5a:aa:7e:89: 49:a2:f0:1d:02:1c:25:c7:ec:12:8b:8e:bd:67:6b: 71:5c:90:7b:b9:80:6a:ff:cb:40:3d:97:1b:6a:02: b5:0c:4d:13:8d:b6:32:71:6d:ca:e9:2c:47:82:15: 89:d4:39:b3:17:1d:5f:3b:11:d5:17:a1:49:0c:0f: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6F:FD:1F:A6:E7:43:7E:26:5A:99:2F:37:64:29:32:3F:72:FE:D1 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.132.201.0/24 Signature Algorithm: sha256WithRSAEncryption 09:ac:2b:af:9f:7a:fc:3e:22:9c:28:53:a9:28:9f:6b:6a:72: 6e:f0:dc:78:79:f9:ff:4c:7d:16:81:62:6d:c3:32:50:fc:66: 56:84:c9:54:12:4e:24:49:bc:05:b6:c2:80:a2:ae:7d:54:64: 5d:c1:ce:ff:6f:6a:fa:33:29:a6:36:bd:31:dd:b0:6c:45:fb: 70:93:44:42:2f:5b:93:68:e8:c0:e5:6f:3e:57:06:01:36:7a: 17:4a:a3:8f:83:a2:cd:b2:6a:31:80:2b:63:32:3b:9c:96:6c: 1f:cc:2f:ce:40:0e:5a:be:c0:1c:ab:07:d3:18:ef:6d:f5:6c: fb:35:8d:c6:56:29:d4:53:36:62:8a:21:07:8a:eb:82:0d:a4: 8e:36:16:4d:ce:e2:13:0e:80:59:4b:40:d9:3f:6b:f8:84:28: 4a:7c:ab:53:ba:c4:c6:45:3e:9c:9a:53:b8:65:2a:17:ac:fa: 60:60:91:61:22:6a:a3:05:b6:83:0d:c5:63:8c:1c:5d:8e:df: 58:42:58:98:8f:1c:55:8e:5c:94:79:ac:cd:9a:b3:dc:49:df: 62:94:e9:e8:58:ce:d2:e7:f1:ff:88:4a:ef:1e:29:fc:f3:0c: ec:a8:58:a7:12:af:20:2b:05:62:e7:e0:c7:a8:8d:cb:29:ef: 0c:52:b7:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2sQVAIgLv0Yq5PHFA4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzZmZmQxZmE2ZTc0MzdlMjY1YTk5MmYzNzY0MjkzMjNmNzJmZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/IPR7HbiYYEgP0NePt6i/5Ze/Gj 9QKcwE8lzzRG1Ujul3owAVhJPCBXaY4FxCPeKMaQ/y32y6KpimmiOr/HHtnZ0VFW td4bvBpX6I0t697qcLmLrVDaj6csdElumwcXP5iCyp3wpD7XPJqehCDL38+uFZQM SQmFITIULOHlZrXqcKQd6t6QP0ZSMlYDs6LqNR1mGLGc85XFiQTaHr+HaxfExs4m k5DEdU0vt/HwjSlDP15n+MPkCXBqJiswi1qqfolJovAdAhwlx+wSi469Z2txXJB7 uYBq/8tAPZcbagK1DE0TjbYycW3K6SxHghWJ1DmzFx1fOxHVF6FJDA9n8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMNv/R+m50N+JlqZLzdkKTI/cv7RMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzJfOUg2Ym5RMzRtV3Brdk4yUXBNajl5X3RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPoTJMA0G CSqGSIb3DQEBCwUAA4IBAQAJrCuvn3r8PiKcKFOpKJ9ranJu8Nx4efn/TH0WgWJt wzJQ/GZWhMlUEk4kSbwFtsKAoq59VGRdwc7/b2r6MymmNr0x3bBsRftwk0RCL1uT aOjA5W8+VwYBNnoXSqOPg6LNsmoxgCtjMjuclmwfzC/OQA5avsAcqwfTGO9t9Wz7 NY3GVinUUzZiiiEHiuuCDaSONhZNzuITDoBZS0DZP2v4hChKfKtTusTGRT6cmlO4 ZSoXrPpgYJFhImqjBbaDDcVjjBxdjt9YQliYjxxVjlyUeazNmrPcSd9ilOnoWM7S 5/H/iErvHin88wzsqFinEq8gKwVi5+DHqI3LKe8MUref -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:56 2026 by rpki-client