This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa File: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (raw, json) Hash identifier: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI= Subject key identifier: C0:92:65:26:81:62:39:49:2B:3A:96:FD:A6:D7:5C:E7:10:E9:92:DD Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F824ACF458BB0C6053B8DC3CD6EE5B8 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa Signing time: Fri 02 Jan 2026 16:20:03 +0000 ROA not before: Fri 02 Jan 2026 16:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393954 IP address blocks: 31.186.225.0/24 maxlen: 24 95.172.65.0/24 maxlen: 24 2a02:b50:4013::/48 maxlen: 48 2a02:b50:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:4a:cf:45:8b:b0:c6:05:3b:8d:c3:cd:6e:e5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0926526816239492b3a96fda6d75ce710e992dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ee:d6:cd:15:79:e4:b1:b7:a4:a0:19:b8:99: b2:18:ea:1c:0b:06:d0:09:25:90:ee:3e:84:da:42: 72:11:0d:f8:5b:65:48:ec:e1:ca:b3:3e:7a:83:f7: 96:fe:6e:d0:c7:ef:8d:fa:b4:5e:5f:a9:eb:15:79: 77:0a:1b:f8:86:07:c0:6c:7e:29:97:1c:c7:b4:39: 46:91:31:41:3e:d0:60:31:86:4f:12:68:14:c5:30: 15:a9:58:60:86:e9:0b:01:01:ba:aa:56:76:1b:ee: bc:4a:e6:e4:67:be:79:e7:da:ca:aa:bb:a8:71:10: 21:1b:ac:bc:0a:4c:74:9e:51:fb:c2:a1:ea:3b:d7: ae:9b:e0:39:c0:b6:eb:63:1c:83:56:69:a9:52:7e: cb:e8:5c:6c:fd:7d:64:cc:70:05:90:54:00:58:55: 0f:55:22:0d:4a:17:ea:40:9b:35:1c:a0:86:36:d4: 5d:30:ec:43:2d:12:f6:6d:bb:04:d0:5d:71:c3:18: 08:8e:e1:17:f1:57:44:56:f7:5f:66:d4:7a:67:e1: 7d:a8:e6:4e:e1:87:97:4f:db:0f:e8:0c:11:fc:36: ba:00:d6:ec:c3:6b:22:49:6c:1f:e8:2b:ea:41:dd: 14:2a:d8:08:8a:d0:7a:03:c6:75:50:a9:54:ca:84: 2a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:92:65:26:81:62:39:49:2B:3A:96:FD:A6:D7:5C:E7:10:E9:92:DD X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.225.0/24 95.172.65.0/24 IPv6: 2a02:b50:4013::/48 2a02:b50:8002::/48 Signature Algorithm: sha256WithRSAEncryption 5c:53:a1:78:cc:cc:f9:60:4b:18:2d:6d:c2:6c:c1:e5:d2:b3: 1c:96:9e:43:03:ba:d0:e3:50:83:ce:fd:16:40:1f:2b:c7:3f: de:e2:62:4f:eb:c3:21:37:e0:76:39:9d:6f:6b:3b:2e:cd:84: ee:cb:0f:7c:57:8e:61:bb:a8:b3:0a:eb:8c:1b:37:fb:e7:89: c4:91:80:e8:b2:0e:d7:e5:1a:6b:31:c3:1d:72:e1:7c:f3:78: 16:f4:9f:4b:62:fb:bc:3f:33:7c:da:d6:49:61:e8:82:28:09: c0:0c:08:3d:7a:77:3a:2f:90:63:f2:40:c5:5d:73:19:ca:06: 39:58:ef:37:c0:db:ab:2f:7e:b2:27:b4:3c:4e:38:bd:74:33: 64:41:0f:a7:ed:a0:c5:33:2d:2d:fa:66:21:95:f1:da:16:71: 36:1b:8c:02:bb:33:08:49:db:36:7c:3d:f8:4e:85:83:c5:06: f5:bf:e6:5a:50:a6:28:d7:fd:be:16:44:a1:2f:ab:62:11:e9: bb:42:14:23:6a:88:a5:b8:ef:6d:a0:ce:6a:a6:a9:c6:66:84: 79:a9:2f:00:e8:50:52:a2:05:47:e3:00:fb:6b:2d:49:70:1e: dc:03:67:15:26:4b:05:4a:8b:63:ab:77:03:24:b5:a2:b4:f5: ee:b3:d5:94 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/gkrPRYuwxgU7jcPNbuW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDkyNjUyNjgxNjIzOTQ5MmIzYTk2ZmRhNmQ3NWNlNzEwZTk5MmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze7WzRV55LG3pKAZuJmyGOocCwbQ CSWQ7j6E2kJyEQ34W2VI7OHKsz56g/eW/m7Qx++N+rReX6nrFXl3Chv4hgfAbH4p lxzHtDlGkTFBPtBgMYZPEmgUxTAVqVhghukLAQG6qlZ2G+68SubkZ75559rKqruo cRAhG6y8Ckx0nlH7wqHqO9eum+A5wLbrYxyDVmmpUn7L6Fxs/X1kzHAFkFQAWFUP VSINShfqQJs1HKCGNtRdMOxDLRL2bbsE0F1xwxgIjuEX8VdEVvdfZtR6Z+F9qOZO 4YeXT9sP6AwR/Da6ANbsw2siSWwf6CvqQd0UKtgIitB6A8Z1UKlUyoQq2wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFMCSZSaBYjlJKzqW/abXXOcQ6ZLdMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvd0pKbEpvRmlPVWtyT3BiOXB0ZGM1eERwa3QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAH7rhAwQA X6xBMBgEAgACMBIDBwAqAgtQQBMDBwAqAgtQgAIwDQYJKoZIhvcNAQELBQADggEB AFxToXjMzPlgSxgtbcJsweXSsxyWnkMDutDjUIPO/RZAHyvHP97iYk/rwyE34HY5 nW9rOy7NhO7LD3xXjmG7qLMK64wbN/vnicSRgOiyDtflGmsxwx1y4XzzeBb0n0ti +7w/M3za1klh6IIoCcAMCD16dzovkGPyQMVdcxnKBjlY7zfA26svfrIntDxOOL10 M2RBD6ftoMUzLS36ZiGV8doWcTYbjAK7MwhJ2zZ8PfhOhYPFBvW/5lpQpijX/b4W RKEvq2IR6btCFCNqiKW4722gzmqmqcZmhHmpLwDoUFKiBUfjAPtrLUlwHtwDZxUm SwVKi2OrdwMktaK09e6z1ZQ= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:58 2026 by rpki-client