This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/WrF8RZjbYEiiD0wqPqyzH7bojHg.roa File: WrF8RZjbYEiiD0wqPqyzH7bojHg.roa (raw, json) Hash identifier: SASBUcOpWPVFaGgXimL1oxrkpjPpL7o7jdrVHK+m9J4= Subject key identifier: 5A:B1:7C:45:98:DB:60:48:A2:0F:4C:2A:3E:AC:B3:1F:B6:E8:8C:78 Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee Certificate serial: 019B783446087B1797947236880F2B35D48C Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/WrF8RZjbYEiiD0wqPqyzH7bojHg.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 37.16.64.0/21 maxlen: 21 37.228.160.0/20 maxlen: 20 46.167.16.0/21 maxlen: 21 46.232.224.0/21 maxlen: 21 81.26.160.0/20 maxlen: 20 85.115.0.0/19 maxlen: 19 88.214.60.0/22 maxlen: 22 93.189.152.0/21 maxlen: 21 109.109.200.0/21 maxlen: 21 109.109.201.200/30 maxlen: 30 185.9.176.0/22 maxlen: 22 185.106.0.0/21 maxlen: 21 213.144.0.0/19 maxlen: 19 2a02:788::/29 maxlen: 29 2a02:788:1::18/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:08:7b:17:97:94:72:36:88:0f:2b:35:d4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab17c4598db6048a20f4c2a3eacb31fb6e88c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:f2:0e:a8:94:64:cb:26:e9:31:9c:ae:97: ff:7c:a5:9f:4c:a5:38:2a:f8:71:d2:51:2f:96:38: c1:98:1a:e1:2b:05:41:8d:55:d9:7c:20:10:d5:5c: eb:d0:3a:0d:25:20:7e:a6:73:3d:27:d3:af:43:1b: 43:d9:79:f7:46:ad:5b:c0:02:77:ee:4e:e2:ec:a7: 08:f0:17:b3:e0:e6:b9:7a:ac:3d:34:55:d5:be:67: ed:85:ab:d6:ba:ae:c4:35:80:c6:c9:54:ed:db:37: dc:a9:49:af:5f:d0:00:76:da:d5:11:4e:67:5b:11: 32:df:39:d3:d2:4a:a3:c9:ad:da:2f:47:7c:7f:25: 3e:fe:46:48:63:0c:57:f7:90:75:c4:0c:86:b9:18: 89:bf:89:ca:a4:50:ce:14:3f:33:99:1d:58:b7:40: cd:fd:ce:6a:e7:50:f7:8f:04:2c:09:12:a8:9e:4f: ee:2c:71:f2:62:8a:5e:70:0f:a1:a3:7d:5a:30:3f: 1a:ff:a3:12:da:f6:03:cf:25:f8:d8:26:ac:31:52: 55:c7:d5:ae:b2:f4:6f:61:a7:f9:ed:9f:13:c4:c9: 90:22:cf:2a:44:e1:9f:86:34:9a:54:84:ea:ab:87: d1:1f:41:ab:23:10:b7:58:89:8d:66:70:9c:03:73: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B1:7C:45:98:DB:60:48:A2:0F:4C:2A:3E:AC:B3:1F:B6:E8:8C:78 X509v3 Authority Key Identifier: keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/WrF8RZjbYEiiD0wqPqyzH7bojHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.64.0/21 37.228.160.0/20 46.167.16.0/21 46.232.224.0/21 81.26.160.0/20 85.115.0.0/19 88.214.60.0/22 93.189.152.0/21 109.109.200.0/21 185.9.176.0/22 185.106.0.0/21 213.144.0.0/19 IPv6: 2a02:788::/29 Signature Algorithm: sha256WithRSAEncryption 7a:8f:8d:b9:5c:48:79:d7:29:24:3c:9c:b0:fd:fe:f8:2b:6f: 30:71:90:ad:86:b0:16:d2:7d:6b:4e:94:01:a4:3d:d4:87:27: 5c:6f:47:28:84:ac:b5:c4:b4:21:30:48:fb:a9:02:89:e6:45: af:33:57:c1:62:d2:01:1a:ab:8b:01:b9:4a:3a:3e:67:8a:65: f4:ce:83:5d:95:ad:ea:26:23:4e:55:4a:6f:eb:92:da:21:55: 3d:49:47:50:e9:8b:9e:07:7d:54:22:7f:b7:bd:44:34:ee:2c: f1:7c:52:41:6c:66:41:aa:54:e0:2a:82:2f:53:12:c2:ed:31: 7d:69:79:1f:ae:16:a6:8e:a7:30:b1:dc:fb:96:77:42:8e:5f: de:18:d0:f9:fb:c2:c5:8f:20:0f:3a:77:0d:e6:c2:e9:43:1f: 0b:b8:57:38:ac:b2:bb:8a:90:01:1b:d5:f4:2b:d8:5d:d7:3f: 55:50:d9:08:6f:34:e9:32:17:93:56:95:1b:8b:17:88:a0:b9: 90:2c:5e:5d:27:b6:47:11:1f:54:b0:a0:49:39:d1:c9:9c:98: 22:52:7d:08:a5:6a:3b:ba:fb:a2:49:b7:67:66:b7:39:ad:cf: 63:a1:64:73:d5:45:75:7f:f6:da:cd:61:79:5c:6d:61:5a:d0: 6b:ea:af:99 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt4NEYIexeXlHI2iA8rNdSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliN2QyNDQxNmFhOGE0NzhiM2VkMzZlMmU2NTg1NWQ0MjI1 OWQ5ZWUwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWIxN2M0NTk4ZGI2MDQ4YTIwZjRjMmEzZWFjYjMxZmI2ZTg4Yzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2fyDqiUZMsm6TGcrpf/fKWfTKU4 Kvhx0lEvljjBmBrhKwVBjVXZfCAQ1Vzr0DoNJSB+pnM9J9OvQxtD2Xn3Rq1bwAJ3 7k7i7KcI8Bez4Oa5eqw9NFXVvmfthavWuq7ENYDGyVTt2zfcqUmvX9AAdtrVEU5n WxEy3znT0kqjya3aL0d8fyU+/kZIYwxX95B1xAyGuRiJv4nKpFDOFD8zmR1Yt0DN /c5q51D3jwQsCRKonk/uLHHyYopecA+ho31aMD8a/6MS2vYDzyX42CasMVJVx9Wu svRvYaf57Z8TxMmQIs8qROGfhjSaVITqq4fRH0GrIxC3WImNZnCcA3Oz5wIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFFqxfEWY22BIog9MKj6ssx+26Ix4MB8GA1UdIwQY MBaAFJt9JEFqqKR4s+024uZYVdQiWdnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYt ZWYzYmJiMDU2NTVlLzEvV3JGOFJaamJZRWlpRDB3cVBxeXpIN2JvakhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYtZWYzYmJiMDU2NTVl LzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQDJRBAAwQE JeSgAwQDLqcQAwQDLujgAwQEURqgAwQFVXMAAwQCWNY8AwQDXb2YAwQDbW3IAwQC uQmwAwQDuWoAAwQF1ZAAMA0EAgACMAcDBQMqAgeIMA0GCSqGSIb3DQEBCwUAA4IB AQB6j425XEh51ykkPJyw/f74K28wcZCthrAW0n1rTpQBpD3Uhydcb0cohKy1xLQh MEj7qQKJ5kWvM1fBYtIBGquLAblKOj5nimX0zoNdla3qJiNOVUpv65LaIVU9SUdQ 6YueB31UIn+3vUQ07izxfFJBbGZBqlTgKoIvUxLC7TF9aXkfrhamjqcwsdz7lndC jl/eGND5+8LFjyAPOncN5sLpQx8LuFc4rLK7ipABG9X0K9hd1z9VUNkIbzTpMheT VpUbixeIoLmQLF5dJ7ZHER9UsKBJOdHJnJgiUn0IpWo7uvuiSbdnZrc5rc9joWRz 1UV1f/bazWF5XG1hWtBr6q+Z -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:29 2026 by rpki-client