This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WSvHFGzj7Vgob_0_S9OtU-eYECo.roa File: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (raw, json) Hash identifier: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398= Subject key identifier: 59:2B:C7:14:6C:E3:ED:58:28:6F:FD:3F:4B:D3:AD:53:E7:98:10:2A Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB198D07FF8B625EA980E5AA70AAA3 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WSvHFGzj7Vgob_0_S9OtU-eYECo.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206487 IP address blocks: 194.49.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:19:8d:07:ff:8b:62:5e:a9:80:e5:aa:70:aa:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=592bc7146ce3ed58286ffd3f4bd3ad53e798102a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:06:1c:85:aa:14:d6:02:2c:d3:5f:1c:4f: 70:cd:fc:3c:8a:2f:12:0f:d6:33:66:97:7f:d9:c6: 53:4d:f5:82:ca:2d:3c:a2:4d:e8:29:b3:e6:5a:38: 57:e6:a0:e6:f4:39:a8:e6:a5:26:eb:f5:6a:36:09: 37:69:46:a9:44:2b:32:07:df:d7:de:42:76:d0:93: 37:a0:53:90:b6:69:3b:3e:e5:a8:49:26:96:6f:b0: 2f:23:f0:82:4a:e1:47:a6:12:bb:8b:0a:86:e4:5d: af:8c:94:b0:9f:1b:f4:43:5b:24:02:81:82:d3:b4: 5c:29:ed:29:20:00:45:93:d7:f4:5b:ca:18:8a:be: df:6e:e3:78:31:7a:b1:00:a8:dc:2b:c4:73:6c:f8: a3:1c:c3:23:9a:53:6a:09:84:e8:9b:7d:80:53:0f: 93:2b:fe:f3:b6:e1:61:71:2e:6f:0c:03:53:fe:b7: c4:b6:da:ba:bc:db:08:45:25:c3:0f:06:db:bd:44: a5:50:45:ac:f4:af:36:44:da:59:6f:2d:f2:fe:5b: 5b:6f:29:45:1a:e7:ea:94:68:d9:44:7e:f9:e6:98: f0:1c:d7:3d:33:ed:a1:a9:52:28:fd:64:95:0b:16: f7:6d:02:73:d1:75:ef:90:d5:a2:38:2b:1c:f7:74: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:C7:14:6C:E3:ED:58:28:6F:FD:3F:4B:D3:AD:53:E7:98:10:2A X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WSvHFGzj7Vgob_0_S9OtU-eYECo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.0.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:45:32:3a:69:7b:c3:36:0d:1a:1c:b1:72:95:77:7d:77:ab: 30:4b:4a:31:7f:79:2e:0f:b1:ac:7c:af:17:57:a2:b5:ab:8a: f4:ce:61:96:aa:c5:76:ad:ea:7f:6a:6c:f4:2a:d3:6f:7e:6b: c4:f5:3a:2b:13:2f:ae:97:1a:23:11:12:59:96:16:20:5b:c1: bc:8a:2a:82:fc:1a:ad:f0:18:52:0a:99:c8:0a:57:74:68:45: 13:6c:7a:50:df:9f:e0:30:09:fe:ec:31:75:8f:19:0b:b9:92: ed:d0:6d:b1:f8:3a:ab:e7:2a:8c:21:64:59:f7:d3:6c:71:71: 9e:01:d4:83:f2:0b:db:14:16:fb:8f:72:70:f9:c5:aa:de:eb: c0:39:49:0a:d4:5d:c1:59:53:0f:51:fc:10:0b:58:9c:93:c2: 4e:9c:db:02:ee:c4:63:2c:47:4d:e8:01:d4:29:80:b7:5c:32: 79:0e:21:16:05:ec:e6:07:37:eb:e1:2f:5e:7b:6a:a6:37:09: 36:6b:10:a7:21:7e:0e:10:e8:65:25:2e:20:5b:b9:a6:a6:1b: b5:89:51:9f:59:7e:83:01:63:33:62:54:86:d2:81:3b:4d:fc: 0f:62:87:9a:46:cf:84:0b:56:32:f0:77:b5:42:69:cd:ae:8b: 83:ce:0f:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xmNB/+LYl6pgOWqcKqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTJiYzcxNDZjZTNlZDU4Mjg2ZmZkM2Y0YmQzYWQ1M2U3OTgxMDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpYGHIWqFNYCLNNfHE9wzfw8ii8S D9YzZpd/2cZTTfWCyi08ok3oKbPmWjhX5qDm9Dmo5qUm6/VqNgk3aUapRCsyB9/X 3kJ20JM3oFOQtmk7PuWoSSaWb7AvI/CCSuFHphK7iwqG5F2vjJSwnxv0Q1skAoGC 07RcKe0pIABFk9f0W8oYir7fbuN4MXqxAKjcK8RzbPijHMMjmlNqCYTom32AUw+T K/7ztuFhcS5vDANT/rfEttq6vNsIRSXDDwbbvUSlUEWs9K82RNpZby3y/ltbbylF GufqlGjZRH755pjwHNc9M+2hqVIo/WSVCxb3bQJz0XXvkNWiOCsc93RXPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFkrxxRs4+1YKG/9P0vTrVPnmBAqMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvV1N2SEZHemo3VmdvYl8wX1M5T3RVLWVZRUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjEAMA0G CSqGSIb3DQEBCwUAA4IBAQAfRTI6aXvDNg0aHLFylXd9d6swS0oxf3kuD7GsfK8X V6K1q4r0zmGWqsV2rep/amz0KtNvfmvE9TorEy+ulxojERJZlhYgW8G8iiqC/Bqt 8BhSCpnICld0aEUTbHpQ35/gMAn+7DF1jxkLuZLt0G2x+Dqr5yqMIWRZ99NscXGe AdSD8gvbFBb7j3Jw+cWq3uvAOUkK1F3BWVMPUfwQC1ick8JOnNsC7sRjLEdN6AHU KYC3XDJ5DiEWBezmBzfr4S9ee2qmNwk2axCnIX4OEOhlJS4gW7mmphu1iVGfWX6D AWMzYlSG0oE7TfwPYoeaRs+EC1Yy8He1QmnNrouDzg9e -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:14 2026 by rpki-client