This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/1wr8QIeSM3CIv5J7uap933hLaGs.roa File: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (raw, json) Hash identifier: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4= Subject key identifier: D7:0A:FC:40:87:92:33:70:88:BF:92:7B:B9:AA:7D:DF:78:4B:68:6B Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B6FDEEF2C9FA9838ED7FEE6BD0602 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/1wr8QIeSM3CIv5J7uap933hLaGs.roa Signing time: Fri 02 Jan 2026 06:18:22 +0000 ROA not before: Fri 02 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212981 IP address blocks: 193.200.186.0/24 maxlen: 24 2a0a:d6c0:186::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6f:de:ef:2c:9f:a9:83:8e:d7:fe:e6:bd:06:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d70afc408792337088bf927bb9aa7ddf784b686b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:39:6e:63:3b:fa:4d:ad:c7:60:bb:eb:d1: 05:80:c6:91:3d:ff:f3:51:36:f7:d2:55:3e:d0:09: f8:6b:19:9d:e4:b0:24:cf:6e:69:92:d4:47:0c:30: 7b:ad:58:2c:9b:1a:f7:db:be:36:d5:e5:84:45:39: 8d:f9:23:20:60:91:d6:fb:c1:a6:49:b6:98:c5:19: 05:47:f0:cd:cc:83:b5:b3:dd:48:25:82:25:d9:2f: 9a:bc:1b:a0:d7:4f:51:be:b1:33:83:26:4a:8e:28: 01:8a:bf:81:5e:a9:8a:8b:d9:33:d1:c4:42:ca:49: 41:d9:9b:49:8e:f2:a3:6c:19:32:a9:56:22:b4:e2: 32:f2:8e:b0:5b:67:23:b5:2e:1b:0c:79:8a:ff:94: 40:f7:15:d6:58:cb:09:f5:04:5e:4f:4a:e1:e0:9e: 57:fd:fc:db:d2:68:c9:80:5d:de:ee:07:cb:0e:cd: 64:ef:0e:a7:7f:d3:3a:9c:e3:77:1c:74:06:64:db: 56:0b:e7:f7:23:42:c2:6c:8b:60:ef:05:cc:16:b7: 27:a5:28:05:84:f4:4a:54:92:db:f4:99:75:be:78: 5c:b6:9a:ca:57:ae:cd:fc:25:87:42:f7:e3:2b:e4: de:2e:1e:2d:42:13:9e:6c:84:77:ae:e8:60:2e:c3: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:FC:40:87:92:33:70:88:BF:92:7B:B9:AA:7D:DF:78:4B:68:6B X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/1wr8QIeSM3CIv5J7uap933hLaGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.186.0/24 IPv6: 2a0a:d6c0:186::/48 Signature Algorithm: sha256WithRSAEncryption 5d:f6:6b:cc:87:b6:e6:46:fe:78:7e:9b:bc:7b:d1:17:59:03: 08:65:7d:ca:c1:5a:f6:e4:3e:7b:ac:23:8c:58:af:61:46:a5: 6e:47:70:6a:fe:11:a5:9b:de:9a:16:03:77:1b:7b:4e:4f:5c: 09:08:51:99:3c:ff:b5:c0:83:68:86:e1:65:45:ca:7f:93:15: 3f:99:6a:3e:3b:01:05:fa:88:bb:78:4c:74:06:e5:dd:41:60: 92:b1:90:d1:d6:f6:a9:67:05:b7:60:2e:39:77:df:38:10:7d: 5b:01:c2:20:db:de:eb:05:05:ec:b9:40:0d:dc:e0:91:e8:33: e5:6b:0d:31:62:7d:8b:dc:6f:77:92:a7:13:a5:97:a5:67:3d: db:39:48:e1:85:12:66:bc:1f:10:d0:f4:4a:f8:68:1c:e7:17: 1d:1b:1f:bd:54:59:f1:a2:19:b4:33:18:8a:6d:8e:8e:f4:39: 95:79:42:28:3f:34:00:5a:66:e4:57:dc:3c:73:2f:ef:67:21: 9d:eb:56:2e:94:41:8c:2f:d5:a6:f2:c7:1c:93:97:1f:6d:86: 0f:fc:c7:6f:63:98:7d:95:66:4e:c2:79:be:44:1b:4e:f1:1c: 4e:7f:da:37:e5:57:55:ed:90:2f:c5:cd:03:c1:28:08:e8:e5: 5f:2c:56:74 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9W2/e7yyfqYOO1/7mvQYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzBhZmM0MDg3OTIzMzcwODhiZjkyN2JiOWFhN2RkZjc4NGI2ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVk5bmM7+k2tx2C769EFgMaRPf/z UTb30lU+0An4axmd5LAkz25pktRHDDB7rVgsmxr327421eWERTmN+SMgYJHW+8Gm SbaYxRkFR/DNzIO1s91IJYIl2S+avBug109RvrEzgyZKjigBir+BXqmKi9kz0cRC yklB2ZtJjvKjbBkyqVYitOIy8o6wW2cjtS4bDHmK/5RA9xXWWMsJ9QReT0rh4J5X /fzb0mjJgF3e7gfLDs1k7w6nf9M6nON3HHQGZNtWC+f3I0LCbItg7wXMFrcnpSgF hPRKVJLb9Jl1vnhctprKV67N/CWHQvfjK+TeLh4tQhOebIR3ruhgLsPtdQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNcK/ECHkjNwiL+Se7mqfd94S2hrMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvMXdyOFFJZVNNM0NJdjVKN3VhcDkzM2hMYUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwci6MA8E AgACMAkDBwAqCtbAAYYwDQYJKoZIhvcNAQELBQADggEBAF32a8yHtuZG/nh+m7x7 0RdZAwhlfcrBWvbkPnusI4xYr2FGpW5HcGr+EaWb3poWA3cbe05PXAkIUZk8/7XA g2iG4WVFyn+TFT+Zaj47AQX6iLt4THQG5d1BYJKxkNHW9qlnBbdgLjl33zgQfVsB wiDb3usFBey5QA3c4JHoM+VrDTFifYvcb3eSpxOll6VnPds5SOGFEma8HxDQ9Er4 aBznFx0bH71UWfGiGbQzGIptjo70OZV5Qig/NABaZuRX3DxzL+9nIZ3rVi6UQYwv 1abyxxyTlx9thg/8x29jmH2VZk7Ceb5EG07xHE5/2jflV1XtkC/FzQPBKAjo5V8s VnQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:04 2026 by rpki-client