This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/aw7187ZOI0MpqazuRWsrcYgwwpQ.roa File: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (raw, json) Hash identifier: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90= Subject key identifier: 6B:0E:F5:F3:B6:4E:23:43:29:A9:AC:EE:45:6B:2B:71:88:30:C2:94 Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF26FA1D9778A4F1B9ECDAA8470048A Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/aw7187ZOI0MpqazuRWsrcYgwwpQ.roa Signing time: Fri 02 Jan 2026 18:22:33 +0000 ROA not before: Fri 02 Jan 2026 18:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35014 IP address blocks: 89.252.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:6f:a1:d9:77:8a:4f:1b:9e:cd:aa:84:70:04:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b0ef5f3b64e234329a9acee456b2b718830c294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:f0:f0:f3:09:8c:b3:11:1c:22:e9:5d:0e: 46:a2:97:d7:34:73:cd:0e:6f:b9:40:29:a4:f4:3d: be:fc:c2:cd:57:32:bc:ec:d3:3e:5f:bc:7b:19:44: 16:66:40:d3:01:27:38:af:7d:92:49:1c:ba:48:bc: 47:fb:e8:aa:fb:c7:19:f6:67:5c:26:ce:3d:ab:7c: 84:1e:86:de:8e:7e:7d:89:4e:bf:55:28:f3:3a:59: 77:f4:ca:04:01:92:c7:d0:9e:e2:b3:05:60:75:a2: ee:ed:7d:d2:db:c2:9d:53:df:bb:10:97:1e:0b:b3: 55:db:6c:18:98:0b:77:9a:2b:5a:37:71:14:17:b6: 1a:66:93:9d:c5:72:86:8e:5b:08:d3:cf:c0:39:40: 7c:08:1c:28:36:3f:ce:62:ea:34:71:6f:af:fd:1d: bc:cf:70:bc:19:cc:e5:73:6b:c9:fc:da:f1:39:cb: c7:41:9c:cf:f7:dd:91:e0:d0:14:63:00:15:05:70: ee:2f:db:f4:e1:ea:a8:1c:44:4a:55:dc:41:ce:da: 0e:a9:ac:a5:8a:d8:b1:1a:e6:46:26:78:37:4d:b1: 72:fc:ea:70:27:02:db:5f:7e:21:50:8a:72:79:70: 8e:e7:ce:4d:d0:b2:a1:bc:01:13:fc:0c:85:4d:bf: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0E:F5:F3:B6:4E:23:43:29:A9:AC:EE:45:6B:2B:71:88:30:C2:94 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/aw7187ZOI0MpqazuRWsrcYgwwpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.252.197.0/24 Signature Algorithm: sha256WithRSAEncryption 92:1f:4f:1a:7b:d1:03:04:2b:31:5a:68:f5:c2:82:14:09:7d: a4:b4:ec:42:6d:cc:a2:e9:74:7b:bf:75:0b:51:0f:4a:91:87: 87:53:be:91:53:71:86:4d:e4:d0:bb:64:cf:70:b4:3e:38:60: 22:fb:f5:1c:bd:5e:41:c7:17:fe:b2:d7:a9:cd:c2:99:19:a4: 25:df:a4:e6:82:f7:1f:82:b1:8c:13:0c:62:5c:b4:06:d5:46: 59:bc:d6:72:ce:32:d5:a6:77:19:60:2c:87:43:ae:f8:c0:f6: 23:8a:02:63:b2:20:72:0f:79:4b:a6:19:99:9e:5a:24:9c:39: da:87:b6:24:12:65:a0:7c:f2:c7:8b:b7:5c:f2:67:c7:3f:51: 6e:47:79:27:45:d1:40:1e:e2:0d:9a:54:ae:c8:cb:2f:1f:fb: 5d:46:b6:42:f9:d8:17:c2:4d:50:cb:3b:1e:01:e5:94:5e:6c: ec:b1:19:c3:15:2c:da:05:1e:10:41:fa:7c:ef:7d:9f:74:cd: 2b:62:c7:85:eb:98:6d:99:75:a8:da:e9:d0:97:e1:56:90:3f: 86:70:f6:12:5c:bd:7b:19:77:6a:86:8a:f6:4e:b8:82:0f:77: 32:1b:96:e4:f0:ea:b3:28:4c:e2:b2:cc:06:d0:87:a5:f7:1f: 42:a3:5a:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8m+h2XeKTxuezaqEcASKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjBlZjVmM2I2NGUyMzQzMjlhOWFjZWU0NTZiMmI3MTg4MzBjMjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5fw8PMJjLMRHCLpXQ5GopfXNHPN Dm+5QCmk9D2+/MLNVzK87NM+X7x7GUQWZkDTASc4r32SSRy6SLxH++iq+8cZ9mdc Js49q3yEHobejn59iU6/VSjzOll39MoEAZLH0J7iswVgdaLu7X3S28KdU9+7EJce C7NV22wYmAt3mitaN3EUF7YaZpOdxXKGjlsI08/AOUB8CBwoNj/OYuo0cW+v/R28 z3C8Gczlc2vJ/NrxOcvHQZzP992R4NAUYwAVBXDuL9v04eqoHERKVdxBztoOqayl itixGuZGJng3TbFy/OpwJwLbX34hUIpyeXCO585N0LKhvAET/AyFTb8c6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsO9fO2TiNDKams7kVrK3GIMMKUMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvYXc3MTg3Wk9JME1wcWF6dVJXc3JjWWd3d3BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfzFMA0G CSqGSIb3DQEBCwUAA4IBAQCSH08ae9EDBCsxWmj1woIUCX2ktOxCbcyi6XR7v3UL UQ9KkYeHU76RU3GGTeTQu2TPcLQ+OGAi+/UcvV5Bxxf+stepzcKZGaQl36Tmgvcf grGMEwxiXLQG1UZZvNZyzjLVpncZYCyHQ674wPYjigJjsiByD3lLphmZnloknDna h7YkEmWgfPLHi7dc8mfHP1FuR3knRdFAHuINmlSuyMsvH/tdRrZC+dgXwk1Qyzse AeWUXmzssRnDFSzaBR4QQfp8732fdM0rYseF65htmXWo2unQl+FWkD+GcPYSXL17 GXdqhor2TriCD3cyG5bk8OqzKEzisswG0Iel9x9Co1pe -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:31 2026 by rpki-client