This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/w1fI7tvPLN33WU2I9Rt_Z9orWcc.roa File: w1fI7tvPLN33WU2I9Rt_Z9orWcc.roa (raw, json) Hash identifier: RojgiRAa+/JdbpS5f+RHbhZYfz5WfXhvE0D2UVq9ASc= Subject key identifier: C3:57:C8:EE:DB:CF:2C:DD:F7:59:4D:88:F5:1B:7F:67:DA:2B:59:C7 Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc Certificate serial: 019B7E383A20E55AA28810DB8870D250272E Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/w1fI7tvPLN33WU2I9Rt_Z9orWcc.roa Signing time: Fri 02 Jan 2026 10:19:32 +0000 ROA not before: Fri 02 Jan 2026 10:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 109.68.248.0/24 maxlen: 24 185.68.58.0/24 maxlen: 24 185.68.59.0/24 maxlen: 24 185.255.32.0/23 maxlen: 23 185.255.34.0/24 maxlen: 24 185.255.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3a:20:e5:5a:a2:88:10:db:88:70:d2:50:27:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc Validity Not Before: Jan 2 10:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c357c8eedbcf2cddf7594d88f51b7f67da2b59c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:98:18:ae:04:6e:5c:ad:bc:c5:d4:90:3e:83: a7:98:34:7f:f0:17:e1:43:d6:4c:1e:93:92:6b:08: b2:d1:f8:ba:36:8a:0d:11:65:f2:9c:8a:8e:8c:d7: de:81:01:f6:00:20:aa:d2:b5:39:b3:7a:9a:50:ee: 73:31:e0:dd:65:20:b0:0d:7c:0d:f7:a0:9d:79:ed: e2:7d:82:f0:16:b6:82:f7:7e:ec:77:94:89:3e:5e: 91:57:0c:d5:db:b0:7e:a1:df:f7:9e:7d:34:c2:64: ac:61:f6:67:79:b7:a2:96:65:57:08:b4:e2:85:84: 88:52:66:ec:fe:82:dc:72:47:e2:2d:0e:58:15:78: 96:fa:4f:ca:6c:4b:32:e2:ee:91:f1:d1:21:9a:eb: e9:53:9b:68:ee:85:4f:c5:e2:cb:1e:4c:0b:db:8b: e1:1c:fd:0d:cc:21:30:5b:e8:0f:de:d2:74:cb:b6: e6:c3:0b:5d:3e:35:56:82:e9:70:f6:cc:a7:21:f1: 53:18:7c:5d:90:36:11:4d:b7:fd:90:ee:7f:52:6a: c3:38:e5:23:28:52:1e:b3:0d:b1:b8:61:dc:29:e2: 32:b4:3a:e5:4c:64:38:7f:c7:30:67:dd:74:09:9e: a8:e2:cd:7f:6d:68:cb:8d:dc:1b:54:18:6c:88:fe: aa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:57:C8:EE:DB:CF:2C:DD:F7:59:4D:88:F5:1B:7F:67:DA:2B:59:C7 X509v3 Authority Key Identifier: keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/w1fI7tvPLN33WU2I9Rt_Z9orWcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.248.0/24 185.68.58.0/23 185.255.32.0/22 Signature Algorithm: sha256WithRSAEncryption 83:44:4b:dd:77:d6:f6:07:d3:5b:f1:9e:a7:ba:23:c7:8e:08: 9e:60:42:0f:6d:0f:13:7a:f9:d1:db:36:cb:2b:49:e1:b5:91: ea:d6:88:72:b1:20:9b:46:3a:65:7a:c8:ba:98:9a:a6:dc:0c: 58:43:14:f9:ac:63:21:a9:9c:95:09:ad:3e:32:5d:9e:ce:7f: c5:8f:7b:42:c2:08:42:2f:2c:6f:bb:30:0d:68:30:f9:96:9a: 5b:a9:a7:01:69:c8:25:b1:3e:3c:a6:35:5c:f9:de:63:13:9e: a9:27:e0:6c:f8:2e:bb:69:c2:ef:67:09:3a:a3:09:1d:0b:75: 3f:0b:6d:b2:b6:ad:c5:80:e1:df:8c:36:2c:df:86:90:84:6a: e5:84:83:9d:c4:58:5d:73:cf:13:c4:09:e3:6a:1f:11:63:0c: 1f:78:a2:95:ce:b3:c1:1e:44:4a:cd:ec:53:75:26:42:08:f6: 21:13:e2:fe:73:4f:7c:b0:9b:6a:77:8d:74:84:1f:ba:bf:1b: 84:09:38:a8:40:92:2e:56:fd:7e:6b:45:bc:93:38:bf:b7:01: 22:05:c0:48:97:a9:4b:df:6f:d5:24:a6:a3:84:3a:bc:f6:89: 40:26:22:ec:8a:23:31:c7:44:f9:17:44:b1:0d:38:cc:87:47: a1:0f:14:1b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+ODog5VqiiBDbiHDSUCcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MjQyZGJhMjZlZDg4MmIzODBkYWJlYmFiM2M1ZjM5NDIw MDZlY2MwHhcNMjYwMTAyMTAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzU3YzhlZWRiY2YyY2RkZjc1OTRkODhmNTFiN2Y2N2RhMmI1OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pgYrgRuXK28xdSQPoOnmDR/8Bfh Q9ZMHpOSawiy0fi6NooNEWXynIqOjNfegQH2ACCq0rU5s3qaUO5zMeDdZSCwDXwN 96Cdee3ifYLwFraC937sd5SJPl6RVwzV27B+od/3nn00wmSsYfZnebeilmVXCLTi hYSIUmbs/oLcckfiLQ5YFXiW+k/KbEsy4u6R8dEhmuvpU5to7oVPxeLLHkwL24vh HP0NzCEwW+gP3tJ0y7bmwwtdPjVWgulw9synIfFTGHxdkDYRTbf9kO5/UmrDOOUj KFIesw2xuGHcKeIytDrlTGQ4f8cwZ910CZ6o4s1/bWjLjdwbVBhsiP6qIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMNXyO7bzyzd91lNiPUbf2faK1nHMB8GA1UdIwQY MBaAFJckLbom7YgrOA2r66s8XzlCAG7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmIt NjA3MjcyZDczN2NiLzEvdzFmSTd0dlBMTjMzV1UySTlSdF9aOW9yV2NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmItNjA3MjcyZDczN2Ni LzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbUT4AwQB uUQ6AwQCuf8gMA0GCSqGSIb3DQEBCwUAA4IBAQCDREvdd9b2B9Nb8Z6nuiPHjgie YEIPbQ8TevnR2zbLK0nhtZHq1ohysSCbRjplesi6mJqm3AxYQxT5rGMhqZyVCa0+ Ml2ezn/Fj3tCwghCLyxvuzANaDD5lppbqacBacglsT48pjVc+d5jE56pJ+Bs+C67 acLvZwk6owkdC3U/C22ytq3FgOHfjDYs34aQhGrlhIOdxFhdc88TxAnjah8RYwwf eKKVzrPBHkRKzexTdSZCCPYhE+L+c098sJtqd410hB+6vxuECTioQJIuVv1+a0W8 kzi/twEiBcBIl6lL32/VJKajhDq89olAJiLsiiMxx0T5F0SxDTjMh0ehDxQb -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:27 2026 by rpki-client